program: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x8}, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="050000000e80006558", 0x2c}], 0x2) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000000)='./file0\x00', 0x810040, &(0x7f0000000240)={[{@ratelimit_errors}, {@grpquota}, {@direct_io}, {@background_compression={'background_compression', 0x3d, 'none'}}, {@inline_data}, {@no_splitbrain_check}, {@no_data_io}, {@errors_continue}, {@nocow_enabled}], [{@hash}]}, 0x1, 0x58dd, &(0x7f0000005900)="$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") syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB='session=00000000000000002047,noadinicb,uid=forget,anchor=00000000000000000145,iocharset=cp949,dmode=00000000000000000000001,undelete,partition=00000000000000000001,unhide,mode=00000000000004000000006,gid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6f6e746578743d757365725f752c61707072616973652c65756958bd318354c3eaa5bdc89ce65e820e1a4404927532b5244637e7789b09c21c3b4aa9cd89a1", @ANYRESDEC=0x0, @ANYBLOB=',pcr=00000000000000000045,dont_measure,uid=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") (async) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB='session=00000000000000002047,noadinicb,uid=forget,anchor=00000000000000000145,iocharset=cp949,dmode=00000000000000000000001,undelete,partition=00000000000000000001,unhide,mode=00000000000004000000006,gid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6f6e746578743d757365725f752c61707072616973652c65756958bd318354c3eaa5bdc89ce65e820e1a4404927532b5244637e7789b09c21c3b4aa9cd89a1", @ANYRESDEC=0x0, @ANYBLOB=',pcr=00000000000000000045,dont_measure,uid=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") [ 69.908708][ T5302] Bluetooth: hci0: command tx timeout [ 70.027403][ T5319] syz.0.0 uses obsolete (PF_INET,SOCK_PACKET) [ 70.553438][ T5318] loop0: detected capacity change from 0 to 32768 [ 70.567757][ T5318] ======================================================= [ 70.567757][ T5318] WARNING: The mand mount option has been deprecated and [ 70.567757][ T5318] and is ignored by this kernel. Remove the mand [ 70.567757][ T5318] option from the mount to silence this warning. [ 70.567757][ T5318] ======================================================= [ 71.326217][ T5318] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,grpquota,no_splitbrain_check,nojournal_transaction_names,no_data_io [ 71.379774][ T5318] invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad size, fixing [ 71.409231][ T5318] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 71.413081][ T5318] bcachefs (loop0): Version upgrade required: [ 71.413081][ T5318] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 71.413081][ T5318] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 71.413081][ T5318] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 71.532265][ T5318] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 71.532287][ T5318] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 71.532293][ T5318] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 71.592299][ T5318] invalid bkey u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 71.592314][ T5318] gen 0 oldest_gen 0 data_type btree [ 71.592321][ T5318] journal_seq 6 [ 71.592327][ T5318] need_discard 1 [ 71.592333][ T5318] need_inc_gen 1 [ 71.592338][ T5318] dirty_sectors 0 [ 71.592344][ T5318] stripe_sectors 