./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1912495454 <...> Warning: Permanently added '10.128.0.171' (ED25519) to the list of known hosts. execve("./syz-executor1912495454", ["./syz-executor1912495454"], 0x7fff3b95cb70 /* 10 vars */) = 0 brk(NULL) = 0x55557ab46000 brk(0x55557ab46d00) = 0x55557ab46d00 arch_prctl(ARCH_SET_FS, 0x55557ab46380) = 0 set_tid_address(0x55557ab46650) = 5861 set_robust_list(0x55557ab46660, 24) = 0 rseq(0x55557ab46ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1912495454", 4096) = 28 getrandom("\x19\xdd\xf6\x08\xc8\x85\x1a\xc3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557ab46d00 brk(0x55557ab67d00) = 0x55557ab67d00 brk(0x55557ab68000) = 0x55557ab68000 mprotect(0x7fe003bf8000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5862 attached , child_tidptr=0x55557ab46650) = 5862 [pid 5862] set_robust_list(0x55557ab46660, 24 [pid 5861] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC [pid 5862] <... set_robust_list resumed>) = 0 [pid 5861] <... openat resumed>) = 3 [pid 5861] write(3, "10000000000", 11) = 11 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "20", 2) = 2 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "1", 1) = 1 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "0", 1) = 1 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "0", 1) = 1 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "1", 1) = 1 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "100", 3) = 3 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "0", 1) = 1 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "0", 1) = 1 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "7 4 1 3", 7) = 7 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "1", 1) = 1 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "1", 1) = 1 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "0", 1) = 1 [pid 5861] close(3) = 0 [pid 5861] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "5862", 4) = 4 [pid 5861] close(3) = 0 [pid 5861] kill(5862, SIGKILL) = 0 [pid 5862] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5862, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5861}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x30\x00\x00\x00\xe8\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 864 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5861}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5861}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5861}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5861}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5861}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5861}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 mkdir("./syzkaller.frMDog", 0700) = 0 chmod("./syzkaller.frMDog", 0777) = 0 chdir("./syzkaller.frMDog") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5865 attached , child_tidptr=0x55557ab46650) = 5865 [pid 5865] set_robust_list(0x55557ab46660, 24) = 0 [pid 5865] chdir("./0") = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5865] setpgid(0, 0) = 0 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4) = 4 [pid 5865] close(3) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5865] write(1, "executing program\n", 18) = 18 [pid 5865] memfd_create("syzkaller", 0) = 3 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5865] munmap(0x7fdffb600000, 138412032) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5865] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5865] close(3) = 0 [pid 5865] close(4) = 0 [pid 5865] mkdir("./file0", 0777) = 0 [ 142.985523][ T5865] loop0: detected capacity change from 0 to 32768 [ 143.095841][ T5865] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 143.095860][ T5865] allowing incompatible features above 0.0: (unknown version) [ 143.095869][ T5865] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 143.132999][ T5865] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 143.141395][ T5865] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 143.149935][ T5865] bcachefs (loop0): Version upgrade required: [ 143.149935][ T5865] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 143.149935][ T5865] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 143.149935][ T5865] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 143.239223][ T5865] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 143.239256][ T5865] gen 0 oldest_gen 0 data_type btree [ 143.239264][ T5865] journal_seq_nonempty 6 [ 143.239270][ T5865] journal_seq_empty 0 [ 143.239277][ T5865] need_discard 1 [ 143.239283][ T5865] need_inc_gen 1 [ 143.239290][ T5865] dirty_sectors 0 [ 143.239296][ T5865] stripe_sectors 1769482 [ 143.239302][ T5865] cached_sectors 0 [ 143.239309][ T5865] stripe 0 [ 143.239315][ T5865] stripe_redundancy 0 [ 143.239322][ T5865] io_time[READ] 1 [ 143.239328][ T5865] io_time[WRITE] 768 [ 143.239334][ T5865] fragmentation 0 [ 143.239341][ T5865] bp_start 7 [ 143.239347][ T5865] [ 143.239352][ T5865] invalid data type (got 3 should be 9), deleting [ 143.332062][ T5865] bcachefs (loop0): accounting_read... done [ 143.339984][ T5865] bcachefs (loop0): alloc_read... done [ 143.346619][ T5865] bcachefs (loop0): snapshots_read... done [ 143.353703][ T5865] bcachefs (loop0): check_allocations... [ 143.357285][ T5865] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 143.357316][ T5865] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 143.390419][ T5865] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 143.390435][ T5865] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 143.417040][ T5865] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 143.417055][ T5865] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 143.443494][ T5865] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 143.443510][ T5865] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 143.470175][ T5865] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 143.470190][ T5865] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 143.496784][ T5865] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 143.496799][ T5865] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 143.522250][ T5865] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 143.532345][ T5865] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 143.544475][ T5865] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 143.554510][ T5865] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 143.566072][ T5865] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 143.576084][ T5865] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 143.587554][ T5865] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 143.597828][ T5865] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 143.609289][ T5865] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 143.619344][ T5865] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 143.630739][ T5865] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 143.640734][ T5865] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 143.652100][ T5865] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 143.662097][ T5865] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 143.673807][ T5865] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 143.683821][ T5865] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 143.695032][ T5865] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 143.705469][ T5865] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 143.717279][ T5865] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 143.727783][ T5865] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 143.739854][ T5865] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 143.739872][ T5865] Ratelimiting new instances of previous error [ 143.756871][ T5865] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 143.756889][ T5865] Ratelimiting new instances of previous error [ 143.783922][ T5865] done [ 143.787271][ T5865] bcachefs (loop0): going read-write [ 143.797161][ T5865] bcachefs (loop0): journal_replay... done [ 143.834535][ T5865] bcachefs (loop0): check_alloc_info... done [ 143.843959][ T5865] bcachefs (loop0): check_lrus... done [ 143.850227][ T5865] bcachefs (loop0): check_btree_backpointers... done [ 143.857454][ T5865] bcachefs (loop0): check_backpointers_to_extents... done [ 143.867921][ T5865] bcachefs (loop0): check_extents_to_backpointers... [ 143.868968][ T5865] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 143.884459][ T5865] done [ 143.888541][ T5865] bcachefs (loop0): check_alloc_to_lru_refs... [ 143.890028][ T5865] bcachefs (loop0): missing fragmentation lru entry [ 143.890048][ T5865] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 143.890056][ T5865] gen 0 oldest_gen 0 data_type user [ 143.890063][ T5865] journal_seq_nonempty 5 [ 143.890070][ T5865] journal_seq_empty 134217728 [ 143.890077][ T5865] need_discard 1 [ 143.890083][ T5865] need_inc_gen 1 [ 143.890090][ T5865] dirty_sectors 16 [ 143.890097][ T5865] stripe_sectors 1802251 [ 143.890104][ T5865] cached_sectors 0 [ 143.890110][ T5865] stripe 0 [ 143.890117][ T5865] stripe_redundancy 0 [ 143.890129][ T5865] io_time[READ] 1 [ 143.890136][ T5865] io_time[WRITE] 512 [ 143.890142][ T5865] fragmentation 0 [ 143.890149][ T5865] bp_start 7 [ 143.890156][ T5865] , fixing [ 143.980006][ T5865] done [ 143.983675][ T5865] bcachefs (loop0): bucket_gens_init... done [ 143.996500][ T5865] bcachefs (loop0): check_snapshot_trees... done [ 144.003034][ T5865] bcachefs (loop0): check_snapshots... [ 144.003701][ T5865] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 144.003713][ T5865] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 144.036940][ T5865] done [ 144.040792][ T5865] bcachefs (loop0): check_subvols... done [ 144.047259][ T5865] bcachefs (loop0): check_subvol_children... done [ 144.053892][ T5865] bcachefs (loop0): delete_dead_snapshots... done [ 144.060724][ T5865] bcachefs (loop0): check_inodes... done [ 144.067273][ T5865] bcachefs (loop0): check_extents... done [ 144.073663][ T5865] bcachefs (loop0): check_indirect_extents... done [ 144.080396][ T5865] bcachefs (loop0): check_dirents... done [ 144.087572][ T5865] bcachefs (loop0): check_xattrs... done [ 144.093898][ T5865] bcachefs (loop0): check_root... done [ 144.099958][ T5865] bcachefs (loop0): check_unreachable_inodes... done [ 144.106946][ T5865] bcachefs (loop0): check_subvolume_structure... done [ 144.113800][ T5865] bcachefs (loop0): check_directory_structure... done [ 144.120727][ T5865] bcachefs (loop0): check_nlinks... done [pid 5865] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5865] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5865] ioctl(4, LOOP_CLR_FD) = 0 [ 144.126875][ T5865] bcachefs (loop0): check_rebalance_work... done [ 144.133643][ T5865] bcachefs (loop0): resume_logged_ops... done [ 144.139823][ T5865] bcachefs (loop0): delete_dead_inodes... done [ 144.146021][ T5865] bcachefs (loop0): set_fs_needs_rebalance... done [ 144.164634][ T5865] bcachefs (loop0): done starting filesystem [pid 5865] close(4) = 0 [pid 5865] exit_group(0) = ? [pid 5865] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=111 /* 1.11 s */} --- umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 144.234747][ T5865] syz-executor191 (5865) used greatest stack depth: 13960 bytes left [ 144.260269][ T5861] bcachefs (loop0): shutting down [ 144.265965][ T5861] bcachefs (loop0): going read-only [ 144.274702][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 144.283857][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 144.293059][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 144.304517][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 144.314365][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 144.339551][ T5861] bcachefs (loop0): shutdown complete umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5877 attached [pid 5877] set_robust_list(0x55557ab46660, 24 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 5877 [pid 5877] <... set_robust_list resumed>) = 0 [pid 5877] chdir("./1") = 0 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5877] setpgid(0, 0) = 0 [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5877] write(3, "1000", 4) = 4 [pid 5877] close(3) = 0 [pid 5877] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5877] write(1, "executing program\n", 18) = 18 [pid 5877] memfd_create("syzkaller", 0) = 3 [pid 5877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5877] munmap(0x7fdffb600000, 138412032) = 0 [pid 5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5877] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5877] close(3) = 0 [pid 5877] close(4) = 0 [pid 5877] mkdir("./file0", 0777) = 0 [ 145.925397][ T5877] loop0: detected capacity change from 0 to 32768 [ 146.026487][ T5877] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 146.026505][ T5877] allowing incompatible features above 0.0: (unknown version) [ 146.026514][ T5877] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 146.064468][ T5877] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 146.072801][ T5877] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 146.081109][ T5877] bcachefs (loop0): Version upgrade required: [ 146.081109][ T5877] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 146.081109][ T5877] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 146.081109][ T5877] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 146.166040][ T5877] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 146.166056][ T5877] gen 0 oldest_gen 0 data_type btree [ 146.166063][ T5877] journal_seq_nonempty 6 [ 146.166070][ T5877] journal_seq_empty 0 [ 146.166076][ T5877] need_discard 1 [ 146.166082][ T5877] need_inc_gen 1 [ 146.166089][ T5877] dirty_sectors 0 [ 146.166096][ T5877] stripe_sectors 1769482 [ 146.166102][ T5877] cached_sectors 0 [ 146.166109][ T5877] stripe 0 [ 146.166115][ T5877] stripe_redundancy 0 [ 146.166121][ T5877] io_time[READ] 1 [ 146.166128][ T5877] io_time[WRITE] 768 [ 146.166134][ T5877] fragmentation 0 [ 146.166140][ T5877] bp_start 7 [ 146.166147][ T5877] [ 146.166152][ T5877] invalid data type (got 3 should be 9), deleting [ 146.258604][ T5877] bcachefs (loop0): accounting_read... done [ 146.265775][ T5877] bcachefs (loop0): alloc_read... done [ 146.272684][ T5877] bcachefs (loop0): snapshots_read... done [ 146.279733][ T5877] bcachefs (loop0): check_allocations... [ 146.282094][ T5877] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 146.282108][ T5877] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 146.315399][ T5877] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 146.315415][ T5877] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 146.341905][ T5877] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 146.341921][ T5877] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 146.369445][ T5877] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 146.369460][ T5877] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 146.396380][ T5877] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 146.396395][ T5877] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 146.422818][ T5877] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 146.422832][ T5877] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 146.448397][ T5877] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 146.458573][ T5877] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 146.470385][ T5877] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 146.480528][ T5877] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 146.492407][ T5877] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 146.502483][ T5877] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 146.513890][ T5877] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 146.523900][ T5877] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 146.535290][ T5877] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 146.545300][ T5877] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 146.556657][ T5877] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 146.566648][ T5877] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 146.578070][ T5877] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 146.588052][ T5877] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 146.599481][ T5877] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 146.609813][ T5877] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 146.621045][ T5877] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 146.631478][ T5877] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 146.643294][ T5877] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 146.653902][ T5877] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 146.666058][ T5877] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 146.666072][ T5877] Ratelimiting new instances of previous error [ 146.682973][ T5877] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 146.682987][ T5877] Ratelimiting new instances of previous error [ 146.709833][ T5877] done [ 146.713025][ T5877] bcachefs (loop0): going read-write [ 146.721582][ T5877] bcachefs (loop0): journal_replay... done [ 146.753804][ T5877] bcachefs (loop0): check_alloc_info... done [ 146.762809][ T5877] bcachefs (loop0): check_lrus... done [ 146.769270][ T5877] bcachefs (loop0): check_btree_backpointers... done [ 146.776558][ T5877] bcachefs (loop0): check_backpointers_to_extents... done [ 146.785794][ T5877] bcachefs (loop0): check_extents_to_backpointers... [ 146.786618][ T5877] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 146.802338][ T5877] done [ 146.805885][ T5877] bcachefs (loop0): check_alloc_to_lru_refs... [ 146.806986][ T5877] bcachefs (loop0): missing fragmentation lru entry [ 146.806997][ T5877] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 146.807004][ T5877] gen 0 oldest_gen 0 data_type user [ 146.807010][ T5877] journal_seq_nonempty 5 [ 146.807017][ T5877] journal_seq_empty 134217728 [ 146.807023][ T5877] need_discard 1 [ 146.807029][ T5877] need_inc_gen 1 [ 146.807035][ T5877] dirty_sectors 16 [ 146.807041][ T5877] stripe_sectors 1802251 [ 146.807047][ T5877] cached_sectors 0 [ 146.807053][ T5877] stripe 0 [ 146.807059][ T5877] stripe_redundancy 0 [ 146.807065][ T5877] io_time[READ] 1 [ 146.807071][ T5877] io_time[WRITE] 512 [ 146.807077][ T5877] fragmentation 0 [ 146.807083][ T5877] bp_start 7 [ 146.807089][ T5877] , fixing [ 146.896611][ T5877] done [ 146.900346][ T5877] bcachefs (loop0): bucket_gens_init... done [ 146.911875][ T5877] bcachefs (loop0): check_snapshot_trees... done [ 146.918344][ T5877] bcachefs (loop0): check_snapshots... [ 146.918885][ T5877] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 146.918897][ T5877] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 146.951334][ T5877] done [ 146.955063][ T5877] bcachefs (loop0): check_subvols... done [ 146.961883][ T5877] bcachefs (loop0): check_subvol_children... done [ 146.968579][ T5877] bcachefs (loop0): delete_dead_snapshots... done [ 146.975183][ T5877] bcachefs (loop0): check_inodes... done [ 146.981686][ T5877] bcachefs (loop0): check_extents... done [ 146.988085][ T5877] bcachefs (loop0): check_indirect_extents... done [ 146.994620][ T5877] bcachefs (loop0): check_dirents... done [ 147.002026][ T5877] bcachefs (loop0): check_xattrs... done [ 147.008316][ T5877] bcachefs (loop0): check_root... done [ 147.014242][ T5877] bcachefs (loop0): check_unreachable_inodes... done [ 147.021294][ T5877] bcachefs (loop0): check_subvolume_structure... done [ 147.028159][ T5877] bcachefs (loop0): check_directory_structure... done [ 147.035037][ T5877] bcachefs (loop0): check_nlinks... done [ 147.041219][ T5877] bcachefs (loop0): check_rebalance_work... done [pid 5877] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5877] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5877] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5877] ioctl(4, LOOP_CLR_FD) = 0 [pid 5877] close(4) = 0 [ 147.048062][ T5877] bcachefs (loop0): resume_logged_ops... done [ 147.054156][ T5877] bcachefs (loop0): delete_dead_inodes... done [ 147.061428][ T5877] bcachefs (loop0): set_fs_needs_rebalance... done [ 147.078896][ T5877] bcachefs (loop0): done starting filesystem [pid 5877] exit_group(0) = ? [pid 5877] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=114 /* 1.14 s */} --- umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 147.166364][ T5861] bcachefs (loop0): shutting down [ 147.171589][ T5861] bcachefs (loop0): going read-only [ 147.176832][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 147.189101][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 147.198103][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 147.209573][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 147.219136][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 147.241380][ T5861] bcachefs (loop0): shutdown complete umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5888 attached , child_tidptr=0x55557ab46650) = 5888 [pid 5888] set_robust_list(0x55557ab46660, 24) = 0 [pid 5888] chdir("./2") = 0 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5888] setpgid(0, 0) = 0 [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5888] write(3, "1000", 4) = 4 [pid 5888] close(3) = 0 [pid 5888] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5888] write(1, "executing program\n", 18) = 18 [pid 5888] memfd_create("syzkaller", 0) = 3 [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5888] munmap(0x7fdffb600000, 138412032) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5888] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5888] close(3) = 0 [pid 5888] close(4) = 0 [pid 5888] mkdir("./file0", 0777) = 0 [ 148.858773][ T5888] loop0: detected capacity change from 0 to 32768 [ 148.959499][ T5888] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 148.959516][ T5888] allowing incompatible features above 0.0: (unknown version) [ 148.959523][ T5888] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 148.996921][ T5888] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 149.005328][ T5888] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 149.014025][ T5888] bcachefs (loop0): Version upgrade required: [ 149.014025][ T5888] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 149.014025][ T5888] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 149.014025][ T5888] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 149.099677][ T5888] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 149.099694][ T5888] gen 0 oldest_gen 0 data_type btree [ 149.099702][ T5888] journal_seq_nonempty 6 [ 149.099708][ T5888] journal_seq_empty 0 [ 149.099715][ T5888] need_discard 1 [ 149.099722][ T5888] need_inc_gen 1 [ 149.099728][ T5888] dirty_sectors 0 [ 149.099735][ T5888] stripe_sectors 1769482 [ 149.099742][ T5888] cached_sectors 0 [ 149.099749][ T5888] stripe 0 [ 149.099755][ T5888] stripe_redundancy 0 [ 149.099762][ T5888] io_time[READ] 1 [ 149.099768][ T5888] io_time[WRITE] 768 [ 149.099775][ T5888] fragmentation 0 [ 149.099782][ T5888] bp_start 7 [ 149.099788][ T5888] [ 149.099794][ T5888] invalid data type (got 3 should be 9), deleting [ 149.192375][ T5888] bcachefs (loop0): accounting_read... done [ 149.199706][ T5888] bcachefs (loop0): alloc_read... done [ 149.206415][ T5888] bcachefs (loop0): snapshots_read... done [ 149.213342][ T5888] bcachefs (loop0): check_allocations... [ 149.215462][ T5888] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 149.215476][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 149.248105][ T5888] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 149.248121][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 149.274462][ T5888] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 149.274477][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 149.301031][ T5888] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 149.301045][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 149.327237][ T5888] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 149.327250][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 149.353447][ T5888] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 149.353462][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 149.378815][ T5888] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 149.388881][ T5888] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 149.400599][ T5888] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 149.410627][ T5888] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 149.422350][ T5888] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 149.432363][ T5888] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 149.443826][ T5888] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 149.453846][ T5888] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 149.465237][ T5888] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 149.475208][ T5888] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 149.486567][ T5888] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 149.496540][ T5888] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 149.508010][ T5888] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 149.518016][ T5888] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 149.529395][ T5888] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 149.539420][ T5888] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 149.550619][ T5888] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 149.561045][ T5888] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 149.573212][ T5888] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 149.583752][ T5888] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 149.595728][ T5888] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 149.595743][ T5888] Ratelimiting new instances of previous error [ 149.612625][ T5888] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 149.612640][ T5888] Ratelimiting new instances of previous error [ 149.639672][ T5888] done [ 149.642852][ T5888] bcachefs (loop0): going read-write [ 149.652206][ T5888] bcachefs (loop0): journal_replay... done [ 149.683489][ T5888] bcachefs (loop0): check_alloc_info... done [ 149.692685][ T5888] bcachefs (loop0): check_lrus... done [ 149.698832][ T5888] bcachefs (loop0): check_btree_backpointers... done [ 149.705966][ T5888] bcachefs (loop0): check_backpointers_to_extents... done [ 149.715228][ T5888] bcachefs (loop0): check_extents_to_backpointers... [ 149.716095][ T5888] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 149.731638][ T5888] done [ 149.735702][ T5888] bcachefs (loop0): check_alloc_to_lru_refs... [ 149.736803][ T5888] bcachefs (loop0): missing fragmentation lru entry [ 149.736815][ T5888] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 149.736823][ T5888] gen 0 oldest_gen 0 data_type user [ 149.736830][ T5888] journal_seq_nonempty 5 [ 149.736837][ T5888] journal_seq_empty 134217728 [ 149.736843][ T5888] need_discard 1 [ 149.736850][ T5888] need_inc_gen 1 [ 149.736857][ T5888] dirty_sectors 16 [ 149.736864][ T5888] stripe_sectors 1802251 [ 149.736870][ T5888] cached_sectors 0 [ 149.736877][ T5888] stripe 0 [ 149.736884][ T5888] stripe_redundancy 0 [ 149.736890][ T5888] io_time[READ] 1 [ 149.736897][ T5888] io_time[WRITE] 512 [ 149.736904][ T5888] fragmentation 0 [ 149.736910][ T5888] bp_start 7 [ 149.736917][ T5888] , fixing [ 149.826433][ T5888] done [ 149.829945][ T5888] bcachefs (loop0): bucket_gens_init... done [ 149.841524][ T5888] bcachefs (loop0): check_snapshot_trees... done [ 149.848037][ T5888] bcachefs (loop0): check_snapshots... [ 149.848647][ T5888] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 149.848659][ T5888] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 149.881697][ T5888] done [ 149.885817][ T5888] bcachefs (loop0): check_subvols... done [ 149.892255][ T5888] bcachefs (loop0): check_subvol_children... done [ 149.899000][ T5888] bcachefs (loop0): delete_dead_snapshots... done [ 149.905754][ T5888] bcachefs (loop0): check_inodes... done [ 149.912385][ T5888] bcachefs (loop0): check_extents... done [ 149.918832][ T5888] bcachefs (loop0): check_indirect_extents... done [ 149.925396][ T5888] bcachefs (loop0): check_dirents... done [ 149.932524][ T5888] bcachefs (loop0): check_xattrs... done [ 149.938781][ T5888] bcachefs (loop0): check_root... done [ 149.944799][ T5888] bcachefs (loop0): check_unreachable_inodes... done [ 149.951719][ T5888] bcachefs (loop0): check_subvolume_structure... done [ 149.958599][ T5888] bcachefs (loop0): check_directory_structure... done [ 149.965397][ T5888] bcachefs (loop0): check_nlinks... done [ 149.971641][ T5888] bcachefs (loop0): check_rebalance_work... done [pid 5888] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5888] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5888] ioctl(4, LOOP_CLR_FD) = 0 [pid 5888] close(4) = 0 [pid 5888] exit_group(0) = ? [pid 5888] +++ exited with 0 +++ [ 149.978458][ T5888] bcachefs (loop0): resume_logged_ops... done [ 149.984603][ T5888] bcachefs (loop0): delete_dead_inodes... done [ 149.991112][ T5888] bcachefs (loop0): set_fs_needs_rebalance... done [ 150.008507][ T5888] bcachefs (loop0): done starting filesystem --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=111 /* 1.11 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 150.089965][ T5861] bcachefs (loop0): shutting down [ 150.095136][ T5861] bcachefs (loop0): going read-only [ 150.102541][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 150.112983][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 150.122748][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 150.133283][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 150.142090][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 150.164986][ T5861] bcachefs (loop0): shutdown complete umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5899 attached [pid 5899] set_robust_list(0x55557ab46660, 24) = 0 [pid 5899] chdir("./3" [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 5899 [pid 5899] <... chdir resumed>) = 0 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5899] setpgid(0, 0) = 0 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5899] write(3, "1000", 4) = 4 [pid 5899] close(3) = 0 [pid 5899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5899] write(1, "executing program\n", 18executing program ) = 18 [pid 5899] memfd_create("syzkaller", 0) = 3 [pid 5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5899] munmap(0x7fdffb600000, 138412032) = 0 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5899] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5899] close(3) = 0 [pid 5899] close(4) = 0 [pid 5899] mkdir("./file0", 0777) = 0 [ 151.870352][ T5899] loop0: detected capacity change from 0 to 32768 [ 151.947346][ T5899] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 151.947370][ T5899] allowing incompatible features above 0.0: (unknown version) [ 151.947382][ T5899] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 151.986078][ T5899] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 151.994395][ T5899] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 152.002604][ T5899] bcachefs (loop0): Version upgrade required: [ 152.002604][ T5899] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 152.002604][ T5899] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 152.002604][ T5899] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 152.086912][ T5899] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 152.086929][ T5899] gen 0 oldest_gen 0 data_type btree [ 152.086936][ T5899] journal_seq_nonempty 6 [ 152.086943][ T5899] journal_seq_empty 0 [ 152.086950][ T5899] need_discard 1 [ 152.086956][ T5899] need_inc_gen 1 [ 152.086963][ T5899] dirty_sectors 0 [ 152.086969][ T5899] stripe_sectors 1769482 [ 152.086976][ T5899] cached_sectors 0 [ 152.086983][ T5899] stripe 0 [ 152.086989][ T5899] stripe_redundancy 0 [ 152.086996][ T5899] io_time[READ] 1 [ 152.087003][ T5899] io_time[WRITE] 768 [ 152.087009][ T5899] fragmentation 0 [ 152.087016][ T5899] bp_start 7 [ 152.087022][ T5899] [ 152.087028][ T5899] invalid data type (got 3 should be 9), deleting [ 152.179613][ T5899] bcachefs (loop0): accounting_read... done [ 152.186627][ T5899] bcachefs (loop0): alloc_read... done [ 152.193780][ T5899] bcachefs (loop0): snapshots_read... done [ 152.200708][ T5899] bcachefs (loop0): check_allocations... [ 152.203055][ T5899] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 152.203069][ T5899] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 152.235502][ T5899] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 152.235517][ T5899] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 152.261884][ T5899] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 152.261899][ T5899] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 152.288459][ T5899] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 152.288475][ T5899] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 152.315166][ T5899] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 152.315182][ T5899] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 152.341427][ T5899] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 152.341447][ T5899] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 152.366874][ T5899] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 152.376939][ T5899] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 152.388668][ T5899] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 152.398703][ T5899] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 152.410349][ T5899] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 152.420372][ T5899] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 152.431840][ T5899] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 152.441861][ T5899] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 152.453354][ T5899] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 152.463402][ T5899] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 152.474842][ T5899] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 152.484824][ T5899] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 152.496187][ T5899] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 152.506160][ T5899] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 152.517537][ T5899] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 152.527526][ T5899] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 152.538741][ T5899] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 152.549154][ T5899] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 152.561034][ T5899] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 152.571544][ T5899] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 152.583677][ T5899] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 152.583691][ T5899] Ratelimiting new instances of previous error [ 152.600578][ T5899] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 152.600592][ T5899] Ratelimiting new instances of previous error [ 152.627259][ T5899] done [ 152.630618][ T5899] bcachefs (loop0): going read-write [ 152.639907][ T5899] bcachefs (loop0): journal_replay... done [ 152.672148][ T5899] bcachefs (loop0): check_alloc_info... done [ 152.681227][ T5899] bcachefs (loop0): check_lrus... done [ 152.686955][ T5899] bcachefs (loop0): check_btree_backpointers... done [ 152.694159][ T5899] bcachefs (loop0): check_backpointers_to_extents... done [ 152.703628][ T5899] bcachefs (loop0): check_extents_to_backpointers... [ 152.704595][ T5899] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 152.720277][ T5899] done [ 152.723853][ T5899] bcachefs (loop0): check_alloc_to_lru_refs... [ 152.725022][ T5899] bcachefs (loop0): missing fragmentation lru entry [ 152.725034][ T5899] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 152.725042][ T5899] gen 0 oldest_gen 0 data_type user [ 152.725049][ T5899] journal_seq_nonempty 5 [ 152.725056][ T5899] journal_seq_empty 134217728 [ 152.725063][ T5899] need_discard 1 [ 152.725069][ T5899] need_inc_gen 1 [ 152.725076][ T5899] dirty_sectors 16 [ 152.725083][ T5899] stripe_sectors 1802251 [ 152.725090][ T5899] cached_sectors 0 [ 152.725096][ T5899] stripe 0 [ 152.725103][ T5899] stripe_redundancy 0 [ 152.725109][ T5899] io_time[READ] 1 [ 152.725116][ T5899] io_time[WRITE] 512 [ 152.725123][ T5899] fragmentation 0 [ 152.725129][ T5899] bp_start 7 [ 152.725136][ T5899] , fixing [ 152.814852][ T5899] done [ 152.818757][ T5899] bcachefs (loop0): bucket_gens_init... done [ 152.830458][ T5899] bcachefs (loop0): check_snapshot_trees... done [ 152.836845][ T5899] bcachefs (loop0): check_snapshots... [ 152.837334][ T5899] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 152.837346][ T5899] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 152.869452][ T5899] done [ 152.873696][ T5899] bcachefs (loop0): check_subvols... done [ 152.880151][ T5899] bcachefs (loop0): check_subvol_children... done [ 152.886651][ T5899] bcachefs (loop0): delete_dead_snapshots... done [ 152.893173][ T5899] bcachefs (loop0): check_inodes... done [ 152.899751][ T5899] bcachefs (loop0): check_extents... done [ 152.906016][ T5899] bcachefs (loop0): check_indirect_extents... done [ 152.912622][ T5899] bcachefs (loop0): check_dirents... done [ 152.919903][ T5899] bcachefs (loop0): check_xattrs... done [ 152.926084][ T5899] bcachefs (loop0): check_root... done [ 