Hello, syzbot found the following issue on:
HEAD commit: 34afb82a3c67 Merge tag '6.10-rc6-smb3-server-fixes' of git.. git tree: upstream console+strace: https://syzkaller.appspot.com/x/log.txt?x=11932b76980000 kernel config: https://syzkaller.appspot.com/x/.config?x=42a432cfd0e579e0 dashboard link: https://syzkaller.appspot.com/bug?extid=cf190b6276e5bd33a108 compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=14109821980000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1235f47e980000 Downloadable assets: disk image: https://storage.googleapis.com/syzbot-assets/5e93dc1544ee/disk-34afb82a.raw.xz vmlinux: https://storage.googleapis.com/syzbot-assets/005e374613f0/vmlinux-34afb82a.xz kernel image: https://storage.googleapis.com/syzbot-assets/b6931db81a1a/bzImage-34afb82a.xz mounted in repro: https://storage.googleapis.com/syzbot-assets/d469706bc1c9/mount_0.gz The issue was bisected to: commit 03ef80b469d5d83530ce1ce15be78a40e5300f9b Author: Kent Overstreet <[email protected]> Date: Sat Sep 23 22:41:51 2023 +0000 bcachefs: Ignore unknown mount options bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=1475d6e1980000 final oops: https://syzkaller.appspot.com/x/report.txt?x=1675d6e1980000 console output: https://syzkaller.appspot.com/x/log.txt?x=1275d6e1980000 IMPORTANT: if you fix the issue, please add the following tag to the commit: Reported-by: [email protected] Fixes: 03ef80b469d5 ("bcachefs: Ignore unknown mount options") ------------[ cut here ]------------ kernel BUG at fs/bcachefs/compress.c:398! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 PID: 1036 Comm: kworker/u8:5 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Workqueue: writeback wb_workfn (flush-bcachefs-1) RIP: 0010:__bio_compress fs/bcachefs/compress.c:398 [inline] RIP: 0010:bch2_bio_compress+0x13a1/0x13e0 fs/bcachefs/compress.c:498 Code: e1 07 38 c1 0f 8c 77 fb ff ff be 14 00 00 00 4c 89 ef e8 52 6d dc fd e9 65 fb ff ff e8 48 00 7a fd 90 0f 0b e8 40 00 7a fd 90 <0f> 0b e8 38 00 7a fd 90 0f 0b e8 00 0f 61 07 e8 2b 00 7a fd 90 0f RSP: 0018:ffffc9000403e660 EFLAGS: 00010293 RAX: ffffffff841c2680 RBX: ffff8880769c7e78 RCX: ffff888021ddda00 RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 RBP: ffffc9000403e8f0 R08: ffffffff841c14df R09: 0000000000000003 R10: ffffc9000403ed00 R11: fffff52000807da5 R12: 00000000000002e0 R13: ffff888076845688 R14: dffffc0000000000 R15: 0000000000000004 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1b70de0db8 CR3: 0000000079450000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> bch2_write_extent fs/bcachefs/io_write.c:963 [inline] __bch2_write+0x1537/0x5c40 fs/bcachefs/io_write.c:1461 bch2_write+0x947/0x1670 fs/bcachefs/io_write.c:1634 closure_queue include/linux/closure.h:269 [inline] closure_call include/linux/closure.h:425 [inline] bch2_writepage_do_io fs/bcachefs/fs-io-buffered.c:460 [inline] bch2_writepages+0x27d/0x380 fs/bcachefs/fs-io-buffered.c:652 do_writepages+0x359/0x870 mm/page-writeback.c:2656 __writeback_single_inode+0x165/0x10b0 fs/fs-writeback.c:1651 writeback_sb_inodes+0x99c/0x1380 fs/fs-writeback.c:1947 __writeback_inodes_wb+0x11b/0x260 fs/fs-writeback.c:2018 wb_writeback+0x495/0xd40 fs/fs-writeback.c:2129 wb_check_background_flush fs/fs-writeback.c:2199 [inline] wb_do_writeback fs/fs-writeback.c:2287 [inline] wb_workfn+0xc58/0x1090 fs/fs-writeback.c:2314 process_one_work kernel/workqueue.c:3248 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3329 worker_thread+0x86d/0xd50 kernel/workqueue.c:3409 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__bio_compress fs/bcachefs/compress.c:398 [inline] RIP: 0010:bch2_bio_compress+0x13a1/0x13e0 fs/bcachefs/compress.c:498 Code: e1 07 38 c1 0f 8c 77 fb ff ff be 14 00 00 00 4c 89 ef e8 52 6d dc fd e9 65 fb ff ff e8 48 00 7a fd 90 0f 0b e8 40 00 7a fd 90 <0f> 0b e8 38 00 7a fd 90 0f 0b e8 00 0f 61 07 e8 2b 00 7a fd 90 0f RSP: 0018:ffffc9000403e660 EFLAGS: 00010293 RAX: ffffffff841c2680 RBX: ffff8880769c7e78 RCX: ffff888021ddda00 RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 RBP: ffffc9000403e8f0 R08: ffffffff841c14df R09: 0000000000000003 R10: ffffc9000403ed00 R11: fffff52000807da5 R12: 00000000000002e0 R13: ffff888076845688 R14: dffffc0000000000 R15: 0000000000000004 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1b70de0db8 CR3: 000000007d568000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 --- This report is generated by a bot. It may contain errors. See https://goo.gl/tpsmEJ for more information about syzbot. syzbot engineers can be reached at [email protected]. syzbot will keep track of this issue. See: https://goo.gl/tpsmEJ#status for how to communicate with syzbot. For information about bisection process see: https://goo.gl/tpsmEJ#bisection If the report is already addressed, let syzbot know by replying with: #syz fix: exact-commit-title If you want syzbot to run the reproducer, reply with: #syz test: git://repo/address.git branch-or-commit-hash If you attach or paste a git patch, syzbot will apply it before testing. If you want to overwrite report's subsystems, reply with: #syz set subsystems: new-subsystem (See the list of subsystem names on the web dashboard) If the report is a duplicate of another one, reply with: #syz dup: exact-subject-of-another-report If you want to undo deduplication, reply with: #syz undup
