program: syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x818001, &(0x7f0000000480)={[{@inodes_32bit}, {@shared_inode_numbers}, {@errors_continue}, {@inline_data}, {@direct_io}, {@nochanges}, {@prjquota}, {@grpquota}, {@version_upgrade={'version_upgrade', 0x3d, 'incompatible'}}]}, 0x21, 0x5978, &(0x7f000000b5c0)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) [ 80.672155][ T5341] syz.0.0 (5341) used greatest stack depth: 16472 bytes left [ 77.231305][ T4690] Bluetooth: hci0: command tx timeout [ 77.235787][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.239828][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.017545][ T5341] loop0: detected capacity change from 0 to 32768 [ 78.272366][ T5341] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,grpquota,prjquota,nochanges,nojournal_transaction_names,read_only,version_upgrade=incompatible [ 78.272387][ T5341] allowing incompatible features above 0.0: (unknown version) [ 78.272395][ T5341] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 78.392391][ T5341] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 78.406520][ T5341] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 78.424915][ T5341] bcachefs (loop0): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:c0004000b compress none [ 78.424934][ T5341] has non ptr field, deleting [ 78.452202][ T5341] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 78.457346][ T5341] bcachefs (loop0): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 78.457346][ T5341] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive [ 78.457346][ T5341] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 78.488866][ T5341] bcachefs (loop0): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version) [ 78.488866][ T5341] [ 78.572144][ T5341] bcachefs (loop0): btree node read error at btree snapshots level 0/0 [ 78.572177][ T5341] u64s 11 type btree_ptr_v2 POS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 251 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 78.572186][ T5341] loop0 node offset 0/251 bset u64s 0: incorrect max key SPOS_MAX [ 78.572192][ T5341] flagging btree snapshots lost data [ 78.572198][ T5341] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 78.572204][ T5341] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 78.572212][ T5341] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 78.572218][ T5341] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 78.572225][ T5341] ret btree_node_read_validate_error [ 78.686253][ T5341] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 78.713241][ T5341] bcachefs (loop0): check_topology... [ 78.725011][ T5341] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 78.734286][ T5341] bcachefs (loop0): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 78.746051][ T5341] bcachefs (loop0): bch2_check_root(): error restart_recovery [ 78.751878][ T5341] bcachefs (loop0): scan_for_btree_nodes... [ 78.769977][ T5341] bcachefs (loop0): btree node scan found 7 nodes after overwrites [ 78.777165][ T5341] done [ 78.779044][ T5341] bcachefs (loop0): check_topology... [ 78.779616][ T5341] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 78.791282][ T5341] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=snapshots level=0 POS_MIN - SPOS_MAX [ 78.797567][ T5341] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 78.816687][ T5341] done [ 78.818850][ T5341] bcachefs (loop0): accounting_read... done [ 78.824172][ T5341] bcachefs (loop0): alloc_read... done [ 78.827850][ T5341] bcachefs (loop0): snapshots_read... done [ 78.833992][ T5341] bcachefs (loop0): check_allocations... [ 78.841585][ T5341] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 78.841612][ T5341] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 