program: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xda0}]}) socket$kcm(0x2, 0xa, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="36360f01cb0f01d1ea00000000ac00b478eaa664d641440026f30f23700f01c966baf80cb89be3b889ef66bafc0cb000eec4e1f92ed40f20a4", 0x39}], 0x1, 0x8, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x3, 0x0, 0x3, 0x0, 0x4}, @cr0={0x0, 0xa0040012}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f0000b87e"], 0x50) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c7375626a5f726f6c653d6578743400958b6d0851677048c04d36fbcc821d83ddca83246b814587de84ddbdca1578843f3ee76299488494b97c7eec4a626700d8e8796dcaf3270f127180c1252e9a82a19004396a954aec6e6f1bf28c77e6d85d703422f7d51fad29aeac87f010416e388b3328cab065b79fbc53384fb4582938bc426bbe965f91a637628dc1dcf9b81c39d3e9282b03799beb8647a38c00000000"], 0x9, 0x59db, &(0x7f000000b300)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x4}) unshare(0x6a060080) socket$nl_generic(0x10, 0x3, 0x10) [ 77.377463][ T49] Bluetooth: hci0: command tx timeout [ 77.381232][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.385162][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.517694][ T5322] syz.0.0 uses obsolete (PF_INET,SOCK_PACKET) [ 78.161461][ T5323] loop0: detected capacity change from 0 to 32768 [ 78.920246][ T5323] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 78.983937][ T5323] invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, fixing [ 79.033493][ T5323] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 79.038194][ T5323] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.20: directory_size [ 79.038194][ T5323] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 79.116881][ T5323] bcachefs (loop0): error validating btree node at btree inodes level 0/0 [ 79.116905][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 79.116914][ T5323] node offset 16/24 bset u64s 110 bset byte offset 792: keys out of order: u64s 18 type inode_v3 0:536870913:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:117440514:U32_MAX len 0 ver 0, fixing [ 79.160469][ T5323] invalid bkey in btree_node btree=inodes level=0: u64s 16 type inode_v3 0:8:U32_MAX len 0 ver 0: [ 79.160485][ T5323] mode=40755 [ 79.160492][ T5323] flags=(16300000) [ 79.160498][ T5323] journal_seq=1 [ 79.160505][ T5323] hash_seed=28e4f092a4fc58ee [ 79.160511][ T5323] hash_type=siphash [ 79.160516][ T5323] bi_size=0 [ 79.160522][ T5323] bi_sectors=0 [ 79.160528][ T5323] bi_version=0 [ 79.160534][ T5323] bi_atime=200535484 [ 79.160540][ T5323] bi_ctime=200535484 [ 79.160546][ T5323] bi_mtime=200535484 [ 79.160552][ T5323] bi_otime=200535484 [ 79.160558][ T5323] bi_uid=0 [ 79.160565][ T5323] bi_gid=0 [ 79.160570][ T5323] bi_nlink=1 [ 79.160576][ T5323] bi_generation=0 [ 79.160581][ T5323] bi_dev=0 [ 79.160587][ T5323] bi_data_checksum=0 [ 79.160593][ T5323] bi_compression=0 [ 79.160599][ T5323] bi_project=0 [ 79.160604][ T5323] bi_background_compression=0 [ 79.160609][ T5323] bi_data_replicas=0 [ 79.160615][ T5323] bi_promote_target=0 [ 79.160620][ T5323] bi_foreground_target=0 [ 79.160626][ T5323] bi_background_target=0 [ 79.160632][ T5323] bi_erasure_code=0 [ 79.160638][ T5323] bi_fields_set=0 [ 79.160643][ T5323] bi_dir=0 [ 79.160648][ T5323] bi_dir_offset=0 [ 79.160654][ T5323] bi_subvol=1 [ 79.160659][ T5323] bi_parent_subvol=0 [ 79.160665][ T5323] bi_nocow=0 [ 79.160670][ T5323] bi_depth=0 [ 79.160675][ T5323] bi_inodes_32bit=0 [ 79.160681][ T5323] fs inode in blockdev range: delete?, fixing [ 79.423064][ T49] Bluetooth: hci0: command tx timeout [ 79.526483][ T5323] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0: [ 79.526499][ T5323] mode=40740 [ 79.526505][ T5323] flags=(0) [ 79.526510][ T5323] journal_seq=4 [ 79.526517][ T5323] hash_seed=ece93825deac2443 [ 79.526523][ T5323] hash_type=crc32c [ 79.526529][ T5323] bi_size=0 [ 79.526534][ T5323] bi_sectors=0 [ 79.526540][ T5323] bi_version=0 [ 79.526546][ T5323] bi_atime=0 [ 79.526552][ T5323] bi_ctime=0 [ 79.526558][ T5323] bi_mtime=0 [ 79.526563][ T5323] bi_otime=0 [ 79.526570][ T5323] bi_uid=0 [ 79.526575][ T5323] bi_gid=0 [ 79.526581][ T5323] bi_nlink=0 [ 79.526587][ T5323] bi_generation=0 [ 79.526593][ T5323] bi_dev=0 [ 79.526598][ T5323] bi_data_checksum=0 [ 79.526610][ T5323] bi_compression=0 [ 79.526614][ T5323] bi_project=0 [ 79.526617][ T5323] bi_background_compression=0 [ 79.526622][ T5323] bi_data_replicas=0 [ 79.526625][ T5323] bi_promote_target=0 [ 79.526629][ T5323] bi_foreground_target=0 [ 79.526634][ T5323] bi_background_target=0 [ 79.526639][ T5323] bi_erasure_code=0 [ 79.526645][ T5323] bi_fields_set=0 [ 79.526650][ T5323] bi_dir=0 [ 79.526655][ T5323] bi_dir_offset=0 [ 79.526661][ T5323] bi_subvol=0 [ 79.526666][ T5323] bi_parent_subvol=0 [ 79.526672][ T5323] bi_nocow=0 [ 79.526678][ T5323] bi_depth=0 [ 79.526683][ T5323] bi_inodes_32bit=0 [ 79.526689][ T5323] invalid fields_start (got 0, min 6 max 13): deleting [ 79.739291][ T5323] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 79.739291][ T5323] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 79.762428][ T5323] bcachefs (loop0): error validating btree node at btree dirents level 0/0 [ 79.762440][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 79.762446][ T5323] node offset 16/24 bset u64s 36 bset byte offset 200: bad k->u64s 0 (min 3 max 253), fixing [ 79.803030][ T5323] invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: /ا -> 536870912 type reg [ 79.803047][ T5323] name with /: delete?, fixing [ 79.810615][ T5323] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 79.810615][ T5323] btree=dirents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 79.893995][ T5323] invalid bkey in btree_node btree=alloc level=0: u64s 11 type alloc_v4 0:15:0 len 0 ver 0: [ 79.894012][ T5323] gen 0 oldest_gen 0 data_type free [ 79.894018][ T5323] journal_seq_nonempty 1 [ 79.894025][ T5323] journal_seq_empty 0 [ 79.894031][ T5323] need_discard 1 [ 79.894038][ T5323] need_inc_gen 1 [ 79.894044][ T5323] dirty_sectors 308 [ 79.894050][ T5323] stripe_sectors 0 [ 79.894057][ T5323] cached_sectors 0 [ 79.894064][ T5323] stripe 0 [ 79.894069][ T5323] stripe_redundancy 0 [ 79.894075][ T5323] io_time[READ] 1 [ 79.894082][ T5323] io_time[WRITE] 1 [ 79.894087][ T5323] fragmentation 0 [ 79.894093][ T5323] bp_start 8 [ 79.894097][ T5323] [ 79.894103][ T5323] empty data type free but have data 0.308.0 0: delete?, fixing [ 80.074323][ T5323] invalid bkey in btree_node btree=alloc level=0: u64s 15 type alloc_v4 0:26:0 len 0 ver 0: [ 80.074338][ T5323] gen 0 oldest_gen 0 data_type sb [ 80.074345][ T5323] journal_seq_nonempty 1 [ 80.074352][ T5323] journal_seq_empty 0 [ 80.074378][ T5323] need_discard 1 [ 80.074384][ T5323] need_inc_gen 1 [ 80.074390][ T5323] dirty_sectors 0 [ 80.074396][ T5323] stripe_sectors 0 [ 80.074402][ T5323] cached_sectors 0 [ 80.074409][ T5323] stripe 0 [ 80.074414][ T5323] stripe_redundancy 0 [ 80.074421][ T5323] io_time[READ] 1 [ 80.074427][ T5323] io_time[WRITE] 