152.931951][ T5899] bcachefs (loop0): check_unreachable_inodes... done [ 152.938977][ T5899] bcachefs (loop0): check_subvolume_structure... done [ 152.945778][ T5899] bcachefs (loop0): check_directory_structure... done [ 152.952620][ T5899] bcachefs (loop0): check_nlinks... done [ 152.958962][ T5899] bcachefs (loop0): check_rebalance_work... done [pid 5899] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5899] ioctl(4, LOOP_CLR_FD) = 0 [pid 5899] close(4) = 0 [pid 5899] exit_group(0) = ? [pid 5899] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=106 /* 1.06 s */} --- [ 152.965595][ T5899] bcachefs (loop0): resume_logged_ops... done [ 152.972009][ T5899] bcachefs (loop0): delete_dead_inodes... done [ 152.978289][ T5899] bcachefs (loop0): set_fs_needs_rebalance... done [ 152.996268][ T5899] bcachefs (loop0): done starting filesystem restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 153.084736][ T5861] bcachefs (loop0): shutting down [ 153.092770][ T5861] bcachefs (loop0): going read-only [ 153.098270][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 153.106545][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 153.116813][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 153.127715][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 153.137226][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 153.161238][ T5861] bcachefs (loop0): shutdown complete umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5910 attached [pid 5910] set_robust_list(0x55557ab46660, 24) = 0 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 5910 [pid 5910] chdir("./4") = 0 [pid 5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5910] setpgid(0, 0) = 0 [pid 5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5910] write(3, "1000", 4) = 4 [pid 5910] close(3) = 0 [pid 5910] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 5910] write(1, "executing program\n", 18) = 18 [pid 5910] memfd_create("syzkaller", 0) = 3 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5910] munmap(0x7fdffb600000, 138412032) = 0 [pid 5910] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5910] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5910] close(3) = 0 [pid 5910] close(4) = 0 [pid 5910] mkdir("./file0", 0777) = 0 [ 154.589516][ T5910] loop0: detected capacity change from 0 to 32768 [ 154.724985][ T5910] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 154.725010][ T5910] allowing incompatible features above 0.0: (unknown version) [ 154.725022][ T5910] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 154.764199][ T5910] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 154.785377][ T5910] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 154.798126][ T5910] bcachefs (loop0): Version upgrade required: [ 154.798126][ T5910] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 154.798126][ T5910] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 154.798126][ T5910] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 154.888052][ T5910] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 154.888074][ T5910] gen 0 oldest_gen 0 data_type btree [ 154.888085][ T5910] journal_seq_nonempty 6 [ 154.888095][ T5910] journal_seq_empty 0 [ 154.888105][ T5910] need_discard 1 [ 154.888114][ T5910] need_inc_gen 1 [ 154.888124][ T5910] dirty_sectors 0 [ 154.888146][ T5910] stripe_sectors 1769482 [ 154.888156][ T5910] cached_sectors 0 [ 154.888165][ T5910] stripe 0 [ 154.888175][ T5910] stripe_redundancy 0 [ 154.888184][ T5910] io_time[READ] 1 [ 154.888194][ T5910] io_time[WRITE] 768 [ 154.888203][ T5910] fragmentation 0 [ 154.888213][ T5910] bp_start 7 [ 154.888222][ T5910] [ 154.888230][ T5910] invalid data type (got 3 should be 9), deleting [ 154.984164][ T5910] bcachefs (loop0): accounting_read... done [ 154.991260][ T5910] bcachefs (loop0): alloc_read... done [ 154.998073][ T5910] bcachefs (loop0): snapshots_read... done [ 155.005049][ T5910] bcachefs (loop0): check_allocations... [ 155.007247][ T5910] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 155.007261][ T5910] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 155.040299][ T5910] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 155.040314][ T5910] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 155.066644][ T5910] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 155.066659][ T5910] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 155.093138][ T5910] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 155.093154][ T5910] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 155.120286][ T5910] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 155.120301][ T5910] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 155.146604][ T5910] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 155.146620][ T5910] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 155.172032][ T5910] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.182087][ T5910] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 155.193807][ T5910] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.203879][ T5910] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 155.215486][ T5910] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.225609][ T5910] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 155.237022][ T5910] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.247090][ T5910] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 155.258707][ T5910] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.268760][ T5910] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 155.280251][ T5910] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.290254][ T5910] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 155.301626][ T5910] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.311607][ T5910] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 155.322980][ T5910] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 155.332949][ T5910] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 155.344173][ T5910] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 155.354611][ T5910] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 155.366412][ T5910] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 155.376925][ T5910] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 155.389088][ T5910] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 155.389110][ T5910] Ratelimiting new instances of previous error [ 155.406021][ T5910] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 155.406035][ T5910] Ratelimiting new instances of previous error [ 155.432328][ T5910] done [ 155.435522][ T5910] bcachefs (loop0): going read-write [ 155.444255][ T5910] bcachefs (loop0): journal_replay... done [ 155.474982][ T5910] bcachefs (loop0): check_alloc_info... done [ 155.484069][ T5910] bcachefs (loop0): check_lrus... done [ 155.489909][ T5910] bcachefs (loop0): check_btree_backpointers... done [ 155.496931][ T5910] bcachefs (loop0): check_backpointers_to_extents... done [ 155.506234][ T5910] bcachefs (loop0): check_extents_to_backpointers... [ 155.507134][ T5910] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 155.522919][ T5910] done [ 155.526436][ T5910] bcachefs (loop0): check_alloc_to_lru_refs... [ 155.527484][ T5910] bcachefs (loop0): missing fragmentation lru entry [ 155.527495][ T5910] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 155.527503][ T5910] gen 0 oldest_gen 0 data_type user [ 155.527510][ T5910] journal_seq_nonempty 5 [ 155.527516][ T5910] journal_seq_empty 134217728 [ 155.527523][ T5910] need_discard 1 [ 155.527529][ T5910] need_inc_gen 1 [ 155.527536][ T5910] dirty_sectors 16 [ 155.527542][ T5910] stripe_sectors 1802251 [ 155.527549][ T5910] cached_sectors 0 [ 155.527555][ T5910] stripe 0 [ 155.527562][ T5910] stripe_redundancy 0 [ 155.527568][ T5910] io_time[READ] 1 [ 155.527574][ T5910] io_time[WRITE] 512 [ 155.527581][ T5910] fragmentation 0 [ 155.527587][ T5910] bp_start 7 [ 155.527593][ T5910] , fixing [ 155.617520][ T5910] done [ 155.620967][ T5910] bcachefs (loop0): bucket_gens_init... done [ 155.632873][ T5910] bcachefs (loop0): check_snapshot_trees... done [ 155.639384][ T5910] bcachefs (loop0): check_snapshots... [ 155.639898][ T5910] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 155.639910][ T5910] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 155.673521][ T5910] done [ 155.677220][ T5910] bcachefs (loop0): check_subvols... done [ 155.684112][ T5910] bcachefs (loop0): check_subvol_children... done [ 155.690715][ T5910] bcachefs (loop0): delete_dead_snapshots... done [ 155.697258][ T5910] bcachefs (loop0): check_inodes... done [ 155.703717][ T5910] bcachefs (loop0): check_extents... done [ 155.710149][ T5910] bcachefs (loop0): check_indirect_extents... done [ 155.716714][ T5910] bcachefs (loop0): check_dirents... done [ 155.723676][ T5910] bcachefs (loop0): check_xattrs... done [ 155.729745][ T5910] bcachefs (loop0): check_root... done [ 155.735640][ T5910] bcachefs (loop0): check_unreachable_inodes... done [ 155.742585][ T5910] bcachefs (loop0): check_subvolume_structure... done [ 155.749484][ T5910] bcachefs (loop0): check_directory_structure... done [ 155.756310][ T5910] bcachefs (loop0): check_nlinks... done [ 155.762656][ T5910] bcachefs (loop0): check_rebalance_work... done [pid 5910] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5910] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5910] ioctl(4, LOOP_CLR_FD) = 0 [pid 5910] close(4) = 0 [pid 5910] exit_group(0) = ? [pid 5910] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=109 /* 1.09 s */} --- [ 155.769389][ T5910] bcachefs (loop0): resume_logged_ops... done [ 155.775513][ T5910] bcachefs (loop0): delete_dead_inodes... done [ 155.782263][ T5910] bcachefs (loop0): set_fs_needs_rebalance... done [ 155.799800][ T5910] bcachefs (loop0): done starting filesystem restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 155.897527][ T5861] bcachefs (loop0): shutting down [ 155.904111][ T5861] bcachefs (loop0): going read-only [ 155.909459][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 155.916808][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 155.925781][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 155.936546][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 155.945926][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 155.971563][ T5861] bcachefs (loop0): shutdown complete umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5921 attached [pid 5921] set_robust_list(0x55557ab46660, 24) = 0 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 5921 [pid 5921] chdir("./5") = 0 [pid 5921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5921] setpgid(0, 0) = 0 [pid 5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5921] write(3, "1000", 4) = 4 [pid 5921] close(3) = 0 [pid 5921] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5921] write(1, "executing program\n", 18executing program ) = 18 [pid 5921] memfd_create("syzkaller", 0) = 3 [pid 5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5921] munmap(0x7fdffb600000, 138412032) = 0 [pid 5921] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5921] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5921] close(3) = 0 [pid 5921] close(4) = 0 [pid 5921] mkdir("./file0", 0777) = 0 [ 157.485190][ T5921] loop0: detected capacity change from 0 to 32768 [ 157.585455][ T5921] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 157.585473][ T5921] allowing incompatible features above 0.0: (unknown version) [ 157.585481][ T5921] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 157.624122][ T5921] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 157.632496][ T5921] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 157.641028][ T5921] bcachefs (loop0): Version upgrade required: [ 157.641028][ T5921] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 157.641028][ T5921] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 157.641028][ T5921] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 157.725072][ T5921] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 157.725087][ T5921] gen 0 oldest_gen 0 data_type btree [ 157.725094][ T5921] journal_seq_nonempty 6 [ 157.725100][ T5921] journal_seq_empty 0 [ 157.725106][ T5921] need_discard 1 [ 157.725112][ T5921] need_inc_gen 1 [ 157.725118][ T5921] dirty_sectors 0 [ 157.725124][ T5921] stripe_sectors 1769482 [ 157.725130][ T5921] cached_sectors 0 [ 157.725136][ T5921] stripe 0 [ 157.725142][ T5921] stripe_redundancy 0 [ 157.725148][ T5921] io_time[READ] 1 [ 157.725154][ T5921] io_time[WRITE] 768 [ 157.725160][ T5921] fragmentation 0 [ 157.725166][ T5921] bp_start 7 [ 157.725172][ T5921] [ 157.725177][ T5921] invalid data type (got 3 should be 9), deleting [ 157.818320][ T5921] bcachefs (loop0): accounting_read... done [ 157.825371][ T5921] bcachefs (loop0): alloc_read... done [ 157.831926][ T5921] bcachefs (loop0): snapshots_read... done [ 157.838962][ T5921] bcachefs (loop0): check_allocations... [ 157.841250][ T5921] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 157.841270][ T5921] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 157.874092][ T5921] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 157.874107][ T5921] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 157.900606][ T5921] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 157.900621][ T5921] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 157.927160][ T5921] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 157.927174][ T5921] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 157.953599][ T5921] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 157.953614][ T5921] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 157.980181][ T5921] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 157.980198][ T5921] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 158.005624][ T5921] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 158.015730][ T5921] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 158.027456][ T5921] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 158.037472][ T5921] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 158.049316][ T5921] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 158.059344][ T5921] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 158.070792][ T5921] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 158.080830][ T5921] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 158.092337][ T5921] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 158.102351][ T5921] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 158.113785][ T5921] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 158.123785][ T5921] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 158.135183][ T5921] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 158.145194][ T5921] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 158.156609][ T5921] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 158.166603][ T5921] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 158.177971][ T5921] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 158.188451][ T5921] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 158.200311][ T5921] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 158.210836][ T5921] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 158.222832][ T5921] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 158.222846][ T5921] Ratelimiting new instances of previous error [ 158.239744][ T5921] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 158.239758][ T5921] Ratelimiting new instances of previous error [ 158.265965][ T5921] done [ 158.269305][ T5921] bcachefs (loop0): going read-write [ 158.277300][ T5921] bcachefs (loop0): journal_replay... done [ 158.307892][ T5921] bcachefs (loop0): check_alloc_info... done [ 158.316772][ T5921] bcachefs (loop0): check_lrus... done [ 158.322585][ T5921] bcachefs (loop0): check_btree_backpointers... done [ 158.329668][ T5921] bcachefs (loop0): check_backpointers_to_extents... done [ 158.338961][ T5921] bcachefs (loop0): check_extents_to_backpointers... [ 158.339834][ T5921] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 158.355754][ T5921] done [ 158.359828][ T5921] bcachefs (loop0): check_alloc_to_lru_refs... [ 158.361193][ T5921] bcachefs (loop0): missing fragmentation lru entry [ 158.361205][ T5921] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 158.361212][ T5921] gen 0 oldest_gen 0 data_type user [ 158.361219][ T5921] journal_seq_nonempty 5 [ 158.361226][ T5921] journal_seq_empty 134217728 [ 158.361233][ T5921] need_discard 1 [ 158.361239][ T5921] need_inc_gen 1 [ 158.361245][ T5921] dirty_sectors 16 [ 158.361252][ T5921] stripe_sectors 1802251 [ 158.361258][ T5921] cached_sectors 0 [ 158.361265][ T5921] stripe 0 [ 158.361271][ T5921] stripe_redundancy 0 [ 158.361278][ T5921] io_time[READ] 1 [ 158.361284][ T5921] io_time[WRITE] 512 [ 158.361291][ T5921] fragmentation 0 [ 158.361297][ T5921] bp_start 7 [ 158.361303][ T5921] , fixing [ 158.450803][ T5921] done [ 158.454278][ T5921] bcachefs (loop0): bucket_gens_init... done [ 158.466256][ T5921] bcachefs (loop0): check_snapshot_trees... done [ 158.472710][ T5921] bcachefs (loop0): check_snapshots... [ 158.473357][ T5921] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 158.473370][ T5921] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 158.505711][ T5921] done [ 158.510781][ T5921] bcachefs (loop0): check_subvols... done [ 158.518182][ T5921] bcachefs (loop0): check_subvol_children... done [ 158.524796][ T5921] bcachefs (loop0): delete_dead_snapshots... done [ 158.531453][ T5921] bcachefs (loop0): check_inodes... done [ 158.538185][ T5921] bcachefs (loop0): check_extents... done [ 158.544520][ T5921] bcachefs (loop0): check_indirect_extents... done [ 158.551231][ T5921] bcachefs (loop0): check_dirents... done [ 158.558282][ T5921] bcachefs (loop0): check_xattrs... done [ 158.564522][ T5921] bcachefs (loop0): check_root... done [ 158.570398][ T5921] bcachefs (loop0): check_unreachable_inodes... done [ 158.577340][ T5921] bcachefs (loop0): check_subvolume_structure... done [ 158.584176][ T5921] bcachefs (loop0): check_directory_structure... done [ 158.591047][ T5921] bcachefs (loop0): check_nlinks... done [ 158.597153][ T5921] bcachefs (loop0): check_rebalance_work... done [pid 5921] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5921] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5921] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5921] ioctl(4, LOOP_CLR_FD) = 0 [ 158.603820][ T5921] bcachefs (loop0): resume_logged_ops... done [ 158.609984][ T5921] bcachefs (loop0): delete_dead_inodes... done [ 158.616451][ T5921] bcachefs (loop0): set_fs_needs_rebalance... done [ 158.634112][ T5921] bcachefs (loop0): done starting filesystem [pid 5921] close(4) = 0 [pid 5921] exit_group(0) = ? [pid 5921] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5921, si_uid=0, si_status=0, si_utime=0, si_stime=110 /* 1.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 158.734637][ T5861] bcachefs (loop0): shutting down [ 158.739868][ T5861] bcachefs (loop0): going read-only [ 158.745111][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 158.753065][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 158.762050][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 158.775084][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 158.784264][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 158.808886][ T5861] bcachefs (loop0): shutdown complete umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5933 attached [pid 5933] set_robust_list(0x55557ab46660, 24 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 5933 [pid 5933] <... set_robust_list resumed>) = 0 [pid 5933] chdir("./6") = 0 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5933] setpgid(0, 0) = 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5933] write(3, "1000", 4) = 4 [pid 5933] close(3) = 0 [pid 5933] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5933] write(1, "executing program\n", 18) = 18 [pid 5933] memfd_create("syzkaller", 0) = 3 [pid 5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5933] munmap(0x7fdffb600000, 138412032) = 0 [pid 5933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5933] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5933] close(3) = 0 [pid 5933] close(4) = 0 [pid 5933] mkdir("./file0", 0777) = 0 [ 160.344128][ T5933] loop0: detected capacity change from 0 to 32768 [ 160.434132][ T5933] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 160.434151][ T5933] allowing incompatible features above 0.0: (unknown version) [ 160.434160][ T5933] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 160.471359][ T5933] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 160.479911][ T5933] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 160.488451][ T5933] bcachefs (loop0): Version upgrade required: [ 160.488451][ T5933] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 160.488451][ T5933] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 160.488451][ T5933] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 160.572868][ T5933] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 160.572886][ T5933] gen 0 oldest_gen 0 data_type btree [ 160.572893][ T5933] journal_seq_nonempty 6 [ 160.572900][ T5933] journal_seq_empty 0 [ 160.572906][ T5933] need_discard 1 [ 160.572912][ T5933] need_inc_gen 1 [ 160.572919][ T5933] dirty_sectors 0 [ 160.572925][ T5933] stripe_sectors 1769482 [ 160.572932][ T5933] cached_sectors 0 [ 160.572938][ T5933] stripe 0 [ 160.572945][ T5933] stripe_redundancy 0 [ 160.572951][ T5933] io_time[READ] 1 [ 160.572957][ T5933] io_time[WRITE] 768 [ 160.572964][ T5933] fragmentation 0 [ 160.572970][ T5933] bp_start 7 [ 160.572977][ T5933] [ 160.572982][ T5933] invalid data type (got 3 should be 9), deleting [ 160.665147][ T5933] bcachefs (loop0): accounting_read... done [ 160.672404][ T5933] bcachefs (loop0): alloc_read... done [ 160.679114][ T5933] bcachefs (loop0): snapshots_read... done [ 160.685937][ T5933] bcachefs (loop0): check_allocations... [ 160.688022][ T5933] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 160.688039][ T5933] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 160.720713][ T5933] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 160.720727][ T5933] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 160.747006][ T5933] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 160.747022][ T5933] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 160.773475][ T5933] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 160.773490][ T5933] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 160.800400][ T5933] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 160.800416][ T5933] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 160.826851][ T5933] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 160.826874][ T5933] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 160.852273][ T5933] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 160.862356][ T5933] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 160.874020][ T5933] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 160.884019][ T5933] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 160.895621][ T5933] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 160.905613][ T5933] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 160.917189][ T5933] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 160.927187][ T5933] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 160.938595][ T5933] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 160.948586][ T5933] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 160.959980][ T5933] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 160.969967][ T5933] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 160.981352][ T5933] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 160.991329][ T5933] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 161.002742][ T5933] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 161.012818][ T5933] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 161.024187][ T5933] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 161.034952][ T5933] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 161.046960][ T5933] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 161.057490][ T5933] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 161.069455][ T5933] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 161.069469][ T5933] Ratelimiting new instances of previous error [ 161.086335][ T5933] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 161.086350][ T5933] Ratelimiting new instances of previous error [ 161.113035][ T5933] done [ 161.116214][ T5933] bcachefs (loop0): going read-write [ 161.124240][ T5933] bcachefs (loop0): journal_replay... done [ 161.155807][ T5933] bcachefs (loop0): check_alloc_info... done [ 161.164719][ T5933] bcachefs (loop0): check_lrus... done [ 161.170487][ T5933] bcachefs (loop0): check_btree_backpointers... done [ 161.178730][ T5933] bcachefs (loop0): check_backpointers_to_extents... done [ 161.187397][ T5933] bcachefs (loop0): check_extents_to_backpointers... [ 161.188878][ T5933] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 161.204460][ T5933] done [ 161.208541][ T5933] bcachefs (loop0): check_alloc_to_lru_refs... [ 161.209664][ T5933] bcachefs (loop0): missing fragmentation lru entry [ 161.209676][ T5933] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 161.209683][ T5933] gen 0 oldest_gen 0 data_type user [ 161.209690][ T5933] journal_seq_nonempty 5 [ 161.209697][ T5933] journal_seq_empty 134217728 [ 161.209704][ T5933] need_discard 1 [ 161.209710][ T5933] need_inc_gen 1 [ 161.209717][ T5933] dirty_sectors 16 [ 161.209723][ T5933] stripe_sectors 1802251 [ 161.209730][ T5933] cached_sectors 0 [ 161.209736][ T5933] stripe 0 [ 161.209743][ T5933] stripe_redundancy 0 [ 161.209749][ T5933] io_time[READ] 1 [ 161.209756][ T5933] io_time[WRITE] 512 [ 161.209762][ T5933] fragmentation 0 [ 161.209769][ T5933] bp_start 7 [ 161.209775][ T5933] , fixing [ 161.299527][ T5933] done [ 161.302994][ T5933] bcachefs (loop0): bucket_gens_init... done [ 161.314441][ T5933] bcachefs (loop0): check_snapshot_trees... done [ 161.320953][ T5933] bcachefs (loop0): check_snapshots... [ 161.321449][ T5933] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 161.321461][ T5933] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 161.354209][ T5933] done [ 161.358179][ T5933] bcachefs (loop0): check_subvols... done [ 161.364558][ T5933] bcachefs (loop0): check_subvol_children... done [ 161.371095][ T5933] bcachefs (loop0): delete_dead_snapshots... done [ 161.377545][ T5933] bcachefs (loop0): check_inodes... done [ 161.384363][ T5933] bcachefs (loop0): check_extents... done [ 161.390710][ T5933] bcachefs (loop0): check_indirect_extents... done [ 161.397526][ T5933] bcachefs (loop0): check_dirents... done [ 161.404598][ T5933] bcachefs (loop0): check_xattrs... done [ 161.410657][ T5933] bcachefs (loop0): check_root... done [ 161.416575][ T5933] bcachefs (loop0): check_unreachable_inodes... done [ 161.423612][ T5933] bcachefs (loop0): check_subvolume_structure... done [ 161.430500][ T5933] bcachefs (loop0): check_directory_structure... done [ 161.437328][ T5933] bcachefs (loop0): check_nlinks... done [ 161.443641][ T5933] bcachefs (loop0): check_rebalance_work... done [pid 5933] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5933] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5933] ioctl(4, LOOP_CLR_FD) = 0 [pid 5933] close(4) = 0 [pid 5933] exit_group(0) = ? [pid 5933] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=105 /* 1.05 s */} --- umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 161.450443][ T5933] bcachefs (loop0): resume_logged_ops... done [ 161.456556][ T5933] bcachefs (loop0): delete_dead_inodes... done [ 161.463055][ T5933] bcachefs (loop0): set_fs_needs_rebalance... done [ 161.480192][ T5933] bcachefs (loop0): done starting filesystem [ 161.536171][ T5861] bcachefs (loop0): shutting down [ 161.541976][ T5861] bcachefs (loop0): going read-only [ 161.547227][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 161.555306][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 161.565877][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 161.576524][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 161.585258][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 161.609441][ T5861] bcachefs (loop0): shutdown complete umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file0") = 0 umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5944 attached , child_tidptr=0x55557ab46650) = 5944 [pid 5944] set_robust_list(0x55557ab46660, 24) = 0 [pid 5944] chdir("./7") = 0 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5944] setpgid(0, 0) = 0 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5944] write(3, "1000", 4) = 4 [pid 5944] close(3) = 0 [pid 5944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5944] write(1, "executing program\n", 18executing program ) = 18 [pid 5944] memfd_create("syzkaller", 0) = 3 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5944] munmap(0x7fdffb600000, 138412032) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5944] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5944] close(3) = 0 [pid 5944] close(4) = 0 [pid 5944] mkdir("./file0", 0777) = 0 [ 163.222231][ T5944] loop0: detected capacity change from 0 to 32768 [ 163.305077][ T5944] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 163.305102][ T5944] allowing incompatible features above 0.0: (unknown version) [ 163.305114][ T5944] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 163.342319][ T5944] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 163.350666][ T5944] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 163.358907][ T5944] bcachefs (loop0): Version upgrade required: [ 163.358907][ T5944] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 163.358907][ T5944] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 163.358907][ T5944] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 163.443537][ T5944] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 163.443555][ T5944] gen 0 oldest_gen 0 data_type btree [ 163.443562][ T5944] journal_seq_nonempty 6 [ 163.443569][ T5944] journal_seq_empty 0 [ 163.443575][ T5944] need_discard 1 [ 163.443582][ T5944] need_inc_gen 1 [ 163.443588][ T5944] dirty_sectors 0 [ 163.443595][ T5944] stripe_sectors 1769482 [ 163.443602][ T5944] cached_sectors 0 [ 163.443609][ T5944] stripe 0 [ 163.443615][ T5944] stripe_redundancy 0 [ 163.443622][ T5944] io_time[READ] 1 [ 163.443629][ T5944] io_time[WRITE] 768 [ 163.443635][ T5944] fragmentation 0 [ 163.443642][ T5944] bp_start 7 [ 163.443648][ T5944] [ 163.443654][ T5944] invalid data type (got 3 should be 9), deleting [ 163.535996][ T5944] bcachefs (loop0): accounting_read... done [ 163.543070][ T5944] bcachefs (loop0): alloc_read... done [ 163.549791][ T5944] bcachefs (loop0): snapshots_read... done [ 163.556742][ T5944] bcachefs (loop0): check_allocations... [ 163.558964][ T5944] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 163.558978][ T5944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 163.591724][ T5944] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 163.591739][ T5944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 163.618075][ T5944] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 163.618090][ T5944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 163.644587][ T5944] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 163.644601][ T5944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 163.671136][ T5944] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 163.671151][ T5944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 163.697609][ T5944] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 163.697623][ T5944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 163.723026][ T5944] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.733089][ T5944] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.745007][ T5944] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.755008][ T5944] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.766771][ T5944] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.776775][ T5944] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.788180][ T5944] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.798170][ T5944] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.809827][ T5944] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.819873][ T5944] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.831361][ T5944] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.842245][ T5944] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.853741][ T5944] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.863728][ T5944] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.875218][ T5944] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.885554][ T5944] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 163.896836][ T5944] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 163.907287][ T5944] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 163.919202][ T5944] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 163.929772][ T5944] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 163.941895][ T5944] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 163.941913][ T5944] Ratelimiting new instances of previous error [ 163.958923][ T5944] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 163.958937][ T5944] Ratelimiting new instances of previous error [ 163.985887][ T5944] done [ 163.989254][ T5944] bcachefs (loop0): going read-write [ 163.997698][ T5944] bcachefs (loop0): journal_replay... done [ 164.031655][ T5944] bcachefs (loop0): check_alloc_info... done [ 164.040729][ T5944] bcachefs (loop0): check_lrus... done [ 164.046531][ T5944] bcachefs (loop0): check_btree_backpointers... done [ 164.053729][ T5944] bcachefs (loop0): check_backpointers_to_extents... done [ 164.062894][ T5944] bcachefs (loop0): check_extents_to_backpointers... [ 164.064049][ T5944] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 164.079455][ T5944] done [ 164.082933][ T5944] bcachefs (loop0): check_alloc_to_lru_refs... [ 164.084061][ T5944] bcachefs (loop0): missing fragmentation lru entry [ 164.084073][ T5944] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 164.084080][ T5944] gen 0 oldest_gen 0 data_type user [ 164.084087][ T5944] journal_seq_nonempty 5 [ 164.084094][ T5944] journal_seq_empty 134217728 [ 164.084101][ T5944] need_discard 1 [ 164.084108][ T5944] need_inc_gen 1 [ 164.084114][ T5944] dirty_sectors 16 [ 164.084121][ T5944] stripe_sectors 1802251 [ 164.084128][ T5944] cached_sectors 0 [ 164.084134][ T5944] stripe 0 [ 164.084141][ T5944] stripe_redundancy 0 [ 164.084148][ T5944] io_time[READ] 1 [ 164.084154][ T5944] io_time[WRITE] 512 [ 164.084161][ T5944] fragmentation 0 [ 164.084168][ T5944] bp_start 7 [ 164.084174][ T5944] , fixing [ 164.174296][ T5944] done [ 164.178346][ T5944] bcachefs (loop0): bucket_gens_init... done [ 164.189703][ T5944] bcachefs (loop0): check_snapshot_trees... done [ 164.196111][ T5944] bcachefs (loop0): check_snapshots... [ 164.196745][ T5944] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 164.196758][ T5944] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 164.229127][ T5944] done [ 164.233076][ T5944] bcachefs (loop0): check_subvols... done [ 164.239526][ T5944] bcachefs (loop0): check_subvol_children... done [ 164.246030][ T5944] bcachefs (loop0): delete_dead_snapshots... done [ 164.252529][ T5944] bcachefs (loop0): check_inodes... done [ 164.259097][ T5944] bcachefs (loop0): check_extents... done [ 164.265384][ T5944] bcachefs (loop0): check_indirect_extents... done [ 164.272505][ T5944] bcachefs (loop0): check_dirents... done [ 164.279714][ T5944] bcachefs (loop0): check_xattrs... done [ 164.285743][ T5944] bcachefs (loop0): check_root... done [ 164.291717][ T5944] bcachefs (loop0): check_unreachable_inodes... done [ 164.298761][ T5944] bcachefs (loop0): check_subvolume_structure... done [ 164.305605][ T5944] bcachefs (loop0): check_directory_structure... done [ 164.312629][ T5944] bcachefs (loop0): check_nlinks... done [ 164.318959][ T5944] bcachefs (loop0): check_rebalance_work... done [pid 5944] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5944] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5944] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5944] ioctl(4, LOOP_CLR_FD) = 0 [pid 5944] close(4) = 0 [pid 5944] exit_group(0) = ? [pid 5944] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5944, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=112 /* 1.