program:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
read(r4, &(0x7f0000005f40)=""/175, 0xfdef)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000c00)={0x81, 0x0, 0x3})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./bus\x00', 0x40, &(0x7f0000000c80)={[{@test_dummy_encryption}, {@data_err_ignore}, {}, {@norecovery}, {@dioread_nolock}, {@lazytime}, {@errors_continue}, {@usrquota}, {@dioread_nolock}]}, 0xfc, 0x555, &(0x7f0000000240)="$eJzs3d9rW1UcAPDvTdP91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRdBlNOtY6cHvZiy8yBBEH4h/gu4/7D/wrBjoYMoo+iBC56c2WtUmbdZnJzOcDNzvn3hvOPbn3e/a9OUkTwMiazB4KEa9GxDdJxOG2bcXIN05u7Lf+8PpctiTRaHz2RxJJvq61f5L/ezCvvBIR/0TEyUJ7izeaj7XVtcVypZIu52un6ktXpmqra6cuLZUX0oX08szs7Jl3Zmfef+/dvvX1zfN/ff/p3Y/OfH18/buf7x+5ncTZOJRva+/HM7jRXpmMyfw1GY+zm3ac7kNjwyQZ9AGwK2N5nI9HNgYcjrE86oH/v68iogGMqET8w4hq5QGte/s+3Qe/MB58uHEDtKn/STGKG++NxL7mvdGB9eSJO6PsfneiD+1nbfzy+53b2RL9ex8CYEc3bkbE6WJx6/if5OPf7p3uYZ/NbRj/4L9zN8t/3uqU/xUe5T/RIf852CF2d2Pn+C/c70MzXWX53wcd899Hk1YTY3ntpWbON55cvFRJs7Ht5Yg4EeN7s/p28zln1u81um1rz/+yJWu/lQvmx3G/uPfJ58yX6+Vn6XO7BzcjXtua/7aN//uaue7m85+9Hud7bONYeuf1btt27v/z1fgp4o2O5//xjFay/fzkVPN6mGpdFVv9eevYr93aH3T/s/N/YPv+TyTt87W1p2/jx31/p9227fb635N83izvydddK9fry9MRe5JPtq6fefzcVr21f9b/E8e3H/86Xf/7I+KLHvt/6+itrrsOw/mff6rz//SFex9/+UO39ns7/283SyfyNb2Mf70e4LO8dgAAAAAAADBsChFxKJJC6VG5UCiVNj7fcTQOFCrVWv3kxerK5flofld2IsYLzZnufHqw9XmI6fzzsHm9GE/W09mIOBIR347tb9ZLc9XK/ID7DgAAAAAAAAAAAAAAAAAAAMPiYJfv/2d+Gxv00QHPnZ/8htG1Y/z345eegKHk/38YXeIfRpf4h9El/mF0iX8YXeIfRpf4h9El/gEAAAAAAAAAAAAAAAAAAAAAAAAAAKCvzp87ly2N9YfX57L6/NXVlcXq1VPzaW2xtLQyV5qrLl8pLVSrPf6N4Eq1emV6JlauTdXTWn2qtrp2Yam6crl+4dJSeSG9kI4/5/4AAAAAAAAAAAAAAAAAAADAi6i2urZYrlTS5UEWisNxGAq7KRSH4zAU+lwY9MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/9GwAA///0SDTc")
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000000), 0x4)
syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000001, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f725f736166652c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65736f6e5f757067726164653d6e6f6e652c736d61636b66736861743d2a2c6f626a5f747970653d28aa2900212c667521633d4b455845435f4b45564e454c5f434845434b2c657569643d00"/136, @ANYBLOB="54e247c79617426b09dd74f53e933283fd6480bf340fccfd4af2d70482b595d99ce84ce3caeb876e317cfaa6b634e7397889be79cfdb92117ddbf0d5d793e20d169c207992d2282aa9f62202a0c012675b4babb84572bbb58e0d11a0f7519dd563f7f0fbb7e7e46c5a3b53e4d9c621c7a75a2e1633490d042569a35a47e0150a79fa33adfd1ae67484c2d0963f27dfca", @ANYBLOB="2682fab62d334488a30d3daad82b581d753656417f0716bf0b94caecd22aa3640df45dfb55924926f951497544866d7f0fc51f8b8c90b9439f6bc5837bad0a83b176aa1553d0a8103012daf7fdb248a6a740e259f8bf2ae9b48f1ac6853bf265a26e28643c9b7eb248a776a9e7ef8ae6cb33f399f8d063866622209047d2cd3cf23a8c5c84545c7913470d5d112b297ff6a43f4684bb14bbcd9ef31ec7a953a76314c4f55eafde2cd3ded5f1c0611004585a5f49ffc3c474967b44d02c40800695de21f6aaa1dda1968ae9b4abc1685b78633731b0ec8c7d59058e52b699e9162d6d423e21b019fd3ba9a1", @ANYRES64=0x0, @ANYRES32], 0x0, 0x5968, &(0x7f0000005e40)="$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")
