./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1940445749 <...> Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. execve("./syz-executor1940445749", ["./syz-executor1940445749"], 0x7ffc9f918cc0 /* 10 vars */) = 0 brk(NULL) = 0x55555871b000 brk(0x55555871bd00) = 0x55555871bd00 arch_prctl(ARCH_SET_FS, 0x55555871b380) = 0 set_tid_address(0x55555871b650) = 5825 set_robust_list(0x55555871b660, 24) = 0 rseq(0x55555871bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1940445749", 4096) = 28 getrandom("\x8c\x81\x8e\xad\xf5\x7d\xf5\x94", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555871bd00 brk(0x55555873cd00) = 0x55555873cd00 brk(0x55555873d000) = 0x55555873d000 mprotect(0x7fa155fe5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5826 attached [pid 5826] set_robust_list(0x55555871b660, 24) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55555871b650) = 5826 [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] setpgid(0, 0) = 0 [pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] write(3, "1000", 4) = 4 [pid 5826] close(3) = 0 executing program [pid 5826] write(1, "executing program\n", 18) = 18 [pid 5826] memfd_create("syzkaller", 0) = 3 [pid 5826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa14da00000 [pid 5826] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5826] munmap(0x7fa14da00000, 138412032) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5826] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5826] close(3) = 0 [pid 5826] close(4) = 0 [pid 5826] mkdir("./file0", 0777) = 0 [ 60.289656][ T5826] loop0: detected capacity change from 0 to 32768 [ 60.327220][ T5826] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 60.377106][ T5826] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,version_upgrade=none [ 60.394341][ T5826] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 60.402703][ T5826] bcachefs (loop0): Version upgrade required: [ 60.402703][ T5826] Version upgrade from 0.19: freespace to 1.7: mi_btree_bitmap incomplete [ 60.402703][ T5826] Doing incompatible version upgrade from 0.19: freespace to 1.13: inode_has_child_snapshots [ 60.402703][ T5826] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 60.480258][ T5826] invalid bkey u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: -> 536870914 type (bad d_type) [ 60.480277][ T5826] dirent has stray data after name's NUL: delete?, fixing [ 60.513130][ T5826] invalid bkey u64s 11 type alloc_v4 0:7:0 len 0 ver 0: [ 60.513144][ T5826] gen 0 oldest_gen 0 data_type sb [ 60.513150][ T5826] journal_seq 1 [ 60.513155][ T5826] need_discard 1 [ 60.513160][ T5826] need_inc_gen 1 [ 60.513166][ T5826] dirty_sectors 256 [ 60.513171][ T5826] stripe_sectors 0 [ 60.513176][ T5826] cached_sectors 0 [ 60.513181][ T5826] stripe 0 [ 60.513186][ T5826] stripe_redundancy 0 [ 60.513192][ T5826] io_time[READ] 8863084066665136129 [ 60.513197][ T5826] io_time[WRITE] 8 [ 60.513202][ T5826] fragmentation 0 [ 60.513207][ T5826] bp_start 8 [ 60.513213][ T5826] [ 60.513218][ T5826] invalid io_time[read]: 8863084066665136129, max 281474976710655: deleting [ 60.593617][ T5826] bcachefs (loop0): accounting_read... done [ 60.600755][ T5826] bcachefs (loop0): alloc_read... done [ 60.606541][ T5826] bcachefs (loop0): stripes_read... done [ 60.612208][ T5826] bcachefs (loop0): snapshots_read... [ 60.612432][ T5826] ------------[ cut here ]------------ [ 60.623437][ T5826] kernel BUG at fs/bcachefs/bkey.c:297! [ 60.629087][ T5826] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 60.636043][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor194 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 60.647138][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 60.657188][ T5826] RIP: 0010:__bkey_unpack_pos+0x779/0x790 [ 60.662930][ T5826] Code: 6c df 00 e9 ad fb ff ff e8 c4 e7 86 fd 48 c7 c7 c0 9c f3 8e 4c 89 e6 48 89 da e8 c2 6c df 00 e9 f4 fc ff ff e8 a8 e7 86 fd 90 <0f> 0b e8 a0 e7 86 fd 90 0f 0b e8 98 e7 86 fd 90 0f 0b 0f 1f 44 00 [ 60.682537][ T5826] RSP: 0018:ffffc90003ede340 