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 164.325583][ T5944] bcachefs (loop0): resume_logged_ops... done [ 164.331760][ T5944] bcachefs (loop0): delete_dead_inodes... done [ 164.338029][ T5944] bcachefs (loop0): set_fs_needs_rebalance... done [ 164.354877][ T5944] bcachefs (loop0): done starting filesystem newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 164.409703][ T5861] bcachefs (loop0): shutting down [ 164.414779][ T5861] bcachefs (loop0): going read-only [ 164.429727][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 164.438462][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 164.447406][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 164.459071][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 164.469581][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 164.493338][ T5861] bcachefs (loop0): shutdown complete umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file0") = 0 umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5955 attached [pid 5955] set_robust_list(0x55557ab46660, 24 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 5955 [pid 5955] <... set_robust_list resumed>) = 0 [pid 5955] chdir("./8") = 0 [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5955] setpgid(0, 0) = 0 [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5955] write(3, "1000", 4) = 4 [pid 5955] close(3) = 0 [pid 5955] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5955] write(1, "executing program\n", 18) = 18 [pid 5955] memfd_create("syzkaller", 0) = 3 [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5955] munmap(0x7fdffb600000, 138412032) = 0 [pid 5955] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5955] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5955] close(3) = 0 [pid 5955] close(4) = 0 [pid 5955] mkdir("./file0", 0777) = 0 [ 166.027466][ T5955] loop0: detected capacity change from 0 to 32768 [ 166.128601][ T5955] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 166.128620][ T5955] allowing incompatible features above 0.0: (unknown version) [ 166.128629][ T5955] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 166.167101][ T5955] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 166.175427][ T5955] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 166.183794][ T5955] bcachefs (loop0): Version upgrade required: [ 166.183794][ T5955] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 166.183794][ T5955] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 166.183794][ T5955] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 166.268653][ T5955] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 166.268669][ T5955] gen 0 oldest_gen 0 data_type btree [ 166.268677][ T5955] journal_seq_nonempty 6 [ 166.268683][ T5955] journal_seq_empty 0 [ 166.268690][ T5955] need_discard 1 [ 166.268696][ T5955] need_inc_gen 1 [ 166.268705][ T5955] dirty_sectors 0 [ 166.268711][ T5955] stripe_sectors 1769482 [ 166.268718][ T5955] cached_sectors 0 [ 166.268725][ T5955] stripe 0 [ 166.268731][ T5955] stripe_redundancy 0 [ 166.268738][ T5955] io_time[READ] 1 [ 166.268744][ T5955] io_time[WRITE] 768 [ 166.268751][ T5955] fragmentation 0 [ 166.268757][ T5955] bp_start 7 [ 166.268764][ T5955] [ 166.268769][ T5955] invalid data type (got 3 should be 9), deleting [ 166.361082][ T5955] bcachefs (loop0): accounting_read... done [ 166.368127][ T5955] bcachefs (loop0): alloc_read... done [ 166.374822][ T5955] bcachefs (loop0): snapshots_read... done [ 166.381805][ T5955] bcachefs (loop0): check_allocations... [ 166.383936][ T5955] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 166.383951][ T5955] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 166.416481][ T5955] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 166.416496][ T5955] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 166.443100][ T5955] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 166.443115][ T5955] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 166.469929][ T5955] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 166.469944][ T5955] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 166.496301][ T5955] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 166.496315][ T5955] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 166.522531][ T5955] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 166.522546][ T5955] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 166.547995][ T5955] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 166.558060][ T5955] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 166.569860][ T5955] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 166.579908][ T5955] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 166.591816][ T5955] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 166.601827][ T5955] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 166.613198][ T5955] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 166.623236][ T5955] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 166.634748][ T5955] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 166.644767][ T5955] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 166.656356][ T5955] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 166.666371][ T5955] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 166.677892][ T5955] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 166.687879][ T5955] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 166.699273][ T5955] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 166.709404][ T5955] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 166.720753][ T5955] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 166.731179][ T5955] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 166.743015][ T5955] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 166.753563][ T5955] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 166.765533][ T5955] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 166.765547][ T5955] Ratelimiting new instances of previous error [ 166.782415][ T5955] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 166.782430][ T5955] Ratelimiting new instances of previous error [ 166.808803][ T5955] done [ 166.811978][ T5955] bcachefs (loop0): going read-write [ 166.820560][ T5955] bcachefs (loop0): journal_replay... done [ 166.850473][ T5955] bcachefs (loop0): check_alloc_info... done [ 166.859477][ T5955] bcachefs (loop0): check_lrus... done [ 166.865204][ T5955] bcachefs (loop0): check_btree_backpointers... done [ 166.872285][ T5955] bcachefs (loop0): check_backpointers_to_extents... done [ 166.881086][ T5955] bcachefs (loop0): check_extents_to_backpointers... [ 166.881964][ T5955] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 166.897471][ T5955] done [ 166.901135][ T5955] bcachefs (loop0): check_alloc_to_lru_refs... [ 166.902207][ T5955] bcachefs (loop0): missing fragmentation lru entry [ 166.902218][ T5955] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 166.902226][ T5955] gen 0 oldest_gen 0 data_type user [ 166.902233][ T5955] journal_seq_nonempty 5 [ 166.902239][ T5955] journal_seq_empty 134217728 [ 166.902246][ T5955] need_discard 1 [ 166.902253][ T5955] need_inc_gen 1 [ 166.902259][ T5955] dirty_sectors 16 [ 166.902266][ T5955] stripe_sectors 1802251 [ 166.902272][ T5955] cached_sectors 0 [ 166.902279][ T5955] stripe 0 [ 166.902285][ T5955] stripe_redundancy 0 [ 166.902291][ T5955] io_time[READ] 1 [ 166.902298][ T5955] io_time[WRITE] 512 [ 166.902304][ T5955] fragmentation 0 [ 166.902311][ T5955] bp_start 7 [ 166.902317][ T5955] , fixing [ 166.991787][ T5955] done [ 166.995255][ T5955] bcachefs (loop0): bucket_gens_init... done [ 167.007011][ T5955] bcachefs (loop0): check_snapshot_trees... done [ 167.013592][ T5955] bcachefs (loop0): check_snapshots... [ 167.014667][ T5955] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 167.014680][ T5955] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 167.046739][ T5955] done [ 167.050948][ T5955] bcachefs (loop0): check_subvols... done [ 167.058493][ T5955] bcachefs (loop0): check_subvol_children... done [ 167.065006][ T5955] bcachefs (loop0): delete_dead_snapshots... done [ 167.071525][ T5955] bcachefs (loop0): check_inodes... done [ 167.078184][ T5955] bcachefs (loop0): check_extents... done [ 167.084463][ T5955] bcachefs (loop0): check_indirect_extents... done [ 167.091152][ T5955] bcachefs (loop0): check_dirents... done [ 167.098328][ T5955] bcachefs (loop0): check_xattrs... done [ 167.104700][ T5955] bcachefs (loop0): check_root... done [ 167.110687][ T5955] bcachefs (loop0): check_unreachable_inodes... done [ 167.117695][ T5955] bcachefs (loop0): check_subvolume_structure... done [ 167.124579][ T5955] bcachefs (loop0): check_directory_structure... done [ 167.131502][ T5955] bcachefs (loop0): check_nlinks... done [ 167.137604][ T5955] bcachefs (loop0): check_rebalance_work... done [ 167.144387][ T5955] bcachefs (loop0): resume_logged_ops... done [pid 5955] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5955] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5955] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5955] ioctl(4, LOOP_CLR_FD) = 0 [pid 5955] close(4) = 0 [pid 5955] exit_group(0) = ? [pid 5955] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=113 /* 1.13 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 167.150549][ T5955] bcachefs (loop0): delete_dead_inodes... done [ 167.157111][ T5955] bcachefs (loop0): set_fs_needs_rebalance... done [ 167.174254][ T5955] bcachefs (loop0): done starting filesystem umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 167.318015][ T5861] bcachefs (loop0): shutting down [ 167.323184][ T5861] bcachefs (loop0): going read-only [ 167.328991][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 167.336465][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 167.345438][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 167.356088][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 167.365183][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 167.389682][ T5861] bcachefs (loop0): shutdown complete umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file0") = 0 umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5966 attached [pid 5966] set_robust_list(0x55557ab46660, 24) = 0 [pid 5966] chdir("./9") = 0 [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 5966 [pid 5966] <... prctl resumed>) = 0 [pid 5966] setpgid(0, 0) = 0 [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5966] write(3, "1000", 4) = 4 [pid 5966] close(3) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5966] write(1, "executing program\n", 18) = 18 [pid 5966] memfd_create("syzkaller", 0) = 3 [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5966] munmap(0x7fdffb600000, 138412032) = 0 [pid 5966] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5966] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5966] close(3) = 0 [pid 5966] close(4) = 0 [pid 5966] mkdir("./file0", 0777) = 0 [ 168.968771][ T5966] loop0: detected capacity change from 0 to 32768 [ 169.047703][ T5966] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 169.047726][ T5966] allowing incompatible features above 0.0: (unknown version) [ 169.047737][ T5966] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 169.085207][ T5966] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 169.093537][ T5966] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 169.101730][ T5966] bcachefs (loop0): Version upgrade required: [ 169.101730][ T5966] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 169.101730][ T5966] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 169.101730][ T5966] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 169.185777][ T5966] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 169.185793][ T5966] gen 0 oldest_gen 0 data_type btree [ 169.185801][ T5966] journal_seq_nonempty 6 [ 169.185807][ T5966] journal_seq_empty 0 [ 169.185814][ T5966] need_discard 1 [ 169.185820][ T5966] need_inc_gen 1 [ 169.185827][ T5966] dirty_sectors 0 [ 169.185833][ T5966] stripe_sectors 1769482 [ 169.185840][ T5966] cached_sectors 0 [ 169.185846][ T5966] stripe 0 [ 169.185852][ T5966] stripe_redundancy 0 [ 169.185859][ T5966] io_time[READ] 1 [ 169.185865][ T5966] io_time[WRITE] 768 [ 169.185871][ T5966] fragmentation 0 [ 169.185878][ T5966] bp_start 7 [ 169.185884][ T5966] [ 169.185890][ T5966] invalid data type (got 3 should be 9), deleting [ 169.278387][ T5966] bcachefs (loop0): accounting_read... done [ 169.285433][ T5966] bcachefs (loop0): alloc_read... done [ 169.291974][ T5966] bcachefs (loop0): snapshots_read... done [ 169.298856][ T5966] bcachefs (loop0): check_allocations... [ 169.300788][ T5966] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 169.300802][ T5966] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 169.333490][ T5966] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 169.333504][ T5966] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 169.359760][ T5966] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 169.359776][ T5966] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 169.386143][ T5966] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 169.386189][ T5966] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 169.412741][ T5966] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 169.412755][ T5966] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 169.439172][ T5966] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 169.439186][ T5966] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 169.464667][ T5966] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 169.474796][ T5966] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 169.486580][ T5966] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 169.496578][ T5966] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 169.508235][ T5966] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 169.518296][ T5966] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 169.529847][ T5966] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 169.539871][ T5966] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 169.551303][ T5966] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 169.561340][ T5966] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 169.572784][ T5966] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 169.582776][ T5966] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 169.594164][ T5966] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 169.604576][ T5966] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 169.616058][ T5966] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 169.626064][ T5966] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 169.637294][ T5966] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 169.647731][ T5966] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 169.659682][ T5966] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 169.670269][ T5966] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 169.682382][ T5966] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 169.682402][ T5966] Ratelimiting new instances of previous error [ 169.699679][ T5966] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 169.699694][ T5966] Ratelimiting new instances of previous error [ 169.726151][ T5966] done [ 169.729446][ T5966] bcachefs (loop0): going read-write [ 169.737613][ T5966] bcachefs (loop0): journal_replay... done [ 169.769920][ T5966] bcachefs (loop0): check_alloc_info... done [ 169.778786][ T5966] bcachefs (loop0): check_lrus... done [ 169.784518][ T5966] bcachefs (loop0): check_btree_backpointers... done [ 169.791720][ T5966] bcachefs (loop0): check_backpointers_to_extents... done [ 169.800843][ T5966] bcachefs (loop0): check_extents_to_backpointers... [ 169.801709][ T5966] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 169.817252][ T5966] done [ 169.821412][ T5966] bcachefs (loop0): check_alloc_to_lru_refs... [ 169.822498][ T5966] bcachefs (loop0): missing fragmentation lru entry [ 169.822510][ T5966] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 169.822518][ T5966] gen 0 oldest_gen 0 data_type user [ 169.822525][ T5966] journal_seq_nonempty 5 [ 169.822532][ T5966] journal_seq_empty 134217728 [ 169.822539][ T5966] need_discard 1 [ 169.822546][ T5966] need_inc_gen 1 [ 169.822552][ T5966] dirty_sectors 16 [ 169.822559][ T5966] stripe_sectors 1802251 [ 169.822566][ T5966] cached_sectors 0 [ 169.822573][ T5966] stripe 0 [ 169.822580][ T5966] stripe_redundancy 0 [ 169.822586][ T5966] io_time[READ] 1 [ 169.822593][ T5966] io_time[WRITE] 512 [ 169.822600][ T5966] fragmentation 0 [ 169.822606][ T5966] bp_start 7 [ 169.822613][ T5966] , fixing [ 169.911897][ T5966] done [ 169.915423][ T5966] bcachefs (loop0): bucket_gens_init... done [ 169.927443][ T5966] bcachefs (loop0): check_snapshot_trees... done [ 169.934071][ T5966] bcachefs (loop0): check_snapshots... [ 169.934771][ T5966] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 169.934783][ T5966] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 169.966849][ T5966] done [ 169.970725][ T5966] bcachefs (loop0): check_subvols... done [ 169.977074][ T5966] bcachefs (loop0): check_subvol_children... done [ 169.983690][ T5966] bcachefs (loop0): delete_dead_snapshots... done [ 169.990430][ T5966] bcachefs (loop0): check_inodes... done [ 169.996899][ T5966] bcachefs (loop0): check_extents... done [ 170.003695][ T5966] bcachefs (loop0): check_indirect_extents... done [ 170.010540][ T5966] bcachefs (loop0): check_dirents... done [ 170.017571][ T5966] bcachefs (loop0): check_xattrs... done [ 170.024022][ T5966] bcachefs (loop0): check_root... done [ 170.030321][ T5966] bcachefs (loop0): check_unreachable_inodes... done [ 170.037360][ T5966] bcachefs (loop0): check_subvolume_structure... done [ 170.044391][ T5966] bcachefs (loop0): check_directory_structure... done [ 170.051340][ T5966] bcachefs (loop0): check_nlinks... done [ 170.057579][ T5966] bcachefs (loop0): check_rebalance_work... done [pid 5966] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5966] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5966] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5966] ioctl(4, LOOP_CLR_FD) = 0 [pid 5966] close(4) = 0 [ 170.064326][ T5966] bcachefs (loop0): resume_logged_ops... done [ 170.070546][ T5966] bcachefs (loop0): delete_dead_inodes... done [ 170.076776][ T5966] bcachefs (loop0): set_fs_needs_rebalance... done [ 170.094853][ T5966] bcachefs (loop0): done starting filesystem [pid 5966] exit_group(0) = ? [pid 5966] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5966, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=108 /* 1.08 s */} --- umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 170.176757][ T5861] bcachefs (loop0): shutting down [ 170.183047][ T5861] bcachefs (loop0): going read-only [ 170.188596][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 170.196882][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 170.205925][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 170.219939][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 170.229070][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 170.255807][ T5861] bcachefs (loop0): shutdown complete umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file0") = 0 umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5977 attached [pid 5977] set_robust_list(0x55557ab46660, 24) = 0 [pid 5977] chdir("./10" [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 5977 [pid 5977] <... chdir resumed>) = 0 [pid 5977] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5977] setpgid(0, 0) = 0 [pid 5977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5977] write(3, "1000", 4) = 4 [pid 5977] close(3) = 0 [pid 5977] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5977] write(1, "executing program\n", 18executing program ) = 18 [pid 5977] memfd_create("syzkaller", 0) = 3 [pid 5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5977] munmap(0x7fdffb600000, 138412032) = 0 [pid 5977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5977] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5977] close(3) = 0 [pid 5977] close(4) = 0 [pid 5977] mkdir("./file0", 0777) = 0 [ 171.873414][ T5977] loop0: detected capacity change from 0 to 32768 [ 171.972524][ T5977] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 171.972543][ T5977] allowing incompatible features above 0.0: (unknown version) [ 171.972552][ T5977] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 172.012406][ T5977] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 172.020783][ T5977] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 172.029429][ T5977] bcachefs (loop0): Version upgrade required: [ 172.029429][ T5977] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 172.029429][ T5977] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 172.029429][ T5977] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 172.114900][ T5977] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 172.114921][ T5977] gen 0 oldest_gen 0 data_type btree [ 172.114929][ T5977] journal_seq_nonempty 6 [ 172.114935][ T5977] journal_seq_empty 0 [ 172.114942][ T5977] need_discard 1 [ 172.114949][ T5977] need_inc_gen 1 [ 172.114955][ T5977] dirty_sectors 0 [ 172.114962][ T5977] stripe_sectors 1769482 [ 172.114969][ T5977] cached_sectors 0 [ 172.114975][ T5977] stripe 0 [ 172.114982][ T5977] stripe_redundancy 0 [ 172.114988][ T5977] io_time[READ] 1 [ 172.114995][ T5977] io_time[WRITE] 768 [ 172.115002][ T5977] fragmentation 0 [ 172.115008][ T5977] bp_start 7 [ 172.115015][ T5977] [ 172.115021][ T5977] invalid data type (got 3 should be 9), deleting [ 172.207467][ T5977] bcachefs (loop0): accounting_read... done [ 172.214794][ T5977] bcachefs (loop0): alloc_read... done [ 172.221908][ T5977] bcachefs (loop0): snapshots_read... done [ 172.229039][ T5977] bcachefs (loop0): check_allocations... [ 172.231240][ T5977] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 172.231255][ T5977] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 172.264011][ T5977] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 172.264027][ T5977] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 172.290383][ T5977] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 172.290398][ T5977] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 172.316805][ T5977] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 172.316819][ T5977] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 172.343513][ T5977] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 172.343528][ T5977] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 172.369861][ T5977] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 172.369877][ T5977] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 172.395330][ T5977] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.405396][ T5977] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.417094][ T5977] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.427097][ T5977] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.438739][ T5977] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.448945][ T5977] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.460485][ T5977] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.470500][ T5977] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.482012][ T5977] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.492034][ T5977] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.503437][ T5977] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.513423][ T5977] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.524825][ T5977] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.534924][ T5977] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 172.546398][ T5977] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 172.557214][ T5977] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 172.568530][ T5977] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 172.578980][ T5977] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 172.590834][ T5977] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 172.601879][ T5977] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 172.613935][ T5977] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 172.613958][ T5977] Ratelimiting new instances of previous error [ 172.630852][ T5977] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 172.630867][ T5977] Ratelimiting new instances of previous error [ 172.658055][ T5977] done [ 172.661550][ T5977] bcachefs (loop0): going read-write [ 172.670394][ T5977] bcachefs (loop0): journal_replay... done [ 172.701947][ T5977] bcachefs (loop0): check_alloc_info... done [ 172.711110][ T5977] bcachefs (loop0): check_lrus... done [ 172.717064][ T5977] bcachefs (loop0): check_btree_backpointers... done [ 172.724392][ T5977] bcachefs (loop0): check_backpointers_to_extents... done [ 172.733264][ T5977] bcachefs (loop0): check_extents_to_backpointers... [ 172.734173][ T5977] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 172.750056][ T5977] done [ 172.753533][ T5977] bcachefs (loop0): check_alloc_to_lru_refs... [ 172.754623][ T5977] bcachefs (loop0): missing fragmentation lru entry [ 172.754635][ T5977] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 172.754643][ T5977] gen 0 oldest_gen 0 data_type user [ 172.754650][ T5977] journal_seq_nonempty 5 [ 172.754657][ T5977] journal_seq_empty 134217728 [ 172.754664][ T5977] need_discard 1 [ 172.754671][ T5977] need_inc_gen 1 [ 172.754678][ T5977] dirty_sectors 16 [ 172.754685][ T5977] stripe_sectors 1802251 [ 172.754692][ T5977] cached_sectors 0 [ 172.754698][ T5977] stripe 0 [ 172.754705][ T5977] stripe_redundancy 0 [ 172.754712][ T5977] io_time[READ] 1 [ 172.754718][ T5977] io_time[WRITE] 512 [ 172.754725][ T5977] fragmentation 0 [ 172.754732][ T5977] bp_start 7 [ 172.754738][ T5977] , fixing [ 172.844198][ T5977] done [ 172.847688][ T5977] bcachefs (loop0): bucket_gens_init... done [ 172.859900][ T5977] bcachefs (loop0): check_snapshot_trees... done [ 172.866319][ T5977] bcachefs (loop0): check_snapshots... [ 172.866858][ T5977] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 172.866870][ T5977] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 172.899762][ T5977] done [ 172.903998][ T5977] bcachefs (loop0): check_subvols... done [ 172.910428][ T5977] bcachefs (loop0): check_subvol_children... done [ 172.916897][ T5977] bcachefs (loop0): delete_dead_snapshots... done [ 172.923482][ T5977] bcachefs (loop0): check_inodes... done [ 172.929982][ T5977] bcachefs (loop0): check_extents... done [ 172.936251][ T5977] bcachefs (loop0): check_indirect_extents... done [ 172.942868][ T5977] bcachefs (loop0): check_dirents... done [ 172.950030][ T5977] bcachefs (loop0): check_xattrs... done [ 172.956214][ T5977] bcachefs (loop0): check_root... done [ 172.961990][ T5977] bcachefs (loop0): check_unreachable_inodes... done [ 172.969016][ T5977] bcachefs (loop0): check_subvolume_structure... done [ 172.975823][ T5977] bcachefs (loop0): check_directory_structure... done [ 172.982678][ T5977] bcachefs (loop0): check_nlinks... done [ 172.988957][ T5977] bcachefs (loop0): check_rebalance_work... done [pid 5977] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5977] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5977] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5977] ioctl(4, LOOP_CLR_FD) = 0 [pid 5977] close(4) = 0 [ 172.995624][ T5977] bcachefs (loop0): resume_logged_ops... done [ 173.001776][ T5977] bcachefs (loop0): delete_dead_inodes... done [ 173.008387][ T5977] bcachefs (loop0): set_fs_needs_rebalance... done [ 173.025980][ T5977] bcachefs (loop0): done starting filesystem [pid 5977] exit_group(0) = ? [pid 5977] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5977, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=108 /* 1.08 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 173.120730][ T5861] bcachefs (loop0): shutting down [ 173.125922][ T5861] bcachefs (loop0): going read-only [ 173.132827][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 173.142385][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 173.152148][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 173.162857][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 173.171617][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 173.194383][ T5861] bcachefs (loop0): shutdown complete umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file0") = 0 umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5988 attached [pid 5988] set_robust_list(0x55557ab46660, 24 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 5988 [pid 5988] <... set_robust_list resumed>) = 0 [pid 5988] chdir("./11") = 0 [pid 5988] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5988] setpgid(0, 0) = 0 [pid 5988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5988] write(3, "1000", 4) = 4 [pid 5988] close(3) = 0 [pid 5988] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5988] write(1, "executing program\n", 18executing program ) = 18 [pid 5988] memfd_create("syzkaller", 0) = 3 [pid 5988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 5988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5988] munmap(0x7fdffb600000, 138412032) = 0 [pid 5988] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5988] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5988] close(3) = 0 [pid 5988] close(4) = 0 [pid 5988] mkdir("./file0", 0777) = 0 [ 174.784040][ T5988] loop0: detected capacity change from 0 to 32768 [ 174.879673][ T5988] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 174.879691][ T5988] allowing incompatible features above 0.0: (unknown version) [ 174.879699][ T5988] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 174.917704][ T5988] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 174.926065][ T5988] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 174.934406][ T5988] bcachefs (loop0): Version upgrade required: [ 174.934406][ T5988] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 174.934406][ T5988] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 174.934406][ T5988] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 175.019797][ T5988] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 175.019815][ T5988] gen 0 oldest_gen 0 data_type btree [ 175.019822][ T5988] journal_seq_nonempty 6 [ 175.019829][ T5988] journal_seq_empty 0 [ 175.019835][ T5988] need_discard 1 [ 175.019842][ T5988] need_inc_gen 1 [ 175.019849][ T5988] dirty_sectors 0 [ 175.019855][ T5988] stripe_sectors 1769482 [ 175.019862][ T5988] cached_sectors 0 [ 175.019869][ T5988] stripe 0 [ 175.019875][ T5988] stripe_redundancy 0 [ 175.019882][ T5988] io_time[READ] 1 [ 175.019889][ T5988] io_time[WRITE] 768 [ 175.019895][ T5988] fragmentation 0 [ 175.019902][ T5988] bp_start 7 [ 175.019908][ T5988] [ 175.019914][ T5988] invalid data type (got 3 should be 9), deleting [ 175.112113][ T5988] bcachefs (loop0): accounting_read... done [ 175.119206][ T5988] bcachefs (loop0): alloc_read... done [ 175.125677][ T5988] bcachefs (loop0): snapshots_read... done [ 175.132577][ T5988] bcachefs (loop0): check_allocations... [ 175.134745][ T5988] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 175.134759][ T5988] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 175.167435][ T5988] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 175.167450][ T5988] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 175.193974][ T5988] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 175.193991][ T5988] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 175.220344][ T5988] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 175.220358][ T5988] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 175.246844][ T5988] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 175.246858][ T5988] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 175.273237][ T5988] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 175.273252][ T5988] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 175.298680][ T5988] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 175.308758][ T5988] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 175.320431][ T5988] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 175.330551][ T5988] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 175.342131][ T5988] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 175.352135][ T5988] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 175.364074][ T5988] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 175.374079][ T5988] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 175.385476][ T5988] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 175.395479][ T5988] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 175.406872][ T5988] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 175.416850][ T5988] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 175.428225][ T5988] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 175.438205][ T5988] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 175.449602][ T5988] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 175.459606][ T5988] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 175.470818][ T5988] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 175.481278][ T5988] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 175.493168][ T5988] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 175.503698][ T5988] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 175.515776][ T5988] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 175.515789][ T5988] Ratelimiting new instances of previous error [ 175.532647][ T5988] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 175.532661][ T5988] Ratelimiting new instances of previous error [ 175.558990][ T5988] done [ 175.562190][ T5988] bcachefs (loop0): going read-write [ 175.570789][ T5988] bcachefs (loop0): journal_replay... done [ 175.600353][ T5988] bcachefs (loop0): check_alloc_info... done [ 175.609285][ T5988] bcachefs (loop0): check_lrus... done [ 175.615043][ T5988] bcachefs (loop0): check_btree_backpointers... done [ 175.622053][ T5988] bcachefs (loop0): check_backpointers_to_extents... done [ 175.630855][ T5988] bcachefs (loop0): check_extents_to_backpointers... [ 175.631964][ T5988] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 175.647311][ T5988] done [ 175.650984][ T5988] bcachefs (loop0): check_alloc_to_lru_refs... [ 175.652079][ T5988] bcachefs (loop0): missing fragmentation lru entry [ 175.652091][ T5988] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 175.652099][ T5988] gen 0 oldest_gen 0 data_type user [ 175.652106][ T5988] journal_seq_nonempty 5 [ 175.652113][ T5988] journal_seq_empty 134217728 [ 175.652120][ T5988] need_discard 1 [ 175.652126][ T5988] need_inc_gen 1 [ 175.652133][ T5988] dirty_sectors 16 [ 175.652139][ T5988] stripe_sectors 1802251 [ 175.652146][ T5988] cached_sectors 0 [ 175.652153][ T5988] stripe 0 [ 175.652159][ T5988] stripe_redundancy 0 [ 175.652166][ T5988] io_time[READ] 1 [ 175.652172][ T5988] io_time[WRITE] 512 [ 175.652179][ T5988] fragmentation 0 [ 175.652185][ T5988] bp_start 7 [ 175.652192][ T5988] , fixing [ 175.741330][ T5988] done [ 175.745066][ T5988] bcachefs (loop0): bucket_gens_init... done [ 175.756910][ T5988] bcachefs (loop0): check_snapshot_trees... done [ 175.763355][ T5988] bcachefs (loop0): check_snapshots... [ 175.763968][ T5988] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 175.763982][ T5988] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 175.796266][ T5988] done [ 175.800647][ T5988] bcachefs (loop0): check_subvols... done [ 175.808246][ T5988] bcachefs (loop0): check_subvol_children... done [ 175.814746][ T5988] bcachefs (loop0): delete_dead_snapshots... done [ 175.821281][ T5988] bcachefs (loop0): check_inodes... done [ 175.827912][ T5988] bcachefs (loop0): check_extents... done [ 175.834219][ T5988] bcachefs (loop0): check_indirect_extents... done [ 175.840829][ T5988] bcachefs (loop0): check_dirents... done [ 175.847974][ T5988] bcachefs (loop0): check_xattrs... done [ 175.853976][ T5988] bcachefs (loop0): check_root... done [ 175.859779][ T5988] bcachefs (loop0): check_unreachable_inodes... done [ 175.866727][ T5988] bcachefs (loop0): check_subvolume_structure... done [ 175.873592][ T5988] bcachefs (loop0): check_directory_structure... done [ 175.880453][ T5988] bcachefs (loop0): check_nlinks... done [ 175.886832][ T5988] bcachefs (loop0): check_rebalance_work... done [ 175.893538][ T5988] bcachefs (loop0): resume_logged_ops... done [pid 5988] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 5988] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5988] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5988] ioctl(4, LOOP_CLR_FD) = 0 [pid 5988] close(4) = 0 [pid 5988] exit_group(0) = ? [pid 5988] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5988, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=107 /* 1.07 s */} --- [ 175.899703][ T5988] bcachefs (loop0): delete_dead_inodes... done [ 175.906150][ T5988] bcachefs (loop0): set_fs_needs_rebalance... done [ 175.923300][ T5988] bcachefs (loop0): done starting filesystem restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 176.006652][ T5861] bcachefs (loop0): shutting down [ 176.014768][ T5861] bcachefs (loop0): going read-only [ 176.021324][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 176.029348][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 176.040914][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 176.052028][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 176.060913][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 176.083955][ T5861] bcachefs (loop0): shutdown complete umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file0") = 0 umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6000 attached [pid 6000] set_robust_list(0x55557ab46660, 24) = 0 [pid 6000] chdir("./12" [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6000 [pid 6000] <... chdir resumed>) = 0 [pid 6000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6000] setpgid(0, 0) = 0 [pid 6000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6000] write(3, "1000", 4) = 4 [pid 6000] close(3) = 0 [pid 6000] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6000] write(1, "executing program\n", 18) = 18 [pid 6000] memfd_create("syzkaller", 0) = 3 [pid 6000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6000] munmap(0x7fdffb600000, 138412032) = 0 [pid 6000] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6000] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6000] close(3) = 0 [pid 6000] close(4) = 0 [pid 6000] mkdir("./file0", 0777) = 0 [ 177.639196][ T6000] loop0: detected capacity change from 0 to 32768 [ 177.740684][ T6000] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 177.740704][ T6000] allowing incompatible features above 0.0: (unknown version) [ 177.740712][ T6000] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 177.777891][ T6000] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 177.786129][ T6000] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 177.794324][ T6000] bcachefs (loop0): Version upgrade required: [ 177.794324][ T6000] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 177.794324][ T6000] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 177.794324][ T6000] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 177.879419][ T6000] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 177.879437][ T6000] gen 0 oldest_gen 0 data_type btree [ 177.879444][ T6000] journal_seq_nonempty 6 [ 177.879451][ T6000] journal_seq_empty 0 [ 177.879457][ T6000] need_discard 1 [ 177.879464][ T6000] need_inc_gen 1 [ 177.879470][ T6000] dirty_sectors 0 [ 177.879477][ T6000] stripe_sectors 1769482 [ 177.879484][ T6000] cached_sectors 0 [ 177.879491][ T6000] stripe 0 [ 177.879497][ T6000] stripe_redundancy 0 [ 177.879504][ T6000] io_time[READ] 1 [ 177.879510][ T6000] io_time[WRITE] 768 [ 177.879517][ T6000] fragmentation 0 [ 177.879523][ T6000] bp_start 7 [ 177.879530][ T6000] [ 177.879536][ T6000] invalid data type (got 3 should be 9), deleting [ 177.972534][ T6000] bcachefs (loop0): accounting_read... done [ 177.979599][ T6000] bcachefs (loop0): alloc_read... done [ 177.986111][ T6000] bcachefs (loop0): snapshots_read... done [ 177.992943][ T6000] bcachefs (loop0): check_allocations... [ 177.995459][ T6000] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 177.995474][ T6000] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 178.028248][ T6000] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 178.028263][ T6000] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 178.054544][ T6000] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 178.054558][ T6000] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 178.081008][ T6000] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 178.081024][ T6000] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 178.108029][ T6000] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 178.108045][ T6000] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 178.134445][ T6000] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 178.134461][ T6000] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 178.159899][ T6000] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 178.169984][ T6000] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 178.181706][ T6000] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 178.191723][ T6000] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 178.203297][ T6000] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 178.213321][ T6000] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 178.224923][ T6000] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 178.235151][ T6000] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 178.246657][ T6000] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 178.256720][ T6000] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 178.268175][ T6000] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 178.278200][ T6000] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 178.289598][ T6000] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 178.299579][ T6000] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 178.310973][ T6000] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 178.320954][ T6000] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 178.332153][ T6000] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 178.342674][ T6000] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 178.354659][ T6000] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 178.365296][ T6000] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 178.377476][ T6000] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 178.377491][ T6000] Ratelimiting new instances of previous error [ 178.394365][ T6000] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 178.394381][ T6000] Ratelimiting new instances of previous error [ 178.420700][ T6000] done [ 178.423932][ T6000] bcachefs (loop0): going read-write [ 178.432004][ T6000] bcachefs (loop0): journal_replay... done [ 178.462481][ T6000] bcachefs (loop0): check_alloc_info... done [ 178.472035][ T6000] bcachefs (loop0): check_lrus... done [ 178.477958][ T6000] bcachefs (loop0): check_btree_backpointers... done [ 178.485020][ T6000] bcachefs (loop0): check_backpointers_to_extents... done [ 178.494466][ T6000] bcachefs (loop0): check_extents_to_backpointers... [ 178.495371][ T6000] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 178.510816][ T6000] done [ 178.514741][ T6000] bcachefs (loop0): check_alloc_to_lru_refs... [ 178.515903][ T6000] bcachefs (loop0): missing fragmentation lru entry [ 178.515915][ T6000] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 178.515923][ T6000] gen 0 oldest_gen 0 data_type user [ 178.515931][ T6000] journal_seq_nonempty 5 [ 178.515937][ T6000] journal_seq_empty 134217728 [ 178.515944][ T6000] need_discard 1 [ 178.515951][ T6000] need_inc_gen 1 [ 178.515958][ T6000] dirty_sectors 16 [ 178.515964][ T6000] stripe_sectors 1802251 [ 178.515971][ T6000] cached_sectors 0 [ 178.515978][ T6000] stripe 0 [ 178.515984][ T6000] stripe_redundancy 0 [ 178.515991][ T6000] io_time[READ] 1 [ 178.515998][ T6000] io_time[WRITE] 512 [ 178.516004][ T6000] fragmentation 0 [ 178.516011][ T6000] bp_start 7 [ 178.516017][ T6000] , fixing [ 178.605395][ T6000] done [ 178.608854][ T6000] bcachefs (loop0): bucket_gens_init... done [ 178.620361][ T6000] bcachefs (loop0): check_snapshot_trees... done [ 178.626793][ T6000] bcachefs (loop0): check_snapshots... [ 178.627346][ T6000] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 178.627358][ T6000] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 178.659898][ T6000] done [ 178.663829][ T6000] bcachefs (loop0): check_subvols... done [ 178.670320][ T6000] bcachefs (loop0): check_subvol_children... done [ 178.676795][ T6000] bcachefs (loop0): delete_dead_snapshots... done [ 178.683280][ T6000] bcachefs (loop0): check_inodes... done [ 178.689875][ T6000] bcachefs (loop0): check_extents... done [ 178.696246][ T6000] bcachefs (loop0): check_indirect_extents... done [ 178.702861][ T6000] bcachefs (loop0): check_dirents... done [ 178.710018][ T6000] bcachefs (loop0): check_xattrs... done [ 178.716197][ T6000] bcachefs (loop0): check_root... done [ 178.722066][ T6000] bcachefs (loop0): check_unreachable_inodes... done [ 178.729138][ T6000] bcachefs (loop0): check_subvolume_structure... done [ 178.735950][ T6000] bcachefs (loop0): check_directory_structure... done [ 178.742821][ T6000] bcachefs (loop0): check_nlinks... done [ 178.749050][ T6000] bcachefs (loop0): check_rebalance_work... done [pid 6000] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6000] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6000] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6000] ioctl(4, LOOP_CLR_FD) = 0 [pid 6000] close(4) = 0 [ 178.755662][ T6000] bcachefs (loop0): resume_logged_ops... done [ 178.761818][ T6000] bcachefs (loop0): delete_dead_inodes... done [ 178.768416][ T6000] bcachefs (loop0): set_fs_needs_rebalance... done [ 178.785216][ T6000] bcachefs (loop0): done starting filesystem [pid 6000] exit_group(0) = ? [pid 6000] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6000, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=104 /* 1.04 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 178.876111][ T5861] bcachefs (loop0): shutting down [ 178.882155][ T5861] bcachefs (loop0): going read-only [ 178.887421][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 178.897023][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 178.906078][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 178.918470][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 178.927145][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 178.951349][ T5861] bcachefs (loop0): shutdown complete umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file0") = 0 umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6011 attached [pid 6011] set_robust_list(0x55557ab46660, 24) = 0 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6011 [pid 6011] chdir("./13") = 0 [pid 6011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6011] setpgid(0, 0) = 0 [pid 6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6011] write(3, "1000", 4) = 4 [pid 6011] close(3) = 0 [pid 6011] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6011] write(1, "executing program\n", 18executing program ) = 18 [pid 6011] memfd_create("syzkaller", 0) = 3 [pid 6011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6011] munmap(0x7fdffb600000, 138412032) = 0 [pid 6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6011] close(3) = 0 [pid 6011] close(4) = 0 [pid 6011] mkdir("./file0", 0777) = 0 [ 180.726394][ T6011] loop0: detected capacity change from 0 to 32768 [ 180.811097][ T6011] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 180.811128][ T6011] allowing incompatible features above 0.0: (unknown version) [ 180.811137][ T6011] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 180.849954][ T6011] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 180.858276][ T6011] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 180.866460][ T6011] bcachefs (loop0): Version upgrade required: [ 180.866460][ T6011] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 180.866460][ T6011] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 180.866460][ T6011] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 180.950568][ T6011] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 180.950584][ T6011] gen 0 oldest_gen 0 data_type btree [ 180.950592][ T6011] journal_seq_nonempty 6 [ 180.950598][ T6011] journal_seq_empty 0 [ 180.950605][ T6011] need_discard 1 [ 180.950611][ T6011] need_inc_gen 1 [ 180.950618][ T6011] dirty_sectors 0 [ 180.950625][ T6011] stripe_sectors 1769482 [ 180.950632][ T6011] cached_sectors 0 [ 180.950639][ T6011] stripe 0 [ 180.950645][ T6011] stripe_redundancy 0 [ 180.950652][ T6011] io_time[READ] 1 [ 180.950659][ T6011] io_time[WRITE] 768 [ 180.950665][ T6011] fragmentation 0 [ 180.950672][ T6011] bp_start 7 [ 180.950678][ T6011] [ 180.950684][ T6011] invalid data type (got 3 should be 9), deleting [ 181.043183][ T6011] bcachefs (loop0): accounting_read... done [ 181.050293][ T6011] bcachefs (loop0): alloc_read... done [ 181.057095][ T6011] bcachefs (loop0): snapshots_read... done [ 181.064544][ T6011] bcachefs (loop0): check_allocations... [ 181.066639][ T6011] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 181.066654][ T6011] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 181.099360][ T6011] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 181.099375][ T6011] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 181.125748][ T6011] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 181.125765][ T6011] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 181.152396][ T6011] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 181.152412][ T6011] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 181.178952][ T6011] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 181.178968][ T6011] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 181.205347][ T6011] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 181.205364][ T6011] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 181.230870][ T6011] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 181.240931][ T6011] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 181.252661][ T6011] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 181.262665][ T6011] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 181.274566][ T6011] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 181.284613][ T6011] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 181.296024][ T6011] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 181.306018][ T6011] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 181.317477][ T6011] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 181.327476][ T6011] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 181.338868][ T6011] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 181.348902][ T6011] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 181.360289][ T6011] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 181.370279][ T6011] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 181.381655][ T6011] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 181.391704][ T6011] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 181.403081][ T6011] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 181.413574][ T6011] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 181.425495][ T6011] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 181.436019][ T6011] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 181.448015][ T6011] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 181.448030][ T6011] Ratelimiting new instances of previous error [ 181.464856][ T6011] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 181.464872][ T6011] Ratelimiting new instances of previous error [ 181.491130][ T6011] done [ 181.494317][ T6011] bcachefs (loop0): going read-write [ 181.502328][ T6011] bcachefs (loop0): journal_replay... done [ 181.533419][ T6011] bcachefs (loop0): check_alloc_info... done [ 181.542722][ T6011] bcachefs (loop0): check_lrus... done [ 181.548426][ T6011] bcachefs (loop0): check_btree_backpointers... done [ 181.555532][ T6011] bcachefs (loop0): check_backpointers_to_extents... done [ 181.564158][ T6011] bcachefs (loop0): check_extents_to_backpointers... [ 181.565078][ T6011] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 181.580814][ T6011] done [ 181.584548][ T6011] bcachefs (loop0): check_alloc_to_lru_refs... [ 181.585554][ T6011] bcachefs (loop0): missing fragmentation lru entry [ 181.585565][ T6011] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 181.585572][ T6011] gen 0 oldest_gen 0 data_type user [ 181.585579][ T6011] journal_seq_nonempty 5 [ 181.585585][ T6011] journal_seq_empty 134217728 [ 181.585591][ T6011] need_discard 1 [ 181.585598][ T6011] need_inc_gen 1 [ 181.585604][ T6011] dirty_sectors 16 [ 181.585610][ T6011] stripe_sectors 1802251 [ 181.585616][ T6011] cached_sectors 0 [ 181.585623][ T6011] stripe 0 [ 181.585629][ T6011] stripe_redundancy 0 [ 181.585635][ T6011] io_time[READ] 1 [ 181.585641][ T6011] io_time[WRITE] 512 [ 181.585647][ T6011] fragmentation 0 [ 181.585653][ T6011] bp_start 7 [ 181.585659][ T6011] , fixing [ 181.675276][ T6011] done [ 181.678718][ T6011] bcachefs (loop0): bucket_gens_init... done [ 181.690128][ T6011] bcachefs (loop0): check_snapshot_trees... done [ 181.696529][ T6011] bcachefs (loop0): check_snapshots... [ 181.696974][ T6011] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 181.696986][ T6011] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 181.729575][ T6011] done [ 181.733511][ T6011] bcachefs (loop0): check_subvols... done [ 181.740253][ T6011] bcachefs (loop0): check_subvol_children... done [ 181.746909][ T6011] bcachefs (loop0): delete_dead_snapshots... done [ 181.753460][ T6011] bcachefs (loop0): check_inodes... done [ 181.760008][ T6011] bcachefs (loop0): check_extents... done [ 181.766283][ T6011] bcachefs (loop0): check_indirect_extents... done [ 181.772867][ T6011] bcachefs (loop0): check_dirents... done [ 181.780139][ T6011] bcachefs (loop0): check_xattrs... done [ 181.786369][ T6011] bcachefs (loop0): check_root... done [ 181.792358][ T6011] bcachefs (loop0): check_unreachable_inodes... done [ 181.799419][ T6011] bcachefs (loop0): check_subvolume_structure... done [ 181.806225][ T6011] bcachefs (loop0): check_directory_structure... done [ 181.813157][ T6011] bcachefs (loop0): check_nlinks... done [ 181.819409][ T6011] bcachefs (loop0): check_rebalance_work... done [pid 6011] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6011] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6011] ioctl(4, LOOP_CLR_FD) = 0 [pid 6011] close(4) = 0 [ 181.826044][ T6011] bcachefs (loop0): resume_logged_ops... done [ 181.832219][ T6011] bcachefs (loop0): delete_dead_inodes... done [ 181.839477][ T6011] bcachefs (loop0): set_fs_needs_rebalance... done [ 181.856692][ T6011] bcachefs (loop0): done starting filesystem [pid 6011] exit_group(0) = ? [pid 6011] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6011, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=109 /* 1.09 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 182.006495][ T5861] bcachefs (loop0): shutting down [ 182.011765][ T5861] bcachefs (loop0): going read-only [ 182.016998][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 182.024724][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 182.033678][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 182.044289][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 182.053027][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 182.074288][ T5861] bcachefs (loop0): shutdown complete umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file0") = 0 umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6022 attached , child_tidptr=0x55557ab46650) = 6022 [pid 6022] set_robust_list(0x55557ab46660, 24) = 0 [pid 6022] chdir("./14") = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6022] setpgid(0, 0) = 0 [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6022] write(3, "1000", 4) = 4 [pid 6022] close(3) = 0 [pid 6022] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6022] write(1, "executing program\n", 18) = 18 [pid 6022] memfd_create("syzkaller", 0) = 3 [pid 6022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6022] munmap(0x7fdffb600000, 138412032) = 0 [pid 6022] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6022] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6022] close(3) = 0 [pid 6022] close(4) = 0 [pid 6022] mkdir("./file0", 0777) = 0 [ 183.653604][ T6022] loop0: detected capacity change from 0 to 32768 [ 183.743419][ T6022] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 183.743446][ T6022] allowing incompatible features above 0.0: (unknown version) [ 183.743459][ T6022] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 183.783923][ T6022] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 183.792242][ T6022] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 183.800996][ T6022] bcachefs (loop0): Version upgrade required: [ 183.800996][ T6022] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 183.800996][ T6022] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 183.800996][ T6022] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 183.885446][ T6022] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 183.885462][ T6022] gen 0 oldest_gen 0 data_type btree [ 183.885469][ T6022] journal_seq_nonempty 6 [ 183.885476][ T6022] journal_seq_empty 0 [ 183.885482][ T6022] need_discard 1 [ 183.885488][ T6022] need_inc_gen 1 [ 183.885494][ T6022] dirty_sectors 0 [ 183.885500][ T6022] stripe_sectors 1769482 [ 183.885507][ T6022] cached_sectors 0 [ 183.885513][ T6022] stripe 0 [ 183.885519][ T6022] stripe_redundancy 0 [ 183.885525][ T6022] io_time[READ] 1 [ 183.885531][ T6022] io_time[WRITE] 768 [ 183.885537][ T6022] fragmentation 0 [ 183.885543][ T6022] bp_start 7 [ 183.885549][ T6022] [ 183.885554][ T6022] invalid data type (got 3 should be 9), deleting [ 183.977554][ T6022] bcachefs (loop0): accounting_read... done [ 183.984702][ T6022] bcachefs (loop0): alloc_read... done [ 183.991258][ T6022] bcachefs (loop0): snapshots_read... done [ 183.998081][ T6022] bcachefs (loop0): check_allocations... [ 184.000244][ T6022] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 184.000268][ T6022] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 184.033128][ T6022] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 184.033144][ T6022] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 184.059478][ T6022] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 184.059493][ T6022] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 184.085903][ T6022] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 184.085918][ T6022] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 184.112599][ T6022] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 184.112614][ T6022] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 184.139021][ T6022] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 184.139037][ T6022] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 184.164484][ T6022] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 184.174577][ T6022] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 184.186316][ T6022] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 184.196319][ T6022] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 184.207947][ T6022] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 184.217979][ T6022] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 184.229435][ T6022] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 184.239466][ T6022] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 184.250951][ T6022] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 184.260970][ T6022] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 184.272457][ T6022] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 184.282437][ T6022] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 184.293821][ T6022] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 184.303842][ T6022] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 184.315215][ T6022] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 184.325172][ T6022] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 184.336355][ T6022] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 184.346775][ T6022] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 184.358704][ T6022] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 184.369241][ T6022] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 184.381370][ T6022] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 184.381384][ T6022] Ratelimiting new instances of previous error [ 184.398306][ T6022] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 184.398326][ T6022] Ratelimiting new instances of previous error [ 184.424686][ T6022] done [ 184.428022][ T6022] bcachefs (loop0): going read-write [ 184.436420][ T6022] bcachefs (loop0): journal_replay... done [ 184.468370][ T6022] bcachefs (loop0): check_alloc_info... done [ 184.477487][ T6022] bcachefs (loop0): check_lrus... done [ 184.483547][ T6022] bcachefs (loop0): check_btree_backpointers... done [ 184.490749][ T6022] bcachefs (loop0): check_backpointers_to_extents... done [ 184.499965][ T6022] bcachefs (loop0): check_extents_to_backpointers... [ 184.500840][ T6022] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 184.516320][ T6022] done [ 184.520032][ T6022] bcachefs (loop0): check_alloc_to_lru_refs... [ 184.521234][ T6022] bcachefs (loop0): missing fragmentation lru entry [ 184.521245][ T6022] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 184.521253][ T6022] gen 0 oldest_gen 0 data_type user [ 184.521259][ T6022] journal_seq_nonempty 5 [ 184.521265][ T6022] journal_seq_empty 134217728 [ 184.521272][ T6022] need_discard 1 [ 184.521278][ T6022] need_inc_gen 1 [ 184.521284][ T6022] dirty_sectors 16 [ 184.521290][ T6022] stripe_sectors 1802251 [ 184.521297][ T6022] cached_sectors 0 [ 184.521303][ T6022] stripe 0 [ 184.521309][ T6022] stripe_redundancy 0 [ 184.521315][ T6022] io_time[READ] 1 [ 184.521321][ T6022] io_time[WRITE] 512 [ 184.521327][ T6022] fragmentation 0 [ 184.521333][ T6022] bp_start 7 [ 184.521339][ T6022] , fixing [ 184.610881][ T6022] done [ 184.614380][ T6022] bcachefs (loop0): bucket_gens_init... done [ 184.627045][ T6022] bcachefs (loop0): check_snapshot_trees... done [ 184.633613][ T6022] bcachefs (loop0): check_snapshots... [ 184.634134][ T6022] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 184.634147][ T6022] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 184.666417][ T6022] done [ 184.670362][ T6022] bcachefs (loop0): check_subvols... done [ 184.676746][ T6022] bcachefs (loop0): check_subvol_children... done [ 184.683469][ T6022] bcachefs (loop0): delete_dead_snapshots... done [ 184.689994][ T6022] bcachefs (loop0): check_inodes... done [ 184.696312][ T6022] bcachefs (loop0): check_extents... done [ 184.702716][ T6022] bcachefs (loop0): check_indirect_extents... done [ 184.709308][ T6022] bcachefs (loop0): check_dirents... done [ 184.716202][ T6022] bcachefs (loop0): check_xattrs... done [ 184.722303][ T6022] bcachefs (loop0): check_root... done [ 184.728247][ T6022] bcachefs (loop0): check_unreachable_inodes... done [ 184.735148][ T6022] bcachefs (loop0): check_subvolume_structure... done [ 184.742141][ T6022] bcachefs (loop0): check_directory_structure... done [ 184.749020][ T6022] bcachefs (loop0): check_nlinks... done [ 184.755079][ T6022] bcachefs (loop0): check_rebalance_work... done [pid 6022] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6022] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6022] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6022] ioctl(4, LOOP_CLR_FD) = 0 [pid 6022] close(4) = 0 [ 184.761737][ T6022] bcachefs (loop0): resume_logged_ops... done [ 184.767986][ T6022] bcachefs (loop0): delete_dead_inodes... done [ 184.774444][ T6022] bcachefs (loop0): set_fs_needs_rebalance... done [ 184.792935][ T6022] bcachefs (loop0): done starting filesystem [pid 6022] exit_group(0) = ? [pid 6022] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6022, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=108 /* 1.08 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 184.915231][ T5861] bcachefs (loop0): shutting down [ 184.920843][ T5861] bcachefs (loop0): going read-only [ 184.926052][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 184.933747][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 184.942692][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 184.953182][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 184.962122][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 184.988176][ T5861] bcachefs (loop0): shutdown complete umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file0") = 0 umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6033 attached [pid 6033] set_robust_list(0x55557ab46660, 24) = 0 [pid 6033] chdir("./15") = 0 [pid 6033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6033 [pid 6033] <... prctl resumed>) = 0 [pid 6033] setpgid(0, 0) = 0 [pid 6033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6033] write(3, "1000", 4) = 4 [pid 6033] close(3) = 0 [pid 6033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6033] write(1, "executing program\n", 18executing program ) = 18 [pid 6033] memfd_create("syzkaller", 0) = 3 [pid 6033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6033] munmap(0x7fdffb600000, 138412032) = 0 [pid 6033] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6033] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6033] close(3) = 0 [pid 6033] close(4) = 0 [pid 6033] mkdir("./file0", 0777) = 0 [ 186.723420][ T6033] loop0: detected capacity change from 0 to 32768 [ 186.807073][ T6033] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 186.807091][ T6033] allowing incompatible features above 0.0: (unknown version) [ 186.807099][ T6033] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 186.844497][ T6033] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 186.852785][ T6033] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 186.861000][ T6033] bcachefs (loop0): Version upgrade required: [ 186.861000][ T6033] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 186.861000][ T6033] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 186.861000][ T6033] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 186.949814][ T6033] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 186.949831][ T6033] gen 0 oldest_gen 0 data_type btree [ 186.949838][ T6033] journal_seq_nonempty 6 [ 186.949846][ T6033] journal_seq_empty 0 [ 186.949854][ T6033] need_discard 1 [ 186.949860][ T6033] need_inc_gen 1 [ 186.949867][ T6033] dirty_sectors 0 [ 186.949874][ T6033] stripe_sectors 1769482 [ 186.949881][ T6033] cached_sectors 0 [ 186.949887][ T6033] stripe 0 [ 186.949894][ T6033] stripe_redundancy 0 [ 186.949901][ T6033] io_time[READ] 1 [ 186.949907][ T6033] io_time[WRITE] 768 [ 186.949914][ T6033] fragmentation 0 [ 186.949921][ T6033] bp_start 7 [ 186.949927][ T6033] [ 186.949933][ T6033] invalid data type (got 3 should be 9), deleting [ 187.043923][ T6033] bcachefs (loop0): accounting_read... done [ 187.051067][ T6033] bcachefs (loop0): alloc_read... done [ 187.057853][ T6033] bcachefs (loop0): snapshots_read... done [ 187.064784][ T6033] bcachefs (loop0): check_allocations... [ 187.066922][ T6033] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 187.066937][ T6033] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 187.102444][ T6033] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 187.102465][ T6033] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 187.129835][ T6033] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 187.129855][ T6033] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 187.156333][ T6033] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 187.156349][ T6033] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 187.182988][ T6033] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 187.183004][ T6033] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 187.209379][ T6033] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 187.209395][ T6033] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 187.234774][ T6033] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 187.244834][ T6033] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 187.256525][ T6033] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 187.266568][ T6033] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 187.278365][ T6033] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 187.288462][ T6033] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 187.299927][ T6033] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 187.309966][ T6033] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 187.321518][ T6033] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 187.331526][ T6033] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 187.343022][ T6033] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 187.353047][ T6033] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 187.364583][ T6033] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 187.374644][ T6033] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 187.386036][ T6033] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 187.396180][ T6033] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 187.407424][ T6033] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 187.417931][ T6033] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 187.429801][ T6033] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 187.440381][ T6033] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 187.452470][ T6033] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 187.452489][ T6033] Ratelimiting new instances of previous error [ 187.469442][ T6033] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 187.469463][ T6033] Ratelimiting new instances of previous error [ 187.495788][ T6033] done [ 187.499071][ T6033] bcachefs (loop0): going read-write [ 187.507168][ T6033] bcachefs (loop0): journal_replay... done [ 187.539518][ T6033] bcachefs (loop0): check_alloc_info... done [ 187.549918][ T6033] bcachefs (loop0): check_lrus... done [ 187.556564][ T6033] bcachefs (loop0): check_btree_backpointers... done [ 187.563901][ T6033] bcachefs (loop0): check_backpointers_to_extents... done [ 187.573060][ T6033] bcachefs (loop0): check_extents_to_backpointers... [ 187.573971][ T6033] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 187.589708][ T6033] done [ 187.593531][ T6033] bcachefs (loop0): check_alloc_to_lru_refs... [ 187.594695][ T6033] bcachefs (loop0): missing fragmentation lru entry [ 187.594707][ T6033] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 187.594715][ T6033] gen 0 oldest_gen 0 data_type user [ 187.594723][ T6033] journal_seq_nonempty 5 [ 187.594729][ T6033] journal_seq_empty 134217728 [ 187.594736][ T6033] need_discard 1 [ 187.594743][ T6033] need_inc_gen 1 [ 187.594749][ T6033] dirty_sectors 16 [ 187.594756][ T6033] stripe_sectors 1802251 [ 187.594763][ T6033] cached_sectors 0 [ 187.594769][ T6033] stripe 0 [ 187.594776][ T6033] stripe_redundancy 0 [ 187.594782][ T6033] io_time[READ] 1 [ 187.594789][ T6033] io_time[WRITE] 512 [ 187.594796][ T6033] fragmentation 0 [ 187.594802][ T6033] bp_start 7 [ 187.594809][ T6033] , fixing [ 187.684700][ T6033] done [ 187.688318][ T6033] bcachefs (loop0): bucket_gens_init... done [ 187.700059][ T6033] bcachefs (loop0): check_snapshot_trees... done [ 187.706466][ T6033] bcachefs (loop0): check_snapshots... [ 187.707079][ T6033] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 187.707092][ T6033] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 187.739328][ T6033] done [ 187.743567][ T6033] bcachefs (loop0): check_subvols... done [ 187.750025][ T6033] bcachefs (loop0): check_subvol_children... done [ 187.756526][ T6033] bcachefs (loop0): delete_dead_snapshots... done [ 187.763009][ T6033] bcachefs (loop0): check_inodes... done [ 187.769546][ T6033] bcachefs (loop0): check_extents... done [ 187.775819][ T6033] bcachefs (loop0): check_indirect_extents... done [ 187.782403][ T6033] bcachefs (loop0): check_dirents... done [ 187.789552][ T6033] bcachefs (loop0): check_xattrs... done [ 187.795560][ T6033] bcachefs (loop0): check_root... done [ 187.801361][ T6033] bcachefs (loop0): check_unreachable_inodes... done [ 187.808371][ T6033] bcachefs (loop0): check_subvolume_structure... done [ 187.815173][ T6033] bcachefs (loop0): check_directory_structure... done [ 187.822070][ T6033] bcachefs (loop0): check_nlinks... done [ 187.828419][ T6033] bcachefs (loop0): check_rebalance_work... done [pid 6033] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6033] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6033] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6033] ioctl(4, LOOP_CLR_FD) = 0 [pid 6033] close(4) = 0 [pid 6033] exit_group(0) = ? [ 187.835031][ T6033] bcachefs (loop0): resume_logged_ops... done [ 187.841167][ T6033] bcachefs (loop0): delete_dead_inodes... done [ 187.847380][ T6033] bcachefs (loop0): set_fs_needs_rebalance... done [ 187.864391][ T6033] bcachefs (loop0): done starting filesystem [pid 6033] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6033, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=111 /* 1.11 s */} --- umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 187.961360][ T5861] bcachefs (loop0): shutting down [ 187.966461][ T5861] bcachefs (loop0): going read-only [ 187.975523][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 187.983687][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 187.992739][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 188.004061][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 188.012921][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 188.036575][ T5861] bcachefs (loop0): shutdown complete umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file0") = 0 umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6050 attached [pid 6050] set_robust_list(0x55557ab46660, 24) = 0 [pid 6050] chdir("./16" [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6050 [pid 6050] <... chdir resumed>) = 0 [pid 6050] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6050] setpgid(0, 0) = 0 [pid 6050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6050] write(3, "1000", 4) = 4 [pid 6050] close(3) = 0 [pid 6050] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6050] write(1, "executing program\n", 18executing program ) = 18 [pid 6050] memfd_create("syzkaller", 0) = 3 [pid 6050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6050] munmap(0x7fdffb600000, 138412032) = 0 [pid 6050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6050] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6050] close(3) = 0 [pid 6050] close(4) = 0 [pid 6050] mkdir("./file0", 0777) = 0 [ 