[ 82.828127][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 82.830786][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 82.834306][ T4673] Bluetooth: hci0: command tx timeout
[ 83.258484][ T5329] loop0: detected capacity change from 0 to 1024
[ 83.274502][ T5329] =======================================================
[ 83.274502][ T5329] WARNING: The mand mount option has been deprecated and
[ 83.274502][ T5329] and is ignored by this kernel. Remove the mand
[ 83.274502][ T5329] option from the mount to silence this warning.
[ 83.274502][ T5329] =======================================================
[ 83.400600][ T5329] EXT4-fs: Mount option(s) incompatible with ext2
[ 84.173583][ T5329] loop0: detected capacity change from 0 to 32768
[ 84.189784][ T5329] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be
[ 84.704179][ T5329] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only
[ 84.704179][ T5329] allowing incompatible features above 0.0: (unknown version)
[ 84.747817][ T5329] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 84.751387][ T5329] bcachefs (loop0): superblock requires following recovery passes to be run:
[ 84.751387][ T5329] check_inodes,check_extents,check_dirents
[ 84.760908][ T5329] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 7 type inline_data 536870912:8:U32_MAX len 0 ver 0: datalen 16: 73797a6b616c6c657273000000000000
[ 84.760935][ T5329] size == 0, deleting
[ 84.777684][ T5329] bcachefs (loop0): flagging btree extents lost data
[ 84.785286][ T5329] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[ 84.789254][ T5329] bcachefs (loop0): running explicit recovery pass check_allocations (8), currently at recovery_pass_empty (0)
[ 84.804389][ T5329] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[ 84.814767][ T5329] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[ 84.822226][ T5329] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[ 84.847698][ T5329] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing
[ 84.866265][ T5329] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree inodes level 0/0
[ 84.866290][ T5329] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0
[ 84.866301][ T5329] node offset 0/24: incorrect min_key: got 0:0:U32_MAX should be POS_MIN, btree topology error:
[ 84.880796][ T49] Bluetooth: hci0: command tx timeout
[ 84.908325][ T5329] bcachefs (loop0): flagging btree inodes lost data
[ 84.924140][ T5329] bcachefs (loop0): error reading btree root btree=inodes level=0: btree_node_read_error, fixing
[ 84.964348][ T5329] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree freespace level 0/0
[ 84.964372][ T5329] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[ 84.964382][ T5329] node offset 0/32 bset u64s 0: checksum error, type none: got should be , fixing
[ 84.991162][ T5329] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
[ 84.991162][ T5329] btree=freespace level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[ 85.022721][ T5329] bcachefs (loop0): scan_for_btree_nodes...
