Warning: Permanently added '[localhost]:18539' (ED25519) to the list of known hosts. executing program syzkaller login: [ 84.595120][ T5100] loop0: detected capacity change from 0 to 32768 [ 84.703694][ T5100] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,usrquota,nojournal_transaction_names [ 84.710535][ T5100] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 84.713832][ T5100] bcachefs (loop0): Version upgrade required: [ 84.713832][ T5100] Version upgrade from 0.19: freespace to 1.7: mi_btree_bitmap incomplete [ 84.713832][ T5100] Doing incompatible version upgrade from 0.19: freespace to 1.12: rebalance_work_acct_fix [ 84.713832][ T5100] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_subvolume_structure,check_directory_structure,check_nlinks,delete_dead_inodes,set_fs_needs_rebalance [ 84.762222][ T5100] bcachefs (loop0): accounting_read... done [ 84.764742][ T5100] bcachefs (loop0): alloc_read... [ 84.764973][ T5100] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 84.771448][ T5100] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 84.774713][ T5100] CPU: 0 UID: 0 PID: 5100 Comm: syz-executor420 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 84.779274][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.782942][ T5100] RIP: 0010:bch2_alloc_read+0x17d9/0x24f0 [ 84.784840][ T5100] Code: 0f b6 04 10 84 c0 4c 8d a4 24 b0 02 00 00 49 89 d7 0f 85 78 04 00 00 48 8b 33 48 8b 3c 24 e8 5e 14 00 00 48 89 c3 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 74 04 00 00 0f b6 44 24 30 88 03 48 8b [ 84.791562][ T5100] RSP: 0018:ffffc90002d8f0e0 EFLAGS: 00010246 [ 84.793752][ T5100] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff89011e18963c [ 84.796581][ T5100] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000008100000014 [ 84.799175][ T5100] RBP: ffffc90002d8f4c8 R08: ffffffff8409ef0e R09: 0000000000000000 [ 84.801747][ T5100] R10: ffffc90002d8f450 R11: fffff520005b1e8c R12: ffffc90002d8f390 [ 84.804362][ T5100] R13: 000000000000001c R14: ffffc90002d8f200 R15: dffffc0000000000 [ 84.807201][ T5100] FS: 00005555882c4380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 84.810396][ T5100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.812667][ T5100] CR2: 0000558280275240 CR3: 000000001205e000 CR4: 0000000000350ef0 [ 84.815413][ T5100] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.818032][ T5100] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.820618][ T5100] Call Trace: [ 84.821749][ T5100] <TASK> [ 84.822773][ T5100] ? __die_body+0x5f/0xb0 [ 84.824291][ T5100] ? die_addr+0xb0/0xe0 [ 84.825781][ T5100] ? exc_general_protection+0x3dd/0x5d0 [ 84.827706][ T5100] ? asm_exc_general_protection+0x26/0x30 [ 84.829705][ T5100] ? bucket_gen+0x18e/0x220 [ 84.831340][ T5100] ? bch2_alloc_read+0x17d9/0x24f0 [ 84.833315][ T5100] ? prb_read_valid+0xa9/0xf0 [ 84.835046][ T5100] ? __pfx_prb_read_valid+0x10/0x10 [ 84.836968][ T5100] ? bch2_alloc_read+0x116a/0x24f0 [ 84.838895][ T5100] ? __pfx_bch2_alloc_read+0x10/0x10 [ 84.840840][ T5100] ? irq_work_queue+0xd1/0x150 [ 84.842609][ T5100] ? __wake_up_klogd+0xd5/0x110 [ 84.844419][ T5100] ? vprintk_emit+0x7ed/0xa10 [ 84.846178][ T5100] ? __pfx_vprintk_emit+0x10/0x10 [ 84.848066][ T5100] ? __pfx_lock_release+0x10/0x10 [ 84.849923][ T5100] ? rcu_is_watching+0x15/0xb0 [ 84.851645][ T5100] ? trace_contention_end+0x3c/0x120 [ 84.853651][ T5100] ? bch2_alloc_read+0x116a/0x24f0 [ 84.855538][ T5100] ? bch2_run_recovery_pass+0x6d/0x1e0 [ 84.857642][ T5100] bch2_run_recovery_pass+0xf0/0x1e0 [ 84.859726][ T5100] bch2_run_recovery_passes+0x19e/0x820 [ 84.861841][ T5100] bch2_fs_recovery+0x24f9/0x38b0 [ 84.863677][ T5100] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 84.865702][ T5100] ? __pfx_lock_release+0x10/0x10 [ 84.867521][ T5100] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 84.869596][ T5100] ? __pfx_lock_release+0x10/0x10 [ 84.871461][ T5100] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 