program: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x10) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000004}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000002c0)={0x3f}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000871006001c001a8018000480140009800800020000000000080001"], 0x3c}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}, 0x45c) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x7e) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r3, &(0x7f0000000000)='1\x00', 0x2) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000005900)='./file0\x00', 0x1000044, &(0x7f0000000500)=ANY=[@ANYBLOB='reconstruct_alloc,smackfshat=*,fsmagic=0x0000000000010001,fowner>', @ANYRESDEC=0x0, @ANYBLOB='\x00'/13, @ANYRESDEC=0x0, @ANYBLOB=',subj_user=euid,obj_role=/%],uid=', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f6d6561737572652c736d61636b66736465663d2f280f297d2c2c00"], 0x5, 0x59d0, &(0x7f000000b300)="$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") connect(r0, &(0x7f0000000600)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80) [ 69.457326][ T5311] Bluetooth: hci0: command tx timeout [ 69.529682][ T5326] netfs: Duplicate cookie detected [ 69.531797][ T5326] netfs: O-cookie c=00000002 [fl=4008 na=0 nA=0 s=-] [ 69.534298][ T5326] netfs: O-cookie V=00000001 [9p,syz,] [ 69.536940][ T5326] netfs: O-key=[8] '82013e0100000000' [ 69.539210][ T5326] netfs: N-cookie c=00000003 [fl=8 na=0 nA=0 s=-] [ 69.541782][ T5326] netfs: N-cookie V=00000001 [9p,syz,] [ 69.543897][ T5326] netfs: N-key=[8] '82013e0100000000' [ 69.554995][ T5326] Zero length message leads to an empty skb [ 69.560238][ T5326] Bluetooth: MGMT ver 1.23 [ 69.804930][ T5326] loop0: detected capacity change from 0 to 32768 [ 69.808478][ T5326] ======================================================= [ 69.808478][ T5326] WARNING: The mand mount option has been deprecated and [ 69.808478][ T5326] and is ignored by this kernel. Remove the mand [ 69.808478][ T5326] option from the mount to silence this warning. [ 69.808478][ T5326] ======================================================= [ 69.834713][ T5326] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 70.111677][ T5326] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,reconstruct_alloc [ 70.119431][ T5326] invalid bkey in superblock btree=deleted_inodes level=1: u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4294901760 len 262144 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 70.119447][ T5326] size != 0: delete?, fixing [ 70.129306][ T5326] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 70.132263][ T5326] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 70.132263][ T5326] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 70.156133][ T5326] bcachefs (loop0): dropping and reconstructing all alloc info [ 70.166764][ T5326] invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 ptr: 0:327680:227 gen 0 cached unwritten invalid ptr: 0:34:0 gen 0 [ 70.166786][ T5326] multiple pointers to same device (0): delete?, fixing [ 70.178879][ T5326] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870912:U32_MAX len 0 ver 0: (unpack error) [ 70.178895][ T5326] invalid fields_start (got 22, min 6 max 13): deleting [ 70.193790][ T5326] bcachefs (loop0): accounting_read... done [ 70.197209][ T5326] bcachefs (loop0): alloc_read... done [ 70.199507][ T5326] bcachefs (loop0): snapshots_read... done [ 70.201822][ T5326] bcachefs (loop0): check_allocations... [ 70.203965][ T5326] btree ptr not marked in member info btree allocated bitmap [ 70.203977][ T5326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 70.218512][ T5326] btree ptr not marked in member info btree allocated bitmap [ 70.218537][ T5326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 70.228363][ T5326] btree ptr not marked in member info btree allocated bitmap [ 70.228382][ T5326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 70.239941][ T5326] btree ptr not marked in member info btree allocated bitmap [ 70.239955][ T5326] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 70.255871][ T5326] done [ 70.260463][ T5326] bcachefs (loop0): going read-write [ 70.263913][ T5326] bcachefs (loop0): journal_replay... done [ 70.318847][ T5326] bcachefs (loop0): check_alloc_info... done [ 70.328156][ T5326] bcachefs (loop0): check_lrus... done [ 70.330824][ T5326] bcachefs (loop0): check_extents_to_backpointers... [ 70.331706][ T5326] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets [ 70.338977][ T5326] done [ 70.343883][ T5326] bcachefs (loop0): check_alloc_to_lru_refs... done [ 70.350690][ T5326] bcachefs (loop0): check_inodes... [ 70.351744][ T5326] inode points to missing dirent [ 70.351766][ T5326] inum: 4097:4294967295 [ 70.351775][ T5326] mode=40700 [ 70.351783][ T5326] flags=(15300000) [ 70.351791][ T5326] journal_seq=1 [ 70.351800][ T5326] hash_seed=a9fcff247692d1ca [ 70.351808][ T5326] hash_type=siphash [ 70.351816][ T5326] bi_size=0 [ 70.351824][ T5326] bi_sectors=0 [ 70.351832][ T5326] bi_version=0 [ 70.351840][ T5326] bi_atime=200535484 [ 70.351848][ T5326] bi_ctime=200535484 [ 70.351856][ T5326] bi_mtime=200535484 [ 70.351864][ T5326] bi_otime=200535484 [ 70.351869][ T5326] bi_uid=0 [ 70.351874][ T5326] bi_gid=0 [ 70.351878][ T5326] bi_nlink=0 [ 70.351885][ T5326] bi_generation=0 [ 70.351890][ T5326] bi_dev=0 [ 70.351895][ T5326] bi_data_checksum=0 [ 70.351900][ T5326] bi_compression=0 [ 70.351905][ T5326] bi_project=0 [ 70.351911][ T5326] bi_background_compression=0 [ 70.351916][ T5326] bi_data_replicas=0 [ 70.351921][ T5326] bi_promote_target=0 [ 70.351927][ T5326] bi_foreground_target=0 [ 70.351932][ T5326] bi_background_target=0 [ 70.351938][ T5326] bi_erasure_code=0 [ 70.351944][ T5326] bi_fields_set=0 [ 70.351949][ T5326] bi_dir=4096 [ 70.351954][ T5326] bi_dir_offset=8130059955150870709 [ 70.351960][ T5326] bi_subvol=0 [ 70.351965][ T5326] bi_parent_subvol=0 [ 70.351970][ T5326] bi_nocow=0 [ 70.351975][ T5326] bi_depth=0 [ 70.351981][ T5326] bi_inodes_32bit=0, fixing [ 70.415811][ T5326] inode points to missing dirent [ 70.415823][ T5326] inum: 4098:4294967295 [ 70.415829][ T5326] mode=40755 [ 70.415834][ T5326] flags=(15300000) [ 70.415839][ T5326] journal_seq=4 [ 70.415844][ T5326] hash_seed=ece93825deac2443 [ 70.415848][ T5326] hash_type=siphash [ 70.415853][ T5326] bi_size=0 [ 70.415859][ T5326] bi_sectors=0 [ 70.415864][ T5326] bi_version=0 [ 70.415869][ T5326] bi_atime=2770562249 [ 70.415875][ T5326] bi_ctime=2780562352 [ 70.415880][ T5326] bi_mtime=2780562352 [ 70.415886][ T5326] bi_otime=2770562249 [ 70.415891][ T5326] bi_uid=0 [ 70.415896][ T5326] bi_gid=0 [ 70.415901][ T5326] bi_nlink=0 [ 70.415906][ T5326] bi_generation=0 [ 70.415911][ T5326] bi_dev=0 [ 70.415915][ T5326] bi_data_checksum=0 [ 70.415919][ T5326] bi_compression=0 [ 70.415924][ T5326] bi_project=0 [ 70.415928][ T5326] bi_background_compression=0 [ 70.415933][ T5326] bi_data_replicas=0 [ 70.415938][ T5326] bi_promote_target=0 [ 70.415943][ T5326] bi_foreground_target=0 [ 70.415947][ T5326] bi_background_target=0 [ 70.415951][ T5326] bi_erasure_code=0 [ 70.415958][ T5326] bi_fields_set=0 [ 70.415963][ T5326] bi_dir=4096 [ 70.415967][ T5326] bi_dir_offset=189491840996961599 [ 70.415973][ T5326] bi_subvol=0 [ 70.415978][ T5326] bi_parent_subvol=0 [ 70.415983][ T5326] bi_nocow=0 [ 70.415988][ T5326] bi_depth=0 [ 70.415993][ T5326] bi_inodes_32bit=0, fixing [ 70.473288][ T5326] inode points to missing dirent [ 70.473301][ T5326] inum: 4099:4294967295 [ 70.473307][ T5326] mode=100755 [ 70.473312][ T5326] flags=(15300000) [ 70.473317][ T5326] journal_seq=5 [ 70.473322][ T5326] hash_seed=fc917866faeb7b5b [ 70.473328][ T5326] hash_type=siphash [ 70.473333][ T5326] bi_size=1050 [ 70.473337][ T5326] bi_sectors=8 [ 70.473342][ T5326] bi_version=0 [ 70.473347][ T5326] bi_atime=2770562249 [ 70.473353][ T5326] bi_ctime=2770562249 [ 70.473358][ T5326] bi_mtime=2770562249 [ 70.473363][ T5326] bi_otime=2770562249 [ 70.473368][ T5326] bi_uid=0 [ 70.473373][ T5326] bi_gid=0 [ 70.473378][ T5326] bi_nlink=0 [ 70.473383][ T5326] bi_generation=0 [ 70.473388][ T5326] bi_dev=0 [ 70.473393][ T5326] bi_data_checksum=0 [ 70.473398][ T5326] bi_compression=0 [ 70.473403][ T5326] bi_project=0 [ 70.473408][ T5326] bi_background_compression=0 [ 70.473414][ T5326] bi_data_replicas=0 [ 70.473418][ T5326] bi_promote_target=0 [ 70.473423][ T5326] bi_foreground_target=0 [ 70.473428][ T5326] bi_background_target=0 [ 70.473434][ T5326] bi_erasure_code=0 [ 70.473439][ T5326] bi_fields_set=0 [ 70.473444][ T5326] bi_dir=4098 [ 70.473449][ T5326] bi_dir_offset=8977922886548783724 [ 70.473454][ T5326] bi_subvol=0 [ 70.473459][ T5326] bi_parent_subvol=0 [ 70.473464][ T5326] bi_nocow=0 [ 70.473469][ T5326] bi_depth=0 [ 70.473474][ T5326] bi_inodes_32bit=0, fixing [ 70.530834][ T5326] inode points to missing dirent [ 70.530847][ T5326] inum: 4100:4294967295 [ 70.530852][ T5326] mode=120777 [ 70.530856][ T5326] flags=(15300000) [ 70.530861][ T5326] journal_seq=4 [ 70.530866][ T5326] hash_seed=f4891abdd5c0cd85 [ 70.530871][ T5326] hash_type=siphash [ 70.530877][ T5326] bi_size=38 [ 70.530882][ T5326] bi_sectors=8 [ 70.530887][ T5326] bi_version=0 [ 70.530891][ T5326] bi_atime=2770562249 [ 70.530896][ T5326] bi_ctime=2780562352 [ 70.530901][ T5326] bi_mtime=2770562249 [ 70.530906][ T5326] bi_otime=2770562249 [ 70.530911][ T5326] bi_uid=0 [ 70.530916][ T5326] bi_gid=0 [ 70.530921][ T5326] bi_nlink=0 [ 70.530925][ T5326] bi_generation=0 [ 70.530930][ T5326] bi_dev=0 [ 70.530935][ T5326] bi_data_checksum=0 [ 70.530940][ T5326] bi_compression=0 [ 70.530945][ T5326] bi_project=0 [ 70.530950][ T5326] bi_background_compression=0 [ 70.530956][ T5326] bi_data_replicas=0 [ 70.530961][ T5326] bi_promote_target=0 [ 70.530966][ T5326] bi_foreground_target=0 [ 70.530971][ T5326] bi_background_target=0 [ 70.530976][ T5326] bi_erasure_code=0 [ 70.530982][ T5326] bi_fields_set=0 [ 70.530987][ T5326] bi_dir=4098 [ 70.530992][ T5326] bi_dir_offset=5675548428000973578 [ 70.530997][ T5326] bi_subvol=0 [ 70.531002][ T5326] bi_parent_subvol=0 [ 70.531008][ T5326] bi_nocow=0 [ 70.531013][ T5326] bi_depth=0 [ 70.531019][ T5326] bi_inodes_32bit=0, fixing [ 70.587151][ T5326] inode points to missing dirent [ 70.587162][ T5326] inum: 536870913:4294967295 [ 70.587167][ T5326] mode=100755 [ 70.587172][ T5326] flags=(15300000) [ 70.587177][ T5326] journal_seq=5 [ 70.587182][ T5326] hash_seed=b68791a594a6d5ae [ 70.587188][ T5326] hash_type=siphash [ 70.587193][ T5326] bi_size=9000 [ 70.587198][ T5326] bi_sectors=24 [ 70.587203][ T5326] bi_version=0 [ 70.587208][ T5326] bi_atime=2780562352 [ 70.587213][ T5326] bi_ctime=2780562352 [ 70.587218][ T5326] bi_mtime=2780562352 [ 70.587223][ T5326] bi_otime=2780562352 [ 70.587229][ T5326] bi_uid=0 [ 70.587233][ T5326] bi_gid=0 [ 70.587238][ T5326] bi_nlink=1 [ 70.587242][ T5326] bi_generation=0 [ 70.587247][ T5326] bi_dev=0 [ 70.587253][ T5326] bi_data_checksum=0 [ 70.587258][ T5326] bi_compression=0 [ 70.587263][ T5326] bi_project=0 [ 70.587268][ T5326] bi_background_compression=0 [ 70.587274][ T5326] bi_data_replicas=0 [ 70.587278][ T5326] bi_promote_target=0 [ 70.587284][ T5326] bi_foreground_target=0 [ 70.587289][ T5326] bi_background_target=0 [ 70.587295][ T5326] bi_erasure_code=0 [ 70.587300][ T5326] bi_fields_set=0 [ 70.587305][ T5326] bi_dir=4096 [ 70.587309][ T5326] bi_dir_offset=1896155912177158345 [ 70.587315][ T5326] bi_subvol=0 [ 70.587320][ T5326] bi_parent_subvol=0 [ 70.587325][ T5326] bi_nocow=0 [ 70.587330][ T5326] bi_depth=0 [ 70.587335][ T5326] bi_inodes_32bit=0, fixing [ 70.644730][ T5326] inode points to missing dirent [ 70.644742][ T5326] inum: 536870914:4294967295 [ 70.644748][ T5326] mode=100755 [ 70.644752][ T5326] flags=(15300000) [ 70.644757][ T5326] journal_seq=4 [ 70.644762][ T5326] hash_seed=d483206f1ed95abf [ 70.644767][ T5326] hash_type=siphash [ 70.644772][ T5326] bi_size=100 [ 70.644777][ T5326] bi_sectors=8 [ 70.644781][ T5326] bi_version=0 [ 70.644786][ T5326] bi_atime=2780562352 [ 70.644791][ T5326] bi_ctime=2780562352 [ 70.644796][ T5326] bi_mtime=2780562352 [ 70.644801][ T5326] bi_otime=2780562352 [ 70.644806][ T5326] bi_uid=0 [ 70.644811][ T5326] bi_gid=0 [ 70.644816][ T5326] bi_nlink=0 [ 70.644820][ T5326] bi_generation=0 [ 70.644824][ T5326] bi_dev=0 [ 70.644829][ T5326] bi_data_checksum=0 [ 70.644833][ T5326] bi_compression=0 [ 70.644838][ T5326] bi_project=0 [ 70.644843][ T5326] bi_background_compression=0 [ 70.644849][ T5326] bi_data_replicas=0 [ 70.644854][ T5326] bi_promote_target=0 [ 70.644859][ T5326] bi_foreground_target=0 [ 70.644865][ T5326] bi_background_target=0 [ 70.644869][ T5326] bi_erasure_code=0 [ 70.644874][ T5326] bi_fields_set=0 [ 70.644878][ T5326] bi_dir=4096 [ 70.644883][ T5326] bi_dir_offset=9097378837824744618 [ 70.644889][ T5326] bi_subvol=0 [ 70.644894][ T5326] bi_parent_subvol=0 [ 70.644899][ T5326] bi_nocow=0 [ 70.644904][ T5326] bi_depth=0 [ 70.644908][ T5326] bi_inodes_32bit=0, fixing [ 70.703225][ T5326] done [ 70.725360][ T5326] bcachefs (loop0): resume_logged_ops... done [ 70.729617][ T5326] bcachefs (loop0): delete_dead_inodes... done [ 70.764370][ T5326] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 70.768554][ T5326] bcachefs (loop0): check_alloc_info... done [ 70.773680][ T5326] bcachefs (loop0): check_lrus... done [ 70.776023][ T5326] bcachefs (loop0): check_extents_to_backpointers... done [ 70.779995][ T5326] bcachefs (loop0): check_alloc_to_lru_refs... done [ 70.783400][ T5326] bcachefs (loop0): check_inodes... done [ 70.785990][ T5326] bcachefs (loop0): resume_logged_ops... done [ 70.789109][ T5326] bcachefs (loop0): delete_dead_inodes... done [ 70.794134][ T5326] bcachefs (loop0): done starting filesystem [ 70.799340][ T5326] bcachefs (loop0): shutting down [ 70.801425][ T5326] bcachefs (loop0): going read-only [ 70.803660][ T5326] bcachefs (loop0): finished waiting for writes to stop [ 70.810317][ T5326] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 70.818172][ T5326] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 70.822794][ T5326] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 70.825992][ T5326] bcachefs (loop0): marking filesystem clean [ 70.849189][ T5326] bcachefs (loop0): shutdown complete [ 70.861176][ T74] ================================================================== [ 70.864280][ T74] BUG: KASAN: slab-use-after-free in percpu_ref_put+0xda/0x250 [ 70.867141][ T74] Read of size 8 at addr ffff888042a280b0 by task kworker/u4:4/74 [ 70.870119][ T74] [ 70.871074][ T74] CPU: 0 UID: 0 PID: 74 Comm: kworker/u4:4 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 70.871087][ T74] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.871095][ T74] Workqueue: loop0 loop_workfn [ 70.871111][ T74] Call Trace: [ 70.871117][ T74] [ 70.871123][ T74] dump_stack_lvl+0x241/0x360 [ 70.871140][ T74] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.871153][ T74] ? __virt_addr_valid+0x183/0x530 [ 70.871165][ T74] ? rcu_is_watching+0x15/0xb0 [ 70.871177][ T74] ? __virt_addr_valid+0x183/0x530 [ 70.871188][ T74] ? lock_release+0x4e/0x3e0 [ 70.871199][ T74] ? __virt_addr_valid+0x183/0x530 [ 70.871211][ T74] ? __virt_addr_valid+0x183/0x530 [ 70.871223][ T74] print_report+0x16e/0x5b0 [ 70.871233][ T74] ? __virt_addr_valid+0x183/0x530 [ 70.871245][ T74] ? __virt_addr_valid+0x183/0x530 [ 70.871256][ T74] ? __virt_addr_valid+0x45f/0x530 [ 70.871267][ T74] ? __phys_addr+0xba/0x170 [ 70.871280][ T74] ? percpu_ref_put+0xda/0x250 [ 70.871293][ T74] kasan_report+0x143/0x180 [ 70.871305][ T74] ? percpu_ref_put+0xda/0x250 [ 70.871319][ T74] ? percpu_ref_put+0x1f/0x250 [ 70.871330][ T74] percpu_ref_put+0xda/0x250 [ 70.871343][ T74] blk_update_request+0x5e5/0x1160 [ 70.871357][ T74] blk_mq_end_request+0x3e/0x70 [ 70.871366][ T74] loop_process_work+0x1bdf/0x21d0 [ 70.871377][ T74] ? btree_interior_update_work+0x28ba/0x2990 [ 70.871395][ T74] ? __pfx_loop_process_work+0x10/0x10 [ 70.871405][ T74] ? __lock_acquire+0xad5/0xd80 [ 70.871415][ T74] ? btree_interior_update_work+0x28ba/0x2990 [ 70.871429][ T74] ? do_raw_spin_lock+0x151/0x370 [ 70.871444][ T74] ? do_raw_spin_unlock+0x58/0x8b0 [ 70.871462][ T74] ? look_up_lock_class+0x7b/0x170 [ 70.871522][ T74] ? register_lock_class+0x54/0x330 [ 70.871533][ T74] ? __lock_acquire+0xad5/0xd80 [ 70.871547][ T74] ? process_scheduled_works+0x9cb/0x18e0 [ 70.871558][ T74] process_scheduled_works+0xac3/0x18e0 [ 70.871575][ T74] ? __pfx_process_scheduled_works+0x10/0x10 [ 70.871587][ T74] ? assign_work+0x367/0x3d0 [ 70.871598][ T74] worker_thread+0x870/0xd50 [ 70.871612][ T74] ? __kthread_parkme+0x1a8/0x200 [ 70.871624][ T74] ? __pfx_worker_thread+0x10/0x10 [ 70.871634][ T74] kthread+0x7b7/0x940 [ 70.871647][ T74] ? __pfx_worker_thread+0x10/0x10 [ 70.871657][ T74] ? __pfx_kthread+0x10/0x10 [ 70.871669][ T74] ? __pfx_kthread+0x10/0x10 [ 70.871681][ T74] ? __pfx_kthread+0x10/0x10 [ 70.871695][ T74] ? __pfx_kthread+0x10/0x10 [ 70.871709][ T74] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.871722][ T74] ? lockdep_hardirqs_on+0x9d/0x150 [ 70.871734][ T74] ? __pfx_kthread+0x10/0x10 [ 70.871746][ T74] ret_from_fork+0x4b/0x80 [ 70.871756][ T74] ? __pfx_kthread+0x10/0x10 [ 70.871768][ T74] ret_from_fork_asm+0x1a/0x30 [ 70.871781][ T74] [ 70.871784][ T74] [ 70.983078][ T74] Allocated by task 5326: [ 70.984596][ T74] kasan_save_track+0x3f/0x80 [ 70.986335][ T74] __kasan_kmalloc+0x9d/0xb0 [ 70.988263][ T74] __kmalloc_cache_noprof+0x236/0x370 [ 70.990329][ T74] __bch2_dev_alloc+0x57/0xa60 [ 70.992274][ T74] bch2_dev_alloc+0xd6/0x180 [ 70.994136][ T74] bch2_fs_open+0x315f/0x32a0 [ 70.995940][ T74] bch2_fs_get_tree+0x77b/0x18d0 [ 70.997844][ T74] vfs_get_tree+0x90/0x2b0 [ 70.999954][ T74] do_new_mount+0x2cf/0xb70 [ 71.002261][ T74] __se_sys_mount+0x38c/0x400 [ 71.004251][ T74] do_syscall_64+0xf3/0x230 [ 71.005805][ T74] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.008032][ T74] [ 71.008954][ T74] Freed by task 5326: [ 71.010547][ T74] kasan_save_track+0x3f/0x80 [ 71.012469][ T74] kasan_save_free_info+0x40/0x50 [ 71.014305][ T74] __kasan_slab_free+0x59/0x70 [ 71.016096][ T74] kfree+0x198/0x430 [ 71.017926][ T74] kobject_put+0x22f/0x480 [ 71.020106][ T74] bch2_fs_free+0x27b/0x3c0 [ 71.022307][ T74] deactivate_locked_super+0xc4/0x130 [ 71.024961][ T74] cleanup_mnt+0x422/0x4c0 [ 71.027138][ T74] task_work_run+0x251/0x310 [ 71.029483][ T74] syscall_exit_to_user_mode+0x13f/0x340 [ 71.032131][ T74] do_syscall_64+0x100/0x230 [ 71.034403][ T74] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.037576][ T74] [ 71.038778][ T74] Last potentially related work creation: [ 71.041399][ T74] kasan_save_stack+0x3f/0x60 [ 71.043368][ T74] kasan_record_aux_stack+0xbf/0xd0 [ 71.045655][ T74] insert_work+0x3e/0x330 [ 71.047659][ T74] __queue_work+0xda3/0x10a0 [ 71.049566][ T74] queue_work_on+0x1c4/0x380 [ 71.051444][ T74] bch2_dev_do_invalidates+0x17a/0x1f0 [ 71.053546][ T74] bch2_do_invalidates+0x29/0x60 [ 71.055839][ T74] __bch2_fs_read_write+0x386/0x3b0 [ 71.057899][ T74] bch2_run_recovery_pass+0xf0/0x1e0 [ 71.060291][ T74] bch2_run_recovery_passes+0x2ad/0xa90 [ 71.063121][ T74] bch2_fs_recovery+0x292a/0x3e20 [ 71.065101][ T74] bch2_fs_start+0x37c/0x620 [ 71.066864][ T74] bch2_fs_get_tree+0x1270/0x18d0 [ 71.068956][ T74] vfs_get_tree+0x90/0x2b0 [ 71.070807][ T74] do_new_mount+0x2cf/0xb70 [ 71.072593][ T74] __se_sys_mount+0x38c/0x400 [ 71.074463][ T74] do_syscall_64+0xf3/0x230 [ 71.076203][ T74] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.078779][ T74] [ 71.079699][ T74] Second to last potentially related work creation: [ 71.082145][ T74] kasan_save_stack+0x3f/0x60 [ 71.083951][ T74] kasan_record_aux_stack+0xbf/0xd0 [ 71.085787][ T74] insert_work+0x3e/0x330 [ 71.087875][ T74] __queue_work+0xda3/0x10a0 [ 71.089634][ T74] queue_work_on+0x1c4/0x380 [ 71.091495][ T74] bch2_dev_do_discards+0x17a/0x1f0 [ 71.093503][ T74] bch2_do_discards+0x29/0x60 [ 71.095349][ T74] __bch2_fs_read_write+0x37e/0x3b0 [ 71.097602][ T74] bch2_run_recovery_pass+0xf0/0x1e0 [ 71.099747][ T74] bch2_run_recovery_passes+0x2ad/0xa90 [ 71.101972][ T74] bch2_fs_recovery+0x292a/0x3e20 [ 71.103814][ T74] bch2_fs_start+0x37c/0x620 [ 71.105507][ T74] bch2_fs_get_tree+0x1270/0x18d0 [ 71.107351][ T74] vfs_get_tree+0x90/0x2b0 [ 71.109173][ T74] do_new_mount+0x2cf/0xb70 [ 71.111030][ T74] __se_sys_mount+0x38c/0x400 [ 71.112837][ T74] do_syscall_64+0xf3/0x230 [ 71.114682][ T74] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.117053][ T74] [ 71.118012][ T74] The buggy address belongs to the object at ffff888042a28000 [ 71.118012][ T74] which belongs to the cache kmalloc-4k of size 4096 [ 71.123067][ T74] The buggy address is located 176 bytes inside of [ 71.123067][ T74] freed 4096-byte region [ffff888042a28000, ffff888042a29000) [ 71.128406][ T74] [ 71.129419][ T74] The buggy address belongs to the physical page: [ 71.131909][ T74] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42a28 [ 71.135297][ T74] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 71.138694][ T74] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 71.141832][ T74] page_type: f5(slab) [ 71.143382][ T74] raw: 04fff00000000040 ffff88801b042140 ffffea0001103c00 dead000000000002 [ 71.146622][ T74] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 71.149839][ T74] head: 04fff00000000040 ffff88801b042140 ffffea0001103c00 dead000000000002 [ 71.152832][ T74] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 71.156126][ T74] head: 04fff00000000003 ffffea00010a8a01 ffffffffffffffff 0000000000000000 [ 71.159297][ T74] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 71.163140][ T74] page dumped because: kasan: bad access detected [ 71.165433][ T74] page_owner tracks the page as allocated [ 71.167601][ T74] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4743, tgid 4743 (udevd), ts 36352200925, free_ts 36264902846 [ 71.175014][ T74] post_alloc_hook+0x1f4/0x240 [ 71.176927][ T74] get_page_from_freelist+0x3ac1/0x3c60 [ 71.179149][ T74] __alloc_frozen_pages_noprof+0x266/0x580 [ 71.181471][ T74] alloc_pages_mpol+0x339/0x690 [ 71.183386][ T74] allocate_slab+0x8f/0x3a0 [ 71.185093][ T74] ___slab_alloc+0xc3b/0x1500 [ 71.186631][ T74] __slab_alloc+0x58/0xa0 [ 71.188263][ T74] __kmalloc_noprof+0x2ea/0x4d0 [ 71.190109][ T74] tomoyo_realpath_from_path+0xcf/0x5e0 [ 71.192276][ T74] tomoyo_check_open_permission+0x25a/0x4f0 [ 71.194691][ T74] security_file_open+0xac/0x250 [ 71.196642][ T74] do_dentry_open+0x320/0x1960 [ 71.198783][ T74] vfs_open+0x3b/0x370 [ 71.200347][ T74] path_openat+0x2caf/0x35d0 [ 71.202293][ T74] do_filp_open+0x284/0x4e0 [ 71.204196][ T74] do_sys_openat2+0x12b/0x1d0 [ 71.206022][ T74] page last free pid 4738 tgid 4738 stack trace: [ 71.208438][ T74] __free_frozen_pages+0xd85/0x1030 [ 71.210459][ T74] __put_partials+0x160/0x1c0 [ 71.212204][ T74] put_cpu_partial+0x17e/0x250 [ 71.214087][ T74] __slab_free+0x294/0x390 [ 71.215956][ T74] qlist_free_all+0x9a/0x140 [ 71.217895][ T74] kasan_quarantine_reduce+0x14f/0x170 [ 71.220000][ T74] __kasan_slab_alloc+0x23/0x80 [ 71.221991][ T74] kmem_cache_alloc_noprof+0x1e1/0x390 [ 71.224137][ T74] getname_flags+0xb6/0x530 [ 71.226057][ T74] do_readlinkat+0xd7/0x380 [ 71.227870][ T74] __x64_sys_readlink+0x7f/0x90 [ 71.229897][ T74] do_syscall_64+0xf3/0x230 [ 71.231673][ T74] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.234017][ T74] [ 71.234987][ T74] Memory state around the buggy address: [ 71.237130][ T74] ffff888042a27f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.240164][ T74] ffff888042a28000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.243325][ T74] >ffff888042a28080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.246273][ T74] ^ [ 71.248454][ T74] ffff888042a28100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.251512][ T74] ffff888042a28180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.254642][ T74] ================================================================== [ 71.292706][ T74] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.295539][ T74] CPU: 0 UID: 0 PID: 74 Comm: kworker/u4:4 Not tainted 6.14.0-syzkaller-10892-g4e82c87058f4 #0 PREEMPT(full) [ 71.300217][ T74] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.304263][ T74] Workqueue: loop0 loop_workfn [ 71.306118][ T74] Call Trace: [ 71.307534][ T74] [ 71.308693][ T74] dump_stack_lvl+0x241/0x360 [ 71.310538][ T74] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.312519][ T74] ? __pfx__printk+0x10/0x10 [ 71.314377][ T74] ? vscnprintf+0x5d/0x90 [ 71.316050][ T74] panic+0x349/0x880 [ 71.317636][ T74] ? check_panic_on_warn+0x21/0xb0 [ 71.319588][ T74] ? __pfx_panic+0x10/0x10 [ 71.321395][ T74] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 71.323708][ T74] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 71.326134][ T74] ? print_report+0x519/0x5b0 [ 71.327925][ T74] check_panic_on_warn+0x86/0xb0 [ 71.329882][ T74] ? percpu_ref_put+0xda/0x250 [ 71.331808][ T74] end_report+0x77/0x160 [ 71.333466][ T74] kasan_report+0x154/0x180 [ 71.335301][ T74] ? percpu_ref_put+0xda/0x250 [ 71.337229][ T74] ? percpu_ref_put+0x1f/0x250 [ 71.339090][ T74] percpu_ref_put+0xda/0x250 [ 71.340874][ T74] blk_update_request+0x5e5/0x1160 [ 71.342740][ T74] blk_mq_end_request+0x3e/0x70 [ 71.344608][ T74] loop_process_work+0x1bdf/0x21d0 [ 71.346652][ T74] ? btree_interior_update_work+0x28ba/0x2990 [ 71.349065][ T74] ? __pfx_loop_process_work+0x10/0x10 [ 71.351187][ T74] ? __lock_acquire+0xad5/0xd80 [ 71.353024][ T74] ? btree_interior_update_work+0x28ba/0x2990 [ 71.355277][ T74] ? do_raw_spin_lock+0x151/0x370 [ 71.357258][ T74] ? do_raw_spin_unlock+0x58/0x8b0 [ 71.359274][ T74] ? look_up_lock_class+0x7b/0x170 [ 71.361320][ T74] ? register_lock_class+0x54/0x330 [ 71.363361][ T74] ? __lock_acquire+0xad5/0xd80 [ 71.365229][ T74] ? process_scheduled_works+0x9cb/0x18e0 [ 71.367787][ T74] process_scheduled_works+0xac3/0x18e0 [ 71.369952][ T74] ? __pfx_process_scheduled_works+0x10/0x10 [ 71.372244][ T74] ? assign_work+0x367/0x3d0 [ 71.374108][ T74] worker_thread+0x870/0xd50 [ 71.376102][ T74] ? __kthread_parkme+0x1a8/0x200 [ 71.378048][ T74] ? __pfx_worker_thread+0x10/0x10 [ 71.379956][ T74] kthread+0x7b7/0x940 [ 71.381549][ T74] ? __pfx_worker_thread+0x10/0x10 [ 71.383487][ T74] ? __pfx_kthread+0x10/0x10 [ 71.385284][ T74] ? __pfx_kthread+0x10/0x10 [ 71.387088][ T74] ? __pfx_kthread+0x10/0x10 [ 71.389052][ T74] ? __pfx_kthread+0x10/0x10 [ 71.390842][ T74] ? _raw_spin_unlock_irq+0x23/0x50 [ 71.392850][ T74] ? lockdep_hardirqs_on+0x9d/0x150 [ 71.394976][ T74] ? __pfx_kthread+0x10/0x10 [ 71.396773][ T74] ret_from_fork+0x4b/0x80 [ 71.398627][ T74] ? __pfx_kthread+0x10/0x10 [ 71.400474][ T74] ret_from_fork_asm+0x1a/0x30 [ 71.402258][ T74] [ 71.403884][ T74] Kernel Offset: disabled [ 71.405549][ T74] Rebooting in 86400 seconds..