189.639607][ T6050] loop0: detected capacity change from 0 to 32768 [ 189.738586][ T6050] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 189.738611][ T6050] allowing incompatible features above 0.0: (unknown version) [ 189.738624][ T6050] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 189.778611][ T6050] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 189.786926][ T6050] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 189.795440][ T6050] bcachefs (loop0): Version upgrade required: [ 189.795440][ T6050] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 189.795440][ T6050] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 189.795440][ T6050] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 189.880410][ T6050] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 189.880427][ T6050] gen 0 oldest_gen 0 data_type btree [ 189.880435][ T6050] journal_seq_nonempty 6 [ 189.880442][ T6050] journal_seq_empty 0 [ 189.880448][ T6050] need_discard 1 [ 189.880455][ T6050] need_inc_gen 1 [ 189.880461][ T6050] dirty_sectors 0 [ 189.880468][ T6050] stripe_sectors 1769482 [ 189.880475][ T6050] cached_sectors 0 [ 189.880481][ T6050] stripe 0 [ 189.880488][ T6050] stripe_redundancy 0 [ 189.880494][ T6050] io_time[READ] 1 [ 189.880501][ T6050] io_time[WRITE] 768 [ 189.880507][ T6050] fragmentation 0 [ 189.880513][ T6050] bp_start 7 [ 189.880520][ T6050] [ 189.880526][ T6050] invalid data type (got 3 should be 9), deleting [ 189.972558][ T6050] bcachefs (loop0): accounting_read... done [ 189.979706][ T6050] bcachefs (loop0): alloc_read... done [ 189.986408][ T6050] bcachefs (loop0): snapshots_read... done [ 189.993355][ T6050] bcachefs (loop0): check_allocations... [ 189.995620][ T6050] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 189.995641][ T6050] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 190.028493][ T6050] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 190.028508][ T6050] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 190.054934][ T6050] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 190.054949][ T6050] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 190.081399][ T6050] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 190.081414][ T6050] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 190.108118][ T6050] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 190.108134][ T6050] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 190.134583][ T6050] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 190.134598][ T6050] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 190.160079][ T6050] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 190.170166][ T6050] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 190.181934][ T6050] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 190.191941][ T6050] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 190.203707][ T6050] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 190.213729][ T6050] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 190.225328][ T6050] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 190.235384][ T6050] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 190.246867][ T6050] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 190.256870][ T6050] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 190.268291][ T6050] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 190.278315][ T6050] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 190.289808][ T6050] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 190.299907][ T6050] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 190.311303][ T6050] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 190.321293][ T6050] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 190.332515][ T6050] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 190.342944][ T6050] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 190.354889][ T6050] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 190.365509][ T6050] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 190.377442][ T6050] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 190.377456][ T6050] Ratelimiting new instances of previous error [ 190.394518][ T6050] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 190.394534][ T6050] Ratelimiting new instances of previous error [ 190.421066][ T6050] done [ 190.424253][ T6050] bcachefs (loop0): going read-write [ 190.432406][ T6050] bcachefs (loop0): journal_replay... done [ 190.462842][ T6050] bcachefs (loop0): check_alloc_info... done [ 190.472258][ T6050] bcachefs (loop0): check_lrus... done [ 190.478338][ T6050] bcachefs (loop0): check_btree_backpointers... done [ 190.485345][ T6050] bcachefs (loop0): check_backpointers_to_extents... done [ 190.494250][ T6050] bcachefs (loop0): check_extents_to_backpointers... [ 190.495164][ T6050] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 190.511190][ T6050] done [ 190.515145][ T6050] bcachefs (loop0): check_alloc_to_lru_refs... [ 190.516273][ T6050] bcachefs (loop0): missing fragmentation lru entry [ 190.516285][ T6050] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 190.516293][ T6050] gen 0 oldest_gen 0 data_type user [ 190.516300][ T6050] journal_seq_nonempty 5 [ 190.516307][ T6050] journal_seq_empty 134217728 [ 190.516314][ T6050] need_discard 1 [ 190.516320][ T6050] need_inc_gen 1 [ 190.516327][ T6050] dirty_sectors 16 [ 190.516334][ T6050] stripe_sectors 1802251 [ 190.516341][ T6050] cached_sectors 0 [ 190.516347][ T6050] stripe 0 [ 190.516354][ T6050] stripe_redundancy 0 [ 190.516360][ T6050] io_time[READ] 1 [ 190.516367][ T6050] io_time[WRITE] 512 [ 190.516374][ T6050] fragmentation 0 [ 190.516380][ T6050] bp_start 7 [ 190.516386][ T6050] , fixing [ 190.605694][ T6050] done [ 190.609208][ T6050] bcachefs (loop0): bucket_gens_init... done [ 190.620807][ T6050] bcachefs (loop0): check_snapshot_trees... done [ 190.627225][ T6050] bcachefs (loop0): check_snapshots... [ 190.627956][ T6050] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 190.627974][ T6050] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 190.660568][ T6050] done [ 190.664716][ T6050] bcachefs (loop0): check_subvols... done [ 190.671156][ T6050] bcachefs (loop0): check_subvol_children... done [ 190.677626][ T6050] bcachefs (loop0): delete_dead_snapshots... done [ 190.684168][ T6050] bcachefs (loop0): check_inodes... done [ 190.690755][ T6050] bcachefs (loop0): check_extents... done [ 190.697052][ T6050] bcachefs (loop0): check_indirect_extents... done [ 190.703790][ T6050] bcachefs (loop0): check_dirents... done [ 190.710992][ T6050] bcachefs (loop0): check_xattrs... done [ 190.717210][ T6050] bcachefs (loop0): check_root... done [ 190.723201][ T6050] bcachefs (loop0): check_unreachable_inodes... done [ 190.730286][ T6050] bcachefs (loop0): check_subvolume_structure... done [ 190.737095][ T6050] bcachefs (loop0): check_directory_structure... done [ 190.744077][ T6050] bcachefs (loop0): check_nlinks... done [ 190.750378][ T6050] bcachefs (loop0): check_rebalance_work... done [pid 6050] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6050] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6050] ioctl(4, LOOP_CLR_FD) = 0 [pid 6050] close(4) = 0 [pid 6050] exit_group(0) = ? [pid 6050] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6050, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=108 /* 1.08 s */} --- umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 190.757021][ T6050] bcachefs (loop0): resume_logged_ops... done [ 190.763266][ T6050] bcachefs (loop0): delete_dead_inodes... done [ 190.769897][ T6050] bcachefs (loop0): set_fs_needs_rebalance... done [ 190.786764][ T6050] bcachefs (loop0): done starting filesystem [ 190.833304][ T5861] bcachefs (loop0): shutting down [ 190.838690][ T5861] bcachefs (loop0): going read-only [ 190.843943][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 190.852368][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 190.863245][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 190.875466][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 190.885063][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 190.912605][ T5861] bcachefs (loop0): shutdown complete umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file0") = 0 umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6061 attached , child_tidptr=0x55557ab46650) = 6061 [pid 6061] set_robust_list(0x55557ab46660, 24) = 0 [pid 6061] chdir("./17") = 0 [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6061] setpgid(0, 0) = 0 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6061] write(3, "1000", 4) = 4 [pid 6061] close(3) = 0 [pid 6061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6061] write(1, "executing program\n", 18executing program ) = 18 [pid 6061] memfd_create("syzkaller", 0) = 3 [pid 6061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6061] munmap(0x7fdffb600000, 138412032) = 0 [pid 6061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6061] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6061] close(3) = 0 [pid 6061] close(4) = 0 [pid 6061] mkdir("./file0", 0777) = 0 [ 192.500193][ T6061] loop0: detected capacity change from 0 to 32768 [ 192.581247][ T6061] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 192.581274][ T6061] allowing incompatible features above 0.0: (unknown version) [ 192.581287][ T6061] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 192.618893][ T6061] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 192.627215][ T6061] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 192.635468][ T6061] bcachefs (loop0): Version upgrade required: [ 192.635468][ T6061] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 192.635468][ T6061] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 192.635468][ T6061] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 192.720180][ T6061] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 192.720198][ T6061] gen 0 oldest_gen 0 data_type btree [ 192.720206][ T6061] journal_seq_nonempty 6 [ 192.720212][ T6061] journal_seq_empty 0 [ 192.720219][ T6061] need_discard 1 [ 192.720226][ T6061] need_inc_gen 1 [ 192.720232][ T6061] dirty_sectors 0 [ 192.720239][ T6061] stripe_sectors 1769482 [ 192.720246][ T6061] cached_sectors 0 [ 192.720253][ T6061] stripe 0 [ 192.720260][ T6061] stripe_redundancy 0 [ 192.720266][ T6061] io_time[READ] 1 [ 192.720273][ T6061] io_time[WRITE] 768 [ 192.720280][ T6061] fragmentation 0 [ 192.720287][ T6061] bp_start 7 [ 192.720293][ T6061] [ 192.720299][ T6061] invalid data type (got 3 should be 9), deleting [ 192.812471][ T6061] bcachefs (loop0): accounting_read... done [ 192.819534][ T6061] bcachefs (loop0): alloc_read... done [ 192.826086][ T6061] bcachefs (loop0): snapshots_read... done [ 192.832974][ T6061] bcachefs (loop0): check_allocations... [ 192.835378][ T6061] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 192.835394][ T6061] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 192.868374][ T6061] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 192.868389][ T6061] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 192.894693][ T6061] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 192.894709][ T6061] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 192.921154][ T6061] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 192.921170][ T6061] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 192.947961][ T6061] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 192.947981][ T6061] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 192.974651][ T6061] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 192.974667][ T6061] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 193.000072][ T6061] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 193.010178][ T6061] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 193.021942][ T6061] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 193.031944][ T6061] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 193.043651][ T6061] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 193.053738][ T6061] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 193.065217][ T6061] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 193.075303][ T6061] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 193.086850][ T6061] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 193.096963][ T6061] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 193.108371][ T6061] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 193.118381][ T6061] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 193.129973][ T6061] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 193.140022][ T6061] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 193.151429][ T6061] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 193.161449][ T6061] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 193.172705][ T6061] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 193.183230][ T6061] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 193.195066][ T6061] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 193.205729][ T6061] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 193.217882][ T6061] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 193.217903][ T6061] Ratelimiting new instances of previous error [ 193.234773][ T6061] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 193.234789][ T6061] Ratelimiting new instances of previous error [ 193.262004][ T6061] done [ 193.265192][ T6061] bcachefs (loop0): going read-write [ 193.273608][ T6061] bcachefs (loop0): journal_replay... done [ 193.304592][ T6061] bcachefs (loop0): check_alloc_info... done [ 193.313699][ T6061] bcachefs (loop0): check_lrus... done [ 193.319874][ T6061] bcachefs (loop0): check_btree_backpointers... done [ 193.326862][ T6061] bcachefs (loop0): check_backpointers_to_extents... done [ 193.336598][ T6061] bcachefs (loop0): check_extents_to_backpointers... [ 193.337616][ T6061] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 193.353659][ T6061] done [ 193.357767][ T6061] bcachefs (loop0): check_alloc_to_lru_refs... [ 193.359085][ T6061] bcachefs (loop0): missing fragmentation lru entry [ 193.359098][ T6061] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 193.359106][ T6061] gen 0 oldest_gen 0 data_type user [ 193.359115][ T6061] journal_seq_nonempty 5 [ 193.359122][ T6061] journal_seq_empty 134217728 [ 193.359129][ T6061] need_discard 1 [ 193.359136][ T6061] need_inc_gen 1 [ 193.359142][ T6061] dirty_sectors 16 [ 193.359149][ T6061] stripe_sectors 1802251 [ 193.359157][ T6061] cached_sectors 0 [ 193.359163][ T6061] stripe 0 [ 193.359170][ T6061] stripe_redundancy 0 [ 193.359177][ T6061] io_time[READ] 1 [ 193.359183][ T6061] io_time[WRITE] 512 [ 193.359190][ T6061] fragmentation 0 [ 193.359198][ T6061] bp_start 7 [ 193.359204][ T6061] , fixing [ 193.448840][ T6061] done [ 193.452416][ T6061] bcachefs (loop0): bucket_gens_init... done [ 193.464359][ T6061] bcachefs (loop0): check_snapshot_trees... done [ 193.471898][ T6061] bcachefs (loop0): check_snapshots... [ 193.472375][ T6061] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 193.472388][ T6061] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 193.504883][ T6061] done [ 193.509195][ T6061] bcachefs (loop0): check_subvols... done [ 193.515666][ T6061] bcachefs (loop0): check_subvol_children... done [ 193.522248][ T6061] bcachefs (loop0): delete_dead_snapshots... done [ 193.528746][ T6061] bcachefs (loop0): check_inodes... done [ 193.535183][ T6061] bcachefs (loop0): check_extents... done [ 193.541492][ T6061] bcachefs (loop0): check_indirect_extents... done [ 193.548135][ T6061] bcachefs (loop0): check_dirents... done [ 193.555135][ T6061] bcachefs (loop0): check_xattrs... done [ 193.561246][ T6061] bcachefs (loop0): check_root... done [ 193.567222][ T6061] bcachefs (loop0): check_unreachable_inodes... done [ 193.574172][ T6061] bcachefs (loop0): check_subvolume_structure... done [ 193.581044][ T6061] bcachefs (loop0): check_directory_structure... done [ 193.587905][ T6061] bcachefs (loop0): check_nlinks... done [ 193.594135][ T6061] bcachefs (loop0): check_rebalance_work... done [pid 6061] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6061] ioctl(4, LOOP_CLR_FD) = 0 [pid 6061] close(4) = 0 [pid 6061] exit_group(0) = ? [pid 6061] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6061, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=110 /* 1.10 s */} --- [ 193.600817][ T6061] bcachefs (loop0): resume_logged_ops... done [ 193.606933][ T6061] bcachefs (loop0): delete_dead_inodes... done [ 193.613463][ T6061] bcachefs (loop0): set_fs_needs_rebalance... done [ 193.630479][ T6061] bcachefs (loop0): done starting filesystem restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 193.715404][ T5861] bcachefs (loop0): shutting down [ 193.720762][ T5861] bcachefs (loop0): going read-only [ 193.726096][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 193.735163][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 193.744286][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 193.755198][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 193.764785][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 193.789748][ T5861] bcachefs (loop0): shutdown complete [ 194.370892][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.377302][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file0") = 0 umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6072 attached [pid 6072] set_robust_list(0x55557ab46660, 24) = 0 [pid 6072] chdir("./18" [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6072 [pid 6072] <... chdir resumed>) = 0 [pid 6072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6072] setpgid(0, 0) = 0 [pid 6072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6072] write(3, "1000", 4) = 4 [pid 6072] close(3) = 0 [pid 6072] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6072] write(1, "executing program\n", 18) = 18 [pid 6072] memfd_create("syzkaller", 0) = 3 [pid 6072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6072] munmap(0x7fdffb600000, 138412032) = 0 [pid 6072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6072] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6072] close(3) = 0 [pid 6072] close(4) = 0 [pid 6072] mkdir("./file0", 0777) = 0 [ 195.356124][ T6072] loop0: detected capacity change from 0 to 32768 [ 195.446413][ T6072] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 195.446433][ T6072] allowing incompatible features above 0.0: (unknown version) [ 195.446442][ T6072] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 195.483881][ T6072] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 195.492215][ T6072] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 195.500464][ T6072] bcachefs (loop0): Version upgrade required: [ 195.500464][ T6072] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 195.500464][ T6072] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 195.500464][ T6072] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 195.584867][ T6072] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 195.584885][ T6072] gen 0 oldest_gen 0 data_type btree [ 195.584893][ T6072] journal_seq_nonempty 6 [ 195.584900][ T6072] journal_seq_empty 0 [ 195.584907][ T6072] need_discard 1 [ 195.584913][ T6072] need_inc_gen 1 [ 195.584920][ T6072] dirty_sectors 0 [ 195.584927][ T6072] stripe_sectors 1769482 [ 195.584934][ T6072] cached_sectors 0 [ 195.584941][ T6072] stripe 0 [ 195.584948][ T6072] stripe_redundancy 0 [ 195.584955][ T6072] io_time[READ] 1 [ 195.584961][ T6072] io_time[WRITE] 768 [ 195.584968][ T6072] fragmentation 0 [ 195.584975][ T6072] bp_start 7 [ 195.584982][ T6072] [ 195.584987][ T6072] invalid data type (got 3 should be 9), deleting [ 195.677395][ T6072] bcachefs (loop0): accounting_read... done [ 195.684557][ T6072] bcachefs (loop0): alloc_read... done [ 195.691156][ T6072] bcachefs (loop0): snapshots_read... done [ 195.698195][ T6072] bcachefs (loop0): check_allocations... [ 195.700237][ T6072] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 195.700251][ T6072] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 195.732809][ T6072] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 195.732825][ T6072] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 195.759211][ T6072] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 195.759227][ T6072] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 195.785585][ T6072] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 195.785600][ T6072] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 195.812248][ T6072] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 195.812264][ T6072] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 195.838635][ T6072] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 195.838651][ T6072] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 195.864082][ T6072] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 195.874167][ T6072] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 195.885922][ T6072] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 195.895940][ T6072] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 195.907550][ T6072] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 195.917540][ T6072] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 195.928958][ T6072] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 195.939022][ T6072] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 195.950494][ T6072] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 195.960562][ T6072] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 195.972059][ T6072] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 195.982089][ T6072] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 195.993521][ T6072] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 196.003509][ T6072] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 196.014894][ T6072] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 196.024878][ T6072] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 196.036084][ T6072] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 196.046547][ T6072] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 196.058383][ T6072] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 196.068913][ T6072] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 196.080996][ T6072] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 196.081011][ T6072] Ratelimiting new instances of previous error [ 196.097907][ T6072] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 196.097923][ T6072] Ratelimiting new instances of previous error [ 196.124377][ T6072] done [ 196.127663][ T6072] bcachefs (loop0): going read-write [ 196.136882][ T6072] bcachefs (loop0): journal_replay... done [ 196.168706][ T6072] bcachefs (loop0): check_alloc_info... done [ 196.177577][ T6072] bcachefs (loop0): check_lrus... done [ 196.183603][ T6072] bcachefs (loop0): check_btree_backpointers... done [ 196.190858][ T6072] bcachefs (loop0): check_backpointers_to_extents... done [ 196.199976][ T6072] bcachefs (loop0): check_extents_to_backpointers... [ 196.201149][ T6072] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 196.216556][ T6072] done [ 196.221146][ T6072] bcachefs (loop0): check_alloc_to_lru_refs... [ 196.222235][ T6072] bcachefs (loop0): missing fragmentation lru entry [ 196.222247][ T6072] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 196.222255][ T6072] gen 0 oldest_gen 0 data_type user [ 196.222263][ T6072] journal_seq_nonempty 5 [ 196.222270][ T6072] journal_seq_empty 134217728 [ 196.222277][ T6072] need_discard 1 [ 196.222284][ T6072] need_inc_gen 1 [ 196.222291][ T6072] dirty_sectors 16 [ 196.222298][ T6072] stripe_sectors 1802251 [ 196.222305][ T6072] cached_sectors 0 [ 196.222312][ T6072] stripe 0 [ 196.222319][ T6072] stripe_redundancy 0 [ 196.222326][ T6072] io_time[READ] 1 [ 196.222332][ T6072] io_time[WRITE] 512 [ 196.222339][ T6072] fragmentation 0 [ 196.222346][ T6072] bp_start 7 [ 196.222353][ T6072] , fixing [ 196.311627][ T6072] done [ 196.315090][ T6072] bcachefs (loop0): bucket_gens_init... done [ 196.326788][ T6072] bcachefs (loop0): check_snapshot_trees... done [ 196.333262][ T6072] bcachefs (loop0): check_snapshots... [ 196.333929][ T6072] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 196.333947][ T6072] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 196.366194][ T6072] done [ 196.370469][ T6072] bcachefs (loop0): check_subvols... done [ 196.377883][ T6072] bcachefs (loop0): check_subvol_children... done [ 196.384395][ T6072] bcachefs (loop0): delete_dead_snapshots... done [ 196.390890][ T6072] bcachefs (loop0): check_inodes... done [ 196.397288][ T6072] bcachefs (loop0): check_extents... done [ 196.403710][ T6072] bcachefs (loop0): check_indirect_extents... done [ 196.410325][ T6072] bcachefs (loop0): check_dirents... done [ 196.417358][ T6072] bcachefs (loop0): check_xattrs... done [ 196.423556][ T6072] bcachefs (loop0): check_root... done [ 196.429375][ T6072] bcachefs (loop0): check_unreachable_inodes... done [ 196.436309][ T6072] bcachefs (loop0): check_subvolume_structure... done [ 196.443189][ T6072] bcachefs (loop0): check_directory_structure... done [ 196.450066][ T6072] bcachefs (loop0): check_nlinks... done [ 196.456258][ T6072] bcachefs (loop0): check_rebalance_work... done [pid 6072] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6072] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6072] ioctl(4, LOOP_CLR_FD) = 0 [pid 6072] close(4) = 0 [pid 6072] exit_group(0) = ? [pid 6072] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6072, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=108 /* 1.08 s */} --- umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 196.462929][ T6072] bcachefs (loop0): resume_logged_ops... done [ 196.469090][ T6072] bcachefs (loop0): delete_dead_inodes... done [ 196.475561][ T6072] bcachefs (loop0): set_fs_needs_rebalance... done [ 196.492848][ T6072] bcachefs (loop0): done starting filesystem [ 196.535347][ T5861] bcachefs (loop0): shutting down [ 196.541455][ T5861] bcachefs (loop0): going read-only [ 196.546722][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 196.561212][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 196.571824][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 196.583634][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 196.592605][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 196.619306][ T5861] bcachefs (loop0): shutdown complete umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file0") = 0 umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6083 attached , child_tidptr=0x55557ab46650) = 6083 [pid 6083] set_robust_list(0x55557ab46660, 24) = 0 [pid 6083] chdir("./19") = 0 [pid 6083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6083] setpgid(0, 0) = 0 [pid 6083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6083] write(3, "1000", 4) = 4 [pid 6083] close(3) = 0 [pid 6083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6083] write(1, "executing program\n", 18executing program ) = 18 [pid 6083] memfd_create("syzkaller", 0) = 3 [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6083] munmap(0x7fdffb600000, 138412032) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6083] close(3) = 0 [pid 6083] close(4) = 0 [pid 6083] mkdir("./file0", 0777) = 0 [ 198.161571][ T6083] loop0: detected capacity change from 0 to 32768 [ 198.246436][ T6083] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 198.246462][ T6083] allowing incompatible features above 0.0: (unknown version) [ 198.246475][ T6083] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 198.285203][ T6083] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 198.293579][ T6083] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 198.302588][ T6083] bcachefs (loop0): Version upgrade required: [ 198.302588][ T6083] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 198.302588][ T6083] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 198.302588][ T6083] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 198.388386][ T6083] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 198.388404][ T6083] gen 0 oldest_gen 0 data_type btree [ 198.388411][ T6083] journal_seq_nonempty 6 [ 198.388418][ T6083] journal_seq_empty 0 [ 198.388425][ T6083] need_discard 1 [ 198.388432][ T6083] need_inc_gen 1 [ 198.388439][ T6083] dirty_sectors 0 [ 198.388445][ T6083] stripe_sectors 1769482 [ 198.388453][ T6083] cached_sectors 0 [ 198.388459][ T6083] stripe 0 [ 198.388466][ T6083] stripe_redundancy 0 [ 198.388473][ T6083] io_time[READ] 1 [ 198.388480][ T6083] io_time[WRITE] 768 [ 198.388487][ T6083] fragmentation 0 [ 198.388493][ T6083] bp_start 7 [ 198.388500][ T6083] [ 198.388506][ T6083] invalid data type (got 3 should be 9), deleting [ 198.484450][ T6083] bcachefs (loop0): accounting_read... done [ 198.491532][ T6083] bcachefs (loop0): alloc_read... done [ 198.498182][ T6083] bcachefs (loop0): snapshots_read... done [ 198.505033][ T6083] bcachefs (loop0): check_allocations... [ 198.507075][ T6083] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 198.507090][ T6083] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 198.539736][ T6083] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 198.539751][ T6083] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 198.566183][ T6083] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 198.566199][ T6083] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 198.592780][ T6083] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 198.592796][ T6083] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 198.619306][ T6083] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 198.619322][ T6083] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 198.645730][ T6083] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 198.645746][ T6083] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 198.671530][ T6083] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 198.681642][ T6083] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 198.693512][ T6083] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 198.703614][ T6083] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 198.715422][ T6083] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 198.725427][ T6083] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 198.736798][ T6083] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 198.746815][ T6083] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 198.758361][ T6083] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 198.768444][ T6083] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 198.779893][ T6083] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 198.789883][ T6083] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 198.801382][ T6083] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 198.811366][ T6083] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 198.822753][ T6083] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 198.832793][ T6083] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 198.844170][ T6083] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 198.854616][ T6083] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 198.866561][ T6083] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 198.877112][ T6083] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 198.889078][ T6083] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 198.889092][ T6083] Ratelimiting new instances of previous error [ 198.905923][ T6083] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 198.905938][ T6083] Ratelimiting new instances of previous error [ 198.932436][ T6083] done [ 198.935647][ T6083] bcachefs (loop0): going read-write [ 198.943802][ T6083] bcachefs (loop0): journal_replay... done [ 198.974473][ T6083] bcachefs (loop0): check_alloc_info... done [ 198.983727][ T6083] bcachefs (loop0): check_lrus... done [ 198.989800][ T6083] bcachefs (loop0): check_btree_backpointers... done [ 198.996926][ T6083] bcachefs (loop0): check_backpointers_to_extents... done [ 199.005798][ T6083] bcachefs (loop0): check_extents_to_backpointers... [ 199.006728][ T6083] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 199.022285][ T6083] done [ 199.026735][ T6083] bcachefs (loop0): check_alloc_to_lru_refs... [ 199.028089][ T6083] bcachefs (loop0): missing fragmentation lru entry [ 199.028106][ T6083] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 199.028118][ T6083] gen 0 oldest_gen 0 data_type user [ 199.028129][ T6083] journal_seq_nonempty 5 [ 199.028139][ T6083] journal_seq_empty 134217728 [ 199.028150][ T6083] need_discard 1 [ 199.028160][ T6083] need_inc_gen 1 [ 199.028170][ T6083] dirty_sectors 16 [ 199.028181][ T6083] stripe_sectors 1802251 [ 199.028191][ T6083] cached_sectors 0 [ 199.028202][ T6083] stripe 0 [ 199.028213][ T6083] stripe_redundancy 0 [ 199.028223][ T6083] io_time[READ] 1 [ 199.028234][ T6083] io_time[WRITE] 512 [ 199.028244][ T6083] fragmentation 0 [ 199.028254][ T6083] bp_start 7 [ 199.028264][ T6083] , fixing [ 199.118045][ T6083] done [ 199.121559][ T6083] bcachefs (loop0): bucket_gens_init... done [ 199.133390][ T6083] bcachefs (loop0): check_snapshot_trees... done [ 199.139902][ T6083] bcachefs (loop0): check_snapshots... [ 199.140539][ T6083] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 199.140553][ T6083] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 199.173731][ T6083] done [ 199.177887][ T6083] bcachefs (loop0): check_subvols... done [ 199.184405][ T6083] bcachefs (loop0): check_subvol_children... done [ 199.191183][ T6083] bcachefs (loop0): delete_dead_snapshots... done [ 199.197644][ T6083] bcachefs (loop0): check_inodes... done [ 199.204192][ T6083] bcachefs (loop0): check_extents... done [ 199.210671][ T6083] bcachefs (loop0): check_indirect_extents... done [ 199.217236][ T6083] bcachefs (loop0): check_dirents... done [ 199.224620][ T6083] bcachefs (loop0): check_xattrs... done [ 199.230789][ T6083] bcachefs (loop0): check_root... done [ 199.236657][ T6083] bcachefs (loop0): check_unreachable_inodes... done [ 199.243578][ T6083] bcachefs (loop0): check_subvolume_structure... done [ 199.250474][ T6083] bcachefs (loop0): check_directory_structure... done [ 199.257274][ T6083] bcachefs (loop0): check_nlinks... done [ 199.263449][ T6083] bcachefs (loop0): check_rebalance_work... done [pid 6083] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6083] ioctl(4, LOOP_CLR_FD) = 0 [ 199.270299][ T6083] bcachefs (loop0): resume_logged_ops... done [ 199.276420][ T6083] bcachefs (loop0): delete_dead_inodes... done [ 199.282667][ T6083] bcachefs (loop0): set_fs_needs_rebalance... done [ 199.300326][ T6083] bcachefs (loop0): done starting filesystem [pid 6083] close(4) = 0 [pid 6083] exit_group(0) = ? [pid 6083] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6083, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=112 /* 1.