0 [ 71.592349][ T5318] cached_sectors 0 [ 71.592355][ T5318] stripe 0 [ 71.592360][ T5318] stripe_redundancy 0 [ 71.592367][ T5318] io_time[READ] 1 [ 71.592373][ T5318] io_time[WRITE] 768 [ 71.592379][ T5318] fragmentation 0 [ 71.592385][ T5318] bp_start 8 [ 71.592390][ T5318] [ 71.592396][ T5318] invalid data type (got 3 should be 9): delete?, fixing [ 71.677617][ T5318] bcachefs (loop0): btree_node_read_work: rewriting btree node at btree=alloc level=0 SPOS_MAX due to error [ 71.706634][ T5318] bcachefs (loop0): error validating btree node on loop0 at btree snapshots level 0/0 [ 71.706659][ T5318] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 71.706668][ T5318] node offset 0/16 bset u64s 0: incorrect btree id [ 71.737176][ T5318] bcachefs (loop0): flagging btree snapshots lost data [ 71.761447][ T5318] error reading btree root snapshots l=0: btree_node_read_error, fixing [ 71.764283][ T5318] bcachefs (loop0): will run btree node scan [ 71.796933][ T5318] bcachefs (loop0): scan_for_btree_nodes... [ 71.824045][ T5318] bch2_scan_for_btree_nodes: nodes found after overwrites: [ 71.824069][ T5318] extents l=0 seq=1 journal_seq=5 cookie=c6c25c03258c59c5 POS_MIN-SPOS_MAX ptr: 0:27:0 gen 0 [ 71.824077][ T5318] inodes l=0 seq=1 journal_seq=5 cookie=7589ab5e0c11cc7a POS_MIN-SPOS_MAX ptr: 0:38:0 gen 0 [ 71.824083][ T5318] dirents l=0 seq=1 journal_seq=4 cookie=9aa2895aefce4bdf POS_MIN-SPOS_MAX ptr: 0:41:0 gen 0 [ 71.824089][ T5318] xattrs l=0 seq=1 journal_seq=4 cookie=2285c34bed0abe32 POS_MIN-SPOS_MAX ptr: 0:31:0 gen 0 [ 71.824096][ T5318] subvolumes l=0 seq=1 journal_seq=1 cookie=c0bef60d07ceb940 POS_MIN-SPOS_MAX ptr: 0:35:0 gen 0 [ 71.824102][ T5318] lru l=0 seq=1 journal_seq=5 cookie=28f61e078e70b95c POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0 [ 71.824109][ T5318] deleted_inodes l=0 seq=1 journal_seq=0 cookie=1db8f60c84bb244c POS_MIN-SPOS_MAX ptr: 0:42:0 gen 0 [ 71.824117][ T5318] [ 71.923322][ T5318] done [ 71.938558][ T5318] bcachefs (loop0): check_topology... [ 71.938635][ T5318] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 71.944250][ T5318] no nodes found for btree snapshots, continuing [ 71.967432][ T5318] done [ 71.969976][ T5302] Bluetooth: hci0: command tx timeout [ 71.977493][ T5318] bcachefs (loop0): accounting_read... done [ 71.998305][ T5318] bcachefs (loop0): alloc_read... done [ 72.000638][ T5318] bcachefs (loop0): stripes_read... done [ 72.002612][ T5318] bcachefs (loop0): snapshots_read... [ 72.020258][ T5318] bcachefs (loop0): running explicit recovery pass reconstruct_snapshots (21), currently at snapshots_read (7) [ 72.027162][ T5318] done [ 72.028217][ T5318] bcachefs (loop0): check_allocations... [ 72.069383][ T5318] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 72.069402][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 72.101475][ T5318] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 72.101487][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 72.132918][ T5318] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 72.132934][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 72.170850][ T5318] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 72.170866][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 72.199460][ T5318] bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 72.199474][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 72.240760][ T5318] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 72.240779][ T5318] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 72.276438][ T5318] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 72.290828][ T5318] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 72.310837][ T5318] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 72.313889][ T5318] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 72.339951][ T5318] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 72.342843][ T5318] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 72.346307][ T5318] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 72.368600][ T5318] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 72.379491][ T5318] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 72.388860][ T5318] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 72.392618][ T5318] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 72.405372][ T5317] ================================================================== [ 72.405382][ T5317] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x340/0x3a0 [ 72.405395][ T5317] Write of size 4064 at addr ffffc9000d4e1020 by task syz.0.0/5317 [ 72.405402][ T5317] [ 72.405406][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 72.405419][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.405426][ T5317] Call Trace: [ 72.405431][ T5317] [ 72.405435][ T5317] dump_stack_lvl+0x241/0x360 [ 72.405497][ T5317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.405513][ T5317] ? __pfx__printk+0x10/0x10 [ 72.405528][ T5317] ? _printk+0xd5/0x120 [ 72.405542][ T5317] print_report+0x169/0x550 [ 72.405556][ T5317] ? __virt_addr_valid+0xbd/0x530 [ 72.405570][ T5317] ? vrealloc_noprof+0x340/0x3a0 [ 72.405578][ T5317] kasan_report+0x143/0x180 [ 72.405586][ T5317] ? vrealloc_noprof+0x340/0x3a0 [ 72.405593][ T5317] kasan_check_range+0x282/0x290 [ 72.405602][ T5317] __asan_memset+0x23/0x50 [ 72.405609][ T5317] vrealloc_noprof+0x340/0x3a0 [ 72.405615][ T5317] push_insn_history+0x16c/0x6a0 [ 72.405631][ T5317] do_check+0x692f/0xfcd0 [ 72.405659][ T5317] ? __pfx_do_check+0x10/0x10 [ 72.405674][ T5317] ? mark_reg_not_init+0xd4/0x4b0 [ 72.405691][ T5317] ? __asan_memcpy+0x40/0x70 [ 72.405730][ T5317] ? mark_reg_not_init+0xd4/0x4b0 [ 72.405748][ T5317] do_check_common+0x1564/0x2010 [ 72.405769][ T5317] bpf_check+0x19380/0x1f1b0 [ 72.405783][ T5317] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 72.405822][ T5317] ? validate_chain+0x11e/0x5920 [ 72.405837][ T5317] ? page_ext_get+0x20/0x2a0 [ 72.405854][ T5317] ? post_alloc_hook+0x206/0x230 [ 72.405872][ T5317] ? __pfx_validate_chain+0x10/0x10 [ 72.405886][ T5317] ? validate_chain+0x11e/0x5920 [ 72.405900][ T5317] ? validate_chain+0x11e/0x5920 [ 72.405911][ T5317] ? mark_lock+0x9a/0x360 [ 72.405923][ T5317] ? __pfx___might_resched+0x10/0x10 [ 72.405942][ T5317] ? validate_chain+0x11e/0x5920 [ 72.405956][ T5317] ? validate_chain+0x11e/0x5920 [ 72.405967][ T5317] ? __pfx_validate_chain+0x10/0x10 [ 72.405982][ T5317] ? validate_chain+0x11e/0x5920 [ 72.405996][ T5317] ? validate_chain+0x11e/0x5920 [ 72.406009][ T5317] ? validate_chain+0x11e/0x5920 [ 72.406023][ T5317] ? __pfx_validate_chain+0x10/0x10 [ 72.406038][ T5317] ? __pfx_validate_chain+0x10/0x10 [ 72.406051][ T5317] ? __pfx_bpf_check+0x10/0x10 [ 72.406065][ T5317] ? __pfx_validate_chain+0x10/0x10 [ 72.406080][ T5317] ? mark_lock+0x9a/0x360 [ 72.406092][ T5317] ? mark_lock+0x9a/0x360 [ 72.406105][ T5317] ? __lock_acquire+0x1397/0x2100 [ 72.406123][ T5317] ? mark_lock+0x9a/0x360 [ 72.406136][ T5317] ? __lock_acquire+0x1397/0x2100 [ 72.406153][ T5317] ? __pfx_lock_acquire+0x10/0x10 [ 72.406165][ T5317] ? ktime_get_with_offset+0x8c/0x290 [ 72.406181][ T5317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.406193][ T5317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.406206][ T5317] ? ktime_get_with_offset+0x8c/0x290 [ 72.406221][ T5317] ? seqcount_lockdep_reader_access+0x157/0x220 [ 72.406237][ T5317] ? lockdep_hardirqs_on+0x99/0x150 [ 72.406251][ T5317] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 72.406266][ T5317] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 72.406283][ T5317] ? _raw_spin_unlock+0x28/0x50 [ 72.406296][ T5317] ? __asan_memset+0x23/0x50 [ 72.406306][ T5317] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 72.406321][ T5317] bpf_prog_load+0x1667/0x20f0 [ 72.406335][ T5317] ? __pfx_bpf_prog_load+0x10/0x10 [ 72.406345][ T5317] ? __pfx___might_resched+0x10/0x10 [ 72.406363][ T5317] ? __might_fault+0xc6/0x120 [ 72.406382][ T5317] __sys_bpf+0x4ee/0x810 [ 72.406392][ T5317] ? __pfx___sys_bpf+0x10/0x10 [ 72.406402][ T5317] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 72.406417][ T5317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.406429][ T5317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.406441][ T5317] ? do_syscall_64+0x100/0x230 [ 72.406457][ T5317] __x64_sys_bpf+0x7c/0x90 [ 72.406472][ T5317] do_syscall_64+0xf3/0x230 [ 72.406487][ T5317] ? clear_bhb_loop+0x35/0x90 [ 72.406500][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.406516][ T5317] RIP: 0033:0x7f8da9180849 [ 72.406527][ T5317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.406536][ T5317] RSP: 002b:00007f8daa00e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.406550][ T5317] RAX: ffffffffffffffda RBX: 00007f8da9345fa0 RCX: 00007f8da9180849 [ 72.406558][ T5317] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 72.406566][ T5317] RBP: 00007f8da91f3986 R08: 0000000000000000 R09: 0000000000000000 [ 72.406573][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.406581][ T5317] R13: 0000000000000000 R14: 00007f8da9345fa0 R15: 00007ffcd10c1b18 [ 72.406592][ T5317] [ 72.406597][ T5317] [ 72.406603][ T5317] The buggy address belongs to the virtual mapping at [ 72.406603][ T5317] [ffffc9000d4c1000, ffffc9000d4e3000) created by: [ 72.406603][ T5317] kvrealloc_noprof+0xc7/0x120 [ 72.406618][ T5317] [ 72.406622][ T5317] The buggy address belongs to the physical page: [ 72.406626][ T5317] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x5dc3 pfn:0x4b007 [ 72.406638][ T5317] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 72.406655][ T5317] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 72.406664][ T5317] raw: 0000000000005dc3 0000000000000000 00000001ffffffff 0000000000000000 [ 72.406670][ T5317] page dumped because: kasan: bad access detected [ 72.406675][ T5317] page_owner tracks the page as allocated [ 72.406679][ T5317] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 5317, tgid 5316 (syz.0.0), ts 72404266108, free_ts 72373680563 [ 72.406697][ T5317] post_alloc_hook+0x1f3/0x230 [ 72.406713][ T5317] get_page_from_freelist+0x365c/0x37a0 [ 72.406723][ T5317] __alloc_pages_slowpath+0x414/0x1020 [ 72.406734][ T5317] __alloc_pages_noprof+0x49b/0x710 [ 72.406744][ T5317] alloc_pages_mpol_noprof+0x3e8/0x680 [ 72.406756][ T5317] __vmalloc_node_range_noprof+0x9c9/0x1380 [ 72.406766][ T5317] __kvmalloc_node_noprof+0x142/0x190 [ 72.406780][ T5317] kvrealloc_noprof+0xc7/0x120 [ 72.406789][ T5317] push_insn_history+0x16c/0x6a0 [ 72.406804][ T5317] do_check+0x692f/0xfcd0 [ 72.406817][ T5317] do_check_common+0x1564/0x2010 [ 72.406831][ T5317] bpf_check+0x19380/0x1f1b0 [ 72.406842][ T5317] bpf_prog_load+0x1667/0x20f0 [ 72.406852][ T5317] __sys_bpf+0x4ee/0x810 [ 72.406860][ T5317] __x64_sys_bpf+0x7c/0x90 [ 72.406873][ T5317] do_syscall_64+0xf3/0x230 [ 72.406885][ T5317] page last free pid 81 tgid 81 stack trace: [ 72.406892][ T5317] free_unref_folios+0xf62/0x1a90 [ 72.406901][ T5317] shrink_folio_list+0x2d3d/0x8cb0 [ 72.406912][ T5317] evict_folios+0x5568/0x7be0 [ 72.406926][ T5317] try_to_shrink_lruvec+0x9a6/0xc70 [ 72.406939][ T5317] shrink_one+0x3b9/0x850 [ 72.406973][ T5317] shrink_node+0x37c5/0x3e50 [ 72.406987][ T5317] kswapd+0x1ca9/0x36f0 [ 72.406997][ T5317] kthread+0x2f0/0x390 [ 72.407007][ T5317] ret_from_fork+0x4b/0x80 [ 72.407016][ T5317] ret_from_fork_asm+0x1a/0x30 [ 72.407031][ T5317] [ 72.407033][ T5317] Memory state around the buggy address: [ 72.407040][ T5317] ffffc9000d4e0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.407047][ T5317] ffffc9000d4e0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.407054][ T5317] >ffffc9000d4e1000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 72.407060][ T5317] ^ [ 72.407065][ T5317] ffffc9000d4e1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 72.407071][ T5317] ffffc9000d4e1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 72.407075][ T5317] ================================================================== [ 72.432201][ T5317] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 72.432214][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 72.432228][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.432235][ T5317] Call Trace: [ 72.432240][ T5317] [ 72.432245][ T5317] dump_stack_lvl+0x241/0x360 [ 72.432266][ T5317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.432281][ T5317] ? __pfx__printk+0x10/0x10 [ 72.432295][ T5317] ? preempt_schedule+0xe1/0xf0 [ 72.432310][ T5317] ? vscnprintf+0x5d/0x90 [ 72.432322][ T5317] panic+0x349/0x880 [ 72.432336][ T5317] ? check_panic_on_warn+0x21/0xb0 [ 72.432349][ T5317] ? __pfx_panic+0x10/0x10 [ 72.432363][ T5317] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 72.432378][ T5317] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 72.432391][ T5317] ? print_report+0x502/0x550 [ 72.432405][ T5317] check_panic_on_warn+0x86/0xb0 [ 72.432417][ T5317] ? vrealloc_noprof+0x340/0x3a0 [ 72.432429][ T5317] end_report+0x77/0x160 [ 72.432441][ T5317] kasan_report+0x154/0x180 [ 72.432456][ T5317] ? vrealloc_noprof+0x340/0x3a0 [ 72.432468][ T5317] kasan_check_range+0x282/0x290 [ 72.432482][ T5317] __asan_memset+0x23/0x50 [ 72.432493][ T5317] vrealloc_noprof+0x340/0x3a0 [ 72.432505][ T5317] push_insn_history+0x16c/0x6a0 [ 72.432523][ T5317] do_check+0x692f/0xfcd0 [ 72.432549][ T5317] ? __pfx_do_check+0x10/0x10 [ 72.432564][ T5317] ? mark_reg_not_init+0xd4/0x4b0 [ 72.432578][ T5317] ? __asan_memcpy+0x40/0x70 [ 72.432588][ T5317] ? mark_reg_not_init+0xd4/0x4b0 [ 72.432604][ T5317] do_check_common+0x1564/0x2010 [ 72.432620][ T5317] bpf_check+0x19380/0x1f1b0 [ 72.432635][ T5317] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 72.432653][ T5317] ? validate_chain+0x11e/0x5920 [ 72.432667][ T5317] ? page_ext_get+0x20/0x2a0 [ 72.432683][ T5317] ? post_alloc_hook+0x206/0x230 [ 72.432700][ T5317] ? __pfx_validate_chain+0x10/0x10 [ 72.432715][ T5317] ? validate_chain+0x11e/0x5920 [ 72.432728][ T5317] ? validate_chain+0x11e/0x5920 [ 72.432741][ T5317] ? mark_lock+0x9a/0x360 [ 72.432753][ T5317] ? __pfx___might_resched+0x10/0x10 [ 72.432772][ T5317] ? validate_chain+0x11e/0x5920 [ 72.432785][ T5317] ? validate_chain+0x11e/0x5920 [ 72.432798][ T5317] ? __pfx_validate_chain+0x10/0x10 [ 72.432812][ T5317] ? validate_chain+0x11e/0x5920 [ 72.432826][ T5317] ? validate_chain+0x11e/0x5920 [ 72.432839][ T5317] ? validate_chain+0x11e/0x5920 [ 72.432851][ T5317] ? __pfx_validate_chain+0x10/0x10 [ 72.432866][ T5317] ? __pfx_validate_chain+0x10/0x10 [ 72.432880][ T5317] ? __pfx_bpf_check+0x10/0x10 [ 72.432895][ T5317] ? __pfx_validate_chain+0x10/0x10 [ 72.432910][ T5317] ? mark_lock+0x9a/0x360 [ 72.432923][ T5317] ? mark_lock+0x9a/0x360 [ 72.432937][ T5317] ? __lock_acquire+0x1397/0x2100 [ 72.432950][ T5317] ? mark_lock+0x9a/0x360 [ 72.432963][ T5317] ? __lock_acquire+0x1397/0x2100 [ 72.432980][ T5317] ? __pfx_lock_acquire+0x10/0x10 [ 72.432993][ T5317] ? ktime_get_with_offset+0x8c/0x290 [ 72.433010][ T5317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.433022][ T5317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.433035][ T5317] ? ktime_get_with_offset+0x8c/0x290 [ 72.433050][ T5317] ? seqcount_lockdep_reader_access+0x157/0x220 [ 72.433067][ T5317] ? lockdep_hardirqs_on+0x99/0x150 [ 72.433082][ T5317] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 72.433097][ T5317] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 72.433112][ T5317] ? _raw_spin_unlock+0x28/0x50 [ 72.433134][ T5317] ? __asan_memset+0x23/0x50 [ 72.433145][ T5317] ? bpf_obj_name_cpy+0x18a/0x1d0 [ 72.433160][ T5317] bpf_prog_load+0x1667/0x20f0 [ 72.433174][ T5317] ? __pfx_bpf_prog_load+0x10/0x10 [ 72.433184][ T5317] ? __pfx___might_resched+0x10/0x10 [ 72.433195][ T5317] ? __might_fault+0xc6/0x120 [ 72.433205][ T5317] __sys_bpf+0x4ee/0x810 [ 72.433212][ T5317] ? __pfx___sys_bpf+0x10/0x10 [ 72.433217][ T5317] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 72.433226][ T5317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.433233][ T5317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.433240][ T5317] ? do_syscall_64+0x100/0x230 [ 72.433249][ T5317] __x64_sys_bpf+0x7c/0x90 [ 72.433258][ T5317] do_syscall_64+0xf3/0x230 [ 72.433267][ T5317] ? clear_bhb_loop+0x35/0x90 [ 72.433274][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.433288][ T5317] RIP: 0033:0x7f8da9180849 [ 72.433299][ T5317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.433308][ T5317] RSP: 002b:00007f8daa00e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.433322][ T5317] RAX: ffffffffffffffda RBX: 00007f8da9345fa0 RCX: 00007f8da9180849 [ 72.433330][ T5317] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 72.433338][ T5317] RBP: 00007f8da91f3986 R08: 0000000000000000 R09: 0000000000000000 [ 72.433346][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.433353][ T5317] R13: 0000000000000000 R14: 00007f8da9345fa0 R15: 00007ffcd10c1b18 [ 72.433364][ T5317] [ 72.433629][ T5317] Kernel Offset: disabled