program: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000001, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f725f736166652c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65736f6e5f757067726164653d6e6f6e652c736d61636b66736861743d2a2c6f626a5f747970653d28aa2900212c667521633d4b455845435f4b45564e454c5f434845434b2c657569643d00"/136, @ANYBLOB="54e247c79617426b09dd74f53e933283fd6480bf340fccfd4af2d70482b595d99ce84ce3caeb876e317cfaa6b634e7397889be79cfdb92117ddbf0d5d793e20d169c207992d2282aa9f62202a0c012675b4babb84572bbb58e0d11a0f7519dd563f7f0fbb7e7e46c5a3b53e4d9c621c7a75a2e1633490d042569a35a47e0150a79fa33adfd1ae67484c2d0963f27dfca", @ANYBLOB="2682fab62d334488a30d3daad82b581d753656417f0716bf0b94caecd22aa3640df45dfb55924926f951497544866d7f0fc51f8b8c90b9439f6bc5837bad0a83b176aa1553d0a8103012daf7fdb248a6a740e259f8bf2ae9b48f1ac6853bf265a26e28643c9b7eb248a776a9e7ef8ae6cb33f399f8d063866622209047d2cd3cf23a8c5c84545c7913470d5d112b297ff6a43f4684bb14bbcd9ef31ec7a953a76314c4f55eafde2cd3ded5f1c0611004585a5f49ffc3c474967b44d02c40800695de21f6aaa1dda1968ae9b4abc1685b78633731b0ec8c7d59058e52b699e9162d6d423e21b019fd3ba9a1", @ANYRES64=0x0, @ANYRES32], 0x0, 0x5968, &(0x7f0000005e40)="$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") [ 78.337527][ T5306] Bluetooth: hci0: command tx timeout [ 78.348511][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.351237][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.698770][ T5321] loop0: detected capacity change from 0 to 32768 [ 78.721558][ T5321] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 78.970596][ T5321] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 78.970596][ T5321] allowing incompatible features above 0.0: (unknown version) [ 78.985436][ T5321] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 78.989037][ T5321] bcachefs (loop0): superblock requires following recovery passes to be run: [ 78.989037][ T5321] check_inodes,check_extents,check_dirents [ 78.999685][ T5321] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 7 type inline_data 536870912:8:U32_MAX len 0 ver 0: datalen 16: 73797a6b616c6c657273000000000000 [ 78.999704][ T5321] size == 0, deleting [ 79.010832][ T5321] bcachefs (loop0): flagging btree extents lost data [ 79.013726][ T5321] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 79.019892][ T5321] bcachefs (loop0): running explicit recovery pass check_allocations (8), currently at recovery_pass_empty (0) [ 79.024680][ T5321] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 79.029869][ T5321] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 79.039843][ T5321] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 79.048389][ T5321] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 79.054686][ T5321] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree inodes level 0/0 [ 79.054703][ T5321] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 79.054712][ T5321] node offset 0/24: incorrect min_key: got 0:0:U32_MAX should be POS_MIN, btree topology error: [ 79.069799][ T5321] bcachefs (loop0): flagging btree inodes lost data [ 79.072787][ T5321] bcachefs (loop0): error reading btree root btree=inodes level=0: btree_node_read_error, fixing [ 79.088638][ T5321] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree freespace level 0/0 [ 79.088654][ T5321] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 79.088663][ T5321] node offset 0/32 bset