[ 85.042727][ T5340] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 7 type inline_data 536870912:8:U32_MAX len 0 ver 0: datalen 16: 73797a6b616c6c657273000000000000
[ 85.042751][ T5340] size == 0, deleting
[ 85.082310][ T5329] bcachefs (loop0): btree node scan found 2 nodes after overwrites
[ 85.086112][ T5329] done
[ 85.087943][ T5329] bcachefs (loop0): check_topology...
[ 85.089278][ T5329] bcachefs (loop0): btree root extents unreadable, must recover from scan
[ 85.096445][ T5329] bcachefs (loop0): no nodes found for btree extents, continuing
[ 85.106809][ T5329] bcachefs (loop0): btree root inodes unreadable, must recover from scan
[ 85.111208][ T5329] bcachefs (loop0): no nodes found for btree inodes, continuing
[ 85.114278][ T5329] done
[ 85.125832][ T5329] bcachefs (loop0): accounting_read... done
[ 85.129195][ T5329] bcachefs (loop0): alloc_read... done
[ 85.131648][ T5329] bcachefs (loop0): snapshots_read... done
[ 85.150613][ T5329] bcachefs (loop0): check_allocations...
[ 85.161527][ T5329] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 85.161548][ T5329] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[ 85.204508][ T5329] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 85.204525][ T5329] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 85.231006][ T5329] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 85.231021][ T5329] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[ 85.251851][ T5329] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 85.251867][ T5329] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[ 85.282090][ T5329] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 85.282107][ T5329] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 85.304488][ T5329] bcachefs (loop0): bucket 0:27 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[ 85.325767][ T5329] bcachefs (loop0): bucket 0:27 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing
[ 85.331738][ T5329] bcachefs (loop0): bucket 0:34 gen 0 has wrong data_type: got user, should be need_discard, fixing
[ 85.349418][ T5329] bcachefs (loop0): bucket 0:34 gen 0 data type need_discard has wrong dirty_sectors: got 16, should be 0, fixing
[ 85.354486][ T5329] bcachefs (loop0): bucket 0:38 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[ 85.370918][ T5329] bcachefs (loop0): bucket 0:38 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing
[ 85.381856][ T5329] done
[ 85.401392][ T5329] bcachefs (loop0): going read-write
[ 85.416216][ T5329] bcachefs (loop0): journal_replay... done
[ 85.503850][ T5329] bcachefs (loop0): check_lrus...
[ 85.511197][ T5329] bcachefs (loop0): incorrect lru entry: lru fragmentation time 134217728
[ 85.511215][ T5329] u64s 5 type set 18446462598867058688:34:0 len 0 ver 0
[ 85.511219][ T5329] for u64s 13 type alloc_v4 0:34:0 len 0 ver 0:
[ 85.511223][ T5329] gen 0 oldest_gen 0 data_type need_discard
[ 85.511227][ T5329] journal_seq_nonempty 5
[ 85.511232][ T5329] journal_seq_empty 134217728
[ 85.511238][ T5329] need_discard 1
[ 85.511243][ T5329] need_inc_gen 1
[ 85.511248][ T5329] dirty_sectors 0
[ 85.511253][ T5329] stripe_sectors 0
[ 85.511259][ T5329] cached_sectors 0
[ 85.511264][ T5329] stripe 0
[ 85.511269][ T5329] stripe_redundancy 0
[ 85.511273][ T5329] io_time[READ] 1
[ 85.511278][ T5329] io_time[WRITE] 512
[ 85.511310][ T5329] fragmentation 0
[ 85.511315][ T5329] bp_start 8
[ 85.511320][ T5329] , fixing
[ 85.618301][ T5329] done
[ 85.620589][ T5329] bcachefs (loop0): check_backpointers_to_extents...