84.873528][ T5100] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 84.875566][ T5100] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 84.877508][ T5100] ? llist_reverse_order+0x72/0x90 [ 84.879275][ T5100] bch2_fs_start+0x356/0x5b0 [ 84.880845][ T5100] bch2_fs_get_tree+0xd61/0x1700 [ 84.882540][ T5100] ? __pfx_bch2_parse_one_mount_opt+0x10/0x10 [ 84.884555][ T5100] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 84.886387][ T5100] ? generic_parse_monolithic+0x387/0x400 [ 84.888397][ T5100] ? apparmor_capable+0x13b/0x1b0 [ 84.890223][ T5100] vfs_get_tree+0x90/0x2b0 [ 84.891877][ T5100] do_new_mount+0x2be/0xb40 [ 84.893523][ T5100] ? __pfx_do_new_mount+0x10/0x10 [ 84.895338][ T5100] __se_sys_mount+0x2d6/0x3c0 [ 84.897130][ T5100] ? __pfx___se_sys_mount+0x10/0x10 [ 84.899043][ T5100] ? do_syscall_64+0x100/0x230 [ 84.900889][ T5100] ? __x64_sys_mount+0x20/0xc0 [ 84.902604][ T5100] do_syscall_64+0xf3/0x230 [ 84.904285][ T5100] ? clear_bhb_loop+0x35/0x90 [ 84.906046][ T5100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.908289][ T5100] RIP: 0033:0x7f0c704b9dea [ 84.910027][ T5100] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 84.917376][ T5100] RSP: 002b:00007ffd5754dfb8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 84.920484][ T5100] RAX: ffffffffffffffda RBX: 00007ffd5754dfd0 RCX: 00007f0c704b9dea [ 84.923456][ T5100] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007ffd5754dfd0 [ 84.926571][ T5100] RBP: 0000000000000004 R08: 00007ffd5754e010 R09: 002c61746f757172 [ 84.929544][ T5100] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 84.932642][ T5100] R13: 00007ffd5754e010 R14: 0000000000000003 R15: 0000000001000000 [ 84.935692][ T5100] </TASK> [ 84.936837][ T5100] Modules linked in: [ 84.938402][ T5100] ---[ end trace 0000000000000000 ]--- [ 84.959884][ T5100] RIP: 0010:bch2_alloc_read+0x17d9/0x24f0 [ 84.961649][ T5100] Code: 0f b6 04 10 84 c0 4c 8d a4 24 b0 02 00 00 49 89 d7 0f 85 78 04 00 00 48 8b 33 48 8b 3c 24 e8 5e 14 00 00 48 89 c3 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 74 04 00 00 0f b6 44 24 30 88 03 48 8b [ 84.967250][ T5100] RSP: 0018:ffffc90002d8f0e0 EFLAGS: 00010246 [ 84.969533][ T5100] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff89011e18963c [ 84.972059][ T5100] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000008100000014 [ 84.974593][ T5100] RBP: ffffc90002d8f4c8 R08: ffffffff8409ef0e R09: 0000000000000000 [ 84.977075][ T5100] R10: ffffc90002d8f450 R11: fffff520005b1e8c R12: ffffc90002d8f390 [ 84.979983][ T5100] R13: 000000000000001c R14: ffffc90002d8f200 R15: dffffc0000000000 [ 84.982741][ T5100] FS: 00005555882c4380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 84.985585][ T5100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.987737][ T5100] CR2: 00007f4c02468cda CR3: 000000001205e000 CR4: 0000000000350ef0 [ 84.990686][ T5100] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.993257][ T5100] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.995989][ T5100] Kernel panic - not syncing: Fatal exception [ 84.998412][ T5100] Kernel Offset: disabled [ 84.999963][ T5100] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:14:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000037 RBX=ffffffff9a6f4ce0 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002d8e770 R8 =ffffffff8546758b R9 =1ffff110065cf046 R10=dffffc0000000000 R11=ffffffff85467540 R12=dffffc0000000000 R13=ffffffff9a3efee8 R14=0000000000000037 R15=00000000000003f8 RIP=ffffffff854675be RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555882c4380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558280275240 CR3=000000001205e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5754e150 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c7053d560 00007f0c705315d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0c70522b44 00007f0c70536240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000