8 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 78.858215][ T5341] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 78.858235][ T5341] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 78.872405][ T5341] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 78.872420][ T5341] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 78.885635][ T5341] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 78.885649][ T5341] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 78.898827][ T5341] bcachefs (loop0): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 78.898842][ T5341] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 78.911837][ T5341] bcachefs (loop0): bucket 0:0 gen 0 has wrong data_type: got free, should be sb, fixing [ 78.915933][ T5341] bcachefs (loop0): bucket 0:0 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 78.923981][ T5341] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 78.928094][ T5341] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 78.934324][ T5341] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 78.938407][ T5341] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 78.944005][ T5341] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 78.952263][ T5341] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 78.957651][ T5341] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 78.964057][ T5341] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 78.973092][ T5341] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 78.978016][ T5341] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 78.985385][ T5341] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 78.993667][ T5341] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.024823][ T5341] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.052931][ T5341] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.066947][ T5341] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.078847][ T5341] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 79.089442][ T5341] bcachefs (loop0): bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.098688][ T5341] bcachefs (loop0): bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.104674][ T5341] bcachefs (loop0): bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.104687][ T5341] Ratelimiting new instances of previous error [ 79.124047][ T5341] bcachefs (loop0): bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.124061][ T5341] Ratelimiting new instances of previous error [ 79.151433][ T5341] done [ 79.158894][ T5341] bcachefs (loop0): going read-write [ 79.240998][ T4690] Bluetooth: hci0: command tx timeout [ 79.345698][ T5341] bcachefs (loop0): journal_replay... done [ 79.392250][ T5341] bcachefs (loop0): check_lrus... done [ 79.396185][ T5341] bcachefs (loop0): check_backpointers_to_extents... done [ 79.400115][ T5341] bcachefs (loop0): check_extents_to_backpointers... [ 79.413600][ T5341] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 79.434968][ T5341] done [ 79.436911][ T5341] bcachefs (loop0): reconstruct_snapshots... done [ 79.441239][ T5341] bcachefs (loop0): check_subvols... done [ 79.460201][ T5341] bcachefs (loop0): check_inodes... done [ 79.464734][ T5341] bcachefs (loop0): check_dirents... [ 79.465823][ T5341] bcachefs (loop0): key in missing inode, found keys: [ 79.465884][ T5341] u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir [ 79.465894][ T5341] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg [ 79.465903][ T5341] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg [ 79.465912][ T5341] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg [ 79.465920][ T5341] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir [ 79.465927][ T5341] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg [ 79.465936][ T5341] , fixing [ 79.527856][ T5341] bcachefs (loop0): hash table key at wrong offset: should be at 121736567861767533 [ 79.527874][ T5341] u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing [ 79.545345][ T5341] bcachefs (loop0): hash table key at wrong offset: should be at 409675145827873768 [ 79.545375][ T5341] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 79.557166][ T5341] bcachefs (loop0): hash table key at wrong offset: should be at 3692819849360167456 [ 79.557231][ T5341] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 79.573192][ T5341] bcachefs (loop0): dirent points to missing inode: [ 79.573205][ T5341] u64s 7 type dirent 4096:3692819849360167456:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 79.587033][ T5341] bcachefs (loop0): hash table key at wrong offset: should be at 983365334377447496 [ 79.587049][ T5341] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 79.602463][ T5341] bcachefs (loop0): hash table key at wrong offset: should be at 6441445589796882556 [ 79.602478][ T5341] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 79.614990][ T5341] bcachefs (loop0): hash table key at wrong offset: should be at 5869606323030417545 [ 79.615004][ T5341] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing [ 79.634646][ T5341] bcachefs (loop0): key in missing inode, found keys: [ 79.634660][ T5341] u64s 7 type dirent 4098:5675548428000973578:U32_MAX len 0 ver 0: file1 -> 4100 type lnk [ 79.634668][ T5341] u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 4099 type reg [ 79.634678][ T5341] , fixing [ 79.654817][ T5341] bcachefs (loop0): key in missing inode, found keys: [ 79.654831][ T5341] u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 4099 type reg [ 79.654840][ T5341] , fixing [ 79.678356][ T5341] bcachefs (loop0): check_dirents requires second pass [ 79.685869][ T5341] bcachefs (loop0): dirent points to missing inode: [ 79.685883][ T5341] u64s 7 type dirent 4096:121736567861767533:U32_MAX len 0 ver 0: file0 -> 4098 type dir, fixing [ 79.708256][ T5341] bcachefs (loop0): dirent points to missing inode: [ 79.708270][ T5341] u64s 7 type dirent 4096:409675145827873768:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 79.726411][ T5341] bcachefs (loop0): dirent points to missing inode: [ 79.726424][ T5341] u64s 7 type dirent 4096:983365334377447496:U32_MAX len 0 ver 0: file1 -> 536870912 type reg, fixing [ 79.746989][ T5341] bcachefs (loop0): dirent points to missing inode: [ 79.747002][ T5341] u64s 8 type dirent 4096:5869606323030417545:U32_MAX len 0 ver 0: file.cold -> 536870914 type reg, fixing [ 79.769817][ T5341] bcachefs (loop0): dirent points to missing inode: [ 79.769882][ T5341] u64s 8 type dirent 4096:6441445589796882556:U32_MAX len 0 ver 0: lost+found -> 4097 type dir, fixing [ 79.788662][ T5341] ================================================================== [ 79.797234][ T5341] BUG: KASAN: use-after-free in bch2_check_dirents+0x1fac/0x33f0 [ 79.802328][ T5341] Read of size 1 at addr ffff888055063048 by task syz.0.0/5341 [ 79.823562][ T5341] [ 79.826565][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 79.826583][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.826590][ T5341] Call Trace: [ 79.826598][ T5341] [ 79.826604][ T5341] dump_stack_lvl+0x189/0x250 [ 79.826621][ T5341] ? __virt_addr_valid+0x1c8/0x5c0 [ 79.826636][ T5341] ? rcu_is_watching+0x15/0xb0 [ 79.826649][ T5341] ? __kasan_check_byte+0x12/0x40 [ 79.826664][ T5341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.826675][ T5341] ? rcu_is_watching+0x15/0xb0 [ 79.826687][ T5341] ? lock_release+0x4b/0x3e0 [ 79.826700][ T5341] ? __virt_addr_valid+0x1c8/0x5c0 [ 79.826713][ T5341] ? __virt_addr_valid+0x4a5/0x5c0 [ 79.826724][ T5341] print_report+0xd2/0x2b0 [ 79.826733][ T5341] ? bch2_check_dirents+0x1fac/0x33f0 [ 79.826746][ T5341] kasan_report+0x118/0x150 [ 79.826761][ T5341] ? bch2_check_dirents+0x1fac/0x33f0 [ 79.826776][ T5341] bch2_check_dirents+0x1fac/0x33f0 [ 79.826793][ T5341] ? bch2_check_dirents+0x2f1/0x33f0 [ 79.826804][ T5341] ? desc_read+0x1b8/0x3f0 [ 79.826818][ T5341] ? prb_first_seq+0xfd/0x1a0 [ 79.826829][ T5341] ? __pfx_bch2_check_dirents+0x10/0x10 [ 79.826841][ T5341] ? __pfx_prb_first_seq+0x10/0x10 [ 79.826854][ T5341] ? desc_read+0x1b8/0x3f0 [ 79.826867][ T5341] ? this_cpu_in_panic+0x4f/0x80 [ 79.826879][ T5341] ? _prb_read_valid+0xa07/0xa90 [ 79.826891][ T5341] ? console_flush_all+0x13a/0xc40 [ 79.826906][ T5341] ? up+0xde/0x150 [ 79.826978][ T5341] ? __console_unlock+0x14c/0x1a0 [ 79.826991][ T5341] ? __pfx___console_unlock+0x10/0x10 [ 79.827008][ T5341] ? prb_read_valid+0x3c/0x60 [ 79.827020][ T5341] ? console_unlock+0x21b/0x270 [ 79.827033][ T5341] ? __pfx_console_unlock+0x10/0x10 [ 79.827048][ T5341] ? vprintk_emit+0x63e/0x7a0 [ 79.827067][ T5341] ? __bch2_print+0x176/0x220 [ 79.827082][ T5341] ? bch2_check_dirents+0x2f1/0x33f0 [ 79.827095][ T5341] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.827110][ T5341] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.827121][ T5341] __bch2_run_recovery_passes+0x395/0x1010 [ 79.827141][ T5341] bch2_run_recovery_passes+0x184/0x210 [ 79.827155][ T5341] bch2_fs_recovery+0x2690/0x3a50 [ 79.827167][ T5341] ? check_noncircular+0xe0/0x160 [ 79.827184][ T5341] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 79.827200][ T5341] ? __lock_acquire+0xab9/0xd20 [ 79.827214][ T5341] ? __lock_acquire+0xab9/0xd20 [ 79.827226][ T5341] ? __lock_acquire+0xab9/0xd20 [ 79.827243][ T5341] ? bch2_fs_start+0xa0f/0xda0 [ 79.827256][ T5341] ? up_write+0x1c4/0x420 [ 79.827269][ T5341] ? bch2_fs_start+0x5e7/0xda0 [ 79.827283][ T5341] bch2_fs_start+0xaaf/0xda0 [ 79.827297][ T5341] ? bch2_fs_start+0x5e7/0xda0 [ 79.827310][ T5341] ? __pfx_bch2_fs_start+0x10/0x10 [ 79.827329][ T5341] ? sget+0x267/0x620 [ 79.827341][ T5341] bch2_fs_get_tree+0xb39/0x1520 [ 79.827361][ T5341] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 79.827378][ T5341] ? aa_get_newest_label+0xf7/0x5d0 [ 79.827401][ T5341] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 79.827420][ T5341] ? apparmor_capable+0x137/0x1b0 [ 79.827434][ T5341] vfs_get_tree+0x92/0x2b0 [ 79.827448][ T5341] do_new_mount+0x24a/0xa40 [ 79.827464][ T5341] __se_sys_mount+0x317/0x410 [ 79.827480][ T5341] ? __pfx___se_sys_mount+0x10/0x10 [ 79.827495][ T5341] ? do_syscall_64+0xbe/0x3b0 [ 79.827506][ T5341] ? __x64_sys_mount+0x20/0xc0 [ 79.827521][ T5341] do_syscall_64+0xfa/0x3b0 [ 79.827532][ T5341] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.827542][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.827552][ T5341] ? clear_bhb_loop+0x60/0xb0 [ 79.827564][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.827575][ T5341] RIP: 0033:0x7f652df900ca [ 79.827587][ T5341] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.827596][ T5341] RSP: 002b:00007f652ed47e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.827610][ T5341] RAX: ffffffffffffffda RBX: 00007f652ed47ef0 RCX: 00007f652df900ca [ 79.827618][ T5341] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 00007f652ed47eb0 [ 79.827625][ T5341] RBP: 00002000000000c0 R08: 00007f652ed47ef0 R09: 0000000000818001 [ 79.827633][ T5341] R10: 0000000000818001 R11: 0000000000000246 R12: 0000200000000080 [ 79.827640][ T5341] R13: 00007f652ed47eb0 R14: 0000000000005978 R15: 0000200000000480 [ 79.827652][ T5341] [ 79.827656][ T5341] [ 80.286848][ T5341] The buggy address belongs to the physical page: [ 80.294335][ T5341] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55063 [ 