[ 85.621495][ T5329] bcachefs (loop0): backpointer doesn't match btree node it points to:
[ 85.621507][ T5329] u64s 9 type backpointer 0:7077888:0 len 0 ver 0: bucket=0:27:0 btree=extents level=1 data_type=btree suboffset=0 len=256 gen=0 pos=SPOS_MAX
[ 85.621516][ T5329] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing
[ 85.658956][ T5329] bcachefs (loop0): backpointer doesn't match extent it points to:
[ 85.658974][ T5329] u64s 9 type backpointer 0:8912896:0 len 0 ver 0: bucket=0:34:0 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=4099:8:U32_MAX
[ 85.658986][ T5329] u64s 5 type deleted 4099:8:U32_MAX len 0 ver 0, fixing
[ 85.699260][ T5329] bcachefs (loop0): backpointer doesn't match extent it points to:
[ 85.699304][ T5329] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=536870913:24:U32_MAX
[ 85.699317][ T5329] u64s 5 type deleted 536870913:24:U32_MAX len 0 ver 0, fixing
[ 85.722983][ T5329] done
[ 85.736335][ T5329] bcachefs (loop0): check_inodes... done
[ 85.746470][ T5329] bcachefs (loop0): check_extents... done
[ 85.750558][ T5329] bcachefs (loop0): check_dirents...
[ 85.777779][ T5329] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 189491840996961599, hashed to 5551406877477952845
[ 85.777811][ T5329] u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing
[ 85.835591][ T5329] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 1896155912177158345, hashed to 980208794267925080
[ 85.835602][ T5329] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing
[ 85.851264][ T5329] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 2695648408715017799, hashed to 4473463080840539383
[ 85.851308][ T5329] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing
[ 85.863670][ T5329] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 6174615272128122969
[ 85.863689][ T5329] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing
[ 85.908335][ T5329] bcachefs (loop0): dirent points to missing inode:
[ 85.908351][ T5329] u64s 7 type dirent 4096:4473463080840539383:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing
[ 85.917146][ T5329] bcachefs (loop0): dirent points to missing inode:
[ 85.917163][ T5329] u64s 7 type dirent 4096:5551406877477952845:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing
[ 85.925078][ T5329] bcachefs (loop0): dirent points to missing inode:
[ 85.925093][ T5329] u64s 7 type dirent 4096:6174615272128122969:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing
[ 85.932894][ T5329] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 8130059955150870709, hashed to 2872713874773725398
[ 85.932911][ T5329] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing
[ 85.972090][ T5329] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 9097378837824744618, hashed to 1689818255707914110
[ 85.972108][ T5329] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing
[ 86.019885][ T5329] bcachefs (loop0): directory 4096:4294967295 with wrong i_nlink: got 0, should be 1, fixing
[ 86.025986][ T5329] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4098 offset 5675548428000973578, hashed to 4922270242355629494
[ 86.026005][ T5329] u64s 7 type dirent 4098:5675548428000973578:U32_MAX len 0 ver 0: file1 -> 4100 type lnk, fixing
[ 86.037735][ T5329] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4098 offset 8977922886548783724, hashed to 3438850232072367832
[ 86.037754][ T5329] u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 4099 type reg, fixing
[ 86.080478][ T5329] done
[ 86.083107][ T5329] bcachefs (loop0): resume_logged_ops... done
[ 86.086193][ T5329] bcachefs (loop0): delete_dead_inodes... done
[ 86.093658][ T5329] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[ 86.098456][ T5329] bcachefs (loop0): check_lrus... done
[ 86.100977][ T5329] bcachefs (loop0): check_backpointers_to_extents... done
[ 86.104395][ T5329] bcachefs (loop0): check_inodes... done
[ 86.107552][ T5329] bcachefs (loop0): check_extents... done
[ 86.109976][ T5329] bcachefs (loop0): check_dirents...