u64s 0: checksum error, type none: got should be , fixing [ 79.104282][ T5321] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 79.104282][ T5321] btree=freespace level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 79.119764][ T5321] bcachefs (loop0): scan_for_btree_nodes... [ 79.124586][ T5321] bcachefs (loop0): btree node scan found 2 nodes after overwrites [ 79.131674][ T5321] done [ 79.133438][ T5321] bcachefs (loop0): check_topology... [ 79.134501][ T5321] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 79.141457][ T5321] bcachefs (loop0): no nodes found for btree extents, continuing [ 79.145692][ T5321] bcachefs (loop0): btree root inodes unreadable, must recover from scan [ 79.149534][ T5321] bcachefs (loop0): no nodes found for btree inodes, continuing [ 79.152638][ T5321] done [ 79.154263][ T5321] bcachefs (loop0): accounting_read... done [ 79.159108][ T5321] bcachefs (loop0): alloc_read... done [ 79.161426][ T5321] bcachefs (loop0): snapshots_read... done [ 79.164030][ T5321] bcachefs (loop0): check_allocations... [ 79.166062][ T5321] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 79.166076][ T5321] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 79.183826][ T5321] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 79.183842][ T5321] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 79.194505][ T5321] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 79.194519][ T5321] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 79.205959][ T5321] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 79.205973][ T5321] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 79.222523][ T5321] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 79.222536][ T5321] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 79.233303][ T5321] bcachefs (loop0): bucket 0:27 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 79.238567][ T5321] bcachefs (loop0): bucket 0:27 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 79.244325][ T5321] bcachefs (loop0): bucket 0:34 gen 0 has wrong data_type: got user, should be need_discard, fixing [ 79.249419][ T5321] bcachefs (loop0): bucket 0:34 gen 0 data type need_discard has wrong dirty_sectors: got 16, should be 0, fixing [ 79.254490][ T5321] bcachefs (loop0): bucket 0:38 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 79.259746][ T5321] bcachefs (loop0): bucket 0:38 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 79.266626][ T5321] done [ 79.271264][ T5321] bcachefs (loop0): going read-write [ 79.282483][ T5321] bcachefs (loop0): journal_replay... done [ 79.326937][ T5321] bcachefs (loop0): check_lrus... [ 79.329936][ T5321] bcachefs (loop0): incorrect lru entry: lru fragmentation time 134217728 [ 79.329951][ T5321] u64s 5 type set 18446462598867058688:34:0 len 0 ver 0 [ 79.329958][ T5321] for u64s 13 type alloc_v4 0:34:0 len 0 ver 0: [ 79.329964][ T5321] gen 0 oldest_gen 0 data_type need_discard [ 79.329970][ T5321] journal_seq_nonempty 5 [ 79.329975][ T5321] journal_seq_empty 134217728 [ 79.329981][ T5321] need_discard 1 [ 79.329987][ T5321] need_inc_gen 1 [ 79.329991][ T5321] dirty_sectors 0 [ 79.329997][ T5321] stripe_sectors 0 [ 79.330002][ T5321] cached_sectors 0 [ 79.330006][ T5321] stripe 0 [ 79.330011][ T5321] stripe_redundancy 0 [ 79.330016][ T5321] io_time[READ] 1 [ 79.330021][ T5321] io_time[WRITE] 512 [ 79.330025][ T5321] fragmentation 0 [ 