program: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000009000000000400000900000001"], 0x48) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200403a00fc020000000000000000000000000000ff07000000000000000000000000000104009078000000006097436700001100fe880000000000000000000000000001fe800000000000000000000000aa00010000000000000133000000000000784c8a61cfc54a24becc1edf0127abf1b68047451e0fa92edf747bbf348465d377d219eb6d580107d8800502a4708b88dc4be0c6741697eaebafd04ca977978849bc9e44008a8684a39ac2f32be43c6f5a12c6a26073448c4d6fe90514ec08e4b26d4bcd"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x734, 0x12) syz_mount_image$bcachefs(&(0x7f0000002340), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000002300)=ANY=[], 0x1, 0x5910, &(0x7f0000016480)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) link(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file1\x00') syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e2, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x242, 0x0) (async, rerun: 64) io_setup(0xaf5, &(0x7f00000001c0)=0x0) (rerun: 64) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000240)={0xf6ffffff00000000, 0x5301, 0x0, 0x1, 0x7, r2, &(0x7f0000000200)='\x00', 0x1, 0x0, 0x0, 0x0, r2}]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x0, 0x0, 0x3000}) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x20200, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) (async, rerun: 64) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 64) accept$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000380)=0x1c) (async) sendto$inet6(r6, &(0x7f0000000040)="8be04a1a380741b4f93ec99c5864a5875cb270464b6af4449a872cb51c16d1b407df68455d70cfd86eb8f36b54044ee7af622458bcd5", 0x36, 0x40041, 0x0, 0x0) [ 85.895237][ T5302] Bluetooth: hci0: command tx timeout [ 86.352991][ T5325] loop0: detected capacity change from 0 to 32768 [ 86.513229][ T5325] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 86.513249][ T5325] allowing incompatible features above 0.0: (unknown version) [ 86.513257][ T5325] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 86.537300][ T5325] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 86.541928][ T5325] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 86.546040][ T5325] bcachefs (loop0): Version upgrade required: [ 86.546040][ T5325] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 86.546040][ T5325] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 86.546040][ T5325] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 86.648837][ T5325] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 86.648879][ T5325] gen 0 oldest_gen 0 data_type btree [ 86.648887][ T5325] journal_seq_nonempty 6 [ 86.648894][ T5325] journal_seq_empty 0 [ 86.648899][ T5325] need_discard 1 [ 86.648906][ T5325] need_inc_gen 1 [ 86.648914][ T5325] dirty_sectors 0 [ 86.648919][ T5325] stripe_sectors 1769482 [ 86.648927][ T5325] cached_sectors 0 [ 86.648934][ T5325] stripe 0 [ 86.648940][ T5325] stripe_redundancy 0 [ 86.648947][ T5325] io_time[READ] 1 [ 86.648953][ T5325] io_time[WRITE] 768 [ 86.648959][ T5325] fragmentation 0 [ 86.648966][ T5325] bp_start 7 [ 86.648972][ T5325] [ 86.648978][ T5325] invalid data type (got 3 should be 9), deleting [ 86.697024][ T792] cfg80211: failed to load regulatory.db [ 86.728661][ T5325] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 86.728700][ T5325] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 86.728710][ T5325] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 4 too large: 0 + 1099511627776 > 4294967295 [ 86.728718][ T5325] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:1099511627776, 0:0 [ 86.728725][ T5325] flagging btree backpointers lost data [ 86.728731][ T5325] ret btree_node_read_validate_error [ 86.757422][ T5325] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 86.769699][ T5325] bcachefs (loop0): check_topology... done [ 86.775400][ T5325] bcachefs (loop0): accounting_read... done [ 86.779503][ T5325] bcachefs (loop0): alloc_read... done [ 86.784207][ T5325] bcachefs (loop0): snapshots_read... done [ 86.787647][ T5325] bcachefs (loop0): check_allocations... [ 86.792529][ T5325] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 86.792555][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 86.813249][ T5325] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 86.813264][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 86.826145][ T5325] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 86.826161][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 86.838626][ T5325] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 86.838643][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 86.853575][ T5325] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 86.853589][ T5325] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 86.866105][ T5325] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.871140][ T5325] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.878137][ T5325] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.883325][ T5325] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.888922][ T5325] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.893678][ T5325] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.899007][ T5325] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.904301][ T5325] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.909630][ T5325] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.915384][ T5325] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.930274][ T5325] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.934728][ T5325] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.941018][ T5325] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.945835][ T5325] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.953779][ T5325] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.959176][ T5325] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 86.965015][ T5325] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 86.971540][ T5325] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 86.977668][ T5325] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 86.983572][ T5325] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 86.988506][ T5325] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 86.988519][ T5325] Ratelimiting new instances of previous error [ 86.996837][ T5325] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 86.996850][ T5325] Ratelimiting new instances of previous error [ 87.034661][ T5325] done [ 87.036633][ T5325] bcachefs (loop0): going read-write [ 87.164963][ T5325] bcachefs (loop0): journal_replay... done [ 87.196010][ T5325] bcachefs (loop0): check_alloc_info... [ 87.197615][ T5325] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 87.197640][ T5325] device 0 buckets 28-29, fixing [ 87.211010][ T5325] bcachefs (loop0): bucket incorrectly unset in need_discard btree [ 87.211026][ T5325] u64s 13 type alloc_v4 0:37:0 len 0 ver 0: [ 87.211032][ T5325] gen 0 oldest_gen 0 data_type need_discard [ 87.211037][ T5325] journal_seq_nonempty 6 [ 87.211043][ T5325] journal_seq_empty 0 [ 87.211048][ T5325] need_discard 1 [ 87.211054][ T5325] need_inc_gen 1 [ 87.211069][ T5325] dirty_sectors 0 [ 87.211075][ T5325] stripe_sectors 0 [ 87.211080][ T5325] cached_sectors 0 [ 87.211086][ T5325] stripe 0 [ 87.211091][ T5325] stripe_redundancy 0 [ 87.211097][ T5325] io_time[READ] 1 [ 87.211103][ T5325] io_time[WRITE] 1024 [ 87.211108][ T5325] fragmentation 0 [ 87.211114][ T5325] bp_start 8 [ 87.211120][ T5325] , fixing [ 87.267354][ T5325] done [ 87.269569][ T5325] bcachefs (loop0): check_lrus... done [ 87.273949][ T5325] bcachefs (loop0): check_btree_backpointers... done [ 87.277297][ T5325] bcachefs (loop0): check_backpointers_to_extents... done [ 87.285459][ T5325] bcachefs (loop0): check_extents_to_backpointers... [ 87.286461][ T5325] bcachefs (loop0): scanning for missing backpointers in 10/128 buckets [ 87.294169][ T5325] done [ 87.296087][ T5325] bcachefs (loop0): check_alloc_to_lru_refs... [ 87.297880][ T5325] bcachefs (loop0): missing fragmentation lru entry [ 87.297891][ T5325] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 87.297897][ T5325] gen 0 oldest_gen 0 data_type user [ 87.297903][ T5325] journal_seq_nonempty 5 [ 87.297908][ T5325] journal_seq_empty 134217728 [ 87.297914][ T5325] need_discard 1 [ 87.297919][ T5325] need_inc_gen 1 [ 87.297925][ T5325] dirty_sectors 16 [ 87.297930][ T5325] stripe_sectors 1802251 [ 87.297935][ T5325] cached_sectors 0 [ 87.297941][ T5325] stripe 0 [ 87.297946][ T5325] stripe_redundancy 0 [ 87.297952][ T5325] io_time[READ] 1 [ 87.297957][ T5325] io_time[WRITE] 512 [ 87.297963][ T5325] fragmentation 0 [ 87.297968][ T5325] bp_start 7 [ 87.297973][ T5325] , fixing [ 87.346104][ T5325] done [ 87.347519][ T5325] bcachefs (loop0): bucket_gens_init... done [ 87.357137][ T5325] bcachefs (loop0): check_snapshot_trees... done [ 87.361295][ T5325] bcachefs (loop0): check_snapshots... [ 87.362477][ T5325] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 87.362489][ T5325] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 87.388112][ T5325] done [ 87.390310][ T5325] bcachefs (loop0): check_subvols... done [ 87.397968][ T5325] bcachefs (loop0): check_subvol_children... done [ 87.401606][ T5325] bcachefs (loop0): delete_dead_snapshots... done [ 87.404731][ T5325] bcachefs (loop0): check_inodes... done [ 87.423227][ T5325] bcachefs (loop0): check_extents... done [ 87.426894][ T5325] bcachefs (loop0): check_indirect_extents... done [ 87.440550][ T5325] bcachefs (loop0): check_dirents... done [ 87.444789][ T5325] bcachefs (loop0): check_xattrs... done [ 87.448040][ T5325] bcachefs (loop0): check_root... done [ 87.460467][ T5325] bcachefs (loop0): check_unreachable_inodes... done [ 87.463846][ T5325] bcachefs (loop0): check_subvolume_structure... done [ 87.467043][ T5325] bcachefs (loop0): check_directory_structure... done [ 87.488962][ T5325] bcachefs (loop0): check_nlinks... done [ 87.492736][ T5325] bcachefs (loop0): check_rebalance_work... done [ 87.495917][ T5325] bcachefs (loop0): resume_logged_ops... done [ 87.510332][ T5325] bcachefs (loop0): delete_dead_inodes... done [ 87.513046][ T5325] bcachefs (loop0): set_fs_needs_rebalance... done [ 87.546416][ T5325] bcachefs (loop0): done starting filesystem [ 87.673074][ T5326] bcachefs (loop0): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts [ 87.673074][ T5326] set version_upgrade=incompat to enable [ 87.683743][ T26] audit: type=1800 audit(1750940948.954:2): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=536870913 res=0 errno=0 [ 87.722030][ T5325] syz.0.0 (5325) used greatest stack depth: 13128 bytes left [ 87.733837][ T26] audit: type=1804 audit(1750940949.024:3): pid=5344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.0" name="/newroot/0/file0/file1" dev="loop0" ino=536870913 res=1 errno=0 [ 87.745426][ T5344] ------------[ cut here ]------------ [ 87.748048][ T5344] truncate spotted in mem i_size < btree i_size: 9000 < 12288 [ 87.760360][ T26] audit: type=1800 audit(1750940949.034:4): pid=5344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=536870913 res=0 errno=0 [ 87.769146][ T5344] WARNING: CPU: 0 PID: 5344 at fs/bcachefs/fs-io.c:474 bchfs_truncate+0xa3b/0xc20 [ 87.773711][ T5344] Modules linked in: [ 