1 [ 80.074439][ T5323] fragmentation 0 [ 80.074446][ T5323] bp_start 8 [ 80.074451][ T5323] [ 80.074458][ T5323] data_type sb but dirty_sectors==0: delete?, fixing [ 80.283807][ T5323] bcachefs (loop0): error validating btree node on loop0 at btree snapshots level 0/0 [ 80.283835][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 80.283846][ T5323] node offset 0/16: incorrect min_key: got 0:21474836480:0 should be POS_MIN [ 80.342887][ T5323] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 80.347742][ T5323] bcachefs (loop0): flagging btree snapshots lost data [ 80.350622][ T5323] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 80.383610][ T5323] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 80.388008][ T5323] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 80.447878][ T5323] error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 80.537793][ T5323] bcachefs (loop0): scan_for_btree_nodes... [ 80.538707][ T5323] bcachefs (loop0): error starting kthread: -4 [ 80.573417][ T5323] bcachefs (loop0): bch2_fs_recovery(): error EINTR [ 80.604535][ T5323] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 80.628319][ T5323] bcachefs (loop0): shutting down [ 80.726887][ T5323] bcachefs (loop0): shutdown complete [ 80.777898][ T80] BUG: unable to handle page fault for address: ffffe8ffff5fe038 [ 80.780553][ T80] #PF: supervisor write access in kernel mode [ 80.782751][ T80] #PF: error_code(0x0002) - not-present page [ 80.784704][ T80] PGD 1b03f067 P4D 1b03f067 PUD 1ebb4067 PMD 560ae067 PTE 0 [ 80.787184][ T80] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI [ 80.789293][ T80] CPU: 0 UID: 0 PID: 80 Comm: kswapd0 Not tainted 6.14.0-rc7-syzkaller-00186-gd07de43e3f05 #0 [ 80.792960][ T80] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.797078][ T80] RIP: 0010:bch2_btree_cache_scan+0xb57/0xec0 [ 80.801070][ T80] Code: 24 38 0f 85 12 02 00 00 44 21 2a 48 81 c3 48 b6 04 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 3c b6 e1 fd 48 8b 03 <65> 48 ff 40 38 41 80 3c 2e 00 74 08 4c 89 ff e8 25 b6 e1 fd 49 8b [ 80.808660][ T80] RSP: 0018:ffffc9000107f2c0 EFLAGS: 00010246 [ 80.811213][ T80] RAX: 0000607fdf9fe000 RBX: ffff888056c4b648 RCX: ffffffff8c0a7987 [ 80.814405][ T80] RDX: ffff88801f68a46c RSI: 0000000000000008 RDI: ffffc9000107f240 [ 80.817574][ T80] RBP: dffffc0000000000 R08: ffffc9000107f247 R09: 1ffff9200020fe48 [ 80.820750][ T80] R10: dffffc0000000000 R11: fffff5200020fe49 R12: 0000000000000003 [ 80.823903][ T80] R13: 00000000fffbffff R14: 1ffff9200020feb5 R15: ffffc9000107f5a8 [ 80.826983][ T80] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 80.830744][ T80] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.833245][ T80] CR2: ffffe8ffff5fe038 CR3: 000000004258a000 CR4: 0000000000352ef0 [ 80.836206][ T80] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.839082][ T80] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.841992][ T80] Call Trace: [ 80.843312][ T80] [ 80.844619][ T80] ? __die_body+0x5f/0xb0 [ 80.846359][ T80] ? page_fault_oops+0x8e4/0xcc0 [ 80.848556][ T80] ? __pfx_page_fault_oops+0x10/0x10 [ 80.850719][ T80] ? is_prefetch+0x4ed/0x780 [ 80.852606][ T80] ? __pfx_is_prefetch+0x10/0x10 [ 80.854609][ T80] ? __bad_area_nosemaphore+0x118/0x770 [ 80.856996][ T80] ? __mutex_lock+0x397/0x1010 [ 80.859231][ T80] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 80.862061][ T80] ? spurious_kernel_fault+0x119/0x5a0 [ 80.864691][ T80] ? do_kern_addr_fault+0x30/0x80 [ 