80.303407][ T5341] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 80.308616][ T5341] raw: 04fff00000000000 0000000000000000 ffffea00015418c8 0000000000000000 [ 80.317075][ T5341] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 80.327883][ T5341] page dumped because: kasan: bad access detected [ 80.333741][ T5341] page_owner tracks the page as freed [ 80.338251][ T5341] page last allocated via order 5, migratetype Unmovable, gfp_mask 0x42800(GFP_NOWAIT|__GFP_COMP), pid 5341, tgid 5340 (syz.0.0), ts 78570159475, free_ts 79787935452 [ 80.353931][ T5341] post_alloc_hook+0x240/0x2a0 [ 80.358313][ T5341] get_page_from_freelist+0x21e4/0x22c0 [ 80.361598][ T5341] __alloc_frozen_pages_noprof+0x181/0x370 [ 80.365239][ T5341] __alloc_pages_noprof+0xa/0x30 [ 80.368030][ T5341] ___kmalloc_large_node+0x85/0x210 [ 80.372643][ T5341] __kmalloc_large_node_noprof+0x18/0x90 [ 80.376002][ T5341] __kvmalloc_node_noprof+0x6d/0x5f0 [ 80.379334][ T5341] bch2_btree_node_read_done+0x3305/0x5520 [ 80.384392][ T5341] btree_node_read_work+0x426/0xe30 [ 80.391878][ T5341] bch2_btree_node_read+0x887/0x2a00 [ 80.396842][ T5341] bch2_btree_root_read+0x5f0/0x760 [ 80.399935][ T5341] read_btree_roots+0x2c6/0x840 [ 80.402672][ T5341] bch2_fs_recovery+0x261f/0x3a50 [ 80.405298][ T5341] bch2_fs_start+0xaaf/0xda0 [ 80.408345][ T5341] bch2_fs_get_tree+0xb39/0x1520 [ 80.412158][ T5341] vfs_get_tree+0x92/0x2b0 [ 80.414690][ T5341] page last free pid 5341 tgid 5340 stack trace: [ 80.418307][ T5341] __free_pages_ok+0xa44/0xc20 [ 80.422647][ T5341] __folio_put+0x21b/0x2c0 [ 80.428223][ T5341] free_large_kmalloc+0x145/0x200 [ 80.433533][ T5341] btree_node_sort+0x117f/0x1760 [ 80.437529][ T5341] bch2_btree_post_write_cleanup+0x11f/0xad0 [ 80.442803][ T5341] bch2_btree_node_prep_for_write+0x337/0x650 [ 80.447233][ T5341] bch2_trans_lock_write+0x669/0xba0 [ 80.451803][ T5341] __bch2_trans_commit+0x2773/0x8870 [ 80.457897][ T5341] bch2_check_dirents+0x1c5c/0x33f0 [ 80.486201][ T5341] __bch2_run_recovery_passes+0x395/0x1010 [ 80.488881][ T5341] bch2_run_recovery_passes+0x184/0x210 [ 80.496025][ T5341] bch2_fs_recovery+0x2690/0x3a50 [ 80.501564][ T5341] bch2_fs_start+0xaaf/0xda0 [ 80.507668][ T5341] bch2_fs_get_tree+0xb39/0x1520 [ 80.514891][ T5341] vfs_get_tree+0x92/0x2b0 [ 80.521190][ T5341] do_new_mount+0x24a/0xa40 [ 80.528190][ T5341] [ 80.532557][ T5341] Memory state around the buggy address: [ 80.541218][ T5341] ffff888055062f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 80.548425][ T5341] ffff888055062f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 80.570595][ T5341] >ffff888055063000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 80.587361][ T5341] ^ [ 80.589883][ T5341] ffff888055063080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 80.593126][ T5341] ffff888055063100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 80.599170][ T5341] ================================================================== [ 80.634587][ T5341] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.639266][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8 #0 PREEMPT(full) [ 80.648622][ T5341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.657002][ T5341] Call Trace: [ 80.658997][ T5341] [ 80.660663][ T5341] dump_stack_lvl+0x99/0x250 [ 80.663379][ T5341] ? __asan_memcpy+0x40/0x70 [ 80.667152][ T5341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.671938][ T5341] ? __pfx__printk+0x10/0x10 [ 80.675389][ T5341] panic+0x2db/0x790 [ 80.678710][ T5341] ? __pfx_panic+0x10/0x10 [ 80.681347][ T5341] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 80.685272][ T5341] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.688201][ T5341] ? print_memory_metadata+0x314/0x400 [ 80.691562][ T5341] ? bch2_check_dirents+0x1fac/0x33f0 [ 80.695954][ T5341] check_panic_on_warn+0x89/0xb0 [ 80.715112][ T5341] ? bch2_check_dirents+0x1fac/0x33f0 [ 80.717346][ T5341] end_report+0x78/0x160 [ 80.719050][ T5341] kasan_report+0x129/0x150 [ 80.720862][ T5341] ? bch2_check_dirents+0x1fac/0x33f0 [ 80.723036][ T5341] bch2_check_dirents+0x1fac/0x33f0 [ 80.725215][ T5341] ? bch2_check_dirents+0x2f1/0x33f0 [ 80.727299][ T5341] ? desc_read+0x1b8/0x3f0 [ 80.729104][ T5341] ? prb_first_seq+0xfd/0x1a0 [ 80.731166][ T5341] ? __pfx_bch2_check_dirents+0x10/0x10 [ 80.733867][ T5341] ? __pfx_prb_first_seq+0x10/0x10 [ 80.736166][ T5341] ? desc_read+0x1b8/0x3f0 [ 80.738689][ T5341] ? this_cpu_in_panic+0x4f/0x80 [ 80.745724][ T5341] ? _prb_read_valid+0xa07/0xa90 [ 80.748452][ T5341] ? console_flush_all+0x13a/0xc40 [ 80.750759][ T5341] ? up+0xde/0x150 [ 80.752419][ T5341] ? __console_unlock+0x14c/0x1a0 [ 80.764965][ T5341] ? __pfx___console_unlock+0x10/0x10 [ 80.767395][ T5341] ? prb_read_valid+0x3c/0x60 [ 80.769508][ T5341] ? console_unlock+0x21b/0x270 [ 80.771939][ T5341] ? __pfx_console_unlock+0x10/0x10 [ 80.784595][ T5341] ? vprintk_emit+0x63e/0x7a0 [ 80.795228][ T5341] ? __bch2_print+0x176/0x220 [ 80.797269][ T5341] ? bch2_check_dirents+0x2f1/0x33f0 [ 80.799704][ T5341] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.802077][ T5341] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.814654][ T5341] __bch2_run_recovery_passes+0x395/0x1010 [ 80.816939][ T5341] bch2_run_recovery_passes+0x184/0x210 [ 80.819219][ T5341] bch2_fs_recovery+0x2690/0x3a50 [ 80.821284][ T5341] ? check_noncircular+0xe0/0x160 [ 80.833870][ T5341] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 80.836482][ T5341] ? __lock_acquire+0xab9/0xd20 [ 80.838679][ T5341] ? __lock_acquire+0xab9/0xd20 [ 80.840724][ T5341] ? __lock_acquire+0xab9/0xd20 [ 80.842775][ T5341] ? bch2_fs_start+0xa0f/0xda0 [ 80.853569][ T5341] ? up_write+0x1c4/0x420 [ 80.855512][ T5341] ? bch2_fs_start+0x5e7/0xda0 [ 80.858025][ T5341] bch2_fs_start+0xaaf/0xda0 [ 80.863662][ T5341] ? bch2_fs_start+0x5e7/0xda0 [ 80.866111][ T5341] ? __pfx_bch2_fs_start+0x10/0x10 [ 80.868440][ T5341] ? sget+0x267/0x620 [ 80.870279][ T5341] bch2_fs_get_tree+0xb39/0x1520 [ 80.877925][ T5341] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 80.880278][ T5341] ? aa_get_newest_label+0xf7/0x5d0 [ 80.885374][ T5341] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 80.895517][ T5341] ? apparmor_capable+0x137/0x1b0 [ 80.897931][ T5341] vfs_get_tree+0x92/0x2b0 [ 80.900040][ T5341] do_new_mount+0x24a/0xa40 [ 80.903659][ T5341] __se_sys_mount+0x317/0x410 [ 80.905758][ T5341] ? __pfx___se_sys_mount+0x10/0x10 [ 80.908166][ T5341] ? do_syscall_64+0xbe/0x3b0 [ 80.926532][ T5341] ? __x64_sys_mount+0x20/0xc0 [ 80.928918][ T5341] do_syscall_64+0xfa/0x3b0 [ 80.931926][ T5341] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.934900][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.938296][ T5341] ? clear_bhb_loop+0x60/0xb0 [ 80.940308][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.955750][ T5341] RIP: 0033:0x7f652df900ca [ 80.959642][ T5341] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.970594][ T5341] RSP: 002b:00007f652ed47e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.977058][ T5341] RAX: ffffffffffffffda RBX: 00007f652ed47ef0 RCX: 00007f652df900ca [ 80.999647][ T5341] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 00007f652ed47eb0 [ 81.013933][ T5341] RBP: 00002000000000c0 R08: 00007f652ed47ef0 R09: 0000000000818001 [ 81.017391][ T5341] R10: 0000000000818001 R11: 0000000000000246 R12: 0000200000000080 [ 81.020832][ T5341] R13: 00007f652ed47eb0 R14: 0000000000005978 R15: 0000200000000480 [ 81.035836][ T5341] [ 81.038888][ T5341] Kernel Offset: disabled [ 81.040624][ T5341] Rebooting in 86400 seconds..