program: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0xb, &(0x7f0000000a00)={[{@errors_continue}, {@erasure_code}, {@noexcl}, {@journal_flush_disabled}, {@usrquota}, {@errors_continue}], [{@subj_type={'subj_type', 0x3d, '$\x82Q\xd6$\xe9\xe6,\xbe\xff\x00\x93\xdd~\xa9]\xfb\x01/v2m\xc0+\xb4\xd4\xb1N\x04wf\x88\xbf\x82\xef\xad\x15\xf5(\x98\x89\xae\xf4.\xbf\x11\xd0\x13\x91\xef\xc2\xcau1\xac\xa5\x9f\xdcOy\xd3\xfb\x15\xdd\xfd\xdf\xee\xb1\x9eE\x01\xa6\xb9\x92\xa3.\x17B~\x81(:2\x18\x1f\x18\xe1\xc4&\xc0r06\xefx\xef\xd6\xc43\x17\xf8&\xb7Lm\x1d%\xb685\x10a\x11\xcd/\xc1\t\xd3\xb2\xba\x87\x90\v\xad\x8f\xe8b\xe0\xed$\xd0\xacB\xcc\xbf\xee\xad\x0e\xc4\xdb\xfa\x19V1\\\xc1\xe7\x93!m\x80+`s'}}, {@obj_type={'obj_type', 0x3d, '\x00\x00\x00\x00\x00\xf9\x85\x96\xa1G4N\xb7\xfa\xf0\x1a\xc4-\x82_z\xa5e\xab\xdf-G\xb3\xdb\xfb\xf3\xf6(\xe8j\xc6\x87F\xff\xdd\xe2\xc2b\xf8\"\x8c$\x7fSG\x80\v]y\xf0\xd9gv\'\xed\xc7\x1f\x00\x00\x00\x00\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'z\x15\x05a\x9c/H\xf9\n\xc6\xd5\xfb!4\x01\x06\xc5#\xa9&4\xab\rO\x8a\xd5\xf1\xaa\xbe\xa6\x9a\xda0\x06\xa4<\xc7\xa62 \x04B\x81\x1b\xa6\xf2\xb3\xbe\xe0\x1furY\x80j\xd8\x8cj\xa7\xd2z\xbe\xb5\xee\x11Q\xb7\x87\xeb\"\x884P\x03\x05F\xca\xa1\xd66\x96N\x8d\xeb\xf7\xef^\xa8\x9b\x83\xdfo\x0f\xc5rwPdw\xd6\xcfh\x8f!\a@\xe1!\xd8\xfb\xc8\xce\x8by)\x87p$a\x0fS\x7f\xad\xc6\xfa*\xedX\xc6N\xa7\xeb_\x7fY\xb6\x11[\xfd<9\xcf\x7f\x0f\bq?\x87\x9b\x7f\x9b\x1f|A\x05\xbf\x1ei\xd6Q~\x17\x8c\xf4\x88u\xf1\x9b\x00\x05\xd1}\xd6\x7fu\xdf\x9b\rF\xba\x96\x84'}}, {@subj_user={'subj_user', 0x3d, 'z\x15\x05a\x9c/H\xf9\n\xc6\xd5\xfb!4\x01\x06\xc5#\xa9&4\xab\rO\x8a\xd5\xf1\xaa\xbe\xa6\x9a\xda0\x06\xa4<\xc7\xa62 \x04B\x81\x1b\xa6\xf2\xb3\xbe\xe0\x1furY\x80j\xd8\x8cj\xa7\xd2z\xbe\xb5\xee\x11Q\xb7\x87\xeb\"\x884P\x03\x05F\xca\xa1\xd66\x96N\x8d\xeb\xf7\xef^\xa8\x9b\x83\xdfo\x0f\xc5rwPdw\xd6\xcfh\x8f!\a@\xe1!\xd8\xfb\xc8\xce\x8by)\x87p$a\x0fS\x7f\xad\xc6\xfa*\xedX\xc6N\xa7\xeb_\x7fY\xb6\x11[\xfd<9\xcf\x7f\x0f\bq?\x87\x9b\x7f\x9b\x1f|A\x05\xbf\x1ei\xd6Q~\x17\x8c\xf4\x88u\xf1\x9b\x00\x05\xd1}\xd6\x7fu\xdf\x9b\rF\xba\x96\x84'}}, {@subj_user={'subj_user', 0x3d, '\xbe{%'}}, {@fsname={'fsname', 0x3d, '\x90'}}, {@subj_role={'subj_role', 0x3d, '${\xd8\x95;\xf7\xeajz\x88\xdb\x03\xeb\xc9\x1c\xdaF\x8a\xce8\x13\xa8\xd6\xf30.q\xe8\xd67\xa3\xe4\xf4\x03\xe8\x02\xfc\xe1/O\xf8\x9cA\xbe\x9e0\xc5A\xc1\xe7(!\x04\x97\x06\xad\xc5r\xf3\xcf\xedJH\x89\x18\xbbB\xf5\x04\xa0\x06qW\xbd\xe8#\xa6\xf4\x16\b>\xe6\xad\xae2]A\x9d\xb4\xdaU\xc1\xd5\x8f(\x13R\xb8\xc0+\xbd\x93\x03Z\xca\xb9\x88\xf2\x97\xdde\xee\x0f\x1f\x94\x88\x9a3\xb99\x18\xbf\x8fE\xae\xf7\xd4\xb2\xd6\xec\xb5\x86\x10\xef\xdd3\xde\xba(a\x88P\x93;\x15Y(Ak\xaf\x99\xafL\'\x12}\xde\x95G\x81i\xfc\xdeJ\x85\xea/4\xef\x1c\xca\xba#\xd4(\x1b\x9e\xc3\xf2\x1e\xb2WTU\xac\xd6\xab\xfc\x8e\xea)#&\\\x92\xfd\xb4\xb5\xdc2\x1b\xa1\x17\xb7!U\xb6\xeb\x19\xe3]\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'mr\x1a\xb0#\x1e\xa1\xf3\xbdntinu%D\xfd'}}]}, 0x1, 0x5903, &(0x7f0000005940)="$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") [ 67.705037][ T5319] Bluetooth: hci0: command tx timeout [ 67.809178][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.813167][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.964770][ T5341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.986739][ T5341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.087892][ T5341] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.091566][ T5341] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.106465][ T5341] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.110437][ T5341] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.321715][ T5342] loop0: detected capacity change from 0 to 32768 [ 68.457175][ T5342] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,usrquota,journal_flush_disabled,journal_reclaim_delay=2,nojournal_transaction_names,noexcl,read_only [ 68.457194][ T5342] allowing incompatible features above 0.0: (unknown version) [ 68.457201][ T5342] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 68.479949][ T5342] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 68.485622][ T5342] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad size, fixing [ 68.492007][ T5342] bcachefs (loop0): invalid bkey in superblock btree=inodes level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 68.492022][ T5342] invalid key type for btree inodes (btree_ptr_v2), deleting [ 68.505431][ T5342] bcachefs (loop0): invalid bkey in superblock btree=snapshots level=0: u64s 11 type btree_ptr_v2 18446742987082825727:U64_MAX:U32_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 68.505447][ T5342] invalid key type for btree snapshots (btree_ptr_v2), deleting [ 68.518757][ T5342] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 68.522065][ T5342] bcachefs (loop0): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 68.522065][ T5342] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive [ 68.522065][ T5342] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 68.599214][ T5342] bcachefs (loop0): accounting_read... done [ 68.603405][ T5342] bcachefs (loop0): alloc_read... done [ 68.606576][ T5342] bcachefs (loop0): snapshots_read... done [ 68.610064][ T5342] bcachefs (loop0): check_allocations... [ 68.625652][ T5342] bcachefs (loop0): bucket 0:32 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 68.634454][ T5342] bcachefs (loop0): bucket 0:32 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 68.640798][ T5342] bcachefs (loop0): bucket 0:38 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 68.646437][ T5342] bcachefs (loop0): bucket 0:38 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 68.654611][ T5342] done [ 68.657784][ T5342] bcachefs (loop0): going read-write [ 68.783607][ T5342] bcachefs (loop0): journal_replay... done [ 68.825426][ T5342] bcachefs (loop0): check_extents_to_backpointers... [ 68.826511][ T5342] bcachefs (loop0): scanning for missing backpointers in 4/128 buckets [ 68.835560][ T5342] done [ 68.837465][ T5342] bcachefs (loop0): check_subvols... [ 68.837822][ T5342] bcachefs (loop0): running recovery pass reconstruct_snapshots (21), currently at check_subvols (24) - rewinding [ 68.848887][ T5342] bcachefs (loop0): bch2_check_subvols(): error restart_recovery [ 68.854255][ T5342] bcachefs (loop0): reconstruct_snapshots... [ 