./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3869251314 <...> Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. execve("./syz-executor3869251314", ["./syz-executor3869251314"], 0x7fff79902ed0 /* 10 vars */) = 0 brk(NULL) = 0x55555f4ca000 brk(0x55555f4cae00) = 0x55555f4cae00 arch_prctl(ARCH_SET_FS, 0x55555f4ca480) = 0 set_tid_address(0x55555f4ca750) = 5826 set_robust_list(0x55555f4ca760, 24) = 0 rseq(0x55555f4cada0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3869251314", 4096) = 28 getrandom("\xe3\x93\x4a\x98\x06\xee\xe5\x43", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555f4cae00 brk(0x55555f4ebe00) = 0x55555f4ebe00 brk(0x55555f4ec000) = 0x55555f4ec000 mprotect(0x7fd27f87e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5826}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x30\x00\x00\x00\xe8\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 864 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5826}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5826}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5826}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5826}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5826}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5826}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7fd27f7b9ab0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7fd27f7b9ab0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 mkdir("./syzkaller.xwhoo9", 0700) = 0 chmod("./syzkaller.xwhoo9", 0777) = 0 chdir("./syzkaller.xwhoo9") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5829 attached , child_tidptr=0x55555f4ca750) = 5829 [pid 5829] set_robust_list(0x55555f4ca760, 24) = 0 [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5829] getppid() = 0 [pid 5829] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5829] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5829] unshare(CLONE_NEWNS) = 0 [pid 5829] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5829] unshare(CLONE_NEWIPC) = 0 [pid 5829] unshare(CLONE_NEWCGROUP) = 0 [pid 5829] unshare(CLONE_NEWUTS) = 0 [pid 5829] unshare(CLONE_SYSVSEM) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "16777216", 8) = 8 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "536870912", 9) = 9 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "8192", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5829] close(3) = 0 [pid 5829] getpid() = 1 [pid 5829] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5838] set_robust_list(0x55555f4ca760, 24) = 0 [pid 5838] chdir("./0" [pid 5829] <... clone resumed>, child_tidptr=0x55555f4ca750) = 2 [pid 5838] <... chdir resumed>) = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1000", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5838] write(1, "executing program\n", 18) = 18 [pid 5838] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5838] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5838] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5838] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5838] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5839 attached [pid 5839] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5838] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 5839] <... rseq resumed>) = 0 [pid 5838] rt_sigprocmask(SIG_SETMASK, [], [pid 5839] set_robust_list(0x7fd27f7a89a0, 24 [pid 5838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] <... set_robust_list resumed>) = 0 [pid 5839] rt_sigprocmask(SIG_SETMASK, [], [pid 5838] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5839] memfd_create("syzkaller", 0 [pid 5838] <... futex resumed>) = 0 [pid 5838] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5839] <... memfd_create resumed>) = 3 [pid 5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5839] munmap(0x7fd277200000, 138412032) = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5839] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5839] close(3) = 0 [pid 5839] close(4) = 0 [pid 5839] mkdir("./file0", 0777) = 0 [ 73.863021][ T5839] loop0: detected capacity change from 0 to 32768 [ 73.973172][ T5839] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 73.991595][ T5839] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 74.000320][ T5839] bcachefs (loop0): Version upgrade required: [ 74.000320][ T5839] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 74.000320][ T5839] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 74.000320][ T5839] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 74.085935][ T5839] bcachefs (loop0): check_topology... done [ 74.092085][ T5839] bcachefs (loop0): accounting_read... done [ 74.099497][ T5839] bcachefs (loop0): alloc_read... done [ 74.105292][ T5839] bcachefs (loop0): stripes_read... done [ 74.110994][ T5839] bcachefs (loop0): snapshots_read... done [ 74.117115][ T5839] bcachefs (loop0): check_allocations... [ 74.120654][ T5839] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 74.120673][ T5839] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 74.151546][ T5839] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 74.151560][ T5839] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 74.176735][ T5839] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 74.176748][ T5839] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 74.201723][ T5839] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 74.201736][ T5839] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 74.228016][ T5839] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 74.228029][ T5839] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 74.251903][ T5839] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.260491][ T5839] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.271324][ T5839] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.279806][ T5839] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.289551][ T5839] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.297913][ T5839] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.308291][ T5839] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.316655][ T5839] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.326370][ T5839] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.334902][ T5839] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.344867][ T5839] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.353155][ T5839] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.362973][ T5839] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.371395][ T5839] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 74.381185][ T5839] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 74.389508][ T5839] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 74.399130][ T5839] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 74.407897][ T5839] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 74.419145][ T5839] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 74.428032][ T5839] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 74.438267][ T5839] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 74.447063][ T5839] bcachefs (loop0): Ratelimiting new instances of previous error [ 74.454873][ T5839] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 74.464972][ T5839] bcachefs (loop0): Ratelimiting new instances of previous error [ 74.478123][ T5839] done [ 74.482423][ T5839] bcachefs (loop0): going read-write [pid 5839] mount("/dev/loop0", "./file0", "bcachefs", MS_NOATIME, "btree_node_mem_ptr_optimjzation,inodes_32bit,directWio,fsck,acl,norecovery,acl,str_hash=crc32c,obj_u"...) = 0 [pid 5839] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5839] ioctl(4, LOOP_CLR_FD) = 0 [pid 5839] close(4) = 0 [ 74.494057][ T5839] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 74.507313][ T5839] bcachefs (loop0): done starting filesystem [ 74.528112][ T25] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [pid 5839] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] <... futex resumed>) = 0 [pid 5838] close(3) = 0 [pid 5838] close(4) = -1 EBADF (Bad file descriptor) [pid 5838] close(5) = -1 EBADF (Bad file descriptor) [pid 5838] close(6) = -1 EBADF (Bad file descriptor) [pid 5838] close(7) = -1 EBADF (Bad file descriptor) [pid 5838] close(8) = -1 EBADF (Bad file descriptor) [pid 5838] close(9) = -1 EBADF (Bad file descriptor) [pid 5838] close(10) = -1 EBADF (Bad file descriptor) [pid 5838] close(11) = -1 EBADF (Bad file descriptor) [pid 5838] close(12) = -1 EBADF (Bad file descriptor) [pid 5838] close(13) = -1 EBADF (Bad file descriptor) [pid 5838] close(14) = -1 EBADF (Bad file descriptor) [pid 5838] close(15) = -1 EBADF (Bad file descriptor) [pid 5838] close(16) = -1 EBADF (Bad file descriptor) [pid 5838] close(17) = -1 EBADF (Bad file descriptor) [pid 5838] close(18) = -1 EBADF (Bad file descriptor) [pid 5838] close(19) = -1 EBADF (Bad file descriptor) [pid 5838] close(20) = -1 EBADF (Bad file descriptor) [pid 5838] close(21) = -1 EBADF (Bad file descriptor) [pid 5838] close(22) = -1 EBADF (Bad file descriptor) [pid 5838] close(23) = -1 EBADF (Bad file descriptor) [pid 5838] close(24) = -1 EBADF (Bad file descriptor) [pid 5838] close(25) = -1 EBADF (Bad file descriptor) [pid 5838] close(26) = -1 EBADF (Bad file descriptor) [pid 5838] close(27) = -1 EBADF (Bad file descriptor) [pid 5838] close(28) = -1 EBADF (Bad file descriptor) [pid 5838] close(29) = -1 EBADF (Bad file descriptor) [pid 5838] exit_group(0 [pid 5839] <... futex resumed>) = ? [pid 5838] <... exit_group resumed>) = ? [pid 5839] +++ exited with 0 +++ [pid 5838] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=55 /* 0.55 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 74.540555][ T25] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [pid 5829] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./0/binderfs") = 0 [ 74.703205][ T5829] bcachefs (loop0): shutting down [ 74.709410][ T5829] bcachefs (loop0): going read-only [ 74.715092][ T5829] bcachefs (loop0): finished waiting