79.330029][ T5321] bp_start 8 [ 79.330034][ T5321] , fixing [ 79.383410][ T5321] done [ 79.385448][ T5321] bcachefs (loop0): check_backpointers_to_extents... [ 79.386673][ T5321] bcachefs (loop0): backpointer doesn't match btree node it points to: [ 79.386685][ T5321] u64s 9 type backpointer 0:7077888:0 len 0 ver 0: bucket=0:27:0 btree=extents level=1 data_type=btree suboffset=0 len=256 gen=0 pos=SPOS_MAX [ 79.386695][ T5321] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing [ 79.404100][ T5321] bcachefs (loop0): backpointer doesn't match extent it points to: [ 79.404114][ T5321] u64s 9 type backpointer 0:8912896:0 len 0 ver 0: bucket=0:34:0 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=4099:8:U32_MAX [ 79.404123][ T5321] u64s 5 type deleted 4099:8:U32_MAX len 0 ver 0, fixing [ 79.419134][ T5321] bcachefs (loop0): backpointer doesn't match extent it points to: [ 79.419148][ T5321] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=536870913:24:U32_MAX [ 79.419157][ T5321] u64s 5 type deleted 536870913:24:U32_MAX len 0 ver 0, fixing [ 79.431798][ T5321] done [ 79.434122][ T5321] bcachefs (loop0): check_inodes... done [ 79.439370][ T5321] bcachefs (loop0): check_extents... done [ 79.442362][ T5321] bcachefs (loop0): check_dirents... [ 79.459695][ T5321] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 189491840996961599, hashed to 176008294294827902 [ 79.459715][ T5321] u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing [ 79.479039][ T5321] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 1896155912177158345, hashed to 6688472511877296836 [ 79.479054][ T5321] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 79.492799][ T5321] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 2695648408715017799, hashed to 8382279339418560228 [ 79.492813][ T5321] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 79.504898][ T5321] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 4330382808765825483, hashed to 6359505371242087762 [ 79.504913][ T5321] u64s 7 type dirent 4096:4330382808765825483:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 79.516633][ T5321] bcachefs (loop0): dirent points to missing inode: [ 79.516646][ T5321] u64s 7 type dirent 4096:6359505371242087762:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 79.525462][ T5321] bcachefs (loop0): dirent points to missing inode: [ 79.525475][ T5321] u64s 7 type dirent 4096:6688472511877296836:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 79.533553][ T5321] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 8130059955150870709, hashed to 4013265827636634684 [ 79.533566][ T5321] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 79.545229][ T5321] bcachefs (loop0): dirent points to missing inode: [ 79.545242][ T5321] u64s 7 type dirent 4096:8382279339418560228:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 79.553576][ T5321] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4096 offset 9097378837824744618, hashed to 5862144399479457835 [ 79.553589][ T5321] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing [ 79.565375][ T5321] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4098 offset 5675548428000973578, hashed to 1651403714630118088 [ 79.565389][ T5321] u64s 7 type dirent 4098:5675548428000973578:U32_MAX len 0 ver 0: file1 -> 4100 type lnk, fixing [ 79.575384][ T5321] bcachefs (loop0): hash table key at wrong offset: btree