68.854714][ T5342] bcachefs (loop0): snapshot node 4294905343 from tree 4294905343 missing, recreating [ 68.901642][ T5342] bcachefs (loop0): snapshot node 4294967295 from tree 4294967295 missing, recreating [ 68.907104][ T5342] done [ 68.908672][ T5342] bcachefs (loop0): check_subvols... [ 68.909272][ T5342] bcachefs (loop0): subvolume 1 points to missing subvolume root 4096:4294967295, fixing [ 68.917874][ T5342] bcachefs (loop0): subvolume 1 is not set as snapshot but is not master subvolume, fixing [ 68.930754][ T5342] done [ 68.936284][ T5342] bcachefs (loop0): check_inodes... done [ 68.940081][ T5342] bcachefs (loop0): check_dirents... [ 68.940759][ T5342] bcachefs (loop0): hash table key at wrong offset: should be at 6367435666276050188 [ 68.940771][ T5342] u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing [ 68.955865][ T5342] bcachefs (loop0): hash table key at wrong offset: should be at 2847700822469680491 [ 68.955880][ T5342] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 68.966022][ T5342] bcachefs (loop0): hash table key at wrong offset: should be at 4837865568136719948 [ 68.966037][ T5342] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 68.978045][ T5342] bcachefs (loop0): dirent points to missing inode: [ 68.978072][ T5342] u64s 7 type dirent 4096:2847700822469680491:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 68.987164][ T5342] bcachefs (loop0): hash table key at wrong offset: should be at 5257517021892700007 [ 68.987178][ T5342] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 68.997914][ T5342] bcachefs (loop0): dirent points to missing inode: [ 68.997923][ T5342] u64s 7 type dirent 4096:4837865568136719948:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 69.006619][ T5342] bcachefs (loop0): dirent points to missing inode: [ 69.006631][ T5342] u64s 7 type dirent 4096:5257517021892700007:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 69.016246][ T5342] bcachefs (loop0): dirent points to missing inode: [ 69.016259][ T5342] u64s 7 type dirent 4096:6367435666276050188:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing [ 69.025325][ T5342] bcachefs (loop0): hash table key at wrong offset: should be at 8374260824526749696 [ 69.025337][ T5342] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 69.036604][ T5342] bcachefs (loop0): dirent points to missing inode: [ 69.036616][ T5342] u64s 8 type dirent 4096:8374260824526749696:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 69.045723][ T5342] bcachefs (loop0): hash table key at wrong offset: should be at 8618069992808845298 [ 69.045736][ T5342] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing [ 69.056890][ T5342] bcachefs (loop0): fsck counted subdirectories wrong for inum 4096:4294967295: got 3 should be 0 [ 69.062049][ T5342] bcachefs (loop0): key in missing inode, found keys: [ 69.062060][ T5342] u64s 7 type dirent 4098:5675548428000973578:U32_MAX len 0 ver 0: file1 -> 4100 type lnk [ 69.062066][ T5342] u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 4099 type reg [ 69.062072][ T5342] , fixing [ 69.077279][ T5342] bcachefs (loop0): key in missing inode, found keys: [ 69.077290][ T5342] u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 4099 type reg [ 69.077297][ T5342] , fixing [ 69.086598][ T5342] bcachefs (loop0): check_dirents requires second pass [ 69.089809][ T5342] bcachefs (loop0): dirent points to missing inode: [ 69.089819][ T5342] u64s 8 type dirent 4096:8618069992808845298:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing [ 69.101051][ T5342] ================================================================== [ 69.104557][ T5342] BUG: KASAN: use-after-free in bch2_check_dirents+0x1fac/0x33f0 [ 69.113069][ T5342] Read of size 1 at addr ffff888054963048 by task syz.0.0/5342 [ 69.116565][ T5342] [ 69.117722][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 69.117746][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.117754][ T5342] Call Trace: [ 69.117762][ T5342] [ 69.117768][ T5342] dump_stack_lvl+0x189/0x250 [ 69.117788][ T5342] ? __virt_addr_valid+0x1c8/0x5c0 [ 69.117803][ T5342] ? rcu_is_watching+0x15/0xb0 [ 69.117815][ T5342] ? __kasan_check_byte+0x12/0x40 [ 69.117829][ T5342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.117841][ T5342] ? rcu_is_watching+0x15/0xb0 [ 69.117853][ T5342] ? lock_release+0x4b/0x3e0 [ 69.117865][ T5342] ? __virt_addr_valid+0x1c8/0x5c0 [ 69.117879][ T5342] ? __virt_addr_valid+0x4a5/0x5c0 [ 69.117892][ T5342] print_report+0xd2/0x2b0 [ 69.117912][ T5342] ? bch2_check_dirents+0x1fac/0x33f0 [ 69.117926][ T5342] kasan_report+0x118/0x150 [ 69.117940][ T5342] ? bch2_check_dirents+0x1fac/0x33f0 [ 69.117954][ T5342] bch2_check_dirents+0x1fac/0x33f0 [ 69.117965][ T5342] ? bch2_check_dirents+0x2f1/0x33f0 [ 69.117976][ T5342] ? desc_read+0x1b8/0x3f0 [ 69.117988][ T5342] ? prb_first_seq+0xfd/0x1a0 [ 69.117998][ T5342] ? __pfx_bch2_check_dirents+0x10/0x10 [ 69.118008][ T5342] ? __pfx_prb_first_seq+0x10/0x10 [ 69.118018][ T5342] ? desc_read+0x1b8/0x3f0 [ 69.118028][ T5342] ? this_cpu_in_panic+0x4f/0x80 [ 69.118040][ T5342] ? _prb_read_valid+0xa07/0xa90 [ 69.118051][ T5342] ? console_flush_all+0x13a/0xc40 [ 69.118066][ T5342] ? up+0xde/0x150 [ 69.118147][ T5342] ? __console_unlock+0x14c/0x1a0 [ 69.118161][ T5342] ? __pfx___console_unlock+0x10/0x10 [ 69.118174][ T5342] ? prb_read_valid+0x3c/0x60 [ 69.118185][ T5342] ? console_unlock+0x21b/0x270 [ 69.118197][ T5342] ? __pfx_console_unlock+0x10/0x10 [ 69.118210][ T5342] ? vprintk_emit+0x63e/0x7a0 [ 69.118229][ T5342] ? __bch2_print+0x176/0x220 [ 69.118244][ T5342] ? bch2_check_dirents+0x2f1/0x33f0 [ 69.118257][ T5342] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.118301][ T5342] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.118318][ T5342] __bch2_run_recovery_passes+0x395/0x1010 [ 69.118340][ T5342] bch2_run_recovery_passes+0x184/0x210 [ 69.118353][ T5342] bch2_fs_recovery+0x2690/0x3a50 [ 69.118364][ T5342] ? check_noncircular+0xe0/0x160 [ 69.118380][ T5342] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 69.118395][ T5342] ? __lock_acquire+0xab9/0xd20 [ 69.118408][ T5342] ? __lock_acquire+0xab9/0xd20 [ 69.118419][ T5342] ? __lock_acquire+0xab9/0xd20 [ 69.118434][ T5342] ? bch2_fs_start+0x9fe/0xd90 [ 69.118448][ T5342] ? up_write+0x1c4/0x420 [ 69.118461][ T5342] ? bch2_fs_start+0x5c4/0xd90 [ 69.118474][ T5342] bch2_fs_start+0xa99/0xd90 [ 69.118486][ T5342] ? bch2_fs_start+0x5c4/0xd90 [ 69.118500][ T5342] ? __pfx_bch2_fs_start+0x10/0x10 [ 69.118516][ T5342] ? sget+0x267/0x620 [ 69.118528][ T5342] bch2_fs_get_tree+0xafc/0x14f0 [ 69.118546][ T5342] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 69.118561][ T5342] ? aa_get_newest_label+0xf7/0x5d0 [ 69.118576][ T5342] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 69.118592][ T5342] ? apparmor_capable+0x137/0x1b0 [ 69.118604][ T5342] vfs_get_tree+0x92/0x2b0 [ 69.118618][ T5342] do_new_mount+0x24a/0xa40 [ 69.118634][ T5342] __se_sys_mount+0x317/0x410 [ 69.118648][ T5342] ? __pfx___se_sys_mount+0x10/0x10 [ 69.118663][ T5342] ? do_syscall_64+0xbe/0x3b0 [ 69.118673][ T5342] ? __x64_sys_mount+0x20/0xc0 [ 69.118687][ T5342] do_syscall_64+0xfa/0x3b0 [ 69.118697][ T5342] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.118712][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.118722][ T5342] ? clear_bhb_loop+0x60/0xb0 [ 69.118741][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.118752][ T5342] RIP: 0033:0x7ff6687900ca [ 69.118765][ T5342] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.118774][ T5342] RSP: 002b:00007ff6696b2e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.118787][ T5342] RAX: ffffffffffffffda RBX: 00007ff6696b2ef0 RCX: 00007ff6687900ca [ 69.118794][ T5342] RDX: 00002000000058c0 RSI: 0000200000005900 RDI: 00007ff6696b2eb0 [ 69.118801][ T5342] RBP: 00002000000058c0 R08: 00007ff6696b2ef0 R09: 000000000000000b [ 69.118808][ T5342] R10: 000000000000000b R11: 0000000000000246 R12: 0000200000005900 [ 69.118814][ T5342] R13: 00007ff6696b2eb0 R14: 0000000000005903 R15: 0000200000000a00 [ 69.118824][ T5342] [ 69.118827][ T5342] [ 69.312304][ T5342] The buggy address belongs to the physical page: [ 69.314771][ T5342] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54963 [ 69.318630][ T5342] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 69.321893][ T5342] raw: 04fff00000000000 0000000000000000 ffffea00015258c8 0000000000000000 [ 69.325487][ T5342] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 69.329232][ T5342] page dumped because: kasan: bad access detected [ 69.332044][ T5342] page_owner tracks the page as freed [ 69.334439][ T5342] page last allocated via order 5, migratetype Unmovable, gfp_mask 0x42800(GFP_NOWAIT|__GFP_COMP), pid 5342, tgid 5340 (syz.0.0), ts 68587767232, free_ts 69100585631 [ 69.341484][ T5342] post_alloc_hook+0x240/0x2a0 [ 69.343582][ T5342] get_page_from_freelist+0x21e4/0x22c0 [ 69.346071][ T5342] __alloc_frozen_pages_noprof+0x181/0x370 [ 69.348499][ T5342] __alloc_pages_noprof+0xa/0x30 [ 69.350622][ T5342] ___kmalloc_large_node+0x85/0x210 [ 69.352899][ T5342] __kmalloc_large_node_noprof+0x18/0x90 [ 69.355589][ T5342] __kvmalloc_node_noprof+0x6d/0x5f0 [ 69.357954][ T5342] bch2_btree_node_read_done+0x33c4/0x5700 [ 69.360600][ T5342] btree_node_read_work+0x426/0xe30 [ 69.362824][ T5342] bch2_btree_node_read+0x887/0x2a00 [ 69.365089][ T5342] bch2_btree_root_read+0x5f0/0x760 [ 69.367339][ T5342] read_btree_roots+0x2c6/0x840 [ 69.369440][ T5342] bch2_fs_recovery+0x261f/0x3a50 [ 69.371658][ T5342] bch2_fs_start+0xa99/0xd90 [ 69.373806][ T5342] bch2_fs_get_tree+0xafc/0x14f0 [ 69.376123][ T5342] vfs_get_tree+0x92/0x2b0 [ 69.378530][ T5342] page last free pid 5342 tgid 5340 stack trace: [ 69.381588][ T5342] __free_pages_ok+0xa44/0xc20 [ 69.383780][ T5342] __folio_put+0x21b/0x2c0 [ 69.386011][ T5342] free_large_kmalloc+0x145/0x200 [ 69.388359][ T5342] btree_node_sort+0x117f/0x1760 [ 69.390508][ T5342] bch2_btree_post_write_cleanup+0x11f/0xad0 [ 69.393094][ T5342] bch2_btree_node_prep_for_write+0x337/0x650 [ 69.395778][ T5342] bch2_trans_lock_write+0x669/0xba0 [ 69.398180][ T5342] __bch2_trans_commit+0x2773/0x8870 [ 69.400460][ T5342] bch2_check_dirents+0x1c5c/0x33f0 [ 69.402549][ T5342] __bch2_run_recovery_passes+0x395/0x1010 [ 69.405212][ T5342] bch2_run_recovery_passes+0x184/0x210 [ 69.407948][ T5342] bch2_fs_recovery+0x2690/0x3a50 [ 69.410292][ T5342] bch2_fs_start+0xa99/0xd90 [ 69.412348][ T5342] bch2_fs_get_tree+0xafc/0x14f0 [ 69.414434][ T5342] vfs_get_tree+0x92/0x2b0 [ 69.416372][ T5342] do_new_mount+0x24a/0xa40 [ 69.418387][ T5342] [ 69.419448][ T5342] Memory state around the buggy address: [ 69.421811][ T5342] ffff888054962f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.425336][ T5342] ffff888054962f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.428717][ T5342] >ffff888054963000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.432184][ T5342] ^ [ 69.435086][ T5342] ffff888054963080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.438779][ T5342] ffff888054963100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.442287][ T5342] ================================================================== [ 69.456259][ T5342] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.459425][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 69.464392][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.469259][ T5342] Call Trace: [ 69.470860][ T5342] [ 69.472222][ T5342] dump_stack_lvl+0x99/0x250 [ 69.474365][ T5342] ? __asan_memcpy+0x40/0x70 [ 69.476407][ T5342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.478698][ T5342] ? __pfx__printk+0x10/0x10 [ 69.480798][ T5342] panic+0x2db/0x790 [ 69.482641][ T5342] ? __pfx_panic+0x10/0x10 [ 69.484811][ T5342] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 69.487444][ T5342] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.490133][ T5342] ? print_memory_metadata+0x314/0x400 [ 69.492467][ T5342] ? bch2_check_dirents+0x1fac/0x33f0 [ 69.494717][ T5342] check_panic_on_warn+0x89/0xb0 [ 69.496903][ T5342] ? bch2_check_dirents+0x1fac/0x33f0 [ 69.499332][ T5342] end_report+0x78/0x160 [ 69.501353][ T5342] kasan_report+0x129/0x150 [ 69.503405][ T5342] ? bch2_check_dirents+0x1fac/0x33f0 [ 69.505705][ T5342] bch2_check_dirents+0x1fac/0x33f0 [ 69.508148][ T5342] ? bch2_check_dirents+0x2f1/0x33f0 [ 69.510513][ T5342] ? desc_read+0x1b8/0x3f0 [ 69.512457][ T5342] ? prb_first_seq+0xfd/0x1a0 [ 69.514546][ T5342] ? __pfx_bch2_check_dirents+0x10/0x10 [ 69.516925][ T5342] ? __pfx_prb_first_seq+0x10/0x10 [ 69.519141][ T5342] ? desc_read+0x1b8/0x3f0 [ 