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 199.403395][ T5861] bcachefs (loop0): shutting down [ 199.409462][ T5861] bcachefs (loop0): going read-only [ 199.414685][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 199.422730][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 199.433827][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 199.445058][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 199.453832][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 199.479962][ T5861] bcachefs (loop0): shutdown complete umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file0") = 0 umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6094 attached , child_tidptr=0x55557ab46650) = 6094 [pid 6094] set_robust_list(0x55557ab46660, 24) = 0 [pid 6094] chdir("./20") = 0 [pid 6094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6094] setpgid(0, 0) = 0 [pid 6094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6094] write(3, "1000", 4) = 4 [pid 6094] close(3) = 0 [pid 6094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6094] write(1, "executing program\n", 18executing program ) = 18 [pid 6094] memfd_create("syzkaller", 0) = 3 [pid 6094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6094] munmap(0x7fdffb600000, 138412032) = 0 [pid 6094] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6094] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6094] close(3) = 0 [pid 6094] close(4) = 0 [pid 6094] mkdir("./file0", 0777) = 0 [ 200.815862][ T6094] loop0: detected capacity change from 0 to 32768 [ 200.920736][ T6094] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 200.920755][ T6094] allowing incompatible features above 0.0: (unknown version) [ 200.920764][ T6094] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 200.958721][ T6094] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 200.966999][ T6094] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 200.975233][ T6094] bcachefs (loop0): Version upgrade required: [ 200.975233][ T6094] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 200.975233][ T6094] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 200.975233][ T6094] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 201.059911][ T6094] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 201.059927][ T6094] gen 0 oldest_gen 0 data_type btree [ 201.059935][ T6094] journal_seq_nonempty 6 [ 201.059942][ T6094] journal_seq_empty 0 [ 201.059949][ T6094] need_discard 1 [ 201.059956][ T6094] need_inc_gen 1 [ 201.059963][ T6094] dirty_sectors 0 [ 201.059970][ T6094] stripe_sectors 1769482 [ 201.059977][ T6094] cached_sectors 0 [ 201.059984][ T6094] stripe 0 [ 201.059990][ T6094] stripe_redundancy 0 [ 201.059997][ T6094] io_time[READ] 1 [ 201.060004][ T6094] io_time[WRITE] 768 [ 201.060011][ T6094] fragmentation 0 [ 201.060017][ T6094] bp_start 7 [ 201.060024][ T6094] [ 201.060030][ T6094] invalid data type (got 3 should be 9), deleting [ 201.152507][ T6094] bcachefs (loop0): accounting_read... done [ 201.159747][ T6094] bcachefs (loop0): alloc_read... done [ 201.166478][ T6094] bcachefs (loop0): snapshots_read... done [ 201.173438][ T6094] bcachefs (loop0): check_allocations... [ 201.175706][ T6094] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 201.175722][ T6094] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 201.208467][ T6094] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 201.208483][ T6094] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 201.234881][ T6094] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 201.234896][ T6094] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 201.261385][ T6094] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 201.261400][ T6094] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 201.288229][ T6094] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 201.288250][ T6094] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 201.314561][ T6094] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 201.314576][ T6094] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 201.339906][ T6094] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 201.349959][ T6094] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 201.361648][ T6094] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 201.371673][ T6094] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 201.383250][ T6094] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 201.393254][ T6094] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 201.404651][ T6094] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 201.414846][ T6094] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 201.426350][ T6094] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 201.436384][ T6094] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 201.447812][ T6094] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 201.457735][ T6094] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 201.469192][ T6094] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 201.479178][ T6094] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 201.490668][ T6094] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 201.500647][ T6094] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 201.511876][ T6094] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 201.522280][ T6094] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 201.534100][ T6094] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 201.544700][ T6094] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 201.556750][ T6094] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 201.556769][ T6094] Ratelimiting new instances of previous error [ 201.573685][ T6094] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 201.573701][ T6094] Ratelimiting new instances of previous error [ 201.600253][ T6094] done [ 201.603439][ T6094] bcachefs (loop0): going read-write [ 201.612769][ T6094] bcachefs (loop0): journal_replay... done [ 201.643591][ T6094] bcachefs (loop0): check_alloc_info... done [ 201.652737][ T6094] bcachefs (loop0): check_lrus... done [ 201.658815][ T6094] bcachefs (loop0): check_btree_backpointers... done [ 201.665853][ T6094] bcachefs (loop0): check_backpointers_to_extents... done [ 201.674791][ T6094] bcachefs (loop0): check_extents_to_backpointers... [ 201.675727][ T6094] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 201.691483][ T6094] done [ 201.694951][ T6094] bcachefs (loop0): check_alloc_to_lru_refs... [ 201.696091][ T6094] bcachefs (loop0): missing fragmentation lru entry [ 201.696103][ T6094] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 201.696110][ T6094] gen 0 oldest_gen 0 data_type user [ 201.696117][ T6094] journal_seq_nonempty 5 [ 201.696124][ T6094] journal_seq_empty 134217728 [ 201.696131][ T6094] need_discard 1 [ 201.696138][ T6094] need_inc_gen 1 [ 201.696144][ T6094] dirty_sectors 16 [ 201.696151][ T6094] stripe_sectors 1802251 [ 201.696158][ T6094] cached_sectors 0 [ 201.696165][ T6094] stripe 0 [ 201.696172][ T6094] stripe_redundancy 0 [ 201.696178][ T6094] io_time[READ] 1 [ 201.696185][ T6094] io_time[WRITE] 512 [ 201.696191][ T6094] fragmentation 0 [ 201.696198][ T6094] bp_start 7 [ 201.696204][ T6094] , fixing [ 201.785415][ T6094] done [ 201.788880][ T6094] bcachefs (loop0): bucket_gens_init... done [ 201.800309][ T6094] bcachefs (loop0): check_snapshot_trees... done [ 201.806739][ T6094] bcachefs (loop0): check_snapshots... [ 201.807260][ T6094] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 201.807273][ T6094] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 201.840375][ T6094] done [ 201.843845][ T6094] bcachefs (loop0): check_subvols... done [ 201.850350][ T6094] bcachefs (loop0): check_subvol_children... done [ 201.856832][ T6094] bcachefs (loop0): delete_dead_snapshots... done [ 201.863320][ T6094] bcachefs (loop0): check_inodes... done [ 201.869863][ T6094] bcachefs (loop0): check_extents... done [ 201.876120][ T6094] bcachefs (loop0): check_indirect_extents... done [ 201.882699][ T6094] bcachefs (loop0): check_dirents... done [ 201.889875][ T6094] bcachefs (loop0): check_xattrs... done [ 201.895863][ T6094] bcachefs (loop0): check_root... done [ 201.901681][ T6094] bcachefs (loop0): check_unreachable_inodes... done [ 201.908669][ T6094] bcachefs (loop0): check_subvolume_structure... done [ 201.915468][ T6094] bcachefs (loop0): check_directory_structure... done [ 201.922317][ T6094] bcachefs (loop0): check_nlinks... done [ 201.928608][ T6094] bcachefs (loop0): check_rebalance_work... done [pid 6094] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6094] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6094] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6094] ioctl(4, LOOP_CLR_FD) = 0 [pid 6094] close(4) = 0 [pid 6094] exit_group(0) = ? [pid 6094] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6094, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=107 /* 1.07 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 201.935239][ T6094] bcachefs (loop0): resume_logged_ops... done [ 201.941389][ T6094] bcachefs (loop0): delete_dead_inodes... done [ 201.947978][ T6094] bcachefs (loop0): set_fs_needs_rebalance... done [ 201.964814][ T6094] bcachefs (loop0): done starting filesystem newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 202.050690][ T5861] bcachefs (loop0): shutting down [ 202.055972][ T5861] bcachefs (loop0): going read-only [ 202.061687][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 202.069871][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 202.078868][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 202.089463][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 202.098245][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 202.122108][ T5861] bcachefs (loop0): shutdown complete umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file0") = 0 umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6105 attached [pid 6105] set_robust_list(0x55557ab46660, 24) = 0 [pid 6105] chdir("./21") = 0 [pid 6105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6105 [pid 6105] setpgid(0, 0) = 0 [pid 6105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6105] write(3, "1000", 4) = 4 [pid 6105] close(3) = 0 [pid 6105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6105] write(1, "executing program\n", 18executing program ) = 18 [pid 6105] memfd_create("syzkaller", 0) = 3 [pid 6105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6105] munmap(0x7fdffb600000, 138412032) = 0 [pid 6105] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6105] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6105] close(3) = 0 [pid 6105] close(4) = 0 [pid 6105] mkdir("./file0", 0777) = 0 [ 203.668119][ T6105] loop0: detected capacity change from 0 to 32768 [ 203.755398][ T6105] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 203.755436][ T6105] allowing incompatible features above 0.0: (unknown version) [ 203.755445][ T6105] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 203.793634][ T6105] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 203.802362][ T6105] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 203.810760][ T6105] bcachefs (loop0): Version upgrade required: [ 203.810760][ T6105] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 203.810760][ T6105] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 203.810760][ T6105] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 203.895672][ T6105] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 203.895688][ T6105] gen 0 oldest_gen 0 data_type btree [ 203.895696][ T6105] journal_seq_nonempty 6 [ 203.895703][ T6105] journal_seq_empty 0 [ 203.895710][ T6105] need_discard 1 [ 203.895717][ T6105] need_inc_gen 1 [ 203.895723][ T6105] dirty_sectors 0 [ 203.895730][ T6105] stripe_sectors 1769482 [ 203.895737][ T6105] cached_sectors 0 [ 203.895743][ T6105] stripe 0 [ 203.895749][ T6105] stripe_redundancy 0 [ 203.895756][ T6105] io_time[READ] 1 [ 203.895762][ T6105] io_time[WRITE] 768 [ 203.895769][ T6105] fragmentation 0 [ 203.895783][ T6105] bp_start 7 [ 203.895790][ T6105] [ 203.895795][ T6105] invalid data type (got 3 should be 9), deleting [ 203.988315][ T6105] bcachefs (loop0): accounting_read... done [ 203.995409][ T6105] bcachefs (loop0): alloc_read... done [ 204.002035][ T6105] bcachefs (loop0): snapshots_read... done [ 204.009013][ T6105] bcachefs (loop0): check_allocations... [ 204.011082][ T6105] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 204.011097][ T6105] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 204.043800][ T6105] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 204.043816][ T6105] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 204.070276][ T6105] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 204.070292][ T6105] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 204.096766][ T6105] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 204.096783][ T6105] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 204.123456][ T6105] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 204.123472][ T6105] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 204.149800][ T6105] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 204.149816][ T6105] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 204.175252][ T6105] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 204.185534][ T6105] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 204.197417][ T6105] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 204.207427][ T6105] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 204.219145][ T6105] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 204.229147][ T6105] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 204.240723][ T6105] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 204.250731][ T6105] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 204.262113][ T6105] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 204.272118][ T6105] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 204.283554][ T6105] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 204.293654][ T6105] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 204.305038][ T6105] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 204.315045][ T6105] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 204.326524][ T6105] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 204.336538][ T6105] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 204.347805][ T6105] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 204.358335][ T6105] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 204.370221][ T6105] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 204.380779][ T6105] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 204.392711][ T6105] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 204.392725][ T6105] Ratelimiting new instances of previous error [ 204.409616][ T6105] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 204.409631][ T6105] Ratelimiting new instances of previous error [ 204.435860][ T6105] done [ 204.439146][ T6105] bcachefs (loop0): going read-write [ 204.447155][ T6105] bcachefs (loop0): journal_replay... done [ 204.478467][ T6105] bcachefs (loop0): check_alloc_info... done [ 204.487512][ T6105] bcachefs (loop0): check_lrus... done [ 204.493262][ T6105] bcachefs (loop0): check_btree_backpointers... done [ 204.500694][ T6105] bcachefs (loop0): check_backpointers_to_extents... done [ 204.510384][ T6105] bcachefs (loop0): check_extents_to_backpointers... [ 204.511337][ T6105] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 204.526871][ T6105] done [ 204.530733][ T6105] bcachefs (loop0): check_alloc_to_lru_refs... [ 204.531835][ T6105] bcachefs (loop0): missing fragmentation lru entry [ 204.531847][ T6105] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 204.531855][ T6105] gen 0 oldest_gen 0 data_type user [ 204.531863][ T6105] journal_seq_nonempty 5 [ 204.531869][ T6105] journal_seq_empty 134217728 [ 204.531876][ T6105] need_discard 1 [ 204.531883][ T6105] need_inc_gen 1 [ 204.531889][ T6105] dirty_sectors 16 [ 204.531896][ T6105] stripe_sectors 1802251 [ 204.531903][ T6105] cached_sectors 0 [ 204.531910][ T6105] stripe 0 [ 204.531916][ T6105] stripe_redundancy 0 [ 204.531923][ T6105] io_time[READ] 1 [ 204.531930][ T6105] io_time[WRITE] 512 [ 204.531936][ T6105] fragmentation 0 [ 204.531943][ T6105] bp_start 7 [ 204.531949][ T6105] , fixing [ 204.621225][ T6105] done [ 204.624669][ T6105] bcachefs (loop0): bucket_gens_init... done [ 204.636591][ T6105] bcachefs (loop0): check_snapshot_trees... done [ 204.643039][ T6105] bcachefs (loop0): check_snapshots... [ 204.643677][ T6105] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 204.643690][ T6105] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 204.676414][ T6105] done [ 204.680029][ T6105] bcachefs (loop0): check_subvols... done [ 204.686347][ T6105] bcachefs (loop0): check_subvol_children... done [ 204.692871][ T6105] bcachefs (loop0): delete_dead_snapshots... done [ 204.699622][ T6105] bcachefs (loop0): check_inodes... done [ 204.706106][ T6105] bcachefs (loop0): check_extents... done [ 204.712440][ T6105] bcachefs (loop0): check_indirect_extents... done [ 204.719049][ T6105] bcachefs (loop0): check_dirents... done [ 204.726080][ T6105] bcachefs (loop0): check_xattrs... done [ 204.732154][ T6105] bcachefs (loop0): check_root... done [ 204.738146][ T6105] bcachefs (loop0): check_unreachable_inodes... done [ 204.745180][ T6105] bcachefs (loop0): check_subvolume_structure... done [ 204.752033][ T6105] bcachefs (loop0): check_directory_structure... done [ 204.758885][ T6105] bcachefs (loop0): check_nlinks... done [ 204.764974][ T6105] bcachefs (loop0): check_rebalance_work... done [pid 6105] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6105] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 204.771680][ T6105] bcachefs (loop0): resume_logged_ops... done [ 204.777870][ T6105] bcachefs (loop0): delete_dead_inodes... done [ 204.784381][ T6105] bcachefs (loop0): set_fs_needs_rebalance... done [ 204.801584][ T6105] bcachefs (loop0): done starting filesystem [pid 6105] ioctl(4, LOOP_CLR_FD) = 0 [pid 6105] close(4) = 0 [pid 6105] exit_group(0) = ? [pid 6105] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6105, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=109 /* 1.09 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 204.918939][ T5861] bcachefs (loop0): shutting down [ 204.924030][ T5861] bcachefs (loop0): going read-only [ 204.930152][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 204.937654][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 204.946602][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 204.957351][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 204.966576][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 204.989559][ T5861] bcachefs (loop0): shutdown complete umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file0") = 0 umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6116 attached [pid 6116] set_robust_list(0x55557ab46660, 24 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6116 [pid 6116] <... set_robust_list resumed>) = 0 [pid 6116] chdir("./22") = 0 [pid 6116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6116] setpgid(0, 0) = 0 [pid 6116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6116] write(3, "1000", 4) = 4 [pid 6116] close(3) = 0 [pid 6116] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6116] write(1, "executing program\n", 18executing program ) = 18 [pid 6116] memfd_create("syzkaller", 0) = 3 [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6116] munmap(0x7fdffb600000, 138412032) = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6116] close(3) = 0 [pid 6116] close(4) = 0 [pid 6116] mkdir("./file0", 0777) = 0 [ 206.470445][ T6116] loop0: detected capacity change from 0 to 32768 [ 206.569522][ T6116] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 206.569547][ T6116] allowing incompatible features above 0.0: (unknown version) [ 206.569560][ T6116] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 206.607397][ T6116] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 206.615667][ T6116] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 206.623877][ T6116] bcachefs (loop0): Version upgrade required: [ 206.623877][ T6116] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 206.623877][ T6116] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 206.623877][ T6116] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 206.708747][ T6116] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 206.708764][ T6116] gen 0 oldest_gen 0 data_type btree [ 206.708771][ T6116] journal_seq_nonempty 6 [ 206.708779][ T6116] journal_seq_empty 0 [ 206.708786][ T6116] need_discard 1 [ 206.708792][ T6116] need_inc_gen 1 [ 206.708799][ T6116] dirty_sectors 0 [ 206.708806][ T6116] stripe_sectors 1769482 [ 206.708813][ T6116] cached_sectors 0 [ 206.708820][ T6116] stripe 0 [ 206.708826][ T6116] stripe_redundancy 0 [ 206.708833][ T6116] io_time[READ] 1 [ 206.708840][ T6116] io_time[WRITE] 768 [ 206.708847][ T6116] fragmentation 0 [ 206.708854][ T6116] bp_start 7 [ 206.708860][ T6116] [ 206.708866][ T6116] invalid data type (got 3 should be 9), deleting [ 206.800989][ T6116] bcachefs (loop0): accounting_read... done [ 206.808230][ T6116] bcachefs (loop0): alloc_read... done [ 206.814846][ T6116] bcachefs (loop0): snapshots_read... done [ 206.821736][ T6116] bcachefs (loop0): check_allocations... [ 206.824043][ T6116] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 206.824058][ T6116] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 206.856722][ T6116] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 206.856737][ T6116] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 206.883832][ T6116] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 206.883854][ T6116] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 206.910267][ T6116] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 206.910283][ T6116] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 206.936869][ T6116] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 206.936884][ T6116] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 206.963418][ T6116] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 206.963435][ T6116] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 206.988823][ T6116] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 206.999041][ T6116] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 207.010832][ T6116] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 207.020854][ T6116] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 207.032445][ T6116] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 207.042461][ T6116] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 207.053889][ T6116] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 207.063883][ T6116] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 207.075276][ T6116] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 207.085376][ T6116] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 207.096876][ T6116] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 207.106906][ T6116] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 207.118325][ T6116] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 207.128327][ T6116] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 207.139750][ T6116] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 207.149724][ T6116] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 207.160984][ T6116] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 207.171412][ T6116] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 207.183226][ T6116] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 207.193740][ T6116] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 207.205657][ T6116] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 207.205671][ T6116] Ratelimiting new instances of previous error [ 207.222648][ T6116] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 207.222666][ T6116] Ratelimiting new instances of previous error [ 207.249171][ T6116] done [ 207.252376][ T6116] bcachefs (loop0): going read-write [ 207.261003][ T6116] bcachefs (loop0): journal_replay... done [ 207.291459][ T6116] bcachefs (loop0): check_alloc_info... done [ 207.300422][ T6116] bcachefs (loop0): check_lrus... done [ 207.306317][ T6116] bcachefs (loop0): check_btree_backpointers... done [ 207.313576][ T6116] bcachefs (loop0): check_backpointers_to_extents... done [ 207.322955][ T6116] bcachefs (loop0): check_extents_to_backpointers... [ 207.323901][ T6116] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 207.339625][ T6116] done [ 207.343783][ T6116] bcachefs (loop0): check_alloc_to_lru_refs... [ 207.344924][ T6116] bcachefs (loop0): missing fragmentation lru entry [ 207.344937][ T6116] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 207.344945][ T6116] gen 0 oldest_gen 0 data_type user [ 207.344953][ T6116] journal_seq_nonempty 5 [ 207.344960][ T6116] journal_seq_empty 134217728 [ 207.344967][ T6116] need_discard 1 [ 207.344974][ T6116] need_inc_gen 1 [ 207.344980][ T6116] dirty_sectors 16 [ 207.344987][ T6116] stripe_sectors 1802251 [ 207.344995][ T6116] cached_sectors 0 [ 207.345001][ T6116] stripe 0 [ 207.345008][ T6116] stripe_redundancy 0 [ 207.345015][ T6116] io_time[READ] 1 [ 207.345022][ T6116] io_time[WRITE] 512 [ 207.345029][ T6116] fragmentation 0 [ 207.345036][ T6116] bp_start 7 [ 207.345042][ T6116] , fixing [ 207.434961][ T6116] done [ 207.438500][ T6116] bcachefs (loop0): bucket_gens_init... done [ 207.450676][ T6116] bcachefs (loop0): check_snapshot_trees... done [ 207.457061][ T6116] bcachefs (loop0): check_snapshots... [ 207.457551][ T6116] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 207.457563][ T6116] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 207.489748][ T6116] done [ 207.493737][ T6116] bcachefs (loop0): check_subvols... done [ 207.500429][ T6116] bcachefs (loop0): check_subvol_children... done [ 207.506943][ T6116] bcachefs (loop0): delete_dead_snapshots... done [ 207.513549][ T6116] bcachefs (loop0): check_inodes... done [ 207.520008][ T6116] bcachefs (loop0): check_extents... done [ 207.526350][ T6116] bcachefs (loop0): check_indirect_extents... done [ 207.533020][ T6116] bcachefs (loop0): check_dirents... done [ 207.540489][ T6116] bcachefs (loop0): check_xattrs... done [ 207.546735][ T6116] bcachefs (loop0): check_root... done [ 207.552542][ T6116] bcachefs (loop0): check_unreachable_inodes... done [ 207.559557][ T6116] bcachefs (loop0): check_subvolume_structure... done [ 207.566368][ T6116] bcachefs (loop0): check_directory_structure... done [ 207.573221][ T6116] bcachefs (loop0): check_nlinks... done [ 207.579505][ T6116] bcachefs (loop0): check_rebalance_work... done [pid 6116] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6116] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6116] ioctl(4, LOOP_CLR_FD) = 0 [pid 6116] close(4) = 0 [pid 6116] exit_group(0) = ? [pid 6116] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6116, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=110 /* 1.10 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 207.586139][ T6116] bcachefs (loop0): resume_logged_ops... done [ 207.592279][ T6116] bcachefs (loop0): delete_dead_inodes... done [ 207.599605][ T6116] bcachefs (loop0): set_fs_needs_rebalance... done [ 207.616898][ T6116] bcachefs (loop0): done starting filesystem [ 207.672846][ T5861] bcachefs (loop0): shutting down [ 207.679884][ T5861] bcachefs (loop0): going read-only [ 207.685163][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 207.692762][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 207.702287][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 207.714251][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 207.723143][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 207.748828][ T5861] bcachefs (loop0): shutdown complete umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file0") = 0 umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6127 attached [pid 6127] set_robust_list(0x55557ab46660, 24) = 0 [pid 6127] chdir("./23" [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6127 [pid 6127] <... chdir resumed>) = 0 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6127] setpgid(0, 0) = 0 [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6127] write(3, "1000", 4) = 4 [pid 6127] close(3) = 0 [pid 6127] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6127] write(1, "executing program\n", 18) = 18 [pid 6127] memfd_create("syzkaller", 0) = 3 [pid 6127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6127] munmap(0x7fdffb600000, 138412032) = 0 [pid 6127] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6127] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6127] close(3) = 0 [pid 6127] close(4) = 0 [pid 6127] mkdir("./file0", 0777) = 0 [ 209.126956][ T6127] loop0: detected capacity change from 0 to 32768 [ 209.212343][ T6127] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 209.212362][ T6127] allowing incompatible features above 0.0: (unknown version) [ 209.212370][ T6127] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 209.249731][ T6127] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 209.258202][ T6127] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 209.266425][ T6127] bcachefs (loop0): Version upgrade required: [ 209.266425][ T6127] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 209.266425][ T6127] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 209.266425][ T6127] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 209.350974][ T6127] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 209.350991][ T6127] gen 0 oldest_gen 0 data_type btree [ 209.350998][ T6127] journal_seq_nonempty 6 [ 209.351005][ T6127] journal_seq_empty 0 [ 209.351012][ T6127] need_discard 1 [ 209.351018][ T6127] need_inc_gen 1 [ 209.351024][ T6127] dirty_sectors 0 [ 209.351031][ T6127] stripe_sectors 1769482 [ 209.351038][ T6127] cached_sectors 0 [ 209.351044][ T6127] stripe 0 [ 209.351051][ T6127] stripe_redundancy 0 [ 209.351058][ T6127] io_time[READ] 1 [ 209.351064][ T6127] io_time[WRITE] 768 [ 209.351070][ T6127] fragmentation 0 [ 209.351077][ T6127] bp_start 7 [ 209.351083][ T6127] [ 209.351089][ T6127] invalid data type (got 3 should be 9), deleting [ 209.443088][ T6127] bcachefs (loop0): accounting_read... done [ 209.450273][ T6127] bcachefs (loop0): alloc_read... done [ 209.456856][ T6127] bcachefs (loop0): snapshots_read... done [ 209.463872][ T6127] bcachefs (loop0): check_allocations... [ 209.465867][ T6127] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 209.465882][ T6127] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 209.498387][ T6127] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 209.498402][ T6127] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 209.524759][ T6127] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 209.524773][ T6127] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 209.551050][ T6127] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 209.551065][ T6127] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 209.577697][ T6127] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 209.577711][ T6127] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 209.603924][ T6127] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 209.603940][ T6127] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 209.629389][ T6127] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 209.639455][ T6127] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 209.651372][ T6127] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 209.661644][ T6127] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 209.673298][ T6127] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 209.683346][ T6127] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 209.694846][ T6127] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 209.704847][ T6127] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 209.716297][ T6127] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 209.726297][ T6127] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 209.738333][ T6127] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 209.748658][ T6127] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 209.760531][ T6127] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 209.771029][ T6127] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 209.783044][ T6127] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 209.793622][ T6127] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 209.805944][ T6127] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 209.816930][ T6127] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 209.829369][ T6127] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 209.840517][ T6127] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 209.853067][ T6127] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 209.853085][ T6127] Ratelimiting new instances of previous error [ 209.870746][ T6127] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 209.870765][ T6127] Ratelimiting new instances of previous error [ 209.904688][ T6127] done [ 209.908872][ T6127] bcachefs (loop0): going read-write [ 209.921300][ T6127] bcachefs (loop0): journal_replay... done [ 209.958277][ T6127] bcachefs (loop0): check_alloc_info... done [ 209.969076][ T6127] bcachefs (loop0): check_lrus... done [ 209.974811][ T6127] bcachefs (loop0): check_btree_backpointers... done [ 209.982345][ T6127] bcachefs (loop0): check_backpointers_to_extents... done [ 209.991445][ T6127] bcachefs (loop0): check_extents_to_backpointers... [ 209.992949][ T6127] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 210.009722][ T6127] done [ 210.013168][ T6127] bcachefs (loop0): check_alloc_to_lru_refs... [ 210.014791][ T6127] bcachefs (loop0): missing fragmentation lru entry [ 210.014807][ T6127] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 210.014819][ T6127] gen 0 oldest_gen 0 data_type user [ 210.014829][ T6127] journal_seq_nonempty 5 [ 210.014839][ T6127] journal_seq_empty 134217728 [ 210.014849][ T6127] need_discard 1 [ 210.014858][ T6127] need_inc_gen 1 [ 210.014868][ T6127] dirty_sectors 16 [ 210.014878][ T6127] stripe_sectors 1802251 [ 210.014888][ T6127] cached_sectors 0 [ 210.014898][ T6127] stripe 0 [ 210.014907][ T6127] stripe_redundancy 0 [ 210.014917][ T6127] io_time[READ] 1 [ 210.014927][ T6127] io_time[WRITE] 512 [ 210.014936][ T6127] fragmentation 0 [ 210.014946][ T6127] bp_start 7 [ 210.014955][ T6127] , fixing [ 210.108013][ T6127] done [ 210.111528][ T6127] bcachefs (loop0): bucket_gens_init... done [ 210.124172][ T6127] bcachefs (loop0): check_snapshot_trees... done [ 210.130813][ T6127] bcachefs (loop0): check_snapshots... [ 210.131406][ T6127] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 210.131419][ T6127] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 210.163140][ T6127] done [ 210.166563][ T6127] bcachefs (loop0): check_subvols... done [ 210.173153][ T6127] bcachefs (loop0): check_subvol_children... done [ 210.179793][ T6127] bcachefs (loop0): delete_dead_snapshots... done [ 210.186247][ T6127] bcachefs (loop0): check_inodes... done [ 210.192757][ T6127] bcachefs (loop0): check_extents... done [ 210.199225][ T6127] bcachefs (loop0): check_indirect_extents... done [ 210.205752][ T6127] bcachefs (loop0): check_dirents... done [ 210.213024][ T6127] bcachefs (loop0): check_xattrs... done [ 210.219252][ T6127] bcachefs (loop0): check_root... done [ 210.225032][ T6127] bcachefs (loop0): check_unreachable_inodes... done [ 210.232038][ T6127] bcachefs (loop0): check_subvolume_structure... done [ 210.238917][ T6127] bcachefs (loop0): check_directory_structure... done [ 210.245705][ T6127] bcachefs (loop0): check_nlinks... done [pid 6127] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6127] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 210.252214][ T6127] bcachefs (loop0): check_rebalance_work... done [ 210.258919][ T6127] bcachefs (loop0): resume_logged_ops... done [ 210.265034][ T6127] bcachefs (loop0): delete_dead_inodes... done [ 210.271290][ T6127] bcachefs (loop0): set_fs_needs_rebalance... done [ 210.288424][ T6127] bcachefs (loop0): done starting filesystem [pid 6127] ioctl(4, LOOP_CLR_FD) = 0 [pid 6127] close(4) = 0 [pid 6127] exit_group(0) = ? [pid 6127] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6127, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=106 /* 1.06 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 210.411779][ T5861] bcachefs (loop0): shutting down [ 210.416841][ T5861] bcachefs (loop0): going read-only [ 210.422445][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 210.429997][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 210.439036][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 210.449742][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 210.458626][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 210.480533][ T5861] bcachefs (loop0): shutdown complete umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file0") = 0 umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6138 attached [pid 6138] set_robust_list(0x55557ab46660, 24 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6138 [pid 6138] <... set_robust_list resumed>) = 0 [pid 6138] chdir("./24") = 0 [pid 6138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6138] setpgid(0, 0) = 0 [pid 6138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6138] write(3, "1000", 4) = 4 [pid 6138] close(3) = 0 [pid 6138] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6138] write(1, "executing program\n", 18) = 18 [pid 6138] memfd_create("syzkaller", 0) = 3 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6138] munmap(0x7fdffb600000, 138412032) = 0 [pid 6138] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6138] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6138] close(3) = 0 [pid 6138] close(4) = 0 [pid 6138] mkdir("./file0", 0777) = 0 [ 211.871908][ T6138] loop0: detected capacity change from 0 to 32768 [ 211.961654][ T6138] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 211.961673][ T6138] allowing incompatible features above 0.0: (unknown version) [ 211.961682][ T6138] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 211.999300][ T6138] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 212.007578][ T6138] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 212.016043][ T6138] bcachefs (loop0): Version upgrade required: [ 212.016043][ T6138] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 212.016043][ T6138] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 212.016043][ T6138] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 212.101328][ T6138] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 212.101345][ T6138] gen 0 oldest_gen 0 data_type btree [ 212.101353][ T6138] journal_seq_nonempty 6 [ 212.101360][ T6138] journal_seq_empty 0 [ 212.101367][ T6138] need_discard 1 [ 212.101373][ T6138] need_inc_gen 1 [ 212.101380][ T6138] dirty_sectors 0 [ 212.101387][ T6138] stripe_sectors 1769482 [ 212.101394][ T6138] cached_sectors 0 [ 212.101401][ T6138] stripe 0 [ 212.101407][ T6138] stripe_redundancy 0 [ 212.101414][ T6138] io_time[READ] 1 [ 212.101421][ T6138] io_time[WRITE] 768 [ 212.101428][ T6138] fragmentation 0 [ 212.101435][ T6138] bp_start 7 [ 212.101441][ T6138] [ 212.101447][ T6138] invalid data type (got 3 should be 9), deleting [ 212.193638][ T6138] bcachefs (loop0): accounting_read... done [ 212.200754][ T6138] bcachefs (loop0): alloc_read... done [ 212.207312][ T6138] bcachefs (loop0): snapshots_read... done [ 212.214396][ T6138] bcachefs (loop0): check_allocations... [ 