./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4205200393 <...> Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. execve("./syz-executor4205200393", ["./syz-executor4205200393"], 0x7ffc3d8b15d0 /* 10 vars */) = 0 brk(NULL) = 0x55558715a000 brk(0x55558715ad00) = 0x55558715ad00 arch_prctl(ARCH_SET_FS, 0x55558715a380) = 0 set_tid_address(0x55558715a650) = 5828 set_robust_list(0x55558715a660, 24) = 0 rseq(0x55558715aca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4205200393", 4096) = 28 getrandom("\xab\x49\x27\x64\x85\xe9\x0b\xcc", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558715ad00 brk(0x55558717bd00) = 0x55558717bd00 brk(0x55558717c000) = 0x55558717c000 mprotect(0x7f935bdc5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9353800000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f9353800000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 [ 78.338812][ T5828] loop0: detected capacity change from 0 to 32768 [ 78.382354][ T5828] ======================================================= [ 78.382354][ T5828] WARNING: The mand mount option has been deprecated and [ 78.382354][ T5828] and is ignored by this kernel. Remove the mand [ 78.382354][ T5828] option from the mount to silence this warning. [ 78.382354][ T5828] ======================================================= [ 78.452782][ T5828] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=crc64,data_checksum=none,compression=gzip,grpquota,fsck,fix_errors=yes [ 78.470432][ T5828] invalid bkey u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:0:64 gen 0 [ 78.470454][ T5828] pointer spans multiple buckets (64 + 256 > 256): delete?, fixing [ 78.493742][ T5828] invalid bkey u64s 11 type btree_ptr_v2 U64_MAX:18446744073692774400:10 len 3036676096 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 78.493761][ T5828] size != 0: delete?, fixing [ 78.516270][ T5828] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 78.524974][ T5828] bcachefs (loop0): Version upgrade required: [ 78.524974][ T5828] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 78.524974][ T5828] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 78.524974][ T5828] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 78.602614][ T5828] invalid btree root inodes, fixing [ 78.608089][ T5828] bcachefs (loop0): will run btree node scan [ 78.614103][ T5828] bcachefs (loop0): flagging btree inodes lost data [ 78.623544][ T5828] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 78.623566][ T5828] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 78.623580][ T5828] node offset 0/16: bad magic: want 59513f585d347cd2, got 7d513f585d347cd2 [ 78.655940][ T5828] bcachefs (loop0): flagging btree xattrs lost data [ 78.665083][ T5828] error reading btree root xattrs l=0: btree_node_read_error, fixing [ 78.675070][ T5828] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 78.675091][ T5828] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 78.675103][ T5828] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 78.714543][ T5828] bcachefs (loop0): btree_node_read_work: rewriting btree node at btree=alloc level=0 SPOS_MAX due to error [ 78.726473][ T5828] invalid btree root subvolumes, fixing [ 78.732137][ T5828] bcachefs (loop0): flagging btree subvolumes lost data [ 78.743328][ T5828] invalid bkey u64s 5 type set 0:37:0 len 4294964982 ver 0 [ 78.743343][ T5828] size greater than offset (4294964982 > 37): delete?, fixing [ 