program: r0 = socket(0x11, 0xa, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011f00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="000000e8ff000000b703000000000000850000020c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000800)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@empty}, {@broadcast, 0x1}, {@broadcast}, {@private}, {@multicast1}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x1}}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000580), 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) get_robust_list(0x0, &(0x7f0000000440)=0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x662) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe6, 0x3, 0x0, r7}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f00000001c0)={[{@btree_node_prefetch}, {@discard}, {@norecovery}, {@fsck}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'check_dirents'}}, {@norecovery}, {@fix_errors={'fix_errors', 0x3d, 'ask'}}, {@reconstruct_alloc}, {@shared_inode_numbers}]}, 0xfe, 0x5968, &(0x7f000000bcc0)="$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") [ 68.474371][ T4670] Bluetooth: hci0: command tx timeout [ 68.983914][ T5324] loop0: detected capacity change from 0 to 32768 [ 69.243143][ T5324] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=ask,norecovery,recovery_pass_last=check_dirents,nojournal_transaction_names,reconstruct_alloc [ 69.251661][ T5324] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 69.255063][ T5324] bcachefs (loop0): Version upgrade required: [ 69.255063][ T5324] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 69.255063][ T5324] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 69.255063][ T5324] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 69.284379][ T5324] bcachefs (loop0): dropping and reconstructing all alloc info [ 69.287979][ T5324] invalid btree id 251 (max 63), fix? [ 69.297711][ T5324] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 69.297726][ T5324] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 69.297733][ T5324] node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647 [ 69.310320][ T5324] bcachefs (loop0): flagging btree xattrs lost data [ 69.316550][ T5324] error reading btree root xattrs l=0: btree_node_read_error, fix? [ 69.320333][ T5324] error reading btree root xattrs l=0: btree_node_read_error, fix? [ 69.324038][ T5324] bcachefs (loop0): Unable to continue, halting [ 69.327630][ T5324] bcachefs (loop0): bch2_fs_recovery(): error fsck_errors_not_fixed [ 69.331221][ T5324] bcachefs (loop0): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 69.334776][ T5324] bcachefs (loop0): shutting down [ 69.348797][ T5324] bcachefs (loop0): shutdown complete [ 69.353893][ T1035] ================================================================== [ 69.357064][ T1035] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250 [ 69.359976][ T1035] Read of size 8 at addr ffff888050b760b0 by task kworker/u4:8/1035 [ 69.362927][ T1035] [ 69.363859][ T1035] CPU: 0 UID: 0 PID: 1035 Comm: kworker/u4:8 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 69.367766][ T1035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.371795][ T1035] Workqueue: loop0 loop_rootcg_workfn [ 69.373857][ T1035] Call Trace: [ 69.375048][ T1035] [ 69.376137][ T1035] dump_stack_lvl+0x241/0x360 [ 69.383078][ T1035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.385055][ T1035] ? __pfx__printk+0x10/0x10 [ 69.386843][ T1035] ? _printk+0xd5/0x120 [ 69.388408][ T1035] ? __virt_addr_valid+0x183/0x530 [ 69.390214][ T1035] ? __virt_addr_valid+0x183/0x530 [ 69.392008][ T1035] print_report+0x169/0x550 [ 69.393708][ T1035] ? __virt_addr_valid+0x183/0x530 [ 69.395558][ T1035] ? __virt_addr_valid+0x183/0x530 [ 69.397472][ T1035] ? __virt_addr_valid+0x45f/0x530 [ 69.399485][ T1035] ? __phys_addr+0xba/0x170 [ 69.401214][ T1035] ? percpu_ref_put+0xda/0x250 [ 69.402951][ T1035] kasan_report+0x143/0x180 [ 69.404652][ T1035] ? percpu_ref_put+0xda/0x250 [ 69.406406][ T1035] ? percpu_ref_put+0x1f/0x250 [ 69.408127][ T1035] percpu_ref_put+0xda/0x250 [ 69.409849][ T1035] blk_update_request+0x5e5/0x1160 [ 69.411757][ T1035] blk_mq_end_request+0x3e/0x70 [ 69.413627][ T1035] loop_process_work+0x1bc8/0x21c0 [ 69.415478][ T1035] ? __pfx_loop_process_work+0x10/0x10 [ 69.417530][ T1035] ? register_lock_class+0x102/0x980 [ 69.419469][ T1035] ? __pfx_register_lock_class+0x10/0x10 [ 69.421566][ T1035] ? mark_lock+0x9a/0x360 [ 69.423119][ T1035] ? debug_object_deactivate+0x2d5/0x390 [ 69.425185][ T1035] ? __pfx_lock_acquire+0x10/0x10 [ 69.427098][ T1035] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.429350][ T1035] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.431663][ T1035] ? process_scheduled_works+0x976/0x1850 [ 69.433829][ T1035] process_scheduled_works+0xa63/0x1850 [ 69.435867][ T1035] ? __pfx_process_scheduled_works+0x10/0x10 [ 69.438097][ T1035] ? assign_work+0x364/0x3d0 [ 69.439856][ T1035] worker_thread+0x870/0xd30 [ 69.441850][ T1035] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 69.444088][ T1035] ? __kthread_parkme+0x169/0x1d0 [ 69.445946][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 69.447709][ T1035] kthread+0x2f0/0x390 [ 69.449328][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 69.451283][ T1035] ? __pfx_kthread+0x10/0x10 [ 69.453022][ T1035] ret_from_fork+0x4b/0x80 [ 69.454653][ T1035] ? __pfx_kthread+0x10/0x10 [ 69.456382][ T1035] ret_from_fork_asm+0x1a/0x30 [ 69.458146][ T1035] [ 69.459242][ T1035] [ 69.460056][ T1035] Allocated by task 5324: [ 69.461549][ T1035] kasan_save_track+0x3f/0x80 [ 69.463142][ T1035] __kasan_kmalloc+0x98/0xb0 [ 69.464750][ T1035] __kmalloc_cache_noprof+0x19c/0x2c0 [ 69.466499][ T1035] __bch2_dev_alloc+0x57/0xa60 [ 69.468137][ T1035] bch2_dev_alloc+0xd4/0x170 [ 69.469853][ T1035] bch2_fs_open+0x2e3f/0x2f80 [ 69.471565][ T1035] bch2_fs_get_tree+0x738/0x1710 [ 69.473406][ T1035] vfs_get_tree+0x90/0x2b0 [ 69.475073][ T1035] do_new_mount+0x2be/0xb40 [ 69.476776][ T1035] __se_sys_mount+0x2d6/0x3c0 [ 69.478512][ T1035] do_syscall_64+0xf3/0x230 [ 69.480225][ T1035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.482393][ T1035] [ 69.483298][ T1035] Freed by task 5324: [ 69.484753][ T1035] kasan_save_track+0x3f/0x80 [ 69.486577][ T1035] kasan_save_free_info+0x40/0x50 [ 69.488381][ T1035] __kasan_slab_free+0x59/0x70 [ 69.490071][ T1035] kfree+0x1a0/0x440 [ 69.491524][ T1035] kobject_put+0x22f/0x480 [ 69.493200][ T1035] bch2_fs_free+0x27b/0x3c0 [ 69.494865][ T1035] bch2_fs_get_tree+0xd9f/0x1710 [ 69.496651][ T1035] vfs_get_tree+0x90/0x2b0 [ 69.498272][ T1035] do_new_mount+0x2be/0xb40 [ 69.499929][ T1035] __se_sys_mount+0x2d6/0x3c0 [ 69.501639][ T1035] do_syscall_64+0xf3/0x230 [ 69.503245][ T1035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.505359][ T1035] [ 69.506271][ T1035] The buggy address belongs to the object at ffff888050b76000 [ 69.506271][ T1035] which belongs to the cache kmalloc-4k of size 4096 [ 69.511031][ T1035] The buggy address is located 176 bytes inside of [ 69.511031][ T1035] freed 4096-byte region [ffff888050b76000, ffff888050b77000) [ 69.515742][ T1035] [ 69.516560][ T1035] The buggy address belongs to the physical page: [ 69.518808][ T1035] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50b70 [ 69.521649][ T1035] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 69.524646][ T1035] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 69.527272][ T1035] page_type: f5(slab) [ 69.528672][ T1035] raw: 04fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 69.531748][ T1035] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 69.534777][ T1035] head: 04fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 69.537915][ T1035] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 69.541040][ T1035] head: 04fff00000000003 ffffea000142dc01 ffffffffffffffff 0000000000000000 [ 69.544162][ T1035] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 69.547262][ T1035] page dumped because: kasan: bad access detected [ 69.549617][ T1035] page_owner tracks the page as allocated [ 69.551628][ T1035] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1035, tgid 1035 (kworker/u4:8), ts 69101755908, free_ts 0 [ 69.558838][ T1035] post_alloc_hook+0x1f3/0x230 [ 69.560632][ T1035] get_page_from_freelist+0x3649/0x3790 [ 69.562591][ T1035] __alloc_pages_noprof+0x292/0x710 [ 69.564368][ T1035] alloc_pages_mpol_noprof+0x3e8/0x680 [ 69.566416][ T1035] alloc_slab_page+0x6a/0x140 [ 69.568189][ T1035] allocate_slab+0x5a/0x2f0 [ 69.569818][ T1035] ___slab_alloc+0xcd1/0x14b0 [ 69.571482][ T1035] __slab_alloc+0x58/0xa0 [ 69.573059][ T1035] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 69.575390][ T1035] kmalloc_reserve+0x111/0x2a0 [ 69.577158][ T1035] __alloc_skb+0x1f3/0x440 [ 69.578809][ T1035] nsim_dev_trap_report_work+0x254/0xab0 [ 69.580820][ T1035] process_scheduled_works+0xa63/0x1850 [ 69.582844][ T1035] worker_thread+0x870/0xd30 [ 69.584590][ T1035] kthread+0x2f0/0x390 [ 69.586251][ T1035] ret_from_fork+0x4b/0x80 [ 69.587956][ T1035] page_owner free stack trace missing [ 69.589975][ T1035] [ 69.590866][ T1035] Memory state around the buggy address: [ 69.592998][ T1035] ffff888050b75f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.595871][ T1035] ffff888050b76000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.598939][ T1035] >ffff888050b76080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.601872][ T1035] ^ [ 69.603914][ T1035] ffff888050b76100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.606754][ T1035] ffff888050b76180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.609508][ T1035] ================================================================== [ 69.659379][ T1035] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.662072][ T1035] CPU: 0 UID: 0 PID: 1035 Comm: kworker/u4:8 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 69.665849][ T1035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.669716][ T1035] Workqueue: loop0 loop_rootcg_workfn [ 69.671721][ T1035] Call Trace: [ 69.672962][ T1035] [ 69.674069][ T1035] dump_stack_lvl+0x241/0x360 [ 69.675737][ T1035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.677641][ T1035] ? __pfx__printk+0x10/0x10 [ 69.679311][ T1035] ? preempt_schedule+0xe1/0xf0 [ 69.681018][ T1035] ? vscnprintf+0x5d/0x90 [ 69.682508][ T1035] panic+0x349/0x880 [ 69.683862][ T1035] ? check_panic_on_warn+0x21/0xb0 [ 69.685706][ T1035] ? __pfx_panic+0x10/0x10 [ 69.687339][ T1035] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 69.689447][ T1035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.691685][ T1035] ? print_report+0x502/0x550 [ 69.693432][ T1035] check_panic_on_warn+0x86/0xb0 [ 69.695227][ T1035] ? percpu_ref_put+0xda/0x250 [ 69.696966][ T1035] end_report+0x77/0x160 [ 69.698509][ T1035] kasan_report+0x154/0x180 [ 69.700156][ T1035] ? percpu_ref_put+0xda/0x250 [ 69.701854][ T1035] ? percpu_ref_put+0x1f/0x250 [ 69.703596][ T1035] percpu_ref_put+0xda/0x250 [ 69.705339][ T1035] blk_update_request+0x5e5/0x1160 [ 69.707285][ T1035] blk_mq_end_request+0x3e/0x70 [ 69.709081][ T1035] loop_process_work+0x1bc8/0x21c0 [ 69.710919][ T1035] ? __pfx_loop_process_work+0x10/0x10 [ 69.712863][ T1035] ? register_lock_class+0x102/0x980 [ 69.714793][ T1035] ? __pfx_register_lock_class+0x10/0x10 [ 69.716832][ T1035] ? mark_lock+0x9a/0x360 [ 69.718380][ T1035] ? debug_object_deactivate+0x2d5/0x390 [ 69.720414][ T1035] ? __pfx_lock_acquire+0x10/0x10 [ 69.722231][ T1035] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.724358][ T1035] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.726709][ T1035] ? process_scheduled_works+0x976/0x1850 [ 69.728728][ T1035] process_scheduled_works+0xa63/0x1850 [ 69.730744][ T1035] ? __pfx_process_scheduled_works+0x10/0x10 [ 69.733033][ T1035] ? assign_work+0x364/0x3d0 [ 69.734770][ T1035] worker_thread+0x870/0xd30 [ 69.736448][ T1035] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 69.738576][ T1035] ? __kthread_parkme+0x169/0x1d0 [ 69.740402][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 69.742352][ T1035] kthread+0x2f0/0x390 [ 69.743842][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 69.745690][ T1035] ? __pfx_kthread+0x10/0x10 [ 69.747260][ T1035] ret_from_fork+0x4b/0x80 [ 69.748864][ T1035] ? __pfx_kthread+0x10/0x10 [ 69.750529][ T1035] ret_from_fork_asm+0x1a/0x30 [ 69.752335][ T1035] [ 69.753724][ T1035] Kernel Offset: disabled [ 69.755304][ T1035] Rebooting in 86400 seconds..