for writes to stop [ 74.724710][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 74.748537][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17 [ 74.759937][ T5829] bcachefs (loop0): unshutdown complete, journal seq 18 [ 74.767628][ T5829] bcachefs (loop0): done going read-only, filesystem not clean [ 74.790083][ T5829] bcachefs (loop0): shutdown complete [pid 5829] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5829] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x55555f4d3830 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x55555f4d3830 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./0/file0") = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./0") = 0 [pid 5829] mkdir("./1", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5850 attached [pid 5850] set_robust_list(0x55555f4ca760, 24) = 0 [pid 5850] chdir("./1") = 0 [pid 5850] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5850] setpgid(0, 0) = 0 [pid 5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] <... clone resumed>, child_tidptr=0x55555f4ca750) = 4 [pid 5850] <... openat resumed>) = 3 [pid 5850] write(3, "1000", 4) = 4 [pid 5850] close(3) = 0 [pid 5850] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5850] write(1, "executing program\n", 18) = 18 [pid 5850] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5850] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5850] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5850] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5850] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5850] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5850] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5851 attached [pid 5851] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5850] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 5851] <... rseq resumed>) = 0 [pid 5851] set_robust_list(0x7fd27f7a89a0, 24 [pid 5850] rt_sigprocmask(SIG_SETMASK, [], [pid 5851] <... set_robust_list resumed>) = 0 [pid 5850] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5851] rt_sigprocmask(SIG_SETMASK, [], [pid 5850] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5851] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5850] <... futex resumed>) = 0 [pid 5851] memfd_create("syzkaller", 0 [pid 5850] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5851] <... memfd_create resumed>) = 3 [pid 5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5851] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5851] munmap(0x7fd277200000, 138412032) = 0 [pid 5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5851] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5851] close(3) = 0 [pid 5851] close(4) = 0 [pid 5851] mkdir("./file0", 0777) = 0 [ 76.247036][ T5851] loop0: detected capacity change from 0 to 32768 [ 76.312069][ T5851] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 76.330046][ T5851] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 76.338177][ T5851] bcachefs (loop0): Version upgrade required: [ 76.338177][ T5851] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 76.338177][ T5851] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 76.338177][ T5851] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 76.420402][ T5851] bcachefs (loop0): check_topology... done [ 76.426832][ T5851] bcachefs (loop0): accounting_read... done [ 76.434291][ T5851] bcachefs (loop0): alloc_read... done [ 76.439962][ T5851] bcachefs (loop0): stripes_read... done [ 76.446183][ T5851] bcachefs (loop0): snapshots_read... done [ 76.452176][ T5851] bcachefs (loop0): check_allocations... [ 76.454256][ T5851] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 76.454275][ T5851] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 76.485554][ T5851] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 76.485567][ T5851] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 76.510857][ T5851] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 76.510871][ T5851] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 76.536002][ T5851] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 76.536015][ T5851] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 76.561846][ T5851] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 76.561859][ T5851] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 76.585431][ T5851] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 76.593839][ T5851] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 76.603839][ T5851] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 76.612524][ T5851] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 76.622423][ T5851] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 76.630849][ T5851] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 76.640700][ T5851] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 76.649055][ T5851] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 76.658976][ T5851] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 76.667723][ T5851] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 76.677571][ T5851] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 76.685937][ T5851] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 76.696267][ T5851] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 76.704670][ T5851] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 76.714460][ T5851] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 76.722736][ T5851] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 76.732373][ T5851] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 76.743590][ T5851] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 76.756403][ T8] cfg80211: failed to load regulatory.db [ 76.769701][ T5851] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 76.778955][ T5851] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 76.790656][ T5851] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 76.800177][ T5851] bcachefs (loop0): Ratelimiting new instances of previous error [ 76.808014][ T5851] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 76.819408][ T5851] bcachefs (loop0): Ratelimiting new instances of previous error [ 76.836736][ T5851] done [ 76.841443][ T5851] bcachefs (loop0): going read-write [ 76.851819][ T5851] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 76.881335][ T5851] bcachefs (loop0): done starting filesystem [ 76.890269][ T8] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [ 76.903568][ T5851] bcachefs (loop0): __bch2_inode_peek(): error looking up inum 1:4096: ENOENT_inode [ 76.916582][ T5851] bcachefs (loop0): bch2_fs_get_tree(): error mounting: error getting root inode ENOENT_inode [ 76.927305][ T8] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [ 76.936813][ T5851] bcachefs (loop0): shutting down [ 76.942211][ T5851] bcachefs (loop0): going read-only [ 76.947712][ T5851] bcachefs (loop0): finished waiting for writes to stop [ 76.957362][ T5851] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 76.995541][ T5851] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 77.007401][ T5851] bcachefs (loop0): unshutdown complete, journal seq 16 [ 77.016602][ T5851] bcachefs (loop0): done going read-only, filesystem not clean [ 77.043884][ T5851] bcachefs (loop0): shutdown complete [pid 5851] mount("/dev/loop0", "./file0", "bcachefs", MS_NOATIME, "btree_node_mem_ptr_optimjzation,inodes_32bit,directWio,fsck,acl,norecovery,acl,str_hash=crc32c,obj_u"...) = -1 ENOENT (No such file or directory) [pid 5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5851] ioctl(3, LOOP_CLR_FD) = 0 [ 77.866727][ T5851] bcachefs: bch2_fs_get_tree() error: ENOENT_inode [pid 5851] close(3) = 0 [pid 5851] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = 0 [pid 5851] <... futex resumed>) = 1 [pid 5850] close(3 [pid 5851] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5850] close(4) = -1 EBADF (Bad file descriptor) [pid 5850] close(5) = -1 EBADF (Bad file descriptor) [pid 5850] close(6) = -1 EBADF (Bad file descriptor) [pid 5850] close(7) = -1 EBADF (Bad file descriptor) [pid 5850] close(8) = -1 EBADF (Bad file descriptor) [pid 5850] close(9) = -1 EBADF (Bad file descriptor) [pid 5850] close(10) = -1 EBADF (Bad file descriptor) [pid 5850] close(11) = -1 EBADF (Bad file descriptor) [pid 5850] close(12) = -1 EBADF (Bad file descriptor) [pid 5850] close(13) = -1 EBADF (Bad file descriptor) [pid 5850] close(14) = -1 EBADF (Bad file descriptor) [pid 5850] close(15) = -1 EBADF (Bad file descriptor) [pid 5850] close(16) = -1 EBADF (Bad file descriptor) [pid 5850] close(17) = -1 EBADF (Bad file descriptor) [pid 5850] close(18) = -1 EBADF (Bad file descriptor) [pid 5850] close(19) = -1 EBADF (Bad file descriptor) [pid 5850] close(20) = -1 EBADF (Bad file descriptor) [pid 5850] close(21) = -1 EBADF (Bad file descriptor) [pid 5850] close(22) = -1 EBADF (Bad file descriptor) [pid 5850] close(23) = -1 EBADF (Bad file descriptor) [pid 5850] close(24) = -1 EBADF (Bad file descriptor) [pid 5850] close(25) = -1 EBADF (Bad file descriptor) [pid 5850] close(26) = -1 EBADF (Bad file descriptor) [pid 5850] close(27) = -1 EBADF (Bad file descriptor) [pid 5850] close(28) = -1 EBADF (Bad file descriptor) [pid 5850] close(29) = -1 EBADF (Bad file descriptor) [pid 5850] exit_group(0) = ? [pid 5851] <... futex resumed>) = ? [pid 5851] +++ exited with 0 +++ [pid 5850] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=87 /* 0.87 s */} --- [pid 5829] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [ 78.169128][ T5851] syz-executor386 (5851) used greatest stack depth: 13776 bytes left [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./1/binderfs") = 0 [pid 5829] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x55555f4d3830 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x55555f4d3830 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./1/file0") = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./1") = 0 [pid 5829] mkdir("./2", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5863 attached , child_tidptr=0x55555f4ca750) = 6 [pid 5863] set_robust_list(0x55555f4ca760, 24) = 0 [pid 5863] chdir("./2") = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5863] setpgid(0, 0) = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5863] write(3, "1000", 4) = 4 [pid 5863] close(3) = 0 [pid 5863] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5863] write(1, "executing program\n", 18executing program ) = 18 [pid 5863] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5863] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5863] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5863] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5863] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5864 attached [pid 5864] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5863] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 5864] <... rseq resumed>) = 0 [pid 5864] set_robust_list(0x7fd27f7a89a0, 24 [pid 5863] rt_sigprocmask(SIG_SETMASK, [], [pid 5864] <... set_robust_list resumed>) = 0 [pid 5863] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5864] rt_sigprocmask(SIG_SETMASK, [], [pid 5863] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5863] <... futex resumed>) = 0 [pid 5864] memfd_create("syzkaller", 0 [pid 5863] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5864] <... memfd_create resumed>) = 3 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5864] munmap(0x7fd277200000, 138412032) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5864] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5864] close(3) = 0 [pid 5864] close(4) = 0 [pid 5864] mkdir("./file0", 0777) = 0 [ 78.773005][ T5864] loop0: detected capacity change from 0 to 32768 [ 78.848657][ T5864] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 78.866589][ T5864] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 78.874725][ T5864] bcachefs (loop0): Version upgrade required: [ 78.874725][ T5864] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 78.874725][ T5864] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 78.874725][ T5864] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 78.957051][ T5864] bcachefs (loop0): check_topology... done [ 78.963150][ T5864] bcachefs (loop0): accounting_read... done [ 78.969267][ T5864] bcachefs (loop0): alloc_read... done [ 78.974961][ T5864] bcachefs (loop0): stripes_read... done [ 78.980621][ T5864] bcachefs (loop0): snapshots_read... done [ 78.986952][ T5864] bcachefs (loop0): check_allocations... [ 78.989518][ T5864] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 78.989537][ T5864] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 79.021616][ T5864] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 79.021629][ T5864] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 79.048563][ T5864] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 79.048582][ T5864] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 79.074314][ T5864] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 79.074333][ T5864] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 79.106765][ T5864] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 79.106787][ T5864] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 79.133364][ T5864] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.152012][ T5864] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.162443][ T5864] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.172620][ T5864] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.182682][ T5864] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.194778][ T5864] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.205304][ T5864] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.213670][ T5864] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.224012][ T5864] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.232347][ T5864] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.242814][ T5864] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.251240][ T5864] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.261166][ T5864] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.269605][ T5864] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 79.279985][ T5864] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 79.288783][ T5864] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 79.299066][ T5864] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 79.308029][ T5864] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 79.318427][ T5864] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 79.328011][ T5864] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 79.354094][ T5864] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 79.363380][ T5864] bcachefs (loop0): Ratelimiting new instances of previous error [ 79.393401][ T5864] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 79.405627][ T5864] bcachefs (loop0): Ratelimiting new instances of previous error [ 79.425509][ T5864] done [ 79.442589][ T5864] bcachefs (loop0): going