78.758388][ T5828] bcachefs (loop0): flagging btree freespace lost data [ 78.766741][ T5828] error reading btree root freespace l=0: btree_node_read_error, fixing [ 78.777266][ T5828] bcachefs (loop0): btree node read error: no device to read from [ 78.777266][ T5828] at deleted_inodes level 0/0 [ 78.777266][ T5828] u64s 11 type 255 SPOS_MAX len 0 ver 0: [ 78.795486][ T5828] bcachefs (loop0): flagging btree deleted_inodes lost data [ 78.804783][ T5828] error reading btree root deleted_inodes l=0: btree_node_read_error, fixing [ 78.814225][ T5828] bcachefs (loop0): scan_for_btree_nodes... [ 78.824720][ T5838] invalid bkey u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0: (unpack error) [ 78.824742][ T5838] invalid variable length fields: delete?, fixing [ 78.847816][ T5838] invalid bkey u64s 18 type inode_v3 65281:536870912:U32_MAX len 0 ver 0: [ 78.847832][ T5838] mode=100755 [ 78.847840][ T5838] flags=(15300000) [ 78.847848][ T5838] journal_seq=4 [ 78.847855][ T5838] hash_seed=8469d717004af4ef [ 78.847863][ T5838] hash_type=siphash [ 78.847871][ T5838] bi_size=10 [ 78.847878][ T5838] bi_sectors=8 [ 78.847885][ T5838] bi_version=0 [ 78.847893][ T5838] bi_atime=2780562352 [ 78.847900][ T5838] bi_ctime=2780562352 [ 78.847908][ T5838] bi_mtime=2780562352 [ 78.847915][ T5838] bi_otime=2780562352 [ 78.847923][ T5838] bi_uid=0 [ 78.847930][ T5838] bi_gid=0 [ 78.847937][ T5838] bi_nlink=0 [ 78.847944][ T5838] bi_generation=0 [ 78.847952][ T5838] bi_dev=0 [ 78.847959][ T5838] bi_data_checksum=0 [ 78.847966][ T5838] bi_compression=0 [ 78.847974][ T5838] bi_project=0 [ 78.847981][ T5838] bi_background_compression=0 [ 78.847989][ T5838] bi_data_replicas=0 [ 78.847996][ T5838] bi_promote_target=0 [ 78.848004][ T5838] bi_foreground_target=0 [ 78.848012][ T5838] bi_background_target=0 [ 78.848019][ T5838] bi_erasure_code=0 [ 78.848027][ T5838] bi_fields_set=0 [ 78.848034][ T5838] bi_dir=4096 [ 78.848041][ T5838] bi_dir_offset=4330382808765833931 [ 78.848050][ T5838] bi_subvol=0 [ 78.848057][ T5838] bi_parent_subvol=0 [ 78.848064][ T5838] bi_nocow=0 [ 78.848072][ T5838] nonzero k.p.inode: delete?, fixing [ 79.003477][ T5828] bch2_scan_for_btree_nodes: nodes found after overwrites: [ 79.003502][ T5828] extents l=0 seq=1 journal_seq=5 cookie=c6c25c03258c59c5 POS_MIN-SPOS_MAX ptr: 0:27:0 gen 0 [ 79.003512][ T5828] inodes l=0 seq=1 journal_seq=5 cookie=7589ab5e0c11cc7a POS_MIN-SPOS_MAX ptr: 0:38:0 gen 0 [ 79.003522][ T5828] dirents l=0 seq=1 journal_seq=4 cookie=9aa2895aefce4bdf POS_MIN-SPOS_MAX ptr: 0:41:0 gen 0 [ 79.003539][ T5828] subvolumes l=0 seq=1 journal_seq=1 cookie=c0bef60d07ceb940 POS_MIN-SPOS_MAX ptr: 0:35:0 gen 0 [ 79.003549][ T5828] snapshots l=0 seq=1 journal_seq=1 cookie=ebb8d5a9e3463bdb POS_MIN-SPOS_MAX ptr: 0:32:0 gen 0 [ 79.003559][ T5828] lru l=0 seq=1 journal_seq=5 cookie=28f61e078e70b95c POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0 [ 79.003569][ T5828] deleted_inodes l=0 seq=1 journal_seq=0 cookie=1db8f60c84bb244c POS_MIN-SPOS_MAX ptr: 0:42:0 gen 0 [ 79.003580][ T5828] [ 79.086815][ T5828] done [ 79.089647][ T5828] bcachefs (loop0): check_topology... [ 79.089765][ T5828] bcachefs (loop0): btree root inodes unreadable, must recover from scan [ 79.104491][ T5828] bcachefs (loop0): bch2_get_scanned_nodes(): recovering inodes l=0 POS_MIN - SPOS_MAX [ 79.114364][ T5828] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 79.134897][ T58] bcachefs (loop0): error