87.775616][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 87.780659][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.785646][ T5344] RIP: 0010:bchfs_truncate+0xa3b/0xc20 [ 87.788118][ T5344] Code: 00 74 0a 48 8b 7c 24 20 e8 92 40 e9 fd 4c 8b 7c 24 20 49 8b 37 48 8b 94 24 00 01 00 00 48 c7 c7 00 b8 d4 8b e8 46 65 49 fd 90 <0f> 0b 90 90 e9 95 fa ff ff e8 a7 bc 85 fd 4c 8b 7c 24 50 4c 89 ff [ 87.797166][ T5344] RSP: 0018:ffffc9000d4af540 EFLAGS: 00010246 [ 87.800793][ T5344] RAX: ccf2bab59b24be00 RBX: 1ffff110087ec27b RCX: ffff88801a240000 [ 87.804353][ T5344] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 87.807695][ T5344] RBP: ffffc9000d4af7d0 R08: 0000000000000003 R09: 0000000000000004 [ 87.811106][ T5344] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888043f613d8 [ 87.814969][ T5344] R13: ffff888043f61498 R14: 0000000000002328 R15: ffff888043f60f80 [ 87.818432][ T5344] FS: 00007f6907c406c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 87.822078][ T5344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.824708][ T5344] CR2: 0000000000000000 CR3: 0000000042eaa000 CR4: 0000000000352ef0 [ 87.828144][ T5344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.832424][ T5344] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.835949][ T5344] Call Trace: [ 87.837367][ T5344] [ 87.838729][ T5344] ? __pfx_bchfs_truncate+0x10/0x10 [ 87.841026][ T5344] ? __bch2_trans_get+0x9c2/0xd80 [ 87.843369][ T5344] ? __pfx_bch2_subvol_is_ro+0x10/0x10 [ 87.846230][ T5344] ? setattr_prepare+0x1e7/0xac0 [ 87.848801][ T5344] ? bch2_setattr+0x1a7/0x220 [ 87.850976][ T5344] ? __pfx_bch2_setattr+0x10/0x10 [ 87.853259][ T5344] notify_change+0xb33/0xe40 [ 87.855439][ T5344] do_truncate+0x1a4/0x220 [ 87.857941][ T5344] ? __pfx_do_truncate+0x10/0x10 [ 87.860747][ T5344] ? apparmor_file_truncate+0x23e/0x2d0 [ 87.863271][ T5344] path_openat+0x306c/0x3830 [ 87.865841][ T5344] ? arch_stack_walk+0xfc/0x150 [ 87.868212][ T5344] ? __pfx_path_openat+0x10/0x10 [ 87.870645][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.873296][ T5344] do_filp_open+0x1fa/0x410 [ 87.875304][ T5344] ? __lock_acquire+0xab9/0xd20 [ 87.877441][ T5344] ? __pfx_do_filp_open+0x10/0x10 [ 87.880126][ T5344] ? _raw_spin_unlock+0x28/0x50 [ 87.882509][ T5344] ? alloc_fd+0x64c/0x6c0 [ 87.884435][ T5344] do_sys_openat2+0x121/0x1c0 [ 87.886288][ T5344] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.888386][ T5344] ? exc_page_fault+0x76/0xf0 [ 87.890606][ T5344] ? do_user_addr_fault+0xc8a/0x1390 [ 87.892946][ T5344] __x64_sys_openat+0x138/0x170 [ 87.895168][ T5344] do_syscall_64+0xfa/0x3b0 [ 87.897787][ T5344] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.900612][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.903187][ T5344] ? clear_bhb_loop+0x60/0xb0 [ 87.905214][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.907756][ T5344] RIP: 0033:0x7f6906d8e929 [ 87.909693][ T5344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.918759][ T5344] RSP: 002b:00007f6907c40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.922633][ T5344] RAX: ffffffffffffffda RBX: 00007f6906fb6160 RCX: 00007f6906d8e929 [ 87.926413][ T5344] RDX: 0000000000020200 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 87.929674][ T5344] RBP: 00007f6906e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 87.933182][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.937098][ T5344] R13: 0000000000000001 R14: 00007f6906fb6160 R15: 00007ffef36ebff8 [ 87.940744][ T5344] [ 87.942087][ T5344] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.945141][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 87.950828][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.956538][ T5344] Call Trace: [ 87.958491][ T5344] [ 87.960193][ T5344] dump_stack_lvl+0x99/0x250 [ 87.962671][ T5344] ? __asan_memcpy+0x40/0x70 [ 87.965132][ T5344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.967908][ T5344] ? __pfx__printk+0x10/0x10 [ 87.970487][ T5344] panic+0x2db/0x790 [ 87.972415][ T5344] ? __pfx_panic+0x10/0x10 [ 87.974507][ T5344] ? show_trace_log_lvl+0x4fb/0x550 [ 87.976592][ T5344] __warn+0x31b/0x4b0 [ 87.978291][ T5344] ? bchfs_truncate+0xa3b/0xc20 [ 87.980308][ T5344] ? bchfs_truncate+0xa3b/0xc20 [ 87.982319][ T5344] report_bug+0x2be/0x4f0 [ 87.984205][ T5344] ? bchfs_truncate+0xa3b/0xc20 [ 87.986419][ T5344] ? bchfs_truncate+0xa3b/0xc20 [ 87.988662][ T5344] ? bchfs_truncate+0xa3d/0xc20 [ 87.990998][ T5344] handle_bug+0x84/0x160 [ 87.992891][ T5344] exc_invalid_op+0x1a/0x50 [ 87.994862][ T5344] asm_exc_invalid_op+0x1a/0x20 [ 87.996947][ T5344] RIP: 0010:bchfs_truncate+0xa3b/0xc20 [ 87.999516][ T5344] Code: 00 74 0a 48 8b 7c 24 20 e8 92 40 e9 fd 4c 8b 7c 24 20 49 8b 37 48 8b 94 24 00 01 00 00 48 c7 c7 00 b8 d4 8b e8 46 65 49 fd 90 <0f> 0b 90 90 e9 95 fa ff ff e8 a7 bc 85 fd 4c 8b 7c 24 50 4c 89 ff [ 88.007412][ T5344] RSP: 0018:ffffc9000d4af540 EFLAGS: 00010246 [ 88.010056][ T5344] RAX: ccf2bab59b24be00 RBX: 1ffff110087ec27b RCX: ffff88801a240000 [ 88.013358][ T5344] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 88.016407][ T5344] RBP: ffffc9000d4af7d0 R08: 0000000000000003 R09: 0000000000000004 [ 88.019741][ T5344] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888043f613d8 [ 88.023079][ T5344] R13: ffff888043f61498 R14: 0000000000002328 R15: ffff888043f60f80 [ 88.026446][ T5344] ? __pfx_bchfs_truncate+0x10/0x10 [ 88.028799][ T5344] ? __bch2_trans_get+0x9c2/0xd80 [ 88.031020][ T5344] ? __pfx_bch2_subvol_is_ro+0x10/0x10 [ 88.033294][ T5344] ? setattr_prepare+0x1e7/0xac0 [ 88.035526][ T5344] ? bch2_setattr+0x1a7/0x220 [ 88.037843][ T5344] ? __pfx_bch2_setattr+0x10/0x10 [ 88.040296][ T5344] notify_change+0xb33/0xe40 [ 88.042310][ T5344] do_truncate+0x1a4/0x220 [ 88.044240][ T5344] ? __pfx_do_truncate+0x10/0x10 [ 88.046409][ T5344] ? apparmor_file_truncate+0x23e/0x2d0 [ 88.048897][ T5344] path_openat+0x306c/0x3830 [ 88.051039][ T5344] ? arch_stack_walk+0xfc/0x150 [ 88.053030][ T5344] ? __pfx_path_openat+0x10/0x10 [ 88.055284][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.058164][ T5344] do_filp_open+0x1fa/0x410 [ 88.060056][ T5344] ? __lock_acquire+0xab9/0xd20 [ 88.062156][ T5344] ? __pfx_do_filp_open+0x10/0x10 [ 88.064172][ T5344] ? _raw_spin_unlock+0x28/0x50 [ 88.066351][ T5344] ? alloc_fd+0x64c/0x6c0 [ 88.068270][ T5344] do_sys_openat2+0x121/0x1c0 [ 88.070396][ T5344] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.072714][ T5344] ? exc_page_fault+0x76/0xf0 [ 88.074957][ T5344] ? do_user_addr_fault+0xc8a/0x1390 [ 88.077249][ T5344] __x64_sys_openat+0x138/0x170 [ 88.079668][ T5344] do_syscall_64+0xfa/0x3b0 [ 88.082179][ T5344] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.085160][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.088190][ T5344] ? clear_bhb_loop+0x60/0xb0 [ 88.090383][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.092951][ T5344] RIP: 0033:0x7f6906d8e929 [ 88.095023][ T5344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.103088][ T5344] RSP: 002b:00007f6907c40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.106524][ T5344] RAX: ffffffffffffffda RBX: 00007f6906fb6160 RCX: 00007f6906d8e929 [ 88.109807][ T5344] RDX: 0000000000020200 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 88.113291][ T5344] RBP: 00007f6906e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.116891][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.120494][ T5344] R13: 0000000000000001 R14: 00007f6906fb6160 R15: 00007ffef36ebff8 [ 88.123891][ T5344] [ 88.125557][ T5344] Kernel Offset: disabled [ 88.127403][ T5344] Rebooting in 86400 seconds..