80.867136][ T80] ? exc_page_fault+0x5c8/0x8b0 [ 80.869493][ T80] ? asm_exc_page_fault+0x26/0x30 [ 80.872047][ T80] ? __mutex_unlock_slowpath+0x227/0x800 [ 80.874903][ T80] ? bch2_btree_cache_scan+0xb57/0xec0 [ 80.877583][ T80] do_shrink_slab+0x72d/0x1160 [ 80.879664][ T80] ? shrink_slab+0x12b/0x14d0 [ 80.881643][ T80] shrink_slab+0x1093/0x14d0 [ 80.883569][ T80] ? shrink_slab+0x12b/0x14d0 [ 80.885966][ T80] ? __pfx_shrink_slab+0x10/0x10 [ 80.888524][ T80] ? shrink_node+0x3546/0x3e20 [ 80.891117][ T80] ? __pfx_lock_release+0x10/0x10 [ 80.893581][ T80] shrink_one+0x43b/0x850 [ 80.895640][ T80] ? shrink_node+0x3546/0x3e20 [ 80.897881][ T80] shrink_node+0x379b/0x3e20 [ 80.899688][ T80] ? shrink_node+0x3546/0x3e20 [ 80.901651][ T80] ? __pfx_lock_acquire+0x10/0x10 [ 80.903610][ T80] ? percpu_ref_put+0x19/0x180 [ 80.905344][ T80] ? __pfx_lock_release+0x10/0x10 [ 80.907255][ T80] ? __pfx_shrink_node+0x10/0x10 [ 80.909170][ T80] ? mem_cgroup_iter+0x3d/0x420 [ 80.911162][ T80] kswapd+0x20f3/0x3b10 [ 80.913012][ T80] ? kswapd+0xb9f/0x3b10 [ 80.914728][ T80] ? __pfx_kswapd+0x10/0x10 [ 80.916362][ T80] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.918725][ T80] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.921202][ T80] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.923830][ T80] ? __wait_for_common+0x6b0/0x6e0 [ 80.925939][ T80] ? __pfx_autoremove_wake_function+0x10/0x10 [ 80.928311][ T80] ? __kthread_parkme+0x169/0x1d0 [ 80.930395][ T80] ? __pfx_kswapd+0x10/0x10 [ 80.932062][ T80] kthread+0x7a9/0x920 [ 80.933525][ T80] ? __pfx_kthread+0x10/0x10 [ 80.935154][ T80] ? __pfx_kswapd+0x10/0x10 [ 80.936867][ T80] ? __pfx_kthread+0x10/0x10 [ 80.938627][ T80] ? __pfx_kthread+0x10/0x10 [ 80.940355][ T80] ? __pfx_kthread+0x10/0x10 [ 80.942094][ T80] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.943907][ T80] ? lockdep_hardirqs_on+0x99/0x150 [ 80.945816][ T80] ? __pfx_kthread+0x10/0x10 [ 80.947431][ T80] ret_from_fork+0x4b/0x80 [ 80.948915][ T80] ? __pfx_kthread+0x10/0x10 [ 80.950547][ T80] ret_from_fork_asm+0x1a/0x30 [ 80.952217][ T80] [ 80.953384][ T80] Modules linked in: [ 80.954824][ T80] CR2: ffffe8ffff5fe038 [ 80.956450][ T80] ---[ end trace 0000000000000000 ]--- [ 80.958588][ T80] RIP: 0010:bch2_btree_cache_scan+0xb57/0xec0 [ 80.960929][ T80] Code: 24 38 0f 85 12 02 00 00 44 21 2a 48 81 c3 48 b6 04 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 3c b6 e1 fd 48 8b 03 <65> 48 ff 40 38 41 80 3c 2e 00 74 08 4c 89 ff e8 25 b6 e1 fd 49 8b [ 80.967883][ T80] RSP: 0018:ffffc9000107f2c0 EFLAGS: 00010246 [ 80.970199][ T80] RAX: 0000607fdf9fe000 RBX: ffff888056c4b648 RCX: ffffffff8c0a7987 [ 80.973203][ T80] RDX: ffff88801f68a46c RSI: 0000000000000008 RDI: ffffc9000107f240 [ 80.976039][ T80] RBP: dffffc0000000000 R08: ffffc9000107f247 R09: 1ffff9200020fe48 [ 80.978981][ T80] R10: dffffc0000000000 R11: fffff5200020fe49 R12: 0000000000000003 [ 80.982080][ T80] R13: 00000000fffbffff R14: 1ffff9200020feb5 R15: ffffc9000107f5a8 [ 80.985031][ T80] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 80.987788][ T80] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.989904][ T80] CR2: ffffe8ffff5fe038 CR3: 000000004258a000 CR4: 0000000000352ef0 [ 80.992442][ T80] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.995004][ T80] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.997513][ T80] Kernel panic - not syncing: Fatal exception [ 80.999751][ T80] Kernel Offset: disabled [ 81.001244][ T80] Rebooting in 86400 seconds..