validating btree node at btree inodes level 0/0 [ 79.134917][ T58] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 79.134930][ T58] node offset 16/24 bset u64s 110 bset byte offset 664: keys out of order: u64s 18 type inode_v3 65281:536870912:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:0:65535 len 0 ver 0, fixing [ 79.177247][ T58] invalid bkey u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0: (unpack error) [ 79.177264][ T58] invalid variable length fields: delete?, fixing [ 79.193489][ T58] invalid bkey u64s 18 type inode_v3 65281:536870912:U32_MAX len 0 ver 0: [ 79.193511][ T58] mode=100755 [ 79.193523][ T58] flags=(15300000) [ 79.193535][ T58] journal_seq=4 [ 79.193545][ T58] hash_seed=8469d717004af4ef [ 79.193556][ T58] hash_type=siphash [ 79.193567][ T58] bi_size=10 [ 79.193577][ T58] bi_sectors=8 [ 79.193588][ T58] bi_version=0 [ 79.193599][ T58] bi_atime=2780562352 [ 79.193607][ T58] bi_ctime=2780562352 [ 79.193614][ T58] bi_mtime=2780562352 [ 79.193622][ T58] bi_otime=2780562352 [ 79.193630][ T58] bi_uid=0 [ 79.193637][ T58] bi_gid=0 [ 79.193644][ T58] bi_nlink=0 [ 79.193652][ T58] bi_generation=0 [ 79.193659][ T58] bi_dev=0 [ 79.193666][ T58] bi_data_checksum=0 [ 79.193674][ T58] bi_compression=0 [ 79.193681][ T58] bi_project=0 [ 79.193689][ T58] bi_background_compression=0 [ 79.193696][ T58] bi_data_replicas=0 [ 79.193704][ T58] bi_promote_target=0 [ 79.193712][ T58] bi_foreground_target=0 [ 79.193719][ T58] bi_background_target=0 [ 79.193727][ T58] bi_erasure_code=0 [ 79.193735][ T58] bi_fields_set=0 [ 79.193742][ T58] bi_dir=4096 [ 79.193750][ T58] bi_dir_offset=4330382808765833931 [ 79.193758][ T58] bi_subvol=0 [ 79.193765][ T58] bi_parent_subvol=0 [ 79.193773][ T58] bi_nocow=0 [ 79.193780][ T58] nonzero k.p.inode: delete?, fixing [ 79.333786][ T58] bcachefs (loop0): btree_node_read_work: rewriting btree node at btree=inodes level=0 SPOS_MAX due to error [ 79.345988][ T5828] bcachefs (loop0): btree root xattrs unreadable, must recover from scan [ 79.354714][ T5828] no nodes found for btree xattrs, continuing [ 79.361112][ T5828] bcachefs (loop0): btree root subvolumes unreadable, must recover from scan [ 79.370021][ T5828] bcachefs (loop0): bch2_get_scanned_nodes(): recovering subvolumes l=0 POS_MIN - SPOS_MAX [ 79.380178][ T5828] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 79.399958][ T5828] bcachefs (loop0): btree root deleted_inodes unreadable, must recover from scan [ 79.409379][ T5828] bcachefs (loop0): bch2_get_scanned_nodes(): recovering deleted_inodes l=0 POS_MIN - SPOS_MAX [ 79.419998][ T5828] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 79.439723][ T5828] done [ 79.442540][ T5828] bcachefs (loop0): accounting_read... done [ 79.449688][ T5828] bcachefs (loop0): alloc_read... done [ 79.455419][ T5828] bcachefs (loop0): stripes_read... done [ 79.461224][ T5828] bcachefs (loop0): snapshots_read... done [ 79.467711][ T5828] bcachefs (loop0): check_allocations... [ 79.472010][ T5828] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 79.472032][ T5828] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 79.503717][ T5828] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 79.503733][ T5828] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 79.528646][ T5828] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 79.528663][ T5828] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 79.553534][ T5828] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 79.553549][ T5828] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 79.579670][ T5828] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.588656][ T5828] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.599589][ T5828] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.608161][ T5828] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.618089][ T5828] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.626465][ T5828] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.636358][ T5828] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.644726][ T5828] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.654600][ T5828] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.662975][ T5828] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.672820][ T5828] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.681181][ T5828] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.691138][ T5828] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.699526][ T5828] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.709412][ T5828] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.717790][ T5828] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 79.727478][ T5828] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 79.736208][ T5828] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 79.746444][ T5828] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 79.755363][ T5828] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 79.765705][ T5828] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 79.774563][ T5828] bcachefs (loop0): Ratelimiting new instances of previous error [ 79.782478][ T5828] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 79.792648][ T5828] bcachefs (loop0): Ratelimiting new instances of previous error [ 79.807823][ T5828] done [ 79.812342][ T5828] bcachefs (loop0): going read-write [ 79.820623][ T5828] bcachefs (loop0): journal_replay... done [ 79.895300][ T5828] bcachefs (loop0): check_alloc_info... [ 79.898364][ T5828] incorrect key in need_discard btree (got deleted should be set) [ 79.898385][ T5828] u64s 13 type alloc_v4 0:31:0 len 0 ver 0: [ 79.898395][ T5828] gen 0 oldest_gen 0 data_type need_discard [ 79.898403][ T5828] journal_seq 4 [ 79.898411][ T5828] need_discard 1 [ 79.898419][ T5828] need_inc_gen 1 [ 79.898427][ T5828] dirty_sectors 0 [ 79.898434][ T5828] stripe_sectors 0 [ 79.898442][ T5828] cached_sectors 0 [ 79.898450][ T5828] stripe 0 [ 79.898465][ T5828] stripe_redundancy 0 [ 79.898473][ T5828] io_time[READ] 1 [ 79.898481][ T5828] io_time[WRITE] 512 [ 79.898488][ T5828] fragmentation 0 [ 79.898496][ T5828] bp_start 8 [ 79.898504][ T5828] , fixing [ 79.983003][ T5828] hole in alloc btree missing in freespace btree [ 79.983020][ T5828] device 0 buckets 33-34, fixing [ 79.996341][ T5828] hole in alloc btree missing in freespace btree [ 79.996357][ T5828] device 0 buckets 39-41, fixing [ 80.008320][ T5828] hole in alloc btree missing in freespace btree [ 80.008333][ T5828] device 0 buckets 43-44, fixing [ 80.020218][ T5828] hole in alloc btree missing in freespace btree [ 80.020235][ T5828] device 0 buckets 45-47, fixing [ 80.032248][ T5828] hole in alloc btree missing in freespace btree [ 80.032265][ T5828] device 0 buckets 48-49, fixing [ 80.044039][ T5828] hole in alloc btree missing in freespace btree [ 80.044053][ T5828] device 0 buckets 50-120, fixing [ 80.058666][ T5828] done [ 