read-write [ 79.452323][ T5864] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 79.482082][ T5864] bcachefs (loop0): done starting filesystem [ 79.484734][ T8] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [ 79.496936][ T5864] bcachefs (loop0): __bch2_inode_peek(): error looking up inum 1:4096: ENOENT_inode [ 79.512748][ T8] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [ 79.514739][ T5864] bcachefs (loop0): bch2_fs_get_tree(): error mounting: error getting root inode ENOENT_inode [ 79.533181][ T5864] bcachefs (loop0): shutting down [ 79.538330][ T5864] bcachefs (loop0): going read-only [ 79.543541][ T5864] bcachefs (loop0): finished waiting for writes to stop [ 79.552173][ T5864] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 79.578513][ T5864] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18 [ 79.589514][ T5864] bcachefs (loop0): unshutdown complete, journal seq 19 [ 79.598001][ T5864] bcachefs (loop0): done going read-only, filesystem not clean [ 79.615105][ T5864] bcachefs (loop0): shutdown complete [pid 5864] mount("/dev/loop0", "./file0", "bcachefs", MS_NOATIME, "btree_node_mem_ptr_optimjzation,inodes_32bit,directWio,fsck,acl,norecovery,acl,str_hash=crc32c,obj_u"...) = -1 ENOENT (No such file or directory) [pid 5864] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5864] ioctl(3, LOOP_CLR_FD) = 0 [ 80.402919][ T5864] bcachefs: bch2_fs_get_tree() error: ENOENT_inode [pid 5864] close(3) = 0 [pid 5864] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5864] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] close(3) = -1 EBADF (Bad file descriptor) [pid 5863] close(4) = -1 EBADF (Bad file descriptor) [pid 5863] close(5) = -1 EBADF (Bad file descriptor) [pid 5863] close(6) = -1 EBADF (Bad file descriptor) [pid 5863] close(7) = -1 EBADF (Bad file descriptor) [pid 5863] close(8) = -1 EBADF (Bad file descriptor) [pid 5863] close(9) = -1 EBADF (Bad file descriptor) [pid 5863] close(10) = -1 EBADF (Bad file descriptor) [pid 5863] close(11) = -1 EBADF (Bad file descriptor) [pid 5863] close(12) = -1 EBADF (Bad file descriptor) [pid 5863] close(13) = -1 EBADF (Bad file descriptor) [pid 5863] close(14) = -1 EBADF (Bad file descriptor) [pid 5863] close(15) = -1 EBADF (Bad file descriptor) [pid 5863] close(16) = -1 EBADF (Bad file descriptor) [pid 5863] close(17) = -1 EBADF (Bad file descriptor) [pid 5863] close(18) = -1 EBADF (Bad file descriptor) [pid 5863] close(19) = -1 EBADF (Bad file descriptor) [pid 5863] close(20) = -1 EBADF (Bad file descriptor) [pid 5863] close(21) = -1 EBADF (Bad file descriptor) [pid 5863] close(22) = -1 EBADF (Bad file descriptor) [pid 5863] close(23) = -1 EBADF (Bad file descriptor) [pid 5863] close(24) = -1 EBADF (Bad file descriptor) [pid 5863] close(25) = -1 EBADF (Bad file descriptor) [pid 5863] close(26) = -1 EBADF (Bad file descriptor) [pid 5863] close(27) = -1 EBADF (Bad file descriptor) [pid 5863] close(28) = -1 EBADF (Bad file descriptor) [pid 5863] close(29) = -1 EBADF (Bad file descriptor) [pid 5863] exit_group(0 [pid 5864] <... futex resumed>) = ? [pid 5863] <... exit_group resumed>) = ? [pid 5864] +++ exited with 0 +++ [pid 5863] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=83 /* 0.83 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5829] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 80.681099][ T5864] syz-executor386 (5864) used greatest stack depth: 13688 bytes left [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./2/binderfs") = 0 [pid 5829] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x55555f4d3830 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x55555f4d3830 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./2/file0") = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./2") = 0 [pid 5829] mkdir("./3", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5875 attached [pid 5875] set_robust_list(0x55555f4ca760, 24 [pid 5829] <... clone resumed>, child_tidptr=0x55555f4ca750) = 8 [pid 5875] <... set_robust_list resumed>) = 0 [pid 5875] chdir("./3") = 0 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5875] setpgid(0, 0) = 0 [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5875] write(3, "1000", 4) = 4 [pid 5875] close(3) = 0 [pid 5875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5875] write(1, "executing program\n", 18executing program ) = 18 [pid 5875] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5875] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5875] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5875] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5875] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5875] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5875] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5876 attached [pid 5876] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5875] <... clone3 resumed> => {parent_tid=[9]}, 88) = 9 [pid 5876] <... rseq resumed>) = 0 [pid 5875] rt_sigprocmask(SIG_SETMASK, [], [pid 5876] set_robust_list(0x7fd27f7a89a0, 24 [pid 5875] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5876] <... set_robust_list resumed>) = 0 [pid 5875] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] rt_sigprocmask(SIG_SETMASK, [], [pid 5875] <... futex resumed>) = 0 [pid 5876] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5876] memfd_create("syzkaller", 0 [pid 5875] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5876] <... memfd_create resumed>) = 3 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5876] munmap(0x7fd277200000, 138412032) = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5876] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5876] close(3) = 0 [pid 5876] close(4) = 0 [pid 5876] mkdir("./file0", 0777) = 0 [ 81.293011][ T5876] loop0: detected capacity change from 0 to 32768 [ 81.358948][ T5876] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 81.378256][ T5876] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 81.386422][ T5876] bcachefs (loop0): Version upgrade required: [ 81.386422][ T5876] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 81.386422][ T5876] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 81.386422][ T5876] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 81.467218][ T5876] bcachefs (loop0): check_topology... done [ 81.473055][ T5876] bcachefs (loop0): accounting_read... done [ 81.479178][ T5876] bcachefs (loop0): alloc_read... done [ 81.485208][ T5876] bcachefs (loop0): stripes_read... done [ 81.490894][ T5876] bcachefs (loop0): snapshots_read... done [ 81.496847][ T5876] bcachefs (loop0): check_allocations... [ 81.498605][ T5876] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 81.498617][ T5876] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 81.528757][ T5876] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 81.528770][ T5876] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 81.553061][ T5876] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 81.553074][ T5876] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 81.579461][ T5876] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 81.579474][ T5876] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 81.605790][ T5876] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 81.605803][ T5876] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 81.629620][ T5876] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 81.638344][ T5876] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 81.648359][ T5876] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 81.656764][ T5876] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 81.666507][ T5876] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 81.674874][ T5876] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 81.685252][ T5876] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 81.693568][ T5876] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 81.703361][ T5876] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 81.711690][ T5876] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 81.721529][ T5876] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 81.729903][ T5876] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 81.739634][ T5876] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 81.747990][ T5876] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 81.757702][ T5876] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 81.766084][ T5876] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 81.775631][ T5876] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 81.784843][ T5876] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 81.795243][ T5876] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 81.804134][ T5876] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 81.814507][ T5876] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 81.823308][ T5876] bcachefs (loop0): Ratelimiting new instances of previous error [ 81.831296][ T5876] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 81.841468][ T5876] bcachefs (loop0): Ratelimiting new instances of previous error [ 81.855323][ T5876] done [ 81.859253][ T5876] bcachefs (loop0): going read-write [pid 5876] mount("/dev/loop0", "./file0", "bcachefs", MS_NOATIME, "btree_node_mem_ptr_optimjzation,inodes_32bit,directWio,fsck,acl,norecovery,acl,str_hash=crc32c,obj_u"...) = 0 [pid 5876] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5876] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5876] ioctl(4, LOOP_CLR_FD) = 0 [ 81.868939][ T5876] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 81.880571][ T5876] bcachefs (loop0): done starting filesystem [ 81.899863][ T8] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [pid 5876] close(4) = 0 [pid 5876] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5875] <... futex resumed>) = 0 [pid 5875] close(3 [pid 5876] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] <... close resumed>) = 0 [pid 5875] close(4) = -1 EBADF (Bad file descriptor) [pid 5875] close(5) = -1 