212.216388][ T6138] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 212.216405][ T6138] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 212.248993][ T6138] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 212.249008][ T6138] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 212.275259][ T6138] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 212.275274][ T6138] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 212.301724][ T6138] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 212.301739][ T6138] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 212.328593][ T6138] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 212.328610][ T6138] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 212.355311][ T6138] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 212.355328][ T6138] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 212.380761][ T6138] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 212.390809][ T6138] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 212.402553][ T6138] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 212.412569][ T6138] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 212.424243][ T6138] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 212.434251][ T6138] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 212.445809][ T6138] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 212.455814][ T6138] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 212.467254][ T6138] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 212.477405][ T6138] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 212.488904][ T6138] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 212.498910][ T6138] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 212.510380][ T6138] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 212.520378][ T6138] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 212.531846][ T6138] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 212.541936][ T6138] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 212.553323][ T6138] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 212.563859][ T6138] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 212.575672][ T6138] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 212.586177][ T6138] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 212.598106][ T6138] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 212.598120][ T6138] Ratelimiting new instances of previous error [ 212.614932][ T6138] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 212.614946][ T6138] Ratelimiting new instances of previous error [ 212.641051][ T6138] done [ 212.644248][ T6138] bcachefs (loop0): going read-write [ 212.652489][ T6138] bcachefs (loop0): journal_replay... done [ 212.684195][ T6138] bcachefs (loop0): check_alloc_info... done [ 212.693251][ T6138] bcachefs (loop0): check_lrus... done [ 212.699118][ T6138] bcachefs (loop0): check_btree_backpointers... done [ 212.706118][ T6138] bcachefs (loop0): check_backpointers_to_extents... done [ 212.715634][ T6138] bcachefs (loop0): check_extents_to_backpointers... [ 212.716557][ T6138] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 212.732380][ T6138] done [ 212.736041][ T6138] bcachefs (loop0): check_alloc_to_lru_refs... [ 212.737174][ T6138] bcachefs (loop0): missing fragmentation lru entry [ 212.737187][ T6138] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 212.737195][ T6138] gen 0 oldest_gen 0 data_type user [ 212.737203][ T6138] journal_seq_nonempty 5 [ 212.737210][ T6138] journal_seq_empty 134217728 [ 212.737217][ T6138] need_discard 1 [ 212.737224][ T6138] need_inc_gen 1 [ 212.737230][ T6138] dirty_sectors 16 [ 212.737237][ T6138] stripe_sectors 1802251 [ 212.737244][ T6138] cached_sectors 0 [ 212.737251][ T6138] stripe 0 [ 212.737258][ T6138] stripe_redundancy 0 [ 212.737264][ T6138] io_time[READ] 1 [ 212.737271][ T6138] io_time[WRITE] 512 [ 212.737278][ T6138] fragmentation 0 [ 212.737285][ T6138] bp_start 7 [ 212.737291][ T6138] , fixing [ 212.826870][ T6138] done [ 212.830885][ T6138] bcachefs (loop0): bucket_gens_init... done [ 212.842712][ T6138] bcachefs (loop0): check_snapshot_trees... done [ 212.849237][ T6138] bcachefs (loop0): check_snapshots... [ 212.849744][ T6138] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 212.849756][ T6138] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 212.882117][ T6138] done [ 212.885802][ T6138] bcachefs (loop0): check_subvols... done [ 212.892320][ T6138] bcachefs (loop0): check_subvol_children... done [ 212.898858][ T6138] bcachefs (loop0): delete_dead_snapshots... done [ 212.905303][ T6138] bcachefs (loop0): check_inodes... done [ 212.911789][ T6138] bcachefs (loop0): check_extents... done [ 212.918185][ T6138] bcachefs (loop0): check_indirect_extents... done [ 212.924751][ T6138] bcachefs (loop0): check_dirents... done [ 212.931984][ T6138] bcachefs (loop0): check_xattrs... done [ 212.938135][ T6138] bcachefs (loop0): check_root... done [ 212.944029][ T6138] bcachefs (loop0): check_unreachable_inodes... done [ 212.950996][ T6138] bcachefs (loop0): check_subvolume_structure... done [ 212.957860][ T6138] bcachefs (loop0): check_directory_structure... done [ 212.964647][ T6138] bcachefs (loop0): check_nlinks... done [ 212.970804][ T6138] bcachefs (loop0): check_rebalance_work... done [pid 6138] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6138] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6138] ioctl(4, LOOP_CLR_FD) = 0 [pid 6138] close(4) = 0 [pid 6138] exit_group(0) = ? [pid 6138] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6138, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=109 /* 1.09 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 212.977552][ T6138] bcachefs (loop0): resume_logged_ops... done [ 212.983757][ T6138] bcachefs (loop0): delete_dead_inodes... done [ 212.990318][ T6138] bcachefs (loop0): set_fs_needs_rebalance... done [ 213.007309][ T6138] bcachefs (loop0): done starting filesystem umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 213.092293][ T5861] bcachefs (loop0): shutting down [ 213.097402][ T5861] bcachefs (loop0): going read-only [ 213.103078][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 213.110813][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 213.119910][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 213.130454][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 213.140289][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 213.162537][ T5861] bcachefs (loop0): shutdown complete umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file0") = 0 umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6149 attached [pid 6149] set_robust_list(0x55557ab46660, 24) = 0 [pid 6149] chdir("./25" [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6149 [pid 6149] <... chdir resumed>) = 0 [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6149] setpgid(0, 0) = 0 [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6149] write(3, "1000", 4) = 4 [pid 6149] close(3) = 0 [pid 6149] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 6149] write(1, "executing program\n", 18) = 18 [pid 6149] memfd_create("syzkaller", 0) = 3 [pid 6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6149] munmap(0x7fdffb600000, 138412032) = 0 [pid 6149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6149] close(3) = 0 [pid 6149] close(4) = 0 [pid 6149] mkdir("./file0", 0777) = 0 [ 214.700739][ T6149] loop0: detected capacity change from 0 to 32768 [ 214.796025][ T6149] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 214.796045][ T6149] allowing incompatible features above 0.0: (unknown version) [ 214.796054][ T6149] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 214.833469][ T6149] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 214.842427][ T6149] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 214.850733][ T6149] bcachefs (loop0): Version upgrade required: [ 214.850733][ T6149] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 214.850733][ T6149] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 214.850733][ T6149] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 214.935609][ T6149] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 214.935626][ T6149] gen 0 oldest_gen 0 data_type btree [ 214.935633][ T6149] journal_seq_nonempty 6 [ 214.935640][ T6149] journal_seq_empty 0 [ 214.935647][ T6149] need_discard 1 [ 214.935653][ T6149] need_inc_gen 1 [ 214.935660][ T6149] dirty_sectors 0 [ 214.935667][ T6149] stripe_sectors 1769482 [ 214.935673][ T6149] cached_sectors 0 [ 214.935680][ T6149] stripe 0 [ 214.935696][ T6149] stripe_redundancy 0 [ 214.935702][ T6149] io_time[READ] 1 [ 214.935709][ T6149] io_time[WRITE] 768 [ 214.935716][ T6149] fragmentation 0 [ 214.935722][ T6149] bp_start 7 [ 214.935729][ T6149] [ 214.935734][ T6149] invalid data type (got 3 should be 9), deleting [ 215.028473][ T6149] bcachefs (loop0): accounting_read... done [ 215.035550][ T6149] bcachefs (loop0): alloc_read... done [ 215.042253][ T6149] bcachefs (loop0): snapshots_read... done [ 215.049279][ T6149] bcachefs (loop0): check_allocations... [ 215.051349][ T6149] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 215.051363][ T6149] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 215.083892][ T6149] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 215.083908][ T6149] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 215.110413][ T6149] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 215.110428][ T6149] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 215.136766][ T6149] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 215.136781][ T6149] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 215.163396][ T6149] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 215.163410][ T6149] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 215.189942][ T6149] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 215.189957][ T6149] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 215.215329][ T6149] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 215.225394][ T6149] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 215.237120][ T6149] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 215.247115][ T6149] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 215.258722][ T6149] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 215.268727][ T6149] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 215.280288][ T6149] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 215.290303][ T6149] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 215.301668][ T6149] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 215.311646][ T6149] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 215.322991][ T6149] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 215.332971][ T6149] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 215.344333][ T6149] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 215.354320][ T6149] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 215.365675][ T6149] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 215.375659][ T6149] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 215.386845][ T6149] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 215.397275][ T6149] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 215.409225][ T6149] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 215.419733][ T6149] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 215.431686][ T6149] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 215.431700][ T6149] Ratelimiting new instances of previous error [ 215.448543][ T6149] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 215.448557][ T6149] Ratelimiting new instances of previous error [ 215.474599][ T6149] done [ 215.477734][ T6149] bcachefs (loop0): going read-write [ 215.485875][ T6149] bcachefs (loop0): journal_replay... done [ 215.516042][ T6149] bcachefs (loop0): check_alloc_info... done [ 215.524990][ T6149] bcachefs (loop0): check_lrus... done [ 215.530801][ T6149] bcachefs (loop0): check_btree_backpointers... done [ 215.538156][ T6149] bcachefs (loop0): check_backpointers_to_extents... done [ 215.546788][ T6149] bcachefs (loop0): check_extents_to_backpointers... [ 215.547667][ T6149] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 215.563074][ T6149] done [ 215.566483][ T6149] bcachefs (loop0): check_alloc_to_lru_refs... [ 215.567657][ T6149] bcachefs (loop0): missing fragmentation lru entry [ 215.567669][ T6149] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 215.567677][ T6149] gen 0 oldest_gen 0 data_type user [ 215.567684][ T6149] journal_seq_nonempty 5 [ 215.567692][ T6149] journal_seq_empty 134217728 [ 215.567699][ T6149] need_discard 1 [ 215.567706][ T6149] need_inc_gen 1 [ 215.567712][ T6149] dirty_sectors 16 [ 215.567719][ T6149] stripe_sectors 1802251 [ 215.567726][ T6149] cached_sectors 0 [ 215.567733][ T6149] stripe 0 [ 215.567739][ T6149] stripe_redundancy 0 [ 215.567746][ T6149] io_time[READ] 1 [ 215.567752][ T6149] io_time[WRITE] 512 [ 215.567759][ T6149] fragmentation 0 [ 215.567765][ T6149] bp_start 7 [ 215.567829][ T6149] , fixing [ 215.656960][ T6149] done [ 215.660918][ T6149] bcachefs (loop0): bucket_gens_init... done [ 215.672663][ T6149] bcachefs (loop0): check_snapshot_trees... done [ 215.679346][ T6149] bcachefs (loop0): check_snapshots... [ 215.680021][ T6149] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 215.680035][ T6149] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 215.712437][ T6149] done [ 215.716488][ T6149] bcachefs (loop0): check_subvols... done [ 215.723000][ T6149] bcachefs (loop0): check_subvol_children... done [ 215.729523][ T6149] bcachefs (loop0): delete_dead_snapshots... done [ 215.735985][ T6149] bcachefs (loop0): check_inodes... done [ 215.742479][ T6149] bcachefs (loop0): check_extents... done [ 215.748868][ T6149] bcachefs (loop0): check_indirect_extents... done [ 215.755423][ T6149] bcachefs (loop0): check_dirents... done [ 215.762909][ T6149] bcachefs (loop0): check_xattrs... done [ 215.769004][ T6149] bcachefs (loop0): check_root... done [ 215.774834][ T6149] bcachefs (loop0): check_unreachable_inodes... done [ 215.781802][ T6149] bcachefs (loop0): check_subvolume_structure... done [ 215.788677][ T6149] bcachefs (loop0): check_directory_structure... done [ 215.795477][ T6149] bcachefs (loop0): check_nlinks... done [ 215.801605][ T6149] bcachefs (loop0): check_rebalance_work... done [ 215.808382][ T6149] bcachefs (loop0): resume_logged_ops... done [pid 6149] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6149] ioctl(4, LOOP_CLR_FD) = 0 [ 215.814491][ T6149] bcachefs (loop0): delete_dead_inodes... done [ 215.821833][ T6149] bcachefs (loop0): set_fs_needs_rebalance... done [ 215.839172][ T6149] bcachefs (loop0): done starting filesystem [pid 6149] close(4) = 0 [pid 6149] exit_group(0) = ? [pid 6149] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6149, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=100 /* 1.00 s */} --- umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 215.991848][ T5861] bcachefs (loop0): shutting down [ 215.996929][ T5861] bcachefs (loop0): going read-only [ 216.002403][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 216.009992][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 216.019001][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 216.029710][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 216.038685][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 216.060755][ T5861] bcachefs (loop0): shutdown complete umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file0") = 0 umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6160 attached , child_tidptr=0x55557ab46650) = 6160 [pid 6160] set_robust_list(0x55557ab46660, 24) = 0 [pid 6160] chdir("./26") = 0 [pid 6160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6160] setpgid(0, 0) = 0 [pid 6160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6160] write(3, "1000", 4) = 4 [pid 6160] close(3) = 0 [pid 6160] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6160] write(1, "executing program\n", 18) = 18 [pid 6160] memfd_create("syzkaller", 0) = 3 [pid 6160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6160] munmap(0x7fdffb600000, 138412032) = 0 [pid 6160] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6160] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6160] close(3) = 0 [pid 6160] close(4) = 0 [pid 6160] mkdir("./file0", 0777) = 0 [ 217.682564][ T6160] loop0: detected capacity change from 0 to 32768 [ 217.789923][ T6160] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 217.789943][ T6160] allowing incompatible features above 0.0: (unknown version) [ 217.789952][ T6160] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 217.827343][ T6160] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 217.836006][ T6160] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 217.844210][ T6160] bcachefs (loop0): Version upgrade required: [ 217.844210][ T6160] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 217.844210][ T6160] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 217.844210][ T6160] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 217.929263][ T6160] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 217.929280][ T6160] gen 0 oldest_gen 0 data_type btree [ 217.929288][ T6160] journal_seq_nonempty 6 [ 217.929295][ T6160] journal_seq_empty 0 [ 217.929301][ T6160] need_discard 1 [ 217.929308][ T6160] need_inc_gen 1 [ 217.929314][ T6160] dirty_sectors 0 [ 217.929321][ T6160] stripe_sectors 1769482 [ 217.929328][ T6160] cached_sectors 0 [ 217.929334][ T6160] stripe 0 [ 217.929341][ T6160] stripe_redundancy 0 [ 217.929347][ T6160] io_time[READ] 1 [ 217.929354][ T6160] io_time[WRITE] 768 [ 217.929360][ T6160] fragmentation 0 [ 217.929367][ T6160] bp_start 7 [ 217.929392][ T6160] [ 217.929398][ T6160] invalid data type (got 3 should be 9), deleting [ 218.021607][ T6160] bcachefs (loop0): accounting_read... done [ 218.028678][ T6160] bcachefs (loop0): alloc_read... done [ 218.035294][ T6160] bcachefs (loop0): snapshots_read... done [ 218.042208][ T6160] bcachefs (loop0): check_allocations... [ 218.044448][ T6160] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 218.044463][ T6160] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 218.077022][ T6160] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 218.077037][ T6160] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 218.103949][ T6160] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 218.103965][ T6160] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 218.130687][ T6160] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 218.130717][ T6160] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 218.157191][ T6160] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 218.157208][ T6160] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 218.183831][ T6160] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 218.183848][ T6160] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 218.209261][ T6160] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 218.219344][ T6160] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 218.231066][ T6160] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 218.241082][ T6160] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 218.252664][ T6160] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 218.262676][ T6160] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 218.274131][ T6160] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 218.284181][ T6160] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 218.295627][ T6160] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 218.305726][ T6160] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 218.317178][ T6160] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 218.327212][ T6160] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 218.338953][ T6160] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 218.348963][ T6160] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 218.360366][ T6160] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 218.370339][ T6160] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 218.381533][ T6160] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 218.391937][ T6160] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 218.403757][ T6160] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 218.414259][ T6160] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 218.426157][ T6160] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 218.426171][ T6160] Ratelimiting new instances of previous error [ 218.443525][ T6160] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 218.443545][ T6160] Ratelimiting new instances of previous error [ 218.469700][ T6160] done [ 218.472844][ T6160] bcachefs (loop0): going read-write [ 218.480867][ T6160] bcachefs (loop0): journal_replay... done [ 218.510932][ T6160] bcachefs (loop0): check_alloc_info... done [ 218.520192][ T6160] bcachefs (loop0): check_lrus... done [ 218.525963][ T6160] bcachefs (loop0): check_btree_backpointers... done [ 218.533219][ T6160] bcachefs (loop0): check_backpointers_to_extents... done [ 218.542076][ T6160] bcachefs (loop0): check_extents_to_backpointers... [ 218.542933][ T6160] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 218.558631][ T6160] done [ 218.562096][ T6160] bcachefs (loop0): check_alloc_to_lru_refs... [ 218.563212][ T6160] bcachefs (loop0): missing fragmentation lru entry [ 218.563225][ T6160] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 218.563232][ T6160] gen 0 oldest_gen 0 data_type user [ 218.563240][ T6160] journal_seq_nonempty 5 [ 218.563247][ T6160] journal_seq_empty 134217728 [ 218.563254][ T6160] need_discard 1 [ 218.563261][ T6160] need_inc_gen 1 [ 218.563268][ T6160] dirty_sectors 16 [ 218.563274][ T6160] stripe_sectors 1802251 [ 218.563281][ T6160] cached_sectors 0 [ 218.563288][ T6160] stripe 0 [ 218.563296][ T6160] stripe_redundancy 0 [ 218.563303][ T6160] io_time[READ] 1 [ 218.563310][ T6160] io_time[WRITE] 512 [ 218.563317][ T6160] fragmentation 0 [ 218.563324][ T6160] bp_start 7 [ 218.563330][ T6160] , fixing [ 218.652547][ T6160] done [ 218.656021][ T6160] bcachefs (loop0): bucket_gens_init... done [ 218.667575][ T6160] bcachefs (loop0): check_snapshot_trees... done [ 218.674020][ T6160] bcachefs (loop0): check_snapshots... [ 218.674606][ T6160] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 218.674620][ T6160] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 218.706571][ T6160] done [ 218.710583][ T6160] bcachefs (loop0): check_subvols... done [ 218.717567][ T6160] bcachefs (loop0): check_subvol_children... done [ 218.725005][ T6160] bcachefs (loop0): delete_dead_snapshots... done [ 218.731578][ T6160] bcachefs (loop0): check_inodes... done [ 218.738082][ T6160] bcachefs (loop0): check_extents... done [ 218.744339][ T6160] bcachefs (loop0): check_indirect_extents... done [ 218.750977][ T6160] bcachefs (loop0): check_dirents... done [ 218.758131][ T6160] bcachefs (loop0): check_xattrs... done [ 218.764129][ T6160] bcachefs (loop0): check_root... done [ 218.770049][ T6160] bcachefs (loop0): check_unreachable_inodes... done [ 218.777050][ T6160] bcachefs (loop0): check_subvolume_structure... done [ 218.783925][ T6160] bcachefs (loop0): check_directory_structure... done [ 218.790842][ T6160] bcachefs (loop0): check_nlinks... done [ 218.796922][ T6160] bcachefs (loop0): check_rebalance_work... done [ 218.803575][ T6160] bcachefs (loop0): resume_logged_ops... done [pid 6160] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6160] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6160] ioctl(4, LOOP_CLR_FD) = 0 [pid 6160] close(4) = 0 [pid 6160] exit_group(0) = ? [pid 6160] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6160, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=108 /* 1.08 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 218.809720][ T6160] bcachefs (loop0): delete_dead_inodes... done [ 218.816229][ T6160] bcachefs (loop0): set_fs_needs_rebalance... done [ 218.833232][ T6160] bcachefs (loop0): done starting filesystem umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 218.896302][ T5861] bcachefs (loop0): shutting down [ 218.901796][ T5861] bcachefs (loop0): going read-only [ 218.907054][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 218.915032][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 218.925946][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 218.937716][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 218.949239][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 218.973805][ T5861] bcachefs (loop0): shutdown complete umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file0") = 0 umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6171 attached [pid 6171] set_robust_list(0x55557ab46660, 24) = 0 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6171 [pid 6171] chdir("./27") = 0 [pid 6171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6171] setpgid(0, 0) = 0 [pid 6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6171] write(3, "1000", 4) = 4 [pid 6171] close(3) = 0 [pid 6171] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6171] write(1, "executing program\n", 18) = 18 [pid 6171] memfd_create("syzkaller", 0) = 3 [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6171] munmap(0x7fdffb600000, 138412032) = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6171] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6171] close(3) = 0 [pid 6171] close(4) = 0 [pid 6171] mkdir("./file0", 0777) = 0 [ 220.653992][ T6171] loop0: detected capacity change from 0 to 32768 [ 220.735576][ T6171] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 220.735602][ T6171] allowing incompatible features above 0.0: (unknown version) [ 220.735615][ T6171] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 220.772773][ T6171] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 220.781142][ T6171] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 220.789420][ T6171] bcachefs (loop0): Version upgrade required: [ 220.789420][ T6171] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 220.789420][ T6171] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 220.789420][ T6171] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 220.873964][ T6171] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 220.873982][ T6171] gen 0 oldest_gen 0 data_type btree [ 220.873990][ T6171] journal_seq_nonempty 6 [ 220.873997][ T6171] journal_seq_empty 0 [ 220.874004][ T6171] need_discard 1 [ 220.874010][ T6171] need_inc_gen 1 [ 220.874017][ T6171] dirty_sectors 0 [ 220.874024][ T6171] stripe_sectors 1769482 [ 220.874031][ T6171] cached_sectors 0 [ 220.874038][ T6171] stripe 0 [ 220.874045][ T6171] stripe_redundancy 0 [ 220.874052][ T6171] io_time[READ] 1 [ 220.874059][ T6171] io_time[WRITE] 768 [ 220.874066][ T6171] fragmentation 0 [ 220.874073][ T6171] bp_start 7 [ 220.874080][ T6171] [ 220.874086][ T6171] invalid data type (got 3 should be 9), deleting [ 220.965995][ T6171] bcachefs (loop0): accounting_read... done [ 220.973053][ T6171] bcachefs (loop0): alloc_read... done [ 220.979744][ T6171] bcachefs (loop0): snapshots_read... done [ 220.986749][ T6171] bcachefs (loop0): check_allocations... [ 220.988938][ T6171] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 220.988952][ T6171] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 221.021684][ T6171] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 221.021699][ T6171] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 221.048411][ T6171] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 221.048427][ T6171] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 221.075174][ T6171] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 221.075191][ T6171] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 221.101673][ T6171] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 221.101689][ T6171] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 221.128040][ T6171] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 221.128056][ T6171] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 221.153462][ T6171] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 221.163610][ T6171] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 221.175387][ T6171] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 221.185495][ T6171] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 221.197171][ T6171] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 221.207266][ T6171] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 221.218773][ T6171] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 221.228794][ T6171] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 221.240365][ T6171] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 221.250408][ T6171] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 221.261803][ T6171] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 221.271814][ T6171] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 221.283267][ T6171] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 221.293273][ T6171] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 221.304764][ T6171] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 221.314774][ T6171] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 221.326054][ T6171] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 221.336486][ T6171] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 221.348388][ T6171] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 221.358977][ T6171] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 221.371030][ T6171] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 221.371050][ T6171] Ratelimiting new instances of previous error [ 221.387997][ T6171] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 221.388013][ T6171] Ratelimiting new instances of previous error [ 221.414319][ T6171] done [ 221.417535][ T6171] bcachefs (loop0): going read-write [ 221.425710][ T6171] bcachefs (loop0): journal_replay... done [ 221.455120][ T6171] bcachefs (loop0): check_alloc_info... done [ 221.464222][ T6171] bcachefs (loop0): check_lrus... done [ 221.469988][ T6171] bcachefs (loop0): check_btree_backpointers... done [ 221.477059][ T6171] bcachefs (loop0): check_backpointers_to_extents... done [ 221.485969][ T6171] bcachefs (loop0): check_extents_to_backpointers... [ 221.486849][ T6171] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 221.502698][ T6171] done [ 221.506542][ T6171] bcachefs (loop0): check_alloc_to_lru_refs... [ 221.507657][ T6171] bcachefs (loop0): missing fragmentation lru entry [ 221.507669][ T6171] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 221.507677][ T6171] gen 0 oldest_gen 0 data_type user [ 221.507684][ T6171] journal_seq_nonempty 5 [ 221.507692][ T6171] journal_seq_empty 134217728 [ 221.507699][ T6171] need_discard 1 [ 221.507705][ T6171] need_inc_gen 1 [ 221.507712][ T6171] dirty_sectors 16 [ 221.507719][ T6171] stripe_sectors 1802251 [ 221.507726][ T6171] cached_sectors 0 [ 221.507732][ T6171] stripe 0 [ 221.507739][ T6171] stripe_redundancy 0 [ 221.507746][ T6171] io_time[READ] 1 [ 221.507753][ T6171] io_time[WRITE] 512 [ 221.507760][ T6171] fragmentation 0 [ 221.507823][ T6171] bp_start 7 [ 221.507834][ T6171] , fixing [ 221.597270][ T6171] done [ 221.600748][ T6171] bcachefs (loop0): bucket_gens_init... done [ 221.612716][ T6171] bcachefs (loop0): check_snapshot_trees... done [ 221.619541][ T6171] bcachefs (loop0): check_snapshots... [ 221.620252][ T6171] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 221.620269][ T6171] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 221.652693][ T6171] done [ 221.657020][ T6171] bcachefs (loop0): check_subvols... done [ 221.663504][ T6171] bcachefs (loop0): check_subvol_children... done [ 221.670149][ T6171] bcachefs (loop0): delete_dead_snapshots... done [ 221.676625][ T6171] bcachefs (loop0): check_inodes... done [ 221.683222][ T6171] bcachefs (loop0): check_extents... done [ 221.689714][ T6171] bcachefs (loop0): check_indirect_extents... done [ 221.696311][ T6171] bcachefs (loop0): check_dirents... done [ 221.703437][ T6171] bcachefs (loop0): check_xattrs... done [ 221.709623][ T6171] bcachefs (loop0): check_root... done [ 221.715412][ T6171] bcachefs (loop0): check_unreachable_inodes... done [ 221.722398][ T6171] bcachefs (loop0): check_subvolume_structure... done [ 221.729295][ T6171] bcachefs (loop0): check_directory_structure... done [ 221.736084][ T6171] bcachefs (loop0): check_nlinks... done [ 221.742289][ T6171] bcachefs (loop0): check_rebalance_work... done [pid 6171] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6171] ioctl(4, LOOP_CLR_FD) = 0 [pid 6171] close(4) = 0 [ 221.749223][ T6171] bcachefs (loop0): resume_logged_ops... done [ 221.755426][ T6171] bcachefs (loop0): delete_dead_inodes... done [ 221.761927][ T6171] bcachefs (loop0): set_fs_needs_rebalance... done [ 221.779656][ T6171] bcachefs (loop0): done starting filesystem [pid 6171] exit_group(0) = ? [pid 6171] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6171, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=103 /* 1.03 s */} --- umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 221.880497][ T5861] bcachefs (loop0): shutting down [ 221.885592][ T5861] bcachefs (loop0): going read-only [ 221.891647][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 221.900220][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 221.909274][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 221.919819][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 221.928655][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 221.950376][ T5861] bcachefs (loop0): shutdown complete umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file0") = 0 umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6182 attached [pid 6182] set_robust_list(0x55557ab46660, 24) = 0 [pid 6182] chdir("./28" [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6182 [pid 6182] <... chdir resumed>) = 0 [pid 6182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6182] setpgid(0, 0) = 0 [pid 6182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6182] write(3, "1000", 4) = 4 [pid 6182] close(3) = 0 [pid 6182] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6182] write(1, "executing program\n", 18) = 18 [pid 6182] memfd_create("syzkaller", 0) = 3 [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6182] munmap(0x7fdffb600000, 138412032) = 0 [pid 6182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6182] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6182] close(3) = 0 [pid 6182] close(4) = 0 [pid 6182] mkdir("./file0", 0777) = 0 [ 223.495963][ T6182] loop0: detected capacity change from 0 to 32768 [ 223.581127][ T6182] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 223.581146][ T6182] allowing incompatible features above 0.0: (unknown version) [ 223.581155][ T6182] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 223.619182][ T6182] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 223.627445][ T6182] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 223.635655][ T6182] bcachefs (loop0): Version upgrade required: [ 223.635655][ T6182] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 223.635655][ T6182] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 223.635655][ T6182] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 223.720201][ T6182] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 223.720219][ T6182] gen 0 oldest_gen 0 data_type btree [ 223.720226][ T6182] journal_seq_nonempty 6 [ 223.720233][ T6182] journal_seq_empty 0 [ 223.720240][ T6182] need_discard 1 [ 223.720247][ T6182] need_inc_gen 1 [ 223.720254][ T6182] dirty_sectors 0 [ 223.720261][ T6182] stripe_sectors 1769482 [ 223.720268][ T6182] cached_sectors 0 [ 223.720274][ T6182] stripe 0 [ 223.720281][ T6182] stripe_redundancy 0 [ 223.720288][ T6182] io_time[READ] 1 [ 223.720295][ T6182] io_time[WRITE] 768 [ 223.720309][ T6182] fragmentation 0 [ 223.720316][ T6182] bp_start 7 [ 223.720323][ T6182] [ 223.720329][ T6182] invalid data type (got 3 should be 9), deleting [ 223.812943][ T6182] bcachefs (loop0): accounting_read... done [ 223.820012][ T6182] bcachefs (loop0): alloc_read... done [ 223.826603][ T6182] bcachefs (loop0): snapshots_read... done [ 223.833615][ T6182] bcachefs (loop0): check_allocations... [ 223.835700][ T6182] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 223.835717][ T6182] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 223.868511][ T6182] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 223.868527][ T6182] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 223.895019][ T6182] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 223.895041][ T6182] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 223.921895][ T6182] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 223.921911][ T6182] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 223.948686][ T6182] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 223.948702][ T6182] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 223.975504][ T6182] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 223.975520][ T6182] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 224.000990][ T6182] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.011454][ T6182] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.023232][ T6182] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.033265][ T6182] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.044856][ T6182] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.054881][ T6182] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.066305][ T6182] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.076313][ T6182] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.087723][ T6182] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.097830][ T6182] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.109331][ T6182] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.119379][ T6182] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.130865][ T6182] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.140902][ T6182] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.152297][ T6182] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.162306][ T6182] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 224.173512][ T6182] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 224.183993][ T6182] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 224.195909][ T6182] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 224.206443][ T6182] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 224.218391][ T6182] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 224.218406][ T6182] Ratelimiting new instances of previous error [ 224.235264][ T6182] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 224.235281][ T6182] Ratelimiting new instances of previous error [ 224.261956][ T6182] done [ 224.265201][ T6182] bcachefs (loop0): going read-write [ 224.273757][ T6182] bcachefs (loop0): journal_replay... done [ 224.305361][ T6182] bcachefs (loop0): check_alloc_info... done [ 224.314791][ T6182] bcachefs (loop0): check_lrus... done [ 224.320993][ T6182] bcachefs (loop0): check_btree_backpointers... done [ 224.328280][ T6182] bcachefs (loop0): check_backpointers_to_extents... done [ 224.337728][ T6182] bcachefs (loop0): check_extents_to_backpointers... [ 224.339023][ T6182] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 224.354470][ T6182] done [ 224.358254][ T6182] bcachefs (loop0): check_alloc_to_lru_refs... [ 224.359488][ T6182] bcachefs (loop0): missing fragmentation lru entry [ 224.359501][ T6182] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 224.359509][ T6182] gen 0 oldest_gen 0 data_type user [ 224.359516][ T6182] journal_seq_nonempty 5 [ 224.359523][ T6182] journal_seq_empty 134217728 [ 224.359530][ T6182] need_discard 1 [ 224.359537][ T6182] need_inc_gen 1 [ 224.359544][ T6182] dirty_sectors 16 [ 224.359551][ T6182] stripe_sectors 1802251 [ 224.359557][ T6182] cached_sectors 0 [ 224.359564][ T6182] stripe 0 [ 224.359571][ T6182] stripe_redundancy 0 [ 224.359578][ T6182] io_time[READ] 1 [ 224.359585][ T6182] io_time[WRITE] 512 [ 224.359591][ T6182] fragmentation 0 [ 224.359598][ T6182] bp_start 7 [ 224.359604][ T6182] , fixing [ 224.448810][ T6182] done [ 224.452258][ T6182] bcachefs (loop0): bucket_gens_init... done [ 224.463781][ T6182] bcachefs (loop0): check_snapshot_trees... done [ 224.470484][ T6182] bcachefs (loop0): check_snapshots... [ 224.471213][ T6182] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 224.471226][ T6182] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 224.503197][ T6182] done [ 224.506700][ T6182] bcachefs (loop0): check_subvols... done [ 224.514542][ T6182] bcachefs (loop0): check_subvol_children... done [ 224.521258][ T6182] bcachefs (loop0): delete_dead_snapshots... done [ 224.527743][ T6182] bcachefs (loop0): check_inodes... done [ 224.534490][ T6182] bcachefs (loop0): check_extents... done [ 224.540875][ T6182] bcachefs (loop0): check_indirect_extents... done [ 224.547433][ T6182] bcachefs (loop0): check_dirents... done [ 224.554577][ T6182] bcachefs (loop0): check_xattrs... done [ 224.560643][ T6182] bcachefs (loop0): check_root... done [ 224.566516][ T6182] bcachefs (loop0): check_unreachable_inodes... done [ 224.573442][ T6182] bcachefs (loop0): check_subvolume_structure... done [ 224.580317][ T6182] bcachefs (loop0): check_directory_structure... done [ 224.587145][ T6182] bcachefs (loop0): check_nlinks... done [ 224.593553][ T6182] bcachefs (loop0): check_rebalance_work... done [pid 6182] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6182] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6182] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6182] ioctl(4, LOOP_CLR_FD) = 0 [ 224.600236][ T6182] bcachefs (loop0): resume_logged_ops... done [ 224.606362][ T6182] bcachefs (loop0): delete_dead_inodes... done [ 224.612855][ T6182] bcachefs (loop0): set_fs_needs_rebalance... done [ 224.630221][ T6182] bcachefs (loop0): done starting filesystem [pid 6182] close(4) = 0 [pid 6182] exit_group(0) = ? [pid 6182] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6182, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=103 /* 1.