80.064327][ T5828] bcachefs (loop0): check_lrus... done [ 80.071561][ T5828] bcachefs (loop0): check_btree_backpointers... done [ 80.082138][ T5828] bcachefs (loop0): check_backpointers_to_extents... [ 80.083037][ T5828] backpointer for missing btree node [ 80.083051][ T5828] u64s 9 type backpointer 0:8126464:0 len 0 ver 0: bucket=0:31:0 btree=xattrs l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 80.109224][ T5828] done [ 80.114233][ T5828] bcachefs (loop0): check_extents_to_backpointers... [ 80.115102][ T5828] missing backpointer for btree=dirents l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 80.115120][ T5828] got: u64s 5 type deleted 0:10747904:0 len 0 ver 0 [ 80.115129][ T5828] want: u64s 9 type backpointer 0:10747904:0 len 0 ver 0: bucket=0:41:0 btree=dirents l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 80.161078][ T5828] missing backpointer for btree=subvolumes l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 80.161102][ T5828] got: u64s 5 type deleted 0:9175040:0 len 0 ver 0 [ 80.161113][ T5828] want: u64s 9 type backpointer 0:9175040:0 len 0 ver 0: bucket=0:35:0 btree=subvolumes l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 80.202004][ T5828] missing backpointer for btree=snapshots l=1 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 80.202024][ T5828] got: u64s 5 type deleted 0:8388608:0 len 0 ver 0 [ 80.202034][ T5828] want: u64s 9 type backpointer 0:8388608:0 len 0 ver 0: bucket=0:32:0 btree=snapshots l=1 offset=0:0 len=256 pos=SPOS_MAX, fixing [ 80.240524][ T5828] done [ 80.245150][ T5828] bcachefs (loop0): check_alloc_to_lru_refs... done [ 80.253895][ T5828] bcachefs (loop0): bucket_gens_init... done [ 80.263260][ T5828] bcachefs (loop0): check_snapshot_trees... done [ 80.270854][ T5828] bcachefs (loop0): check_snapshots... [ 80.271258][ T5828] snapshot points to missing/incorrect tree: [ 80.271270][ T5828] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 80.302820][ T5828] done [ 80.309322][ T5828] bcachefs (loop0): check_subvols... done [ 80.318352][ T5828] bcachefs (loop0): check_subvol_children... done [ 80.326000][ T5828] bcachefs (loop0): delete_dead_snapshots... done [ 80.333854][ T5828] bcachefs (loop0): check_inodes... done [ 80.341450][ T5828] bcachefs (loop0): check_extents... [ 80.342460][ T5828] inode 536870912:4294967295 has incorrect i_sectors: got 0, should be 8, fixing [ 80.357803][ T5828] inode 536870913:4294967295 has incorrect i_sectors: got 0, should be 24, fixing [ 80.367654][ T5828] inode 536870914:4294967295 has incorrect i_sectors: got 0, should be 8, fixing [ 80.377180][ T5828] done [ 80.382051][ T5828] bcachefs (loop0): check_indirect_extents... done [ 80.389819][ T5828] bcachefs (loop0): check_dirents... [ 80.390624][ T5828] hash table key at wrong offset: btree dirents inode 4096 offset 1896155912177158345, hashed to 4245757055116379175 [ 80.390639][ T5828] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: ÿÿÿÿÿÿÿ -> 536870913 type (bad d_type), fixing [ 80.421645][ T5828] dirent points to inode that does not point back: [ 80.421660][ T5828] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg [ 80.421670][ T5828] inum: 536870913:4294967295 [ 80.421679][ T5828] mode=100600 [ 80.421686][ T5828] flags=(15300000) [ 80.421694][ T5828] journal_seq=28 [ 80.421701][ T5828] hash_seed=22ef85981e46b0e9 [ 80.421709][ T5828] hash_type=siphash [ 80.421717][ T5828] bi_size=12288 [ 80.421724][ T5828] bi_sectors=24 [ 80.421732][ T5828] bi_version=0 [ 80.421739][ T5828] bi_atime=18571158033360905 [ 80.421747][ T5828] bi_ctime=18571158033360905 [ 80.421755][ T5828] bi_mtime=18571158033360905 [ 80.421763][ T5828] bi_otime=18571158033360905 [ 80.421771][ T5828] bi_uid=0 [ 80.421779][ T5828] bi_gid=0 [ 80.421786][ T5828] bi_nlink=0 [ 80.421793][ T5828] bi_generation=0 [ 80.421801][ T5828] bi_dev=0 [ 80.421808][ T5828] bi_data_checksum=0 [ 80.421816][ T5828] bi_compression=0 [ 80.421824][ T5828] bi_project=0 [ 80.421831][ T5828] bi_background_compression=0 [ 80.421839][ T5828] bi_data_replicas=0 [ 80.421847][ T5828] bi_promote_target=0 [ 80.421855][ T5828] bi_foreground_target=0 [ 80.421862][ T5828] bi_background_target=0 [ 80.421870][ T5828] bi_erasure_code=0 [ 80.421878][ T5828] bi_fields_set=0 [ 80.421885][ T5828] bi_dir=0 [ 80.421893][ T5828] bi_dir_offset=4245757055116379175 [ 80.421901][ T5828] bi_subvol=0 [ 80.421908][ T5828] bi_parent_subvol=0 [ 80.421916][ T5828] bi_nocow=0, fixing [ 80.572521][ T5828] inode 536870913:4294967295 has wrong backpointer: [ 80.572542][ T5828] got 0:4245757055116379175 [ 80.572555][ T5828] should be 4096:2695648408715017799, fixing [ 80.590989][ T5828] dirent points to inode that does not point back: [ 80.591011][ T5828] u64s 7 type dirent 4096:4245757055116379175:U32_MAX len 0 ver 0: ÿÿÿÿÿÿÿ -> 536870913 type (bad d_type) [ 80.591022][ T5828] inum: 536870913:4294967295 [ 80.591030][ T5828] mode=100600 [ 80.591038][ T5828] flags=(15300000) [ 80.591046][ T5828] journal_seq=28 [ 80.591053][ T5828] hash_seed=22ef85981e46b0e9 [ 80.591061][ T5828] hash_type=siphash [ 80.591069][ T5828] bi_size=12288 [ 80.591077][ T5828] bi_sectors=24 [ 80.591084][ T5828] bi_version=0 [ 80.591092][ T5828] bi_atime=18571158033360905 [ 80.591100][ T5828] bi_ctime=18571158033360905 [ 80.591108][ T5828] bi_mtime=18571158033360905 [ 80.591116][ T5828] bi_otime=18571158033360905 [ 80.591123][ T5828] bi_uid=0 [ 80.591138][ T5828] bi_gid=0 [ 80.591145][ T5828] bi_nlink=0 [ 80.591153][ T5828] bi_generation=0 [ 80.591160][ T5828] bi_dev=0 [ 80.591167][ T5828] bi_data_checksum=0 [ 80.591175][ T5828] bi_compression=0 [ 80.591183][ T5828] bi_project=0 [ 80.591190][ T5828] bi_background_compression=0 [ 80.591198][ T5828] bi_data_replicas=0 [ 80.591206][ T5828] bi_promote_target=0 [ 80.591214][ T5828] bi_foreground_target=0 [ 80.591221][ T5828] bi_background_target=0 [ 80.591229][ T5828] bi_erasure_code=0 [ 80.591237][ T5828] bi_fields_set=0 [ 80.591244][ T5828] bi_dir=4096 [ 80.591252][ T5828] bi_dir_offset=2695648408715017799 [ 80.591260][ T5828] bi_subvol=0 [ 80.591267][ T5828] bi_parent_subvol=0 [ 80.591275][ T5828] bi_nocow=0, fixing [ 80.743407][ T5828] Oops: general protection fault, probably for non-canonical address 0xec6408ae4eae6c2e: 0000 [#1] PREEMPT SMP KASAN PTI [ 80.756028][ T5828] KASAN: maybe wild-memory-access in range [0x6320657275736170-0x6320657275736177] [ 80.765327][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor420 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 80.776427][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.786652][ T5828] RIP: 0010:string+0x1a5/0x2b0 [ 80.791423][ T5828] Code: 85 c0 0f 84 db 00 00 00 4c 89 7c 24 08 49 89 c7 49 ff cf 31 db 49 8d 3c 1c 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 5d 4c 8d 6c 1d 00 41 0f b6 2c 1c 31 ff 89 ee [ 80.811024][ T5828] RSP: 0018:ffffc90003d26570 EFLAGS: 00010206 [ 80.817101][ T5828] RAX: 0c640cae4eae6c2e RBX: 0000000000000000 RCX: dffffc0000000000 [ 80.825068][ T5828] RDX: ffff88802ffabc00 RSI: ffffffffffffffff RDI: 6320657275736172 [ 80.833031][ T5828] RBP: 0000000000000020 R08: ffffffff8bc3c8b7 R09: ffffffff8bc38f54 [ 80.840996][ T5828] R10: 0000000000000012 R11: ffff88802ffabc00 R12: 6320657275736172 [ 80.848959][ T5828] R13: 0000000000000000 R14: 0000000000000020 R15: fffffffffffffffe [ 80.856923][ T5828] FS: 000055558715a380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 80.865847][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.872423][ T5828] CR2: 0000562d64415048 CR3: 000000007ac96000 CR4: 00000000003526f0 [ 80.880390][ T5828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.888374][ T5828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.896364][ T5828] Call Trace: [ 80.899653][ T5828] [ 80.902586][ T5828] ? __die_body+0x5f/0xb0 [ 80.906928][ T5828] ? die_addr+0xb0/0xe0 [ 80.911114][ T5828] ? exc_general_protection+0x3dd/0x5d0 [ 80.916676][ T5828] ? asm_exc_general_protection+0x26/0x30 [ 80.922418][ T5828] ? vsnprintf+0x184/0x1da0 [ 80.926927][ T5828] ? string+0x177/0x2b0 [ 80.931094][ T5828] ? string+0x1a5/0x2b0 [ 80.935262][ T5828] vsnprintf+0x1101/0x1da0 [ 80.939689][ T5828] ? __pfx_vsnprintf+0x10/0x10 [ 80.944465][ T5828] bch2_prt_vprintf+0x1a2/0x700 [ 80.949329][ T5828] ? __pfx_bch2_prt_vprintf+0x10/0x10 [ 80.954718][ T5828] __bch2_fsck_err+0x2c2/0x1570 [ 80.959581][ T5828] ? printbuf_do_indent+0x99a/0x9d0 [ 80.964781][ T5828] ? __pfx_vsnprintf+0x10/0x10 [ 80.969564][ T5828] ? __pfx___bch2_fsck_err+0x10/0x10 [ 80.974887][ T5828] ? __pfx_bch2_prt_printf+0x10/0x10 [ 80.980290][ T5828] ? __pfx_bch2_prt_printf+0x10/0x10 [ 80.985581][ T5828] check_dirent_inode_dirent+0xf3b/0x1a30 [ 80.991353][ T5828] ? __asan_memset+0x23/0x50 [ 80.995954][ T5828] ? __pfx_check_dirent_inode_dirent+0x10/0x10 [ 81.002119][ T5828] ? get_visible_inodes+0xad9/0xdb0 [ 81.007433][ T5828] ? __bch2_bkey_get_iter+0x101/0x2a0 [ 81.012826][ T5828] check_dirent_target+0x117/0xf70 [ 81.018036][ T5828] ? __pfx_check_dirent_target+0x10/0x10 [ 81.023679][ T5828] ? get_visible_inodes+0x249/0xdb0 [ 81.028888][ T5828] ? __pfx_dirent_cmp_bkey+0x10/0x10 [ 81.034176][ T5828] ? __pfx_dirent_hash_key+0x10/0x10 [ 81.039467][ T5828] bch2_check_dirents+0x12e9/0x2570 [ 81.044685][ T5828] ? __pfx_bch2_check_dirents+0x10/0x10 [ 81.050272][ T5828] ? __pfx__prb_read_valid+0x10/0x10 [ 81.055567][ T5828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.061568][ T5828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.068084][ T5828] ? __console_unlock+0x12d/0x1f0 [ 81.073208][ T5828] ? prb_read_valid+0xa9/0xf0 [ 81.077892][ T5828] ? __pfx___console_unlock+0x10/0x10 [ 81.083280][ T5828] ? llist_add_batch+0x143/0x270 [ 81.088223][ T5828] ? console_unlock+0x2fc/0x3b0 [ 81.093086][ T5828] ? tick_nohz_tick_stopped+0x82/0xb0 [ 81.098646][ T5828] ? irq_work_queue+0xca/0x150 [ 81.103434][ T5828] ? __wake_up_klogd+0xd5/0x110 [ 81.108306][ T5828] ? __pfx_vprintk_emit+0x10/0x10 [ 81.113354][ T5828] ? __pfx_lock_release+0x10/0x10 [ 81.118389][ T5828] ? __bch2_print+0x17a/0x220 [ 81.123095][ T5828] ? bch2_check_dirents+0x2ff/0x2570 [ 81.128477][ T5828] ? bch2_fs_freespace_init+0x124/0x320 [ 81.134079][ T5828] bch2_run_recovery_pass+0xf0/0x1e0 [ 81.139390][ T5828] bch2_run_recovery_passes+0x3a7/0x880 [ 81.144957][ T5828] bch2_fs_recovery+0x25cc/0x39d0 [ 81.149994][ T5828] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 81.155392][ T5828] ? __pfx_lock_release+0x10/0x10 [ 81.160422][ T5828] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 81.166068][ T5828] ? __pfx_lock_release+0x10/0x10 [ 81.171102][ T5828] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 81.176747][ T5828] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 81.182493][ T5828] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 81.188251][ T5828] ? llist_reverse_order+0x72/0x90 [ 81.193391][ T5828] bch2_fs_start+0x356/0x5b0 [ 81.198090][ T5828] bch2_fs_get_tree+0xd68/0x1710 [ 81.203072][ T5828] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 81.208471][ T5828] ? smack_fs_context_parse_param+0xff/0x170 [ 81.214486][ T5828] ? generic_parse_monolithic+0x387/0x400 [ 81.220250][ T5828] ? cap_capable+0x1b4/0x250 [ 81.224850][ T5828] ? safesetid_security_capable+0xb2/0x1d0 [ 81.230750][ T5828] vfs_get_tree+0x90/0x2b0 [ 81.235262][ T5828] do_new_mount+0x2be/0xb40 [ 81.239777][ T5828] ? __pfx_do_new_mount+0x10/0x10 [ 81.244812][ T5828] __se_sys_mount+0x2d6/0x3c0 [ 81.249497][ T5828] ? __pfx___se_sys_mount+0x10/0x10 [ 81.254703][ T5828] ? do_syscall_64+0x100/0x230 [ 81.259570][ T5828] ? __x64_sys_mount+0x20/0xc0 [ 81.264450][ T5828] do_syscall_64+0xf3/0x230 [ 81.268984][ T5828] ? clear_bhb_loop+0x35/0x90 [ 81.273690][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.279602][ T5828] RIP: 0033:0x7f935bd4d8fa [ 81.284033][ T5828] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.303647][ T5828] RSP: 002b:00007ffcad1bf668 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 81.312086][ T5828] RAX: ffffffffffffffda RBX: 00007ffcad1bf680 RCX: 00007f935bd4d8fa [ 81.320063][ T5828] RDX: 00000000200058c0 RSI: 0000000020000000 RDI: 00007ffcad1bf680 [ 81.328044][ T5828] RBP: 0000000000000004 R08: 00007ffcad1bf6c0 R09: 00000000000059aa [ 81.336026][ T5828] R10: 0000000000010040 R11: 0000000000000282 R12: 0000000000010040 [ 81.344008][ T5828] R13: 00007ffcad1bf6c0 R14: 0000000000000003 R15: 0000000001000000 [ 81.351987][ T5828] [ 81.355005][ T5828] Modules linked in: [ 81.359152][ T5828] ---[ end trace 0000000000000000 ]--- [ 81.365011][ T5828] RIP: 0010:string+0x1a5/0x2b0 [ 81.370049][ T5828] Code: 85 c0 0f 84 db 00 00 00 4c 89 7c 24 08 49 89 c7 49 ff cf 31 db 49 8d 3c 1c 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 5d 4c 8d 6c 1d 00 41 0f b6 2c 1c 31 ff 89 ee [ 81.389828][ T5828] RSP: 0018:ffffc90003d26570 EFLAGS: 00010206 [ 81.395939][ T5828] RAX: 0c640cae4eae6c2e RBX: 0000000000000000 RCX: dffffc0000000000 [ 81.403996][ T5828] RDX: ffff88802ffabc00 RSI: ffffffffffffffff RDI: 6320657275736172 [ 81.412046][ T5828] RBP: 0000000000000020 R08: ffffffff8bc3c8b7 R09: ffffffff8bc38f54 [ 81.420116][ T5828] R10: 0000000000000012 R11: ffff88802ffabc00 R12: 6320657275736172 [ 81.428159][ T5828] R13: 0000000000000000 R14: 0000000000000020 R15: fffffffffffffffe [ 81.436169][ T5828] FS: 000055558715a380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 81.445189][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.451937][ T5828] CR2: 0000562d64416018 CR3: 000000007ac96000 CR4: 00000000003526f0 [ 81.460133][ T5828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.468243][ T5828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.476274][ T5828] Kernel panic - not syncing: Fatal exception [ 81.482630][ T5828] Kernel Offset: disabled [ 81.486966][ T5828] Rebooting in 86400 seconds..