./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1738973358 <...> Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. execve("./syz-executor1738973358", ["./syz-executor1738973358"], 0x7ffe9bed5560 /* 10 vars */) = 0 brk(NULL) = 0x55558fa61000 brk(0x55558fa61d00) = 0x55558fa61d00 arch_prctl(ARCH_SET_FS, 0x55558fa61380) = 0 set_tid_address(0x55558fa61650) = 5831 set_robust_list(0x55558fa61660, 24) = 0 rseq(0x55558fa61ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1738973358", 4096) = 28 getrandom("\xbf\xa8\x9e\x47\x7e\xe6\x6d\x7d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558fa61d00 brk(0x55558fa82d00) = 0x55558fa82d00 brk(0x55558fa83000) = 0x55558fa83000 mprotect(0x7fac439b2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 executing program write(1, "executing program\n", 18) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fac3b400000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7fac3b400000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 [ 64.105988][ T5831] loop0: detected capacity change from 0 to 32768 [ 64.193004][ T5831] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 64.214448][ T5831] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 64.222862][ T5831] bcachefs (loop0): Version upgrade required: [ 64.222862][ T5831] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 64.222862][ T5831] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 64.222862][ T5831] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 64.296318][ T5831] bcachefs (loop0): dropping and reconstructing all alloc info [ 64.308779][ T5831] invalid bkey u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: (unpack error) [ 64.308797][ T5831] invalid variable length fields: delete?, fixing [ 64.329055][ T5831] bcachefs (loop0): check_topology... done [ 64.335044][ T5831] bcachefs (loop0): accounting_read... done [ 64.342307][ T5831] bcachefs (loop0): alloc_read... done [ 64.347848][ T5831] bcachefs (loop0): stripes_read... done [ 64.353613][ T5831] bcachefs (loop0): snapshots_read... done [ 64.359864][ T5831] bcachefs (loop0): check_allocations... done [ 64.380021][ T5831] bcachefs (loop0): going read-write mount("/dev/loop0", "./file0", "bcachefs", MS_POSIXACL, "fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,sure_code,acl,"...) = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_CLR_FD) = 0 [ 64.391386][ T5831] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 64.403434][ T5831] bcachefs (loop0): done starting filesystem close(4) = 0 [ 64.462536][ T5831] ------------[ cut here ]------------ [ 64.468180][ T5831] kernel BUG at fs/bcachefs/bkey_cmp.h:104! [ 64.474296][ T5831] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 64.481271][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor173 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 64.492381][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.502429][ T5831] RIP: 0010:bch2_bkey_cmp_packed+0xc9c/0xcb0 [ 64.508401][ T5831] Code: 1a 45 b0 07 e8 65 78 86 fd 90 0f 0b e8 5d 78 86 fd 90 0f 0b e8 55 78 86 fd 90 0f 0b e8 4d 78 86 fd 90 0f 0b e8 45 78 86 fd 90 <0f> 0b e8 3d 78 86 fd 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 64.528005][ T5831] RSP: 0018:ffffc9000364cf00 EFLAGS: 00010293 [ 64.534069][ T5831] RAX: ffffffff840e61bb RBX: 1ffff920006c99e8 RCX: ffff88807dfa0000 [ 64.542037][ T5831] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001 [ 64.550001][ T5831] RBP: ffffc9000364d090 R08: ffffffff840e5a5e