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 224.736502][ T5861] bcachefs (loop0): shutting down [ 224.742809][ T5861] bcachefs (loop0): going read-only [ 224.748126][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 224.755502][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 24 [ 224.764491][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 24 [ 224.775060][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 25 [ 224.784001][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 224.807573][ T5861] bcachefs (loop0): shutdown complete umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file0") = 0 umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6193 attached [pid 6193] set_robust_list(0x55557ab46660, 24) = 0 [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6193 [pid 6193] chdir("./29") = 0 [pid 6193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6193] setpgid(0, 0) = 0 [pid 6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6193] write(3, "1000", 4) = 4 [pid 6193] close(3) = 0 [pid 6193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6193] write(1, "executing program\n", 18executing program ) = 18 [pid 6193] memfd_create("syzkaller", 0) = 3 [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6193] munmap(0x7fdffb600000, 138412032) = 0 [pid 6193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6193] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6193] close(3) = 0 [pid 6193] close(4) = 0 [pid 6193] mkdir("./file0", 0777) = 0 [ 226.427011][ T6193] loop0: detected capacity change from 0 to 32768 [ 226.498892][ T6193] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 226.498917][ T6193] allowing incompatible features above 0.0: (unknown version) [ 226.498930][ T6193] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 226.536998][ T6193] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 226.545297][ T6193] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 226.553491][ T6193] bcachefs (loop0): Version upgrade required: [ 226.553491][ T6193] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 226.553491][ T6193] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 226.553491][ T6193] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 226.638603][ T6193] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 226.638621][ T6193] gen 0 oldest_gen 0 data_type btree [ 226.638629][ T6193] journal_seq_nonempty 6 [ 226.638636][ T6193] journal_seq_empty 0 [ 226.638643][ T6193] need_discard 1 [ 226.638650][ T6193] need_inc_gen 1 [ 226.638657][ T6193] dirty_sectors 0 [ 226.638664][ T6193] stripe_sectors 1769482 [ 226.638671][ T6193] cached_sectors 0 [ 226.638677][ T6193] stripe 0 [ 226.638684][ T6193] stripe_redundancy 0 [ 226.638691][ T6193] io_time[READ] 1 [ 226.638698][ T6193] io_time[WRITE] 768 [ 226.638705][ T6193] fragmentation 0 [ 226.638712][ T6193] bp_start 7 [ 226.638718][ T6193] [ 226.638724][ T6193] invalid data type (got 3 should be 9), deleting [ 226.731365][ T6193] bcachefs (loop0): accounting_read... done [ 226.738586][ T6193] bcachefs (loop0): alloc_read... done [ 226.745215][ T6193] bcachefs (loop0): snapshots_read... done [ 226.752145][ T6193] bcachefs (loop0): check_allocations... [ 226.754444][ T6193] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 226.754460][ T6193] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 226.786923][ T6193] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 226.786939][ T6193] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 226.813243][ T6193] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 226.813261][ T6193] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 226.839810][ T6193] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 226.839825][ T6193] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 226.866303][ T6193] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 226.866319][ T6193] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 226.892677][ T6193] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 226.892693][ T6193] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 226.918108][ T6193] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 226.928235][ T6193] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 226.939992][ T6193] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 226.950042][ T6193] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 226.961812][ T6193] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 226.971843][ T6193] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 226.983352][ T6193] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 226.993393][ T6193] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 227.004779][ T6193] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 227.014865][ T6193] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 227.026298][ T6193] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 227.036286][ T6193] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 227.047672][ T6193] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 227.057673][ T6193] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 227.069091][ T6193] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 227.079146][ T6193] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 227.090398][ T6193] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 227.100853][ T6193] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 227.112866][ T6193] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 227.123412][ T6193] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 227.135368][ T6193] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 227.135383][ T6193] Ratelimiting new instances of previous error [ 227.152305][ T6193] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 227.152321][ T6193] Ratelimiting new instances of previous error [ 227.178698][ T6193] done [ 227.181916][ T6193] bcachefs (loop0): going read-write [ 227.190264][ T6193] bcachefs (loop0): journal_replay... done [ 227.224075][ T6193] bcachefs (loop0): check_alloc_info... done [ 227.233870][ T6193] bcachefs (loop0): check_lrus... done [ 227.239902][ T6193] bcachefs (loop0): check_btree_backpointers... done [ 227.246923][ T6193] bcachefs (loop0): check_backpointers_to_extents... done [ 227.256615][ T6193] bcachefs (loop0): check_extents_to_backpointers... [ 227.257645][ T6193] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 227.273503][ T6193] done [ 227.276953][ T6193] bcachefs (loop0): check_alloc_to_lru_refs... [ 227.278306][ T6193] bcachefs (loop0): missing fragmentation lru entry [ 227.278324][ T6193] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 227.278336][ T6193] gen 0 oldest_gen 0 data_type user [ 227.278347][ T6193] journal_seq_nonempty 5 [ 227.278358][ T6193] journal_seq_empty 134217728 [ 227.278368][ T6193] need_discard 1 [ 227.278378][ T6193] need_inc_gen 1 [ 227.278388][ T6193] dirty_sectors 16 [ 227.278397][ T6193] stripe_sectors 1802251 [ 227.278409][ T6193] cached_sectors 0 [ 227.278417][ T6193] stripe 0 [ 227.278425][ T6193] stripe_redundancy 0 [ 227.278431][ T6193] io_time[READ] 1 [ 227.278438][ T6193] io_time[WRITE] 512 [ 227.278445][ T6193] fragmentation 0 [ 227.278451][ T6193] bp_start 7 [ 227.278458][ T6193] , fixing [ 227.367718][ T6193] done [ 227.371211][ T6193] bcachefs (loop0): bucket_gens_init... done [ 227.383331][ T6193] bcachefs (loop0): check_snapshot_trees... done [ 227.390108][ T6193] bcachefs (loop0): check_snapshots... [ 227.390735][ T6193] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 227.390748][ T6193] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 227.423099][ T6193] done [ 227.427600][ T6193] bcachefs (loop0): check_subvols... done [ 227.434229][ T6193] bcachefs (loop0): check_subvol_children... done [ 227.440806][ T6193] bcachefs (loop0): delete_dead_snapshots... done [ 227.447256][ T6193] bcachefs (loop0): check_inodes... done [ 227.453734][ T6193] bcachefs (loop0): check_extents... done [ 227.460187][ T6193] bcachefs (loop0): check_indirect_extents... done [ 227.466756][ T6193] bcachefs (loop0): check_dirents... done [ 227.473932][ T6193] bcachefs (loop0): check_xattrs... done [ 227.480315][ T6193] bcachefs (loop0): check_root... done [ 227.486179][ T6193] bcachefs (loop0): check_unreachable_inodes... done [ 227.493104][ T6193] bcachefs (loop0): check_subvolume_structure... done [ 227.500003][ T6193] bcachefs (loop0): check_directory_structure... done [ 227.506803][ T6193] bcachefs (loop0): check_nlinks... done [ 227.513021][ T6193] bcachefs (loop0): check_rebalance_work... done [pid 6193] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6193] ioctl(4, LOOP_CLR_FD) = 0 [pid 6193] close(4) = 0 [pid 6193] exit_group(0) = ? [pid 6193] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6193, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=112 /* 1.12 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 227.519825][ T6193] bcachefs (loop0): resume_logged_ops... done [ 227.525921][ T6193] bcachefs (loop0): delete_dead_inodes... done [ 227.532414][ T6193] bcachefs (loop0): set_fs_needs_rebalance... done [ 227.549504][ T6193] bcachefs (loop0): done starting filesystem openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 227.612069][ T5861] bcachefs (loop0): shutting down [ 227.617161][ T5861] bcachefs (loop0): going read-only [ 227.624588][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 227.633519][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 227.642926][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 227.654778][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 227.664449][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 227.689521][ T5861] bcachefs (loop0): shutdown complete umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file0") = 0 umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./29/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6204 attached [pid 6204] set_robust_list(0x55557ab46660, 24) = 0 [pid 6204] chdir("./30" [pid 5861] <... clone resumed>, child_tidptr=0x55557ab46650) = 6204 [pid 6204] <... chdir resumed>) = 0 [pid 6204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6204] setpgid(0, 0) = 0 [pid 6204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6204] write(3, "1000", 4) = 4 [pid 6204] close(3) = 0 [pid 6204] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6204] write(1, "executing program\n", 18) = 18 [pid 6204] memfd_create("syzkaller", 0) = 3 [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6204] munmap(0x7fdffb600000, 138412032) = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6204] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6204] close(3) = 0 [pid 6204] close(4) = 0 [pid 6204] mkdir("./file0", 0777) = 0 [ 229.319920][ T6204] loop0: detected capacity change from 0 to 32768 [ 229.392066][ T6204] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 229.392091][ T6204] allowing incompatible features above 0.0: (unknown version) [ 229.392104][ T6204] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 229.429497][ T6204] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 229.437755][ T6204] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 229.445947][ T6204] bcachefs (loop0): Version upgrade required: [ 229.445947][ T6204] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 229.445947][ T6204] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 229.445947][ T6204] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 229.530335][ T6204] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 229.530353][ T6204] gen 0 oldest_gen 0 data_type btree [ 229.530361][ T6204] journal_seq_nonempty 6 [ 229.530367][ T6204] journal_seq_empty 0 [ 229.530374][ T6204] need_discard 1 [ 229.530381][ T6204] need_inc_gen 1 [ 229.530387][ T6204] dirty_sectors 0 [ 229.530394][ T6204] stripe_sectors 1769482 [ 229.530401][ T6204] cached_sectors 0 [ 229.530407][ T6204] stripe 0 [ 229.530414][ T6204] stripe_redundancy 0 [ 229.530421][ T6204] io_time[READ] 1 [ 229.530427][ T6204] io_time[WRITE] 768 [ 229.530434][ T6204] fragmentation 0 [ 229.530441][ T6204] bp_start 7 [ 229.530447][ T6204] [ 229.530453][ T6204] invalid data type (got 3 should be 9), deleting [ 229.622586][ T6204] bcachefs (loop0): accounting_read... done [ 229.629747][ T6204] bcachefs (loop0): alloc_read... done [ 229.636482][ T6204] bcachefs (loop0): snapshots_read... done [ 229.643586][ T6204] bcachefs (loop0): check_allocations... [ 229.645677][ T6204] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 229.645693][ T6204] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 229.678581][ T6204] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 229.678604][ T6204] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 229.705002][ T6204] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 229.705018][ T6204] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 229.731376][ T6204] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 229.731392][ T6204] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 229.758046][ T6204] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 229.758062][ T6204] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 229.784417][ T6204] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 229.784433][ T6204] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 229.809874][ T6204] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 229.819917][ T6204] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 229.831835][ T6204] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 229.841849][ T6204] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 229.853466][ T6204] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 229.863499][ T6204] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 229.875139][ T6204] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 229.885155][ T6204] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 229.896548][ T6204] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 229.906533][ T6204] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 229.917949][ T6204] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 229.927950][ T6204] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 229.939305][ T6204] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 229.949304][ T6204] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 229.960671][ T6204] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 229.970782][ T6204] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 229.982130][ T6204] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 229.992613][ T6204] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 230.005020][ T6204] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 230.015595][ T6204] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 230.027552][ T6204] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 230.027578][ T6204] Ratelimiting new instances of previous error [ 230.044448][ T6204] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 230.044464][ T6204] Ratelimiting new instances of previous error [ 230.070948][ T6204] done [ 230.074232][ T6204] bcachefs (loop0): going read-write [ 230.082460][ T6204] bcachefs (loop0): journal_replay... done [ 230.113634][ T6204] bcachefs (loop0): check_alloc_info... done [ 230.122954][ T6204] bcachefs (loop0): check_lrus... done [ 230.128774][ T6204] bcachefs (loop0): check_btree_backpointers... done [ 230.135905][ T6204] bcachefs (loop0): check_backpointers_to_extents... done [ 230.144737][ T6204] bcachefs (loop0): check_extents_to_backpointers... [ 230.145661][ T6204] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 230.161476][ T6204] done [ 230.164929][ T6204] bcachefs (loop0): check_alloc_to_lru_refs... [ 230.165999][ T6204] bcachefs (loop0): missing fragmentation lru entry [ 230.166011][ T6204] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 230.166019][ T6204] gen 0 oldest_gen 0 data_type user [ 230.166026][ T6204] journal_seq_nonempty 5 [ 230.166033][ T6204] journal_seq_empty 134217728 [ 230.166039][ T6204] need_discard 1 [ 230.166046][ T6204] need_inc_gen 1 [ 230.166052][ T6204] dirty_sectors 16 [ 230.166059][ T6204] stripe_sectors 1802251 [ 230.166065][ T6204] cached_sectors 0 [ 230.166072][ T6204] stripe 0 [ 230.166079][ T6204] stripe_redundancy 0 [ 230.166085][ T6204] io_time[READ] 1 [ 230.166092][ T6204] io_time[WRITE] 512 [ 230.166098][ T6204] fragmentation 0 [ 230.166104][ T6204] bp_start 7 [ 230.166111][ T6204] , fixing [ 230.255402][ T6204] done [ 230.258899][ T6204] bcachefs (loop0): bucket_gens_init... done [ 230.270487][ T6204] bcachefs (loop0): check_snapshot_trees... done [ 230.276918][ T6204] bcachefs (loop0): check_snapshots... [ 230.277540][ T6204] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 230.277555][ T6204] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 230.310190][ T6204] done [ 230.314467][ T6204] bcachefs (loop0): check_subvols... done [ 230.320868][ T6204] bcachefs (loop0): check_subvol_children... done [ 230.327337][ T6204] bcachefs (loop0): delete_dead_snapshots... done [ 230.333843][ T6204] bcachefs (loop0): check_inodes... done [ 230.340319][ T6204] bcachefs (loop0): check_extents... done [ 230.346616][ T6204] bcachefs (loop0): check_indirect_extents... done [ 230.353203][ T6204] bcachefs (loop0): check_dirents... done [ 230.360402][ T6204] bcachefs (loop0): check_xattrs... done [ 230.366511][ T6204] bcachefs (loop0): check_root... done [ 230.372669][ T6204] bcachefs (loop0): check_unreachable_inodes... done [ 230.379847][ T6204] bcachefs (loop0): check_subvolume_structure... done [ 230.386716][ T6204] bcachefs (loop0): check_directory_structure... done [ 230.393722][ T6204] bcachefs (loop0): check_nlinks... done [ 230.400111][ T6204] bcachefs (loop0): check_rebalance_work... done [pid 6204] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff") = 0 [pid 6204] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 6204] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6204] ioctl(4, LOOP_CLR_FD) = 0 [pid 6204] close(4) = 0 [ 230.406762][ T6204] bcachefs (loop0): resume_logged_ops... done [ 230.412925][ T6204] bcachefs (loop0): delete_dead_inodes... done [ 230.419576][ T6204] bcachefs (loop0): set_fs_needs_rebalance... done [ 230.438010][ T6204] bcachefs (loop0): done starting filesystem [pid 6204] exit_group(0) = ? [pid 6204] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6204, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=106 /* 1.06 s */} --- umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x55557ab476f0 /* 4 entries */, 32768) = 112 [ 230.562378][ T5861] bcachefs (loop0): shutting down [ 230.567443][ T5861] bcachefs (loop0): going read-only [ 230.572789][ T5861] bcachefs (loop0): finished waiting for writes to stop [ 230.580662][ T5861] bcachefs (loop0): flushing journal and stopping allocators, journal seq 23 [ 230.589790][ T5861] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 23 [ 230.600645][ T5861] bcachefs (loop0): clean shutdown complete, journal seq 24 [ 230.609778][ T5861] bcachefs (loop0): done going read-only, filesystem not clean [ 230.632337][ T5861] bcachefs (loop0): shutdown complete umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x55557ab4f730 /* 2 entries */, 32768) = 48 getdents64(4, 0x55557ab4f730 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/file0") = 0 umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./30/binderfs") = 0 getdents64(3, 0x55557ab476f0 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557ab46650) = 6215 ./strace-static-x86_64: Process 6215 attached [pid 6215] set_robust_list(0x55557ab46660, 24) = 0 [pid 6215] chdir("./31") = 0 [pid 6215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6215] setpgid(0, 0) = 0 [pid 6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6215] write(3, "1000", 4) = 4 [pid 6215] close(3) = 0 [pid 6215] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6215] write(1, "executing program\n", 18) = 18 [pid 6215] memfd_create("syzkaller", 0) = 3 [pid 6215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdffb600000 [pid 6215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 6215] munmap(0x7fdffb600000, 138412032) = 0 [pid 6215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6215] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6215] close(3) = 0 [pid 6215] close(4) = 0 [pid 6215] mkdir("./file0", 0777) = 0 [ 232.159912][ T6215] loop0: detected capacity change from 0 to 32768 [ 232.252970][ T6215] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 232.252989][ T6215] allowing incompatible features above 0.0: (unknown version) [ 232.252998][ T6215] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 232.292526][ T6215] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 232.300816][ T6215] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 232.309073][ T6215] bcachefs (loop0): Version upgrade required: [ 232.309073][ T6215] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 232.309073][ T6215] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 232.309073][ T6215] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 232.393688][ T6215] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 232.393706][ T6215] gen 0 oldest_gen 0 data_type btree [ 232.393714][ T6215] journal_seq_nonempty 6 [ 232.393720][ T6215] journal_seq_empty 0 [ 232.393727][ T6215] need_discard 1 [ 232.393734][ T6215] need_inc_gen 1 [ 232.393741][ T6215] dirty_sectors 0 [ 232.393748][ T6215] stripe_sectors 1769482 [ 232.393755][ T6215] cached_sectors 0 [ 232.393762][ T6215] stripe 0 [ 232.393768][ T6215] stripe_redundancy 0 [ 232.393775][ T6215] io_time[READ] 1 [ 232.393782][ T6215] io_time[WRITE] 768 [ 232.393789][ T6215] fragmentation 0 [ 232.393796][ T6215] bp_start 7 [ 232.393803][ T6215] [ 232.393808][ T6215] invalid data type (got 3 should be 9), deleting [ 232.486024][ T6215] bcachefs (loop0): accounting_read... done [ 232.493137][ T6215] bcachefs (loop0): alloc_read... done [ 232.499967][ T6215] bcachefs (loop0): snapshots_read... done [ 232.506780][ T6215] bcachefs (loop0): check_allocations... [ 232.509038][ T6215] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 232.509053][ T6215] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 232.541675][ T6215] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 232.541691][ T6215] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 232.568151][ T6215] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 232.568167][ T6215] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 232.594546][ T6215] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 232.594573][ T6215] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 232.621273][ T6215] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 232.621289][ T6215] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 232.647533][ T6215] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 232.647549][ T6215] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 232.673203][ T6215] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 232.683288][ T6215] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 232.695155][ T6215] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 232.705166][ T6215] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 232.716824][ T6215] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 232.726855][ T6215] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 232.738383][ T6215] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 232.748417][ T6215] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 232.759901][ T6215] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 232.769997][ T6215] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 232.781410][ T6215] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 232.791421][ T6215] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 232.802804][ T6215] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 232.812812][ T6215] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 232.824190][ T6215] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 232.834180][ T6215] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 232.845385][ T6215] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 232.855875][ T6215] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 232.867696][ T6215] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 232.878218][ T6215] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 232.890334][ T6215] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 232.890349][ T6215] Ratelimiting new instances of previous error [ 232.907199][ T6215] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 232.907214][ T6215] Ratelimiting new instances of previous error [ 232.933304][ T6215] done [ 232.936522][ T6215] bcachefs (loop0): going read-write [ 232.945178][ T6215] bcachefs (loop0): journal_replay... done [ 232.980176][ T6215] bcachefs (loop0): check_alloc_info... done [ 232.989822][ T6215] bcachefs (loop0): check_lrus... done [ 232.995694][ T6215] bcachefs (loop0): check_btree_backpointers... done [ 233.003079][ T6215] bcachefs (loop0): check_backpointers_to_extents... done [ 233.012730][ T6215] bcachefs (loop0): check_extents_to_backpointers... [ 233.013655][ T6215] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 233.029153][ T6215] done [ 233.032601][ T6215] bcachefs (loop0): check_alloc_to_lru_refs... [ 233.033805][ T6215] bcachefs (loop0): missing fragmentation lru entry [ 233.033818][ T6215] u64s 12 type alloc_v4 0:34:0 len 0 ver 0: [ 233.033826][ T6215] gen 0 oldest_gen 0 data_type user [ 233.033833][ T6215] journal_seq_nonempty 5 [ 233.033840][ T6215] journal_seq_empty 134217728 [ 233.033847][ T6215] need_discard 1 [ 233.033854][ T6215] need_inc_gen 1 [ 233.033861][ T6215] dirty_sectors 16 [ 233.033867][ T6215] stripe_sectors 1802251 [ 233.033874][ T6215] cached_sectors 0 [ 233.033881][ T6215] stripe 0 [ 233.033888][ T6215] stripe_redundancy 0 [ 233.033894][ T6215] io_time[READ] 1 [ 233.033901][ T6215] io_time[WRITE] 512 [ 233.033908][ T6215] fragmentation 0 [ 233.033915][ T6215] bp_start 7 [ 233.033921][ T6215] , fixing [ 233.123456][ T6215] done [ 233.127429][ T6215] bcachefs (loop0): bucket_gens_init... done [ 233.139303][ T6215] bcachefs (loop0): check_snapshot_trees... done [ 233.145699][ T6215] bcachefs (loop0): check_snapshots... [ 233.146163][ T6215] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 233.146175][ T6215] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 233.178833][ T6215] done [ 233.182991][ T6215] bcachefs (loop0): check_subvols... done [ 233.189764][ T6215] bcachefs (loop0): check_subvol_children... done [ 233.196263][ T6215] bcachefs (loop0): delete_dead_snapshots... done [ 233.204258][ T6215] bcachefs (loop0): check_inodes... done [ 233.205392][ T6224] bcachefs (loop0): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 233.212162][ T6215] bcachefs (loop0): check_extents... [ 233.221833][ T6224] BUG: unable to handle page fault for address: ffffed120618f45c [ 233.222260][ T6215] done [ 233.227136][ T6224] #PF: supervisor read access in kernel mode [ 233.236663][ T6215] bcachefs (loop0): check_indirect_extents... [ 233.237650][ T6224] #PF: error_code(0x0000) - not-present page [ 233.244067][ T6215] done [ 233.249679][ T6224] PGD 23ffee067 P4D 23ffee067 PUD 0 [ 233.249716][ T6224] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 233.255877][ T6215] bcachefs (loop0): check_dirents... [ 233.258460][ T6224] CPU: 0 UID: 0 PID: 6224 Comm: bch-copygc/loop Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 233.265250][ T6215] done [ 233.269109][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.269130][ T6224] RIP: 0010:kasan_check_range+0x9b/0x2c0 [ 233.275030][ T6215] bcachefs (loop0): check_xattrs... [ 233.286827][ T6224] Code: 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb <41> 80 3b 00 0f 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 [ 233.286852][ T6224] RSP: 0018:ffffc90002f17528 EFLAGS: 00010286 [ 233.286872][ T6224] RAX: 0000000200000001 RBX: ffffffffffffffff RCX: ffffffff844716b1 [ 233.286888][ T6224] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff889030c7a2e0 [ 233.286901][ T6224] RBP: ffffc90002f17930 R08: ffff889030c7a2e7 R09: 1ffff1120618f45c [ 233.286916][ T6224] R10: dffffc0000000000 R11: ffffed120618f45c R12: 0000000000000001 [ 233.290808][ T6215] done [ 233.299732][ T6224] R13: dffffc0000000000 R14: ffffed120618f45d R15: 1ffff1120618f45c [ 233.299751][ T6224] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 233.299767][ T6224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.299781][ T6224] CR2: ffffed120618f45c CR3: 0000000022bdc000 CR4: 00000000003526f0 [ 233.305635][ T6215] bcachefs (loop0): check_root... [ 233.310613][ T6224] Call Trace: [ 233.310639][ T6224] [ 233.310650][ T6224] bch2_copygc+0xfb1/0x4380 [ 233.331443][ T6215] done [ 233.336346][ T6224] ? bch2_copygc+0x5ba/0x4380 [ 233.344657][ T6215] bcachefs (loop0): check_unreachable_inodes... [ 233.352284][ T6224] ? __lock_acquire+0xab9/0xd20 [ 233.352319][ T6224] ? __pfx_bch2_copygc+0x10/0x10 [ 233.352347][ T6224] ? bch2_copygc_wait_amount+0x424/0x490 [ 233.361020][ T6215] done [ 233.368313][ T6224] ? bch2_copygc_wait_amount+0x97/0x490 [ 233.368344][ T6224] ? __pfx_bch2_copygc_wait_amount+0x10/0x10 [ 233.371491][ T6215] bcachefs (loop0): check_subvolume_structure... [ 233.379079][ T6224] ? bch2_copygc+0x5ba/0x4380 [ 233.379115][ T6224] ? bch2_copygc+0x5ba/0x4380 [ 233.388465][ T6215] done [ 233.394635][ T6224] bch2_copygc_thread+0x97a/0xe00 [ 233.402940][ T6215] bcachefs (loop0): check_directory_structure... [ 233.407610][ T6224] ? bch2_copygc_thread+0x19e/0xe00 [ 233.411251][ T6215] done [ 233.413829][ T6224] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 233.418616][ T6215] bcachefs (loop0): check_nlinks... [ 233.421084][ T6224] ? bch2_copygc_thread+0x461/0xe00 [ 233.426316][ T6215] done [ 233.432020][ T6224] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 233.437436][ T6215] bcachefs (loop0): check_rebalance_work... [ 233.441820][ T6224] ? __kthread_parkme+0x7b/0x200 [ 233.441848][ T6224] ? __kthread_parkme+0x1a1/0x200 [ 233.441872][ T6224] kthread+0x711/0x8a0 [ 233.448151][ T6215] done [ 233.450256][ T6224] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 233.455795][ T6215] bcachefs (loop0): resume_logged_ops... [ 233.461761][ T6224] ? __pfx_kthread+0x10/0x10 [ 233.461790][ T6224] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.461818][ T6224] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.468982][ T6215] done [ 233.472800][ T6224] ? __pfx_kthread+0x10/0x10 [ 233.477474][ T6215] bcachefs (loop0): delete_dead_inodes... [ 233.480227][ T6224] ret_from_fork+0x3f9/0x770 [ 233.480249][ T6224] ? __pfx_ret_from_fork+0x10/0x10 [ 233.480270][ T6224] ? __switch_to_asm+0x39/0x70 [ 233.485936][ T6215] done [ 233.491604][ T6224] ? __switch_to_asm+0x33/0x70 [ 233.491631][ T6224] ? __pfx_kthread+0x10/0x10 [ 233.491657][ T6224] ret_from_fork_asm+0x1a/0x30 [ 233.497355][ T6215] bcachefs (loop0): set_fs_needs_rebalance... [ 233.499617][ T6224] [ 233.499629][ T6224] Modules linked in: [ 233.499656][ T6224] CR2: ffffed120618f45c [ 233.511475][ T6215] done [ 233.515573][ T6224] ---[ end trace 0000000000000000 ]--- [ 233.643354][ T6224] RIP: 0010:kasan_check_range+0x9b/0x2c0 [ 233.649022][ T6224] Code: 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb <41> 80 3b 00 0f 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 [ 233.668632][ T6224] RSP: 0018:ffffc90002f17528 EFLAGS: 00010286 [ 233.674709][ T6224] RAX: 0000000200000001 RBX: ffffffffffffffff RCX: ffffffff844716b1 [ 233.682769][ T6224] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff889030c7a2e0 [ 233.690750][ T6224] RBP: ffffc90002f17930 R08: ffff889030c7a2e7 R09: 1ffff1120618f45c [ 233.698821][ T6224] R10: dffffc0000000000 R11: ffffed120618f45c R12: 0000000000000001 [ 233.706825][ T6224] R13: dffffc0000000000 R14: ffffed120618f45d R15: 1ffff1120618f45c [ 233.714809][ T6224] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 233.723744][ T6224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.730350][ T6224] CR2: ffffed120618f45c CR3: 0000000022bdc000 CR4: 00000000003526f0 [ 233.738330][ T6224] Kernel panic - not syncing: Fatal exception [ 233.744745][ T6224] Kernel Offset: disabled [ 233.749078][ T6224] Rebooting in 86400 seconds.. [pid 6215] mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff"