./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor91522449 <...> Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. execve("./syz-executor91522449", ["./syz-executor91522449"], 0x7ffc0385af20 /* 10 vars */) = 0 brk(NULL) = 0x555583fa8000 brk(0x555583fa8d00) = 0x555583fa8d00 arch_prctl(ARCH_SET_FS, 0x555583fa8380) = 0 set_tid_address(0x555583fa8650) = 5824 set_robust_list(0x555583fa8660, 24) = 0 rseq(0x555583fa8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor91522449", 4096) = 26 getrandom("\x46\x5c\x8f\x7f\x23\x88\x5d\xaa", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555583fa8d00 brk(0x555583fc9d00) = 0x555583fc9d00 brk(0x555583fca000) = 0x555583fca000 mprotect(0x7f4309e9c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4301800000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f4301800000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 [ 79.579502][ T5824] loop0: detected capacity change from 0 to 32768 [ 79.625856][ T5824] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 79.681981][ T5824] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 79.700283][ T5824] invalid bkey u64s 11 type cookie SPOS_MAX len 0 ver 0: 0 [ 79.700306][ T5824] invalid key type for btree internal btree node (cookie): delete?, fixing [ 79.716909][ T5824] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 79.725418][ T5824] bcachefs (loop0): Version upgrade required: [ 79.725418][ T5824] Version upgrade from 0.10: bkey_renumber to 1.7: mi_btree_bitmap incomplete [ 79.725418][ T5824] Doing incompatible version upgrade from 0.10: bkey_renumber to 1.13: inode_has_child_snapshots [ 79.725418][ T5824] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 79.804064][ T5824] invalid bkey u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0: (unpack error) [ 79.804092][ T5824] invalid variable length fields: delete?, fixing [ 79.821312][ T5824] bcachefs (loop0): error validating btree node on loop0 at btree dirents level 0/0 [ 79.821330][ T5824] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 79.821342][ T5824] node offset 8/24: btree node data missing: expected 24 sectors, found 8, fixing [ 79.854393][ T5824] bcachefs (loop0): btree_node_read_work: rewriting btree node at btree=dirents level=0 SPOS_MAX due to error [ 79.867821][ T5824] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 79.867838][ T5824] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 61441 min_key R 0:0:U32_MAX durability: 1 ptr: 0:31:0 gen 0 [ 79.867850][ T5824] node offset 16/61441: btree node data missing: expected 61441 sectors, found 16, fixing [ 79.902479][ T5824] bcachefs (loop0): btree_node_read_work: rewriting btree node at btree=xattrs level=0 SPOS_MAX due to error [ 79.915171][ T5824] invalid bkey u64s 12 type dirent 0:0:32365 len 0 ver 0: -> 6 type (bad d_type) [ 79.915186][ T5824] nonzero snapshot: delete?, fixing [ 79.929991][ T5824] bcachefs (loop0): flagging btree alloc lost data [ 79.939664][ T5824] error reading btree root alloc l=0: btree_node_read_error, fixing [ 79.951732][ T5824] invalid btree root freespace, fixing [ 79.957235][ T5824] bcachefs (loop0): flagging btree freespace lost data [ 79.967725][ T5824] bcachefs (loop0): accounting_read... done [ 79.975055][ T5824] bcachefs (loop0): alloc_read... done [ 79.980708][ T5824] bcachefs (loop0): stripes_read... done [ 79.986446][ T5824] bcachefs (loop0): snapshots_read... done [ 79.992755][ T5824] bcachefs (loop0): check_allocations... [ 79.994787][ T5824] bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 79.994811][ T5824] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, fixing [ 80.026862][ T5824] bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 80.026880][ T5824] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 80.053596][ T5824] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 80.053619][ T5824] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 80.078507][ T5824] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 80.078523][ T5824] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 80.102492][ T5824] ------------[ cut here ]------------ [ 80.108434][ T5824] kernel BUG at fs/bcachefs/btree_iter.c:631! [ 80.114783][ T5824] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 80.121759][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor915 Not tainted 6.13.0-rc4-syzkaller #0 [ 80.131166][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.141226][ T5824] RIP: 0010:bch2_btree_path_level_init+0x9ca/0x9f0 [ 80.147744][ T5824] Code: f5 fa ff ff e8 07 90 84 fd 90 0f 0b e8 ff 8f 84 fd 90 0f 0b e8 f7 8f 84 fd 90 0f 0b e8 ef 8f 84 fd 90 0f 0b e8 e7 8f 84 fd 90 <0f> 0b e8 df 8f 84 fd 90 0f 0b e8 d7 8f 84 fd 90 0f 0b e8 cf 8f 84 [ 80.167437][ T5824] RSP: 0018:ffffc90003c0e1e0 EFLAGS: 00010293 [ 80.173539][ T5824] RAX: ffffffff841ae3f9 RBX: 0000000000000000 RCX: ffff88802b623c00 [ 80.181610][ T5824] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 80.189765][ T5824] RBP: dffffc0000000000 R08: ffffffff841adc4c R09: 0000000000000000 [ 80.197885][ T5824] R10: dffffc0000000000 R11: fffffbfff2030a6f R12: ffff888035ea7000 [ 80.205915][ T5824] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888078700033 [ 80.214195][ T5824] FS: 0000555583fa8380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 80.223236][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.229922][ T5824] CR2: 0000563ef9a5aa38 CR3: 0000000075522000 CR4: 00000000003526f0 [ 80.237996][ T5824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.245975][ T5824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.253977][ T5824] Call Trace: [ 80.257271][ T5824] [ 80.260209][ T5824] ? __die_body+0x5f/0xb0 [ 80.264568][ T5824] ? die+0x9e/0xc0 [ 80.268320][ T5824] ? do_trap+0x15a/0x3a0 [ 80.272734][ T5824] ? bch2_btree_path_level_init+0x9ca/0x9f0 [ 80.278654][ T5824] ? do_error_trap+0x1dc/0x2c0 [ 80.283437][ T5824] ? bch2_btree_path_level_init+0x9ca/0x9f0 [ 80.289355][ T5824] ? __pfx_do_error_trap+0x10/0x10 [ 80.294486][ T5824] ? report_bug+0x3e8/0x500 [ 80.299017][ T5824] ? handle_invalid_op+0x34/0x40 [ 80.303972][ T5824] ? bch2_btree_path_level_init+0x9ca/0x9f0 [ 80.309881][ T5824] ? exc_invalid_op+0x38/0x50 [ 80.314596][ T5824] ? asm_exc_invalid_op+0x1a/0x20 [ 80.319640][ T5824] ? bch2_btree_path_level_init+0x21c/0x9f0 [ 80.325553][ T5824] ? bch2_btree_path_level_init+0x9c9/0x9f0 [ 80.331466][ T5824] ? bch2_btree_path_level_init+0x9ca/0x9f0 [ 80.337378][ T5824] ? bch2_btree_path_traverse_one+0xa4b/0x2940 [ 80.343564][ T5824] bch2_btree_path_traverse_one+0x10de/0x2940 [ 80.349652][ T5824] ? __pfx_validate_chain+0x10/0x10 [ 80.354871][ T5824] ? bch2_check_allocations+0x1abe/0x7070 [ 80.360607][ T5824] ? __pfx_bch2_btree_path_traverse_one+0x10/0x10 [ 80.367063][ T5824] ? stack_trace_save+0x118/0x1d0 [ 80.372152][ T5824] ? __pfx_stack_trace_save+0x10/0x10 [ 80.377600][ T5824] ? mark_lock+0x9a/0x360 [ 80.381955][ T5824] ? __lock_acquire+0x1397/0x2100 [ 80.387036][ T5824] ? bch2_btree_path_verify+0x1fd/0x300 [ 80.392610][ T5824] bch2_btree_iter_peek_upto+0xb58/0x70e0 [ 80.398465][ T5824] ? __pfx_lock_acquire+0x10/0x10 [ 80.403496][ T5824] ? __pfx___might_resched+0x10/0x10 [ 80.408796][ T5824] ? __pfx_bch2_btree_iter_peek_upto+0x10/0x10 [ 80.415044][ T5824] ? bch2_trans_srcu_unlock+0x44d/0x5c0 [ 80.420604][ T5824] ? bch2_trans_begin+0x9c5/0x1bf0 [ 80.425720][ T5824] ? bch2_trans_begin+0x16c1/0x1bf0 [ 80.430929][ T5824] ? bch2_check_allocations+0x1a53/0x7070 [ 80.436862][ T5824] ? __pfx___might_resched+0x10/0x10 [ 80.442165][ T5824] ? __bch2_path_free+0x6ef/0x820 [ 80.447198][ T5824] ? __asan_memset+0x23/0x50 [ 80.451802][ T5824] bch2_check_allocations+0x1abe/0x7070 [ 80.457364][ T5824] ? __pfx_prb_first_seq+0x10/0x10 [ 80.462513][ T5824] ? this_cpu_in_panic+0x4f/0x80 [ 80.467481][ T5824] ? bch2_check_allocations+0x798/0x7070 [ 80.473149][ T5824] ? __pfx__prb_read_valid+0x10/0x10 [ 80.478462][ T5824] ? __pfx_validate_chain+0x10/0x10 [ 80.483684][ T5824] ? __pfx_validate_chain+0x10/0x10 [ 80.488901][ T5824] ? __pfx_bch2_check_allocations+0x10/0x10 [ 80.494822][ T5824] ? __pfx_prb_read_valid+0x10/0x10 [ 80.500038][ T5824] ? data_alloc+0x523/0x840 [ 80.504569][ T5824] ? desc_read+0x200/0x3f0 [ 80.509017][ T5824] ? desc_read+0x1a2/0x3f0 [ 80.513446][ T5824] ? prb_first_seq+0x131/0x210 [ 80.518221][ T5824] ? __pfx_prb_first_seq+0x10/0x10 [ 80.523363][ T5824] ? this_cpu_in_panic+0x4f/0x80 [ 80.528342][ T5824] ? _prb_read_valid+0xa39/0xac0 [ 80.533330][ T5824] ? bch2_check_allocations+0x1a47/0x7070 [ 80.539084][ T5824] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.545079][ T5824] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.551421][ T5824] ? __console_unlock+0x12d/0x1f0 [ 80.556465][ T5824] ? bch2_check_allocations+0x2119/0x7070 [ 80.562214][ T5824] ? this_cpu_in_panic+0x4f/0x80 [ 80.567168][ T5824] ? __wake_up_klogd+0xd5/0x110 [ 80.572068][ T5824] ? bch2_run_recovery_passes+0x42b/0x880 [ 80.577811][ T5824] ? trace_contention_end+0x3c/0x120 [ 80.583121][ T5824] ? bch2_check_allocations+0x798/0x7070 [ 80.588789][ T5824] ? __bch2_print+0x17a/0x220 [ 80.593474][ T5824] ? __mutex_unlock_slowpath+0x21e/0x790 [ 80.599121][ T5824] ? __pfx___bch2_print+0x10/0x10 [ 80.604165][ T5824] bch2_run_recovery_pass+0xf0/0x1e0 [ 80.609466][ T5824] bch2_run_recovery_passes+0x3a7/0x880 [ 80.615035][ T5824] bch2_fs_recovery+0x25cc/0x39d0 [ 80.620084][ T5824] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 80.625486][ T5824] ? __pfx_lock_release+0x10/0x10 [ 80.630550][ T5824] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 80.636196][ T5824] ? __pfx_lock_release+0x10/0x10 [ 80.641267][ T5824] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 80.646988][ T5824] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 80.652761][ T5824] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 80.658452][ T5824] ? llist_reverse_order+0x72/0x90 [ 80.663707][ T5824] bch2_fs_start+0x356/0x5b0 [ 80.668404][ T5824] bch2_fs_get_tree+0xd68/0x1710 [ 80.673372][ T5824] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 80.678843][ T5824] ? smack_fs_context_parse_param+0xff/0x170 [ 80.684939][ T5824] ? generic_parse_monolithic+0x387/0x400 [ 80.690708][ T5824] ? cap_capable+0x1b4/0x250 [ 80.695350][ T5824] ? safesetid_security_capable+0xb2/0x1d0 [ 80.701180][ T5824] vfs_get_tree+0x90/0x2b0 [ 80.705620][ T5824] do_new_mount+0x2be/0xb40 [ 80.710153][ T5824] ? __pfx_do_new_mount+0x10/0x10 [ 80.715474][ T5824] __se_sys_mount+0x2d6/0x3c0 [ 80.720249][ T5824] ? __pfx___se_sys_mount+0x10/0x10 [ 80.725455][ T5824] ? do_syscall_64+0x100/0x230 [ 80.730238][ T5824] ? __x64_sys_mount+0x20/0xc0 [ 80.735010][ T5824] do_syscall_64+0xf3/0x230 [ 80.739530][ T5824] ? clear_bhb_loop+0x35/0x90 [ 80.744253][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.750322][ T5824] RIP: 0033:0x7f4309e24d3a [ 80.754862][ T5824] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.774696][ T5824] RSP: 002b:00007ffe90004048 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 80.783146][ T5824] RAX: ffffffffffffffda RBX: 00007ffe90004060 RCX: 00007f4309e24d3a [ 80.791140][ T5824] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007ffe90004060 [ 80.799134][ T5824] RBP: 0000000000000004 R08: 00007ffe900040a0 R09: 002c303030303030 [ 80.807117][ T5824] R10: 0000000000800000 R11: 0000000000000282 R12: 0000000000800000 [ 80.815132][ T5824] R13: 00007ffe900040a0 R14: 0000000000000003 R15: 0000000001000000 [ 80.823142][ T5824] [ 80.826173][ T5824] Modules linked in: [ 80.830291][ T5824] ---[ end trace 0000000000000000 ]--- [ 80.835914][ T5824] RIP: 0010:bch2_btree_path_level_init+0x9ca/0x9f0 [ 80.842611][ T5824] Code: f5 fa ff ff e8 07 90 84 fd 90 0f 0b e8 ff 8f 84 fd 90 0f 0b e8 f7 8f 84 fd 90 0f 0b e8 ef 8f 84 fd 90 0f 0b e8 e7 8f 84 fd 90 <0f> 0b e8 df 8f 84 fd 90 0f 0b e8 d7 8f 84 fd 90 0f 0b e8 cf 8f 84 [ 80.862392][ T5824] RSP: 0018:ffffc90003c0e1e0 EFLAGS: 00010293 [ 80.868594][ T5824] RAX: ffffffff841ae3f9 RBX: 0000000000000000 RCX: ffff88802b623c00 [ 80.876644][ T5824] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 80.884712][ T5824] RBP: dffffc0000000000 R08: ffffffff841adc4c R09: 0000000000000000 [ 80.892799][ T5824] R10: dffffc0000000000 R11: fffffbfff2030a6f R12: ffff888035ea7000 [ 80.900856][ T5824] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888078700033 [ 80.909232][ T5824] FS: 0000555583fa8380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 80.918722][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.925491][ T5824] CR2: 000056262b6e7038 CR3: 0000000075522000 CR4: 00000000003526f0 [ 80.934462][ T5824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.942524][ T5824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.950583][ T5824] Kernel panic - not syncing: Fatal exception [ 80.957017][ T5824] Kernel Offset: disabled [ 80.961374][ T5824] Rebooting in 86400 seconds..