dirents inode 4098 offset 8977922886548783724, hashed to 8074065221300492334 [ 79.575396][ T5321] u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 4099 type reg, fixing [ 79.586392][ T5321] done [ 79.588945][ T5321] bcachefs (loop0): resume_logged_ops... done [ 79.591553][ T5321] bcachefs (loop0): delete_dead_inodes... done [ 79.600185][ T5321] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 79.603891][ T5321] bcachefs (loop0): check_lrus... done [ 79.606080][ T5321] bcachefs (loop0): check_backpointers_to_extents... done [ 79.610305][ T5321] bcachefs (loop0): check_inodes... done [ 79.613058][ T5321] bcachefs (loop0): check_extents... done [ 79.615468][ T5321] bcachefs (loop0): check_dirents... [ 79.615903][ T5321] bcachefs (loop0): directory with missing backpointer [ 79.615913][ T5321] u64s 7 type dirent 4096:176008294294827902:U32_MAX len 0 ver 0: file0 -> 4098 type dir [ 79.615919][ T5321] inum: 4098:4294967295 [ 79.615924][ T5321] mode=40600 [ 79.615928][ T5321] flags=(4300000) [ 79.615932][ T5321] journal_seq=18 [ 79.615937][ T5321] hash_seed=8f9e1c1d9992f692 [ 79.615942][ T5321] hash_type=siphash [ 79.615947][ T5321] bi_size=0 [ 79.615952][ T5321] bi_sectors=0 [ 79.615956][ T5321] bi_version=0 [ 79.615961][ T5321] bi_atime=31113849050612086 [ 79.615965][ T5321] bi_ctime=31113849050612086 [ 79.615969][ T5321] bi_mtime=31113849050612086 [ 79.615974][ T5321] bi_otime=31113849050612086 [ 79.615978][ T5321] bi_uid=0 [ 79.615982][ T5321] bi_gid=0 [ 79.615986][ T5321] bi_nlink=0 [ 79.615991][ T5321] bi_generation=0 [ 79.615995][ T5321] bi_dev=0 [ 79.616000][ T5321] bi_data_checksum=0 [ 79.616005][ T5321] bi_compression=0 [ 79.616010][ T5321] bi_project=0 [ 79.616014][ T5321] bi_background_compression=0 [ 79.616019][ T5321] bi_data_replicas=0 [ 79.616024][ T5321] bi_promote_target=0 [ 79.616029][ T5321] bi_foreground_target=0 [ 79.616034][ T5321] bi_background_target=0 [ 79.616040][ T5321] bi_erasure_code=0 [ 79.616045][ T5321] bi_fields_set=0 [ 79.616049][ T5321] bi_dir=0 [ 79.616054][ T5321] bi_dir_offset=0 [ 79.616059][ T5321] bi_subvol=0 [ 79.616063][ T5321] bi_parent_subvol=0 [ 79.616068][ T5321] bi_nocow=0 [ 79.616080][ T5321] bi_depth=0 [ 79.616085][ T5321] bi_inodes_32bit=0 [ 79.616089][ T5321] bi_casefold=0, fixing [ 79.694165][ T5321] bcachefs (loop0): dirent points to missing inode: [ 79.694177][ T5321] u64s 8 type dirent 4096:4013265827636634684:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 79.703917][ T5321] bcachefs (loop0): dirent points to missing inode: [ 79.703929][ T5321] u64s 8 type dirent 4096:5862144399479457835:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing [ 79.713489][ T5321] ================================================================== [ 79.716780][ T5321] BUG: KASAN: use-after-free in bch2_check_dirents+0x1bac/0x2460 [ 79.719895][ T5321] Read of size 1 at addr ffff888055280118 by task syz.0.0/5321 [ 79.722887][ T5321] [ 79.723978][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 79.723996][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.724003][ T5321] Call Trace: [ 79.724010][ T5321] [ 79.724016][ T5321] dump_stack_lvl+0x189/0x250 [ 79.724034][ T5321] ? __virt_addr_valid+0x18c/0x540 [ 79.724048][ T5321] ? rcu_is_watching+0x15/0xb0 [ 79.724066][ T5321] ? __kasan_check_byte+0x12/0x40 [ 79.724080][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.724096][ T5321] ? rcu_is_watching+0x15/0xb0 [ 79.724110][ T5321] ? lock_release+0x4b/0x3e0 [ 79.724124][ T5321] ? __virt_addr_valid+0x18c/0x540 [ 79.724136][ T5321] ? __virt_addr_valid+0x469/0x540 [ 79.724151][ T5321] print_report+0xb4/0x290 [ 79.724163][ T5321] ? bch2_check_dirents+0x1bac/0x2460 [ 79.724173][ T5321] kasan_report+0x118/0x150 [ 79.724185][ T5321] ? bch2_check_dirents+0x1bac/0x2460 [ 79.724199][ T5321] bch2_check_dirents+0x1bac/0x2460 [ 79.724212][ T5321] ? desc_read+0x1b8/0x3f0 [ 79.724231][ T5321] ? __pfx_bch2_check_dirents+0x10/0x10 [ 79.724247][ T5321] ? __pfx__prb_read_valid+0x10/0x10 [ 79.724260][ T5321] ? __console_unlock+0x14c/0x1a0 [ 79.724270][ T5321] ? __pfx___console_unlock+0x10/0x10 [ 79.724282][ T5321] ? prb_read_valid+0x3c/0x60 [ 79.724295][ T5321] ? console_unlock+0x21b/0x270 [ 79.724305][ T5321] ? __pfx_console_unlock+0x10/0x10 [ 79.724315][ T5321] ? irq_work_queue+0xc3/0x140 [ 79.724339][ T5321] ? __pfx_vprintk_emit+0x10/0x10 [ 79.724353][ T5321] ? bch2_check_dirents+0x25d/0x2460 [ 79.724361][ T5321] bch2_run_recovery_pass+0xdf/0x1d0 [ 79.724369][ T5321] bch2_run_recovery_passes+0x2a0/0xdb0 [ 79.724377][ T5321] bch2_fs_recovery+0x26c8/0x37b0 [ 79.724390][ T5321] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 79.724405][ T5321] ? __lock_acquire+0xaac/0xd20 [ 79.724422][ T5321] ? percpu_ref_put+0x1e/0x230 [ 79.724434][ T5321] ? bch2_get_next_online_dev+0x2d/0x4d0 [ 79.724445][ T5321] ? bch2_fs_start+0x65b/0xae0 [ 79.724459][ T5321] ? up_write+0x1c4/0x420 [ 79.724469][ T5321] bch2_fs_start+0x70b/0xae0 [ 79.724484][ T5321] ? __pfx_bch2_fs_start+0x10/0x10 [ 79.724500][ T5321] ? percpu_ref_put+0x1e/0x230 [ 79.724511][ T5321] ? percpu_ref_put+0x1e/0x230 [ 79.724522][ T5321] ? percpu_ref_put+0x188/0x230 [ 79.724533][ T5321] bch2_fs_get_tree+0xd99/0x1340 [ 79.724550][ T5321] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 79.724564][ T5321] ? aa_get_newest_label+0xf7/0x5d0 [ 79.724574][ T5321] ? vfs_parse_monolithic_sep+0x2e3/0x310 [ 79.724589][ T5321] ? apparmor_capable+0x137/0x1b0 [ 79.724605][ T5321] vfs_get_tree+0x8f/0x2b0 [ 79.724617][ T5321] do_new_mount+0x24a/0xa40 [ 79.724632][ T5321] __se_sys_mount+0x317/0x410 [ 79.724645][ T5321] ? __pfx___se_sys_mount+0x10/0x10 [ 79.724655][ T5321] ? do_syscall_64+0xba/0x210 [ 79.724717][ T5321] ? __x64_sys_mount+0x20/0xc0 [ 79.724730][ T5321] do_syscall_64+0xf6/0x210 [ 79.724741][ T5321] ? clear_bhb_loop+0x45/0xa0 [ 79.724751][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.724758][ T5321] RIP: 0033:0x7fcc4019010a [ 79.724769][ T5321] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.724777][ T5321] RSP: 002b:00007fcc41006e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.724790][ T5321] RAX: ffffffffffffffda RBX: 00007fcc41006ef0 RCX: 00007fcc4019010a [ 79.724797][ T5321] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007fcc41006eb0 [ 79.724804][ T5321] RBP: 0000200000000000 R08: 00007fcc41006ef0 R09: 0000000001000001 [ 79.724811][ T5321] R10: 0000000001000001 R11: 0000000000000246 R12: 0000200000000040 [ 79.724818][ T5321] R13: 00007fcc41006eb0 R14: 0000000000005968 R15: 0000200000000300 [ 79.724829][ T5321] [ 79.724833][ T5321] [ 79.872292][ T5321] The buggy address belongs to the physical page: [ 79.874844][ T5321] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55280 [ 79.878254][ T5321] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 79.880973][ T5321] page_type: f0(buddy) [ 79.882605][ T5321] raw: 04fff00000000000 ffff88805ffd6f08 ffff88805ffd6f08 0000000000000000 [ 79.885867][ T5321] raw: 0000000000000000 0000000000000005 00000000f0000000 0000000000000000 [ 79.889242][ T5321] page dumped because: kasan: bad access detected [ 79.891877][ T5321] page_owner tracks the page as freed [ 79.893992][ T5321] page last allocated via order 5, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 5321, tgid 5320 (syz.0.0), ts 79595983571, free_ts 79713280200 [ 79.900497][ T5321] post_alloc_hook+0x1d8/0x230 [ 79.902420][ T5321] get_page_from_freelist+0x21ce/0x22b0 [ 79.904584][ T5321] __alloc_frozen_pages_noprof+0x181/0x370 [ 79.906879][ T5321] __alloc_pages_noprof+0xa/0x30 [ 79.908813][ T5321] ___kmalloc_large_node+0x85/0x200 [ 79.910865][ T5321] __kmalloc_large_node_noprof+0x18/0x90 [ 79.913096][ T5321] __kvmalloc_node_noprof+0x74/0x5e0 [ 79.915217][ T5321] btree_node_sort+0x65d/0x1790 [ 79.917137][ T5321] bch2_btree_post_write_cleanup+0x11f/0xab0 [ 79.919586][ T5321] bch2_btree_node_write_trans+0x17b/0x760 [ 79.921942][ T5321] __btree_node_flush+0x323/0x430 [ 79.923969][ T5321] bch2_btree_node_flush0+0x27/0x40 [ 79.926074][ T5321] journal_flush_pins+0x8e0/0xe90 [ 79.928133][ T5321] journal_flush_done+0x112/0x810 [ 79.930294][ T5321] bch2_journal_flush_pins+0xdc/0x250 [ 79.932584][ T5321] bch2_fs_recovery+0x2550/0x37b0 [ 79.934576][ T5321] page last free pid 5321 tgid 5320 stack trace: [ 79.937025][ T5321] __free_pages_ok+0x916/0xac0 [ 79.938985][ T5321] __folio_put+0x21b/0x2c0 [ 79.940702][ T5321] free_large_kmalloc+0x145/0x200 [ 79.942557][ T5321] btree_node_sort+0x1149/0x1790 [ 79.944371][ T5321] bch2_btree_post_write_cleanup+0x11f/0xab0 [ 79.946601][ T5321] bch2_btree_node_prep_for_write+0x341/0x660 [ 79.949063][ T5321] bch2_trans_lock_write+0x669/0xbb0 [ 79.951171][ T5321] __bch2_trans_commit+0x2cb3/0x8ae0 [ 79.953277][ T5321] bch2_check_dirents+0x19ae/0x2460 [ 79.955337][ T5321] bch2_run_recovery_pass+0xdf/0x1d0 [ 79.957517][ T5321] bch2_run_recovery_passes+0x2a0/0xdb0 [ 79.959845][ T5321] bch2_fs_recovery+0x26c8/0x37b0 [ 79.961971][ T5321] bch2_fs_start+0x70b/0xae0 [ 79.963886][ T5321] bch2_fs_get_tree+0xd99/0x1340 [ 79.965863][ T5321] vfs_get_tree+0x8f/0x2b0 [ 79.967632][ T5321] do_new_mount+0x24a/0xa40 [ 79.969466][ T5321] [ 79.970486][ T5321] Memory state around the buggy address: [ 79.972700][ T5321] ffff888055280000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.975888][ T5321] ffff888055280080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.979011][ T5321] >ffff888055280100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.982390][ T5321] ^ [ 79.984421][ T5321] ffff888055280180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.987682][ T5321] ffff888055280200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.990967][ T5321] ================================================================== [ 79.999419][ T5321] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.002320][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 80.005901][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.010087][ T5321] Call Trace: [ 80.011312][ T5321] [ 80.012464][ T5321] dump_stack_lvl+0x99/0x250 [ 80.014162][ T5321] ? __asan_memcpy+0x40/0x70 [ 80.015841][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.017827][ T5321] ? __pfx__printk+0x10/0x10 [ 80.019835][ T5321] panic+0x2db/0x790 [ 