69.521053][ T5342] ? this_cpu_in_panic+0x4f/0x80 [ 69.523277][ T5342] ? _prb_read_valid+0xa07/0xa90 [ 69.525371][ T5342] ? console_flush_all+0x13a/0xc40 [ 69.527624][ T5342] ? up+0xde/0x150 [ 69.529239][ T5342] ? __console_unlock+0x14c/0x1a0 [ 69.531420][ T5342] ? __pfx___console_unlock+0x10/0x10 [ 69.533638][ T5342] ? prb_read_valid+0x3c/0x60 [ 69.535762][ T5342] ? console_unlock+0x21b/0x270 [ 69.537988][ T5342] ? __pfx_console_unlock+0x10/0x10 [ 69.540307][ T5342] ? vprintk_emit+0x63e/0x7a0 [ 69.542341][ T5342] ? __bch2_print+0x176/0x220 [ 69.544315][ T5342] ? bch2_check_dirents+0x2f1/0x33f0 [ 69.546655][ T5342] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.548907][ T5342] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.551222][ T5342] __bch2_run_recovery_passes+0x395/0x1010 [ 69.553827][ T5342] bch2_run_recovery_passes+0x184/0x210 [ 69.556373][ T5342] bch2_fs_recovery+0x2690/0x3a50 [ 69.558508][ T5342] ? check_noncircular+0xe0/0x160 [ 69.560608][ T5342] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 69.562834][ T5342] ? __lock_acquire+0xab9/0xd20 [ 69.564932][ T5342] ? __lock_acquire+0xab9/0xd20 [ 69.567150][ T5342] ? __lock_acquire+0xab9/0xd20 [ 69.569331][ T5342] ? bch2_fs_start+0x9fe/0xd90 [ 69.571546][ T5342] ? up_write+0x1c4/0x420 [ 69.573577][ T5342] ? bch2_fs_start+0x5c4/0xd90 [ 69.575819][ T5342] bch2_fs_start+0xa99/0xd90 [ 69.577857][ T5342] ? bch2_fs_start+0x5c4/0xd90 [ 69.579965][ T5342] ? __pfx_bch2_fs_start+0x10/0x10 [ 69.582291][ T5342] ? sget+0x267/0x620 [ 69.584032][ T5342] bch2_fs_get_tree+0xafc/0x14f0 [ 69.586196][ T5342] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 69.588624][ T5342] ? aa_get_newest_label+0xf7/0x5d0 [ 69.591144][ T5342] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 69.593630][ T5342] ? apparmor_capable+0x137/0x1b0 [ 69.595897][ T5342] vfs_get_tree+0x92/0x2b0 [ 69.597824][ T5342] do_new_mount+0x24a/0xa40 [ 69.599848][ T5342] __se_sys_mount+0x317/0x410 [ 69.602020][ T5342] ? __pfx___se_sys_mount+0x10/0x10 [ 69.604522][ T5342] ? do_syscall_64+0xbe/0x3b0 [ 69.606682][ T5342] ? __x64_sys_mount+0x20/0xc0 [ 69.608926][ T5342] do_syscall_64+0xfa/0x3b0 [ 69.611036][ T5342] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.613302][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.616027][ T5342] ? clear_bhb_loop+0x60/0xb0 [ 69.618077][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.620460][ T5342] RIP: 0033:0x7ff6687900ca [ 69.623256][ T5342] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.631544][ T5342] RSP: 002b:00007ff6696b2e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.635240][ T5342] RAX: ffffffffffffffda RBX: 00007ff6696b2ef0 RCX: 00007ff6687900ca [ 69.638784][ T5342] RDX: 00002000000058c0 RSI: 0000200000005900 RDI: 00007ff6696b2eb0 [ 69.642081][ T5342] RBP: 00002000000058c0 R08: 00007ff6696b2ef0 R09: 000000000000000b [ 69.645466][ T5342] R10: 000000000000000b R11: 0000000000000246 R12: 0000200000005900 [ 69.648963][ T5342] R13: 00007ff6696b2eb0 R14: 0000000000005903 R15: 0000200000000a00 [ 69.652414][ T5342] [ 69.654091][ T5342] Kernel Offset: disabled [ 69.655994][ T5342] Rebooting in 86400 seconds..