EFLAGS: 00010293 [ 60.688602][ T5826] RAX: ffffffff840df258 RBX: 0000000000000001 RCX: ffff888023c38000 [ 60.696560][ T5826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 60.704517][ T5826] RBP: 0000000000000000 R08: ffffffff840deb88 R09: 0000000000000000 [ 60.712477][ T5826] R10: ffffc90003ede3e0 R11: fffff520007dbc7e R12: ffffc90003ede3e0 [ 60.720430][ T5826] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90003ede820 [ 60.728385][ T5826] FS: 000055555871b380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 60.737309][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.743885][ T5826] CR2: 00005595930e0000 CR3: 00000000598fa000 CR4: 00000000003526f0 [ 60.751849][ T5826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.759817][ T5826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.767779][ T5826] Call Trace: [ 60.771051][ T5826] [ 60.773972][ T5826] ? __die_body+0x5f/0xb0 [ 60.778295][ T5826] ? die+0x9e/0xc0 [ 60.782006][ T5826] ? do_trap+0x15a/0x3a0 [ 60.786243][ T5826] ? __bkey_unpack_pos+0x779/0x790 [ 60.791350][ T5826] ? do_error_trap+0x1dc/0x2c0 [ 60.796124][ T5826] ? __bkey_unpack_pos+0x779/0x790 [ 60.801247][ T5826] ? __pfx_do_error_trap+0x10/0x10 [ 60.806375][ T5826] ? handle_invalid_op+0x34/0x40 [ 60.811328][ T5826] ? __bkey_unpack_pos+0x779/0x790 [ 60.816447][ T5826] ? exc_invalid_op+0x38/0x50 [ 60.821135][ T5826] ? asm_exc_invalid_op+0x1a/0x20 [ 60.826157][ T5826] ? __bkey_unpack_pos+0xa8/0x790 [ 60.831172][ T5826] ? __bkey_unpack_pos+0x778/0x790 [ 60.836281][ T5826] ? __bkey_unpack_pos+0x779/0x790 [ 60.841386][ T5826] ? validate_chain+0x11e/0x5920 [ 60.846315][ T5826] __bch2_bkey_cmp_left_packed+0xed/0x790 [ 60.852034][ T5826] ? bch2_bkey_pack_pos_lossy+0xa20/0x1990 [ 60.857838][ T5826] ? __pfx___bch2_bkey_cmp_left_packed+0x10/0x10 [ 60.864163][ T5826] ? bch2_bkey_pack_pos_lossy+0x122/0x1990 [ 60.869983][ T5826] bch2_bkey_pack_pos_lossy+0xa08/0x1990 [ 60.875636][ T5826] ? __pfx_bch2_bkey_pack_pos_lossy+0x10/0x10 [ 60.881705][ T5826] ? lock_release+0xbf/0xa30 [ 60.886298][ T5826] ? bch2_bkey_pack_pos_lossy+0x122/0x1990 [ 60.892106][ T5826] ? bch2_bkey_pack_pos_lossy+0xa20/0x1990 [ 60.897909][ T5826] ? bch2_btree_node_iter_init+0x841/0x4280 [ 60.903790][ T5826] bch2_btree_node_iter_init+0x894/0x4280 [ 60.909507][ T5826] ? __pfx_validate_chain+0x10/0x10 [ 60.914696][ T5826] ? __pfx_bch2_btree_node_iter_init+0x10/0x10 [ 60.920841][ T5826] ? look_up_lock_class+0x77/0x170 [ 60.925946][ T5826] ? __pfx___do_six_trylock+0x10/0x10 [ 60.931310][ T5826] ? __btree_path_up_until_good_node+0xafb/0xb40 [ 60.937639][ T5826] bch2_btree_path_level_init+0x4d2/0x9f0 [ 60.943351][ T5826] ? bch2_btree_path_traverse_one+0xa4b/0x2940 [ 60.949500][ T5826] bch2_btree_path_traverse_one+0x10de/0x2940 [ 60.955564][ T5826] ? __pfx_validate_chain+0x10/0x10 [ 60.960758][ T5826] ? bch2_snapshots_read+0x4ac/0x15f0 [ 60.966142][ T5826] ? __pfx_bch2_btree_path_traverse_one+0x10/0x10 [ 60.972584][ T5826] ? __pfx___might_resched+0x10/0x10 [ 60.977898][ T5826] ? bch2_trans_update_max_paths+0x2c8/0x420 [ 60.983900][ T5826] ? __pfx_lock_release+0x10/0x10 [ 60.989117][ T5826] ? btree_trans_verify_sorted_refs+0x492/0x560 [ 60.995357][ T5826] ? mark_lock+0x9a/0x360 [ 60.999679][ T5826] ? __lock_acquire+0x1384/0x2050 [ 61.004732][ T5826] ? bch2_btree_path_verify+0x1fd/0x300 [ 61.010271][ T5826] bch2_btree_iter_peek_upto+0xb58/0x70e0 [ 61.015999][ T5826] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 61.021883][ T5826] ? lockdep_hardirqs_on+0x99/0x150 [ 61.027073][ T5826] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 61.032953][ T5826] ? __pfx_bch2_btree_iter_peek_upto+0x10/0x10 [ 61.039101][ T5826] ? __bch2_time_stats_update+0x2ca/0x370 [ 61.044811][ T5826] ? bch2_trans_begin+0x16c1/0x1c00 [ 61.050008][ T5826] ? bch2_snapshots_read+0x453/0x15f0 [ 61.055376][ T5826] bch2_snapshots_read+0x4ac/0x15f0 [ 61.060568][ T5826] ? bch2_snapshots_read+0x1b0/0x15f0 [ 61.065933][ T5826] ? __pfx_bch2_snapshots_read+0x10/0x10 [ 61.071556][ T5826] ? irq_work_queue+0xd1/0x150 [ 61.076313][ T5826] ? __wake_up_klogd+0xd5/0x110 [ 61.081156][ T5826] ? vprintk_emit+0x7ed/0xa10 [ 61.085823][ T5826] ? __pfx_vprintk_emit+0x10/0x10 [ 61.090846][ T5826] ? __pfx_lock_release+0x10/0x10 [ 61.095879][ T5826] ? bch2_snapshots_read+0x1b0/0x15f0 [ 61.101256][ T5826] ? __bch2_print+0x17a/0x220 [ 61.105927][ T5826] ? __mutex_unlock_slowpath+0x21d/0x750 [ 61.111552][ T5826] ? bch2_run_recovery_pass+0x6d/0x1e0 [ 61.117001][ T5826] ? __pfx___bch2_print+0x10/0x10 [ 61.122023][ T5826] bch2_run_recovery_pass+0xf0/0x1e0 [ 61.127297][ T5826] bch2_run_recovery_passes+0x3a7/0x880 [ 61.132835][ T5826] bch2_fs_recovery+0x25cc/0x39d0 [ 61.137862][ T5826] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 61.143232][ T5826] ? __pfx_lock_release+0x10/0x10 [ 61.148251][ T5826] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 61.153876][ T5826] ? __pfx_lock_release+0x10/0x10 [ 61.158897][ T5826] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 61.164519][ T5826] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 61.170228][ T5826] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 61.175856][ T5826] ? llist_reverse_order+0x72/0x90 [ 61.180965][ T5826] bch2_fs_start+0x356/0x5b0 [ 61.185551][ T5826] bch2_fs_get_tree+0xd68/0x1710 [ 61.190491][ T5826] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 61.195869][ T5826] ? generic_parse_monolithic+0x387/0x400 [ 61.201591][ T5826] ? cap_capable+0x1b4/0x250 [ 61.206174][ T5826] ? safesetid_security_capable+0xb2/0x1d0 [ 61.211979][ T5826] vfs_get_tree+0x90/0x2b0 [ 61.216407][ T5826] do_new_mount+0x2be/0xb40 [ 61.220933][ T5826] ? __pfx_do_new_mount+0x10/0x10 [ 61.225969][ T5826] __se_sys_mount+0x2d6/0x3c0 [ 61.230650][ T5826] ? __pfx___se_sys_mount+0x10/0x10 [ 61.235843][ T5826] ? do_syscall_64+0x100/0x230 [ 61.240611][ T5826] ? __x64_sys_mount+0x20/0xc0 [ 61.245373][ T5826] do_syscall_64+0xf3/0x230 [ 61.249874][ T5826] ? clear_bhb_loop+0x35/0x90 [ 61.254550][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.260437][ T5826] RIP: 0033:0x7fa155f6d1aa [ 61.264866][ T5826] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 61.284460][ T5826] RSP: 002b:00007ffdd2812398 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 61.292869][ T5826] RAX: ffffffffffffffda RBX: 00007ffdd28123b0 RCX: 00007fa155f6d1aa [ 61.300832][ T5826] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007ffdd28123b0 [ 61.308795][ T5826] RBP: 0000000000000004 R08: 00007ffdd28123f0 R09: 0000000000005946 [ 61.316755][ T5826] R10: 0000000001000000 R11: 0000000000000282 R12: 0000000001000000 [ 61.324714][ T5826] R13: 00007ffdd28123f0 R14: 0000000000000003 R15: 0000000001000000 [ 61.332691][ T5826] [ 61.335698][ T5826] Modules linked in: [ 61.339754][ T5826] ---[ end trace 0000000000000000 ]--- [ 61.345447][ T5826] RIP: 0010:__bkey_unpack_pos+0x779/0x790 [ 61.351243][ T5826] Code: 6c df 00 e9 ad fb ff ff e8 c4 e7 86 fd 48 c7 c7 c0 9c f3 8e 4c 89 e6 48 89 da e8 c2 6c df 00 e9 f4 fc ff ff e8 a8 e7 86 fd 90 <0f> 0b e8 a0 e7 86 fd 90 0f 0b e8 98 e7 86 fd 90 0f 0b 0f 1f 44 00 [ 61.371108][ T5826] RSP: 0018:ffffc90003ede340 EFLAGS: 00010293 [ 61.377238][ T5826] RAX: ffffffff840df258 RBX: 0000000000000001 RCX: ffff888023c38000 [ 61.385219][ T5826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 61.393240][ T5826] RBP: 0000000000000000 R08: ffffffff840deb88 R09: 0000000000000000 [ 61.401236][ T5826] R10: ffffc90003ede3e0 R11: fffff520007dbc7e R12: ffffc90003ede3e0 [ 61.409242][ T5826] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90003ede820 [ 61.417246][ T5826] FS: 000055555871b380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 61.426216][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.432807][ T5826] CR2: 00005595930e0000 CR3: 00000000598fa000 CR4: 00000000003526f0 [ 61.440809][ T5826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.448892][ T5826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.456920][ T5826] Kernel panic - not syncing: Fatal exception [ 61.463244][ T5826] Kernel Offset: disabled [ 61.467564][ T5826] Rebooting in 86400 seconds..