[ 86.110278][ T5329] bcachefs (loop0): dirent points to missing inode:
[ 86.110290][ T5329] u64s 7 type dirent 4096:980208794267925080:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing
[ 86.153832][ T5329] bcachefs (loop0): dirent points to missing inode:
[ 86.153849][ T5329] u64s 8 type dirent 4096:1689818255707914110:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing
[ 86.161766][ T5329] bcachefs (loop0): dirent points to missing inode:
[ 86.161782][ T5329] u64s 8 type dirent 4096:2872713874773725398:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing
[ 86.215170][ T5329] ==================================================================
[ 86.218266][ T5329] BUG: KASAN: use-after-free in bch2_check_dirents+0x2aac/0x3b90
[ 86.221278][ T5329] Read of size 1 at addr ffff888057060118 by task syz.0.0/5329
[ 86.224106][ T5329]
[ 86.225057][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full)
[ 86.225073][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.225082][ T5329] Call Trace:
[ 86.225090][ T5329]
[ 86.225096][ T5329] dump_stack_lvl+0x241/0x360
[ 86.225120][ T5329] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.225136][ T5329] ? __virt_addr_valid+0x183/0x530
[ 86.225153][ T5329] ? rcu_is_watching+0x15/0xb0
[ 86.225164][ T5329] ? __virt_addr_valid+0x183/0x530
[ 86.225178][ T5329] ? lock_release+0x4e/0x3e0
[ 86.225195][ T5329] ? __virt_addr_valid+0x183/0x530
[ 86.225215][ T5329] ? __virt_addr_valid+0x183/0x530
[ 86.225231][ T5329] print_report+0x16e/0x5b0
[ 86.225242][ T5329] ? __virt_addr_valid+0x183/0x530
[ 86.225257][ T5329] ? __virt_addr_valid+0x183/0x530
[ 86.225270][ T5329] ? __virt_addr_valid+0x45f/0x530
[ 86.225284][ T5329] ? __phys_addr+0xba/0x170
[ 86.225299][ T5329] ? bch2_check_dirents+0x2aac/0x3b90
[ 86.225317][ T5329] kasan_report+0x143/0x180
[ 86.225328][ T5329] ? bch2_check_dirents+0x2aac/0x3b90
[ 86.225347][ T5329] bch2_check_dirents+0x2aac/0x3b90
[ 86.225377][ T5329] ? __pfx_bch2_check_dirents+0x10/0x10
[ 86.225394][ T5329] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 86.225459][ T5329] ? __pfx__prb_read_valid+0x10/0x10
[ 86.225470][ T5329] ? console_flush_all+0xda3/0xec0
[ 86.225488][ T5329] ? up+0x111/0x1c0
[ 86.225508][ T5329] ? __pfx___console_unlock+0x10/0x10
[ 86.225520][ T5329] ? __pfx_prb_read_valid+0x10/0x10
[ 86.225532][ T5329] ? is_printk_cpu_sync_owner+0x32/0x40
[ 86.225547][ T5329] ? console_unlock+0x2fe/0x3b0
[ 86.225560][ T5329] ? __lock_acquire+0xad5/0xd80
[ 86.225575][ T5329] ? irq_work_queue+0xd1/0x150
[ 86.225592][ T5329] ? __pfx_vprintk_emit+0x10/0x10
[ 86.225612][ T5329] ? bch2_check_dirents+0x2fd/0x3b90
[ 86.225629][ T5329] bch2_run_recovery_pass+0xf0/0x1e0
[ 86.225646][ T5329] bch2_run_recovery_passes+0x2ad/0xa90
[ 86.225670][ T5329] bch2_fs_recovery+0x2c65/0x3e20
[ 86.225688][ T5329] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 86.225703][ T5329] ? __lock_acquire+0xad5/0xd80
[ 86.225728][ T5329] ? bch2_fs_start+0x279/0x620
[ 86.225741][ T5329] ? up_write+0x1ab/0x590
[ 86.225753][ T5329] ? bch2_get_next_online_dev+0x4ab/0x4e0
[ 86.225768][ T5329] ? bch2_get_next_online_dev+0x2e/0x4e0
[ 86.225783][ T5329] ? __pfx_up_write+0x10/0x10
[ 86.225795][ T5329] ? llist_reverse_order+0x72/0x90
[ 86.225814][ T5329] bch2_fs_start+0x310/0x620
[ 86.225828][ T5329] bch2_fs_get_tree+0x113e/0x18f0
[ 86.225853][ T5329] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 86.225874][ T5329] ? vfs_parse_monolithic_sep+0x427/0x460
[ 86.225886][ T5329] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 86.225894][ T5329] ? rcu_is_watching+0x15/0xb0
[ 86.225904][ T5329] ? apparmor_capable+0x13b/0x1b0
[ 86.225915][ T5329] vfs_get_tree+0x90/0x2b0
[ 86.225930][ T5329] do_new_mount+0x2cf/0xb70
[ 86.225946][ T5329] ? __pfx_do_new_mount+0x10/0x10
[ 86.225962][ T5329] __se_sys_mount+0x38c/0x400
[ 86.225974][ T5329] ? __pfx___se_sys_mount+0x10/0x10
[ 86.225986][ T5329] ? __x64_sys_mount+0x20/0xc0
[ 86.225997][ T5329] do_syscall_64+0xf3/0x210
[ 86.226011][ T5329] ? clear_bhb_loop+0x45/0xa0
[ 86.226024][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.226036][ T5329] RIP: 0033:0x7f124218f90a
[ 86.226049][ T5329] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.226059][ T5329] RSP: 002b:00007f124307be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 86.226075][ T5329] RAX: ffffffffffffffda RBX: 00007f124307bef0 RCX: 00007f124218f90a
[ 86.226083][ T5329] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f124307beb0
[ 86.226092][ T5329] RBP: 0000200000000000 R08: 00007f124307bef0 R09: 0000000001000001
[ 86.226099][ T5329] R10: 0000000001000001 R11: 0000000000000246 R12: 0000200000000040
[ 86.226107][ T5329] R13: 00007f124307beb0 R14: 0000000000005968 R15: 0000200000000300
[ 86.226120][ T5329]
[ 86.226125][ T5329]
[ 86.379612][ T5329] The buggy address belongs to the physical page:
[ 86.382187][ T5329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57060
[ 86.385471][ T5329] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 86.388285][ T5329] page_type: f0(buddy)
[ 86.389851][ T5329] raw: 04fff00000000000 ffff88805ffd6f08 ffff88805ffd6f08 0000000000000000
[ 86.393286][ T5329] raw: 0000000000000000 0000000000000005 00000000f0000000 0000000000000000
[ 86.396476][ T5329] page dumped because: kasan: bad access detected
[ 86.398955][ T5329] page_owner tracks the page as freed
[ 86.401032][ T5329] page last allocated via order 5, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 5329, tgid 5324 (syz.0.0), ts 86091245243, free_ts 86214513725
[ 86.408031][ T5329] post_alloc_hook+0x1f4/0x240
[ 86.409931][ T5329] get_page_from_freelist+0x360a/0x37a0
[ 86.412121][ T5329] __alloc_frozen_pages_noprof+0x211/0x5b0
[ 86.414868][ T5329] __alloc_pages_noprof+0xa/0x30
[ 86.417246][ T5329] ___kmalloc_large_node+0x92/0x210
[ 86.419393][ T5329] __kmalloc_large_node_noprof+0x1a/0x80
[ 86.421696][ T5329] __kvmalloc_node_noprof+0x7c/0x5a0
[ 86.423730][ T5329] btree_node_sort+0x67c/0x1870
[ 86.425602][ T5329] bch2_btree_post_write_cleanup+0x11a/0xaa0
