bcachefs (loop5): going read-write bcachefs (loop5): marking superblocks BUG: unable to handle page fault for address: fffff91ffffffd1f #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 23ffe5067 P4D 23ffe5067 PUD 1af89067 PMD 1af8a067 PTE 0 Oops: Oops: 0000 [#1] SMP KASAN PTI CPU: 1 UID: 0 PID: 16552 Comm: syz.5.1215 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:rcu_segcblist_restempty kernel/rcu/rcu_segcblist.h:105 [inline] RIP: 0010:rcu_segcblist_advance+0x69/0x3e0 kernel/rcu/rcu_segcblist.c:474 Code: 84 70 03 00 00 4c 8d 7b 08 4c 89 fd 48 c1 ed 03 42 80 7c 25 00 00 74 08 4c 89 ff e8 d1 b7 78 00 4d 8b 37 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 b8 b7 78 00 49 83 3e 00 0f 84 1e RSP: 0000:ffffc90004c465b8 EFLAGS: 00010803 RAX: 1ffffd1ffffffd1f RBX: ffffe8ffffc61c40 RCX: 1d34c9bb087b8200 RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: ffffe8ffffc61c40 RBP: 1ffffd1ffff8c389 R08: 0000000000000000 R09: ffffffff81a6ab7f R10: dffffc0000000000 R11: fffff52000988cb4 R12: dffffc0000000000 R13: fffffffffffffe70 R14: ffffe8ffffffe8ff R15: ffffe8ffffc61c48 FS: 00007f9e441b06c0(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffff91ffffffd1f CR3: 000000005a10e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: srcu_gp_start_if_needed+0x6e9/0x11d0 kernel/rcu/srcutree.c:1316 __rcu_pending_enqueue fs/bcachefs/rcu_pending.c:498 [inline] rcu_pending_enqueue+0x729/0x880 fs/bcachefs/rcu_pending.c:531 bkey_cached_free_noassert fs/bcachefs/btree_key_cache.c:115 [inline] bkey_cached_free+0x13a/0x1d0 fs/bcachefs/btree_key_cache.c:129 bch2_btree_key_cache_drop+0x12b/0x7d0 fs/bcachefs/btree_key_cache.c:637 bch2_trans_commit_write_locked fs/bcachefs/btree_trans_commit.c:782 [inline] do_bch2_trans_commit fs/bcachefs/btree_trans_commit.c:851 [inline] __bch2_trans_commit+0x74ae/0x8880 fs/bcachefs/btree_trans_commit.c:1079 bch2_trans_commit fs/bcachefs/btree_update.h:242 [inline] bch2_trans_mark_metadata_bucket+0x566/0x1260 fs/bcachefs/buckets.c:1091 bch2_trans_mark_metadata_sectors fs/bcachefs/buckets.c:1108 [inline] __bch2_trans_mark_dev_sb fs/bcachefs/buckets.c:1148 [inline] bch2_trans_mark_dev_sb+0x3ed/0x7c0 fs/bcachefs/buckets.c:1176 bch2_trans_mark_dev_sbs_flags+0x49c/0x500 fs/bcachefs/buckets.c:1186 bch2_fs_initialize+0xd42/0x1550 fs/bcachefs/recovery.c:1208 bch2_fs_start+0xa88/0xd90 fs/bcachefs/super.c:1204 bch2_fs_get_tree+0xb02/0x14f0 fs/bcachefs/fs.c:2489 vfs_get_tree+0x92/0x2b0 fs/super.c:1804 do_new_mount+0x24a/0xa40 fs/namespace.c:3885 do_mount fs/namespace.c:4222 [inline] __do_sys_mount fs/namespace.c:4433 [inline] __se_sys_mount+0x317/0x410 fs/namespace.c:4410 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f9e433900ca Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9e441afe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f9e441afef0 RCX: 00007f9e433900ca RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00007f9e441afeb0 RBP: 0000200000000140 R08: 00007f9e441afef0 R09: 0000000002800000 R10: 0000000002800000 R11: 0000000000000246 R12: 0000200000000100 R13: 00007f9e441afeb0 R14: 0000000000005a7a R15: 0000200000002080 Modules linked in: CR2: fffff91ffffffd1f ---[ end trace 0000000000000000 ]--- RIP: 0010:rcu_segcblist_restempty kernel/rcu/rcu_segcblist.h:105 [inline] RIP: 0010:rcu_segcblist_advance+0x69/0x3e0 kernel/rcu/rcu_segcblist.c:474 Code: 84 70 03 00 00 4c 8d 7b 08 4c 89 fd 48 c1 ed 03 42 80 7c 25 00 00 74 08 4c 89 ff e8 d1 b7 78 00 4d 8b 37 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 b8 b7 78 00 49 83 3e 00 0f 84 1e RSP: 0000:ffffc90004c465b8 EFLAGS: 00010803 RAX: 1ffffd1ffffffd1f RBX: ffffe8ffffc61c40 RCX: 1d34c9bb087b8200 RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: ffffe8ffffc61c40 RBP: 1ffffd1ffff8c389 R08: 0000000000000000 R09: ffffffff81a6ab7f R10: dffffc0000000000 R11: fffff52000988cb4 R12: dffffc0000000000 R13: fffffffffffffe70 R14: ffffe8ffffffe8ff R15: ffffe8ffffc61c48 FS: 00007f9e441b06c0(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffff91ffffffd1f CR3: 000000005a10e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 84 70 03 test %dh,0x3(%rax) 3: 00 00 add %al,(%rax) 5: 4c 8d 7b 08 lea 0x8(%rbx),%r15 9: 4c 89 fd mov %r15,%rbp c: 48 c1 ed 03 shr $0x3,%rbp 10: 42 80 7c 25 00 00 cmpb $0x0,0x0(%rbp,%r12,1) 16: 74 08 je 0x20 18: 4c 89 ff mov %r15,%rdi 1b: e8 d1 b7 78 00 call 0x78b7f1 20: 4d 8b 37 mov (%r15),%r14 23: 4c 89 f0 mov %r14,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1) <-- trapping instruction 2f: 74 08 je 0x39 31: 4c 89 f7 mov %r14,%rdi 34: e8 b8 b7 78 00 call 0x78b7f1 39: 49 83 3e 00 cmpq $0x0,(%r14) 3d: 0f .byte 0xf 3e: 84 1e test %bl,(%rsi)