80.021441][ T5321] ? __pfx_panic+0x10/0x10 [ 80.023340][ T5321] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 80.025572][ T5321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.028012][ T5321] ? print_memory_metadata+0x314/0x400 [ 80.030278][ T5321] ? bch2_check_dirents+0x1bac/0x2460 [ 80.032471][ T5321] check_panic_on_warn+0x89/0xb0 [ 80.034553][ T5321] ? bch2_check_dirents+0x1bac/0x2460 [ 80.036660][ T5321] end_report+0x78/0x160 [ 80.038236][ T5321] kasan_report+0x129/0x150 [ 80.039945][ T5321] ? bch2_check_dirents+0x1bac/0x2460 [ 80.042183][ T5321] bch2_check_dirents+0x1bac/0x2460 [ 80.044275][ T5321] ? desc_read+0x1b8/0x3f0 [ 80.046109][ T5321] ? __pfx_bch2_check_dirents+0x10/0x10 [ 80.048300][ T5321] ? __pfx__prb_read_valid+0x10/0x10 [ 80.050529][ T5321] ? __console_unlock+0x14c/0x1a0 [ 80.052636][ T5321] ? __pfx___console_unlock+0x10/0x10 [ 80.054865][ T5321] ? prb_read_valid+0x3c/0x60 [ 80.056774][ T5321] ? console_unlock+0x21b/0x270 [ 80.058667][ T5321] ? __pfx_console_unlock+0x10/0x10 [ 80.060842][ T5321] ? irq_work_queue+0xc3/0x140 [ 80.062980][ T5321] ? __pfx_vprintk_emit+0x10/0x10 [ 80.065123][ T5321] ? bch2_check_dirents+0x25d/0x2460 [ 80.067427][ T5321] bch2_run_recovery_pass+0xdf/0x1d0 [ 80.069263][ T5321] bch2_run_recovery_passes+0x2a0/0xdb0 [ 80.071377][ T5321] bch2_fs_recovery+0x26c8/0x37b0 [ 80.073614][ T5321] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 80.075956][ T5321] ? __lock_acquire+0xaac/0xd20 [ 80.078072][ T5321] ? percpu_ref_put+0x1e/0x230 [ 80.080496][ T5321] ? bch2_get_next_online_dev+0x2d/0x4d0 [ 80.083123][ T5321] ? bch2_fs_start+0x65b/0xae0 [ 80.085026][ T5321] ? up_write+0x1c4/0x420 [ 80.086812][ T5321] bch2_fs_start+0x70b/0xae0 [ 80.088693][ T5321] ? __pfx_bch2_fs_start+0x10/0x10 [ 80.090840][ T5321] ? percpu_ref_put+0x1e/0x230 [ 80.092884][ T5321] ? percpu_ref_put+0x1e/0x230 [ 80.094658][ T5321] ? percpu_ref_put+0x188/0x230 [ 80.096499][ T5321] bch2_fs_get_tree+0xd99/0x1340 [ 80.098592][ T5321] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 80.100726][ T5321] ? aa_get_newest_label+0xf7/0x5d0 [ 80.102954][ T5321] ? vfs_parse_monolithic_sep+0x2e3/0x310 [ 80.105260][ T5321] ? apparmor_capable+0x137/0x1b0 [ 80.107288][ T5321] vfs_get_tree+0x8f/0x2b0 [ 80.109026][ T5321] do_new_mount+0x24a/0xa40 [ 80.110855][ T5321] __se_sys_mount+0x317/0x410 [ 80.112850][ T5321] ? __pfx___se_sys_mount+0x10/0x10 [ 80.114879][ T5321] ? do_syscall_64+0xba/0x210 [ 80.116586][ T5321] ? __x64_sys_mount+0x20/0xc0 [ 80.118340][ T5321] do_syscall_64+0xf6/0x210 [ 80.119984][ T5321] ? clear_bhb_loop+0x45/0xa0 [ 80.121745][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.123842][ T5321] RIP: 0033:0x7fcc4019010a [ 80.125505][ T5321] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.132954][ T5321] RSP: 002b:00007fcc41006e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.136297][ T5321] RAX: ffffffffffffffda RBX: 00007fcc41006ef0 RCX: 00007fcc4019010a [ 80.139392][ T5321] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007fcc41006eb0 [ 80.142723][ T5321] RBP: 0000200000000000 R08: 00007fcc41006ef0 R09: 0000000001000001 [ 80.146172][ T5321] R10: 0000000001000001 R11: 0000000000000246 R12: 0000200000000040 [ 80.149461][ T5321] R13: 00007fcc41006eb0 R14: 0000000000005968 R15: 0000200000000300 [ 80.152732][ T5321] [ 80.154307][ T5321] Kernel Offset: disabled [ 80.156052][ T5321] Rebooting in 86400 seconds..