[ 86.428137][ T5329] bch2_btree_node_write_trans+0x18a/0x7a0
[ 86.430560][ T5329] __btree_node_flush+0x3a1/0x470
[ 86.432585][ T5329] bch2_btree_node_flush0+0x27/0x40
[ 86.434738][ T5329] journal_flush_pins+0x89b/0xe40
[ 86.436862][ T5329] journal_flush_done+0x107/0x820
[ 86.438880][ T5329] bch2_journal_flush_pins+0x19f/0x3c0
[ 86.441008][ T5329] bch2_fs_recovery+0x2af1/0x3e20
[ 86.443160][ T5329] page last free pid 5329 tgid 5324 stack trace:
[ 86.445622][ T5329] __free_pages_ok+0xb1d/0xda0
[ 86.447342][ T5329] __folio_put+0x2b5/0x360
[ 86.449186][ T5329] free_large_kmalloc+0x143/0x1e0
[ 86.451151][ T5329] kfree+0x216/0x430
[ 86.452745][ T5329] btree_node_sort+0x1124/0x1870
[ 86.454768][ T5329] bch2_btree_post_write_cleanup+0x11a/0xaa0
[ 86.457199][ T5329] bch2_btree_node_prep_for_write+0x35a/0x670
[ 86.459835][ T5329] bch2_trans_lock_write+0x66f/0xb60
[ 86.462008][ T5329] __bch2_trans_commit+0x3252/0x9da0
[ 86.464202][ T5329] bch2_check_dirents+0x2801/0x3b90
[ 86.466357][ T5329] bch2_run_recovery_pass+0xf0/0x1e0
[ 86.468572][ T5329] bch2_run_recovery_passes+0x2ad/0xa90
[ 86.470903][ T5329] bch2_fs_recovery+0x2c65/0x3e20
[ 86.472870][ T5329] bch2_fs_start+0x310/0x620
[ 86.474932][ T5329] bch2_fs_get_tree+0x113e/0x18f0
[ 86.477050][ T5329] vfs_get_tree+0x90/0x2b0
[ 86.478884][ T5329]
[ 86.479903][ T5329] Memory state around the buggy address:
[ 86.482461][ T5329] ffff888057060000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 86.485601][ T5329] ffff888057060080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 86.488828][ T5329] >ffff888057060100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 86.492187][ T5329] ^
[ 86.494165][ T5329] ffff888057060180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 86.497282][ T5329] ffff888057060200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 86.500556][ T5329] ==================================================================
[ 86.576674][ T10] cfg80211: failed to load regulatory.db
[ 86.809647][ T5329] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 86.813003][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(full)
[ 86.817240][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.821461][ T5329] Call Trace:
[ 86.822735][ T5329]
[ 86.824028][ T5329] dump_stack_lvl+0x241/0x360
[ 86.826008][ T5329] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.828119][ T5329] ? __pfx__printk+0x10/0x10
[ 86.830191][ T5329] ? vscnprintf+0x5d/0x90
[ 86.831928][ T5329] panic+0x349/0x880
[ 86.833555][ T5329] ? check_panic_on_warn+0x21/0xb0
[ 86.835666][ T5329] ? __pfx_panic+0x10/0x10
[ 86.837564][ T5329] ? _raw_spin_unlock_irqrestore+0x134/0x140
[ 86.840050][ T5329] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 86.842662][ T5329] ? print_report+0x519/0x5b0
[ 86.844538][ T5329] check_panic_on_warn+0x86/0xb0
[ 86.846830][ T5329] ? bch2_check_dirents+0x2aac/0x3b90
[ 86.849689][ T5329] end_report+0x77/0x160
[ 86.852055][ T5329] kasan_report+0x154/0x180