R09: 0000000000000000 [ 64.557963][ T5831] R10: ffffc9000364cfa0 R11: fffff520006c99f6 R12: 0000000000000001 [ 64.565927][ T5831] R13: ffffffffffffffff R14: 0000000000000000 R15: ffffc9000364cfa0 [ 64.573892][ T5831] FS: 000055558fa61380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 64.582817][ T5831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.589395][ T5831] CR2: 00007fff84920978 CR3: 00000000282e8000 CR4: 00000000003526f0 [ 64.597366][ T5831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.605329][ T5831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.613299][ T5831] Call Trace: [ 64.616571][ T5831] [ 64.619495][ T5831] ? __die_body+0x5f/0xb0 [ 64.623819][ T5831] ? die+0x9e/0xc0 [ 64.627539][ T5831] ? do_trap+0x15a/0x3a0 [ 64.631779][ T5831] ? bch2_bkey_cmp_packed+0xc9c/0xcb0 [ 64.637148][ T5831] ? do_error_trap+0x1dc/0x2c0 [ 64.641908][ T5831] ? bch2_bkey_cmp_packed+0xc9c/0xcb0 [ 64.647277][ T5831] ? __pfx_do_error_trap+0x10/0x10 [ 64.652383][ T5831] ? report_bug+0x3e8/0x500 [ 64.656889][ T5831] ? handle_invalid_op+0x34/0x40 [ 64.661817][ T5831] ? bch2_bkey_cmp_packed+0xc9c/0xcb0 [ 64.667214][ T5831] ? exc_invalid_op+0x38/0x50 [ 64.671893][ T5831] ? asm_exc_invalid_op+0x1a/0x20 [ 64.676913][ T5831] ? bch2_bkey_cmp_packed+0x53e/0xcb0 [ 64.682281][ T5831] ? bch2_bkey_cmp_packed+0xc9b/0xcb0 [ 64.687651][ T5831] ? bch2_bkey_cmp_packed+0xc9c/0xcb0 [ 64.693018][ T5831] ? __pfx_bch2_bkey_cmp_packed+0x10/0x10 [ 64.698733][ T5831] ? __bkey_unpack_pos+0x4da/0x790 [ 64.703845][ T5831] ? __bch2_bkey_cmp_left_packed+0x1b3/0x790 [ 64.709818][ T5831] ? bch2_btree_path_verify_level+0x369/0x1970 [ 64.715972][ T5831] ? bch2_bkey_pack_pos_lossy+0xb19/0x1990 [ 64.721776][ T5831] bch2_bkey_pack_pos_lossy+0xc94/0x1990 [ 64.727410][ T5831] ? __pfx_bch2_bkey_pack_pos_lossy+0x10/0x10 [ 64.733473][ T5831] ? __pfx_bch2_btree_node_iter_init+0x10/0x10 [ 64.739628][ T5831] ? __pfx___do_six_trylock+0x10/0x10 [ 64.744995][ T5831] ? bch2_btree_node_iter_init+0x841/0x4280 [ 64.750882][ T5831] bch2_btree_node_iter_init+0x894/0x4280 [ 64.756601][ T5831] ? __pfx_bch2_btree_path_verify_level+0x10/0x10 [ 64.763014][ T5831] ? __pfx_bch2_btree_node_iter_init+0x10/0x10 [ 64.769165][ T5831] ? __pfx_bch2_btree_path_verify_level+0x10/0x10 [ 64.775603][ T5831] ? __pfx___do_six_trylock+0x10/0x10 [ 64.780996][ T5831] ? __btree_path_up_until_good_node+0xafb/0xb40 [ 64.787336][ T5831] bch2_btree_path_level_init+0x4d2/0x9f0 [ 64.793054][ T5831] ? bch2_btree_path_traverse_one+0xa4b/0x2940 [ 64.799206][ T5831] bch2_btree_path_traverse_one+0x10de/0x2940 [ 64.805294][ T5831] ? bchfs_read+0x988/0x2be0 [ 64.809895][ T5831] ? __pfx_bch2_btree_path_traverse_one+0x10/0x10 [ 64.816315][ T5831] ? __bch2_btree_path_set_pos+0xbfa/0x1710 [ 64.822207][ T5831] ? bchfs_read+0x35d/0x2be0 [ 64.826790][ T5831] ? __pfx___bch2_btree_path_set_pos+0x10/0x10 [ 64.832958][ T5831] ? __pfx_bch2_trans_iter_init_outlined+0x10/0x10 [ 64.839457][ T5831] ? bch2_btree_path_verify+0x1fd/0x300 [ 64.844998][ T5831] bch2_btree_iter_peek_slot+0x84f/0x2550 [ 64.850718][ T5831] ? bchfs_read+0x35d/0x2be0 [ 64.855304][ T5831] ? __pfx_bch2_btree_iter_peek_slot+0x10/0x10 [ 64.861453][ T5831] ? bch2_trans_iter_exit+0x16f/0x230 [ 64.866827][ T5831] ? __bch2_subvolume_get_snapshot+0x2d2/0x430 [ 64.872975][ T5831] ? __pfx___bch2_subvolume_get_snapshot+0x10/0x10 [ 64.879475][ T5831] ? __bch2_bkey_get_iter+0x101/0x2a0 [ 64.884840][ T5831] ? __kernel_read+0x513/0x9d0 [ 64.889696][ T5831] ? integrity_kernel_read+0xb0/0x100 [ 64.895070][ T5831] ? ima_calc_file_hash+0xae6/0x1b30 [ 64.900354][ T5831] ? ima_collect_measurement+0x520/0xb10 [ 64.906006][ T5831] ? process_measurement+0x1351/0x1fb0 [ 64.911460][ T5831] ? do_filp_open+0x235/0x490 [ 64.916131][ T5831] ? do_sys_openat2+0x13e/0x1d0 [ 64.920973][ T5831] ? __x64_sys_openat+0x247/0x2a0 [ 64.925988][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.932051][ T5831] ? bchfs_read+0x4ac/0x2be0 [ 64.936636][ T5831] bchfs_read+0x988/0x2be0 [ 64.941055][ T5831] ? __pfx_bchfs_read+0x10/0x10 [ 64.945896][ T5831] ? mempool_alloc_noprof+0x1a6/0x5a0 [ 64.951266][ T5831] ? bchfs_read+0x35d/0x2be0 [ 64.955863][ T5831] ? bio_alloc_bioset+0x80e/0x1130 [ 64.960974][ T5831] bch2_readahead+0x1154/0x1930 [ 64.965824][ T5831] ? __pfx_bch2_readahead+0x10/0x10 [ 64.971013][ T5831] ? rcu_is_watching+0x15/0xb0 [ 64.975770][ T5831] ? __filemap_add_folio+0x1150/0x1b90 [ 64.981230][ T5831] ? blk_start_plug+0x70/0x1b0 [ 64.985989][ T5831] read_pages+0x17e/0x840 [ 64.990317][ T5831] ? __pfx_read_pages+0x10/0x10 [ 64.995165][ T5831] ? filemap_add_folio+0x26d/0x650 [ 65.000272][ T5831] ? __pfx_filemap_add_folio+0x10/0x10 [ 65.005730][ T5831] page_cache_ra_order+0xb00/0xdb0 [ 65.010844][ T5831] filemap_get_pages+0x621/0x2540 [ 65.015861][ T5831] ? unwind_next_frame+0x18e6/0x22d0 [ 65.021158][ T5831] ? __pfx_filemap_get_pages+0x10/0x10 [ 65.026617][ T5831] ? __lock_acquire+0x1384/0x2050 [ 65.031638][ T5831] ? __pfx___might_resched+0x10/0x10 [ 65.036923][ T5831] filemap_read+0x454/0xf90 [ 65.041420][ T5831] ? allocate_slab+0x5a/0x2f0 [ 65.046103][ T5831] ? __pfx_filemap_read+0x10/0x10 [ 65.051128][ T5831] ? unwind_next_frame+0x18e6/0x22d0 [ 65.056426][ T5831] bch2_read_iter+0x1122/0x1470 [ 65.061275][ T5831] ? is_bpf_text_address+0x26/0x2a0 [ 65.066468][ T5831] ? kernel_text_address+0xa7/0xe0 [ 65.071578][ T5831] ? __kernel_text_address+0xd/0x40 [ 65.076774][ T5831] ? unwind_get_return_address+0x4d/0x90 [ 65.082411][ T5831] ? arch_stack_walk+0xfd/0x150 [ 65.087269][ T5831] ? __pfx_bch2_read_iter+0x10/0x10 [ 65.092465][ T5831] ? stack_trace_save+0x118/0x1d0 [ 65.097486][ T5831] ? __pfx_stack_trace_save+0x10/0x10 [ 65.102850][ T5831] ? stack_depot_save_flags+0x29/0x830 [ 65.108305][ T5831] ? kasan_save_track+0x51/0x80 [ 65.113157][ T5831] ? iov_iter_kvec+0x4e/0x180 [ 65.117830][ T5831] __kernel_read+0x513/0x9d0 [ 65.122417][ T5831] ? do_sys_openat2+0x13e/0x1d0 [ 65.127262][ T5831] ? __pfx___kernel_read+0x10/0x10 [ 65.132371][ T5831] integrity_kernel_read+0xb0/0x100 [ 65.137566][ T5831] ? __pfx_integrity_kernel_read+0x10/0x10 [ 65.143366][ T5831] ? ima_calc_file_hash+0xaae/0x1b30 [ 65.148646][ T5831] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 65.154183][ T5831] ima_calc_file_hash+0xae6/0x1b30 [ 65.159294][ T5831] ? rcu_is_watching+0x15/0xb0 [ 65.164075][ T5831] ? __bch2_err_class+0x1d7/0x380 [ 65.169113][ T5831] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 65.174655][ T5831] ? bch2_xattr_get_handler+0x1310/0x1440 [ 65.180379][ T5831] ? arch_stack_walk+0xfd/0x150 [ 65.185223][ T5831] ? __pfx_register_lock_class+0x10/0x10 [ 65.190855][ T5831] ? mark_lock+0x9a/0x360 [ 65.195178][ T5831] ? make_vfsgid+0x51/0xa0 [ 65.199586][ T5831] ? bch2_getattr+0x98e/0xd90 [ 65.204260][ T5831] ? __pfx_bch2_getattr+0x10/0x10 [ 65.209294][ T5831] ? __asan_memset+0x23/0x50 [ 65.213895][ T5831] ima_collect_measurement+0x520/0xb10 [ 65.219374][ T5831] ? __pfx_ima_collect_measurement+0x10/0x10 [ 65.225355][ T5831] ? __mutex_trylock_common+0x183/0x2e0 [ 65.230911][ T5831] ? ima_get_hash_algo+0x156/0x4d0 [ 65.236015][ T5831] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 65.241471][ T5831] process_measurement+0x1351/0x1fb0 [ 65.246758][ T5831] ? __pfx_process_measurement+0x10/0x10 [ 65.252396][ T5831] ? bch2_trans_put+0x95f/0xf00 [ 65.257245][ T5831] ? bch2_subvol_is_ro+0xd7/0x130 [ 65.262288][ T5831] ima_file_check+0xf2/0x170 [ 65.266890][ T5831] ? __pfx_ima_file_check+0x10/0x10 [ 65.272096][ T5831] security_file_post_open+0xb9/0x280 [ 65.277473][ T5831] path_openat+0x2ccd/0x3590 [ 65.282069][ T5831] ? __pfx_path_openat+0x10/0x10 [ 65.287008][ T5831] do_filp_open+0x235/0x490 [ 65.291506][ T5831] ? __pfx_do_filp_open+0x10/0x10 [ 65.296533][ T5831] ? _raw_spin_unlock+0x28/0x50 [ 65.301383][ T5831] ? alloc_fd+0x5a1/0x640 [ 65.305711][ T5831] do_sys_openat2+0x13e/0x1d0 [ 65.310382][ T5831] ? __pfx_do_sys_openat2+0x10/0x10 [ 65.315574][ T5831] ? lockdep_hardirqs_on+0x99/0x150 [ 65.320767][ T5831] ? _raw_spin_unlock_irq+0x2e/0x50 [ 65.325960][ T5831] ? ptrace_notify+0x279/0x380 [ 65.330723][ T5831] __x64_sys_openat+0x247/0x2a0 [ 65.335572][ T5831] ? __pfx___x64_sys_openat+0x10/0x10 [ 65.340938][ T5831] ? do_syscall_64+0x100/0x230 [ 65.345698][ T5831] do_syscall_64+0xf3/0x230 [ 65.350212][ T5831] ? clear_bhb_loop+0x35/0x90 [ 65.354897][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.360793][ T5831] RIP: 0033:0x7fac439399b9 [ 65.365224][ T5831] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 65.384836][ T5831] RSP: 002b:00007ffdd0faccd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.393253][ T5831] RAX: ffffffffffffffda RBX: 00007ffdd0faceb8 RCX: 00007fac439399b9 [ 65.401227][ T5831] RDX: 0000000000000042 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 65.409190][ T5831] RBP: 00007fac439b2610 R08: 0000000000005959 R09: 0000000000000000 [ 65.417154][ T5831] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 65.425119][ T5831] R13: 00007ffdd0facea8 R14: 0000000000000001 R15: 0000000000000001 [ 65.433092][ T5831] [ 65.436101][ T5831] Modules linked in: [ 65.440320][ T5831] ---[ end trace 0000000000000000 ]--- [ 65.445850][ T5831] RIP: 0010:bch2_bkey_cmp_packed+0xc9c/0xcb0 [ 65.452450][ T5831] Code: 1a 45 b0 07 e8 65 78 86 fd 90 0f 0b e8 5d 78 86 fd 90 0f 0b e8 55 78 86 fd 90 0f 0b e8 4d 78 86 fd 90 0f 0b e8 45 78 86 fd 90 <0f> 0b e8 3d 78 86 fd 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 65.472175][ T5831] RSP: 0018:ffffc9000364cf00 EFLAGS: 00010293 [ 65.478252][ T5831] RAX: ffffffff840e61bb RBX: 1ffff920006c99e8 RCX: ffff88807dfa0000 [ 65.486259][ T5831] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001 [ 65.494284][ T5831] RBP: ffffc9000364d090 R08: ffffffff840e5a5e R09: 0000000000000000 [ 65.502300][ T5831] R10: ffffc9000364cfa0 R11: fffff520006c99f6 R12: 0000000000000001 [ 65.510323][ T5831] R13: ffffffffffffffff R14: 0000000000000000 R15: ffffc9000364cfa0 [ 65.520844][ T5831] FS: 000055558fa61380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 65.529913][ T5831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.536592][ T5831] CR2: 00007fff84920978 CR3: 00000000282e8000 CR4: 00000000003526f0 [ 65.544626][ T5831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.552654][ T5831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.560657][ T5831] Kernel panic - not syncing: Fatal exception [ 65.567086][ T5831] Kernel Offset: disabled [ 65.571411][ T5831] Rebooting in 86400 seconds..