[ 86.854587][ T5329] ? bch2_check_dirents+0x2aac/0x3b90
[ 86.856811][ T5329] bch2_check_dirents+0x2aac/0x3b90
[ 86.858858][ T5329] ? __pfx_bch2_check_dirents+0x10/0x10
[ 86.861463][ T5329] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 86.864222][ T5329] ? __pfx__prb_read_valid+0x10/0x10
[ 86.866439][ T5329] ? console_flush_all+0xda3/0xec0
[ 86.868669][ T5329] ? up+0x111/0x1c0
[ 86.870270][ T5329] ? __pfx___console_unlock+0x10/0x10
[ 86.872499][ T5329] ? __pfx_prb_read_valid+0x10/0x10
[ 86.874652][ T5329] ? is_printk_cpu_sync_owner+0x32/0x40
[ 86.876897][ T5329] ? console_unlock+0x2fe/0x3b0
[ 86.878939][ T5329] ? __lock_acquire+0xad5/0xd80
[ 86.880982][ T5329] ? irq_work_queue+0xd1/0x150
[ 86.882970][ T5329] ? __pfx_vprintk_emit+0x10/0x10
[ 86.884983][ T5329] ? bch2_check_dirents+0x2fd/0x3b90
[ 86.887197][ T5329] bch2_run_recovery_pass+0xf0/0x1e0
[ 86.889411][ T5329] bch2_run_recovery_passes+0x2ad/0xa90
[ 86.891841][ T5329] bch2_fs_recovery+0x2c65/0x3e20
[ 86.893944][ T5329] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 86.896163][ T5329] ? __lock_acquire+0xad5/0xd80
[ 86.898192][ T5329] ? bch2_fs_start+0x279/0x620
[ 86.900068][ T5329] ? up_write+0x1ab/0x590
[ 86.901696][ T5329] ? bch2_get_next_online_dev+0x4ab/0x4e0
[ 86.903988][ T5329] ? bch2_get_next_online_dev+0x2e/0x4e0
[ 86.906343][ T5329] ? __pfx_up_write+0x10/0x10
[ 86.908144][ T5329] ? llist_reverse_order+0x72/0x90
[ 86.910236][ T5329] bch2_fs_start+0x310/0x620
[ 86.912013][ T5329] bch2_fs_get_tree+0x113e/0x18f0
[ 86.914122][ T5329] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 86.916232][ T5329] ? vfs_parse_monolithic_sep+0x427/0x460
[ 86.918502][ T5329] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 86.920716][ T5329] ? rcu_is_watching+0x15/0xb0
[ 86.922657][ T5329] ? apparmor_capable+0x13b/0x1b0
[ 86.924892][ T5329] vfs_get_tree+0x90/0x2b0
[ 86.927217][ T5329] do_new_mount+0x2cf/0xb70
[ 86.929704][ T5329] ? __pfx_do_new_mount+0x10/0x10
[ 86.932664][ T5329] __se_sys_mount+0x38c/0x400
[ 86.935356][ T5329] ? __pfx___se_sys_mount+0x10/0x10
[ 86.938142][ T5329] ? __x64_sys_mount+0x20/0xc0
[ 86.940846][ T5329] do_syscall_64+0xf3/0x210
[ 86.943246][ T5329] ? clear_bhb_loop+0x45/0xa0
[ 86.945318][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.947734][ T5329] RIP: 0033:0x7f124218f90a
[ 86.949545][ T5329] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.957493][ T5329] RSP: 002b:00007f124307be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 86.960998][ T5329] RAX: ffffffffffffffda RBX: 00007f124307bef0 RCX: 00007f124218f90a
[ 86.964199][ T5329] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f124307beb0
[ 86.967399][ T5329] RBP: 0000200000000000 R08: 00007f124307bef0 R09: 0000000001000001
[ 86.970613][ T5329] R10: 0000000001000001 R11: 0000000000000246 R12: 0000200000000040
[ 86.973926][ T5329] R13: 00007f124307beb0 R14: 0000000000005968 R15: 0000200000000300
[ 86.977156][ T5329]
[ 86.978721][ T5329] Kernel Offset: disabled
[ 86.980594][ T5329] Rebooting in 86400 seconds..