EBADF (Bad file descriptor) [pid 5875] close(6) = -1 EBADF (Bad file descriptor) [pid 5875] close(7) = -1 EBADF (Bad file descriptor) [ 81.912163][ T8] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [pid 5875] close(8) = -1 EBADF (Bad file descriptor) [pid 5875] close(9) = -1 EBADF (Bad file descriptor) [pid 5875] close(10) = -1 EBADF (Bad file descriptor) [pid 5875] close(11) = -1 EBADF (Bad file descriptor) [pid 5875] close(12) = -1 EBADF (Bad file descriptor) [pid 5875] close(13) = -1 EBADF (Bad file descriptor) [pid 5875] close(14) = -1 EBADF (Bad file descriptor) [pid 5875] close(15) = -1 EBADF (Bad file descriptor) [pid 5875] close(16) = -1 EBADF (Bad file descriptor) [pid 5875] close(17) = -1 EBADF (Bad file descriptor) [pid 5875] close(18) = -1 EBADF (Bad file descriptor) [pid 5875] close(19) = -1 EBADF (Bad file descriptor) [pid 5875] close(20) = -1 EBADF (Bad file descriptor) [pid 5875] close(21) = -1 EBADF (Bad file descriptor) [pid 5875] close(22) = -1 EBADF (Bad file descriptor) [pid 5875] close(23) = -1 EBADF (Bad file descriptor) [pid 5875] close(24) = -1 EBADF (Bad file descriptor) [pid 5875] close(25) = -1 EBADF (Bad file descriptor) [pid 5875] close(26) = -1 EBADF (Bad file descriptor) [pid 5875] close(27) = -1 EBADF (Bad file descriptor) [pid 5875] close(28) = -1 EBADF (Bad file descriptor) [pid 5875] close(29) = -1 EBADF (Bad file descriptor) [pid 5875] exit_group(0 [pid 5876] <... futex resumed>) = ? [pid 5875] <... exit_group resumed>) = ? [pid 5876] +++ exited with 0 +++ [pid 5875] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=59 /* 0.59 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5829] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./3/binderfs") = 0 [ 82.265777][ T5829] bcachefs (loop0): shutting down [ 82.270822][ T5829] bcachefs (loop0): going read-only [ 82.276371][ T5829] bcachefs (loop0): finished waiting for writes to stop [ 82.283987][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 82.305607][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18 [ 82.316921][ T5829] bcachefs (loop0): unshutdown complete, journal seq 19 [ 82.324739][ T5829] bcachefs (loop0): done going read-only, filesystem not clean [ 82.340873][ T5829] bcachefs (loop0): shutdown complete [pid 5829] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5829] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x55555f4d3830 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x55555f4d3830 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./3/file0") = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./3") = 0 [pid 5829] mkdir("./4", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5887 attached , child_tidptr=0x55555f4ca750) = 10 [pid 5887] set_robust_list(0x55555f4ca760, 24) = 0 [pid 5887] chdir("./4") = 0 [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5887] setpgid(0, 0) = 0 [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5887] write(3, "1000", 4) = 4 [pid 5887] close(3) = 0 [pid 5887] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5887] write(1, "executing program\n", 18executing program ) = 18 [pid 5887] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5887] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5887] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5887] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5887] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5887] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5888 attached [pid 5888] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5887] <... clone3 resumed> => {parent_tid=[11]}, 88) = 11 [pid 5888] <... rseq resumed>) = 0 [pid 5888] set_robust_list(0x7fd27f7a89a0, 24 [pid 5887] rt_sigprocmask(SIG_SETMASK, [], [pid 5888] <... set_robust_list resumed>) = 0 [pid 5887] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5888] rt_sigprocmask(SIG_SETMASK, [], [pid 5887] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5887] <... futex resumed>) = 0 [pid 5888] memfd_create("syzkaller", 0 [pid 5887] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5888] <... memfd_create resumed>) = 3 [pid 5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5888] munmap(0x7fd277200000, 138412032) = 0 [pid 5888] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5888] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5888] close(3) = 0 [pid 5888] close(4) = 0 [pid 5888] mkdir("./file0", 0777) = 0 [ 83.786739][ T5888] loop0: detected capacity change from 0 to 32768 [ 83.856970][ T5888] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 83.875026][ T5888] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 83.883023][ T5888] bcachefs (loop0): Version upgrade required: [ 83.883023][ T5888] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 83.883023][ T5888] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 83.883023][ T5888] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 83.963949][ T5888] bcachefs (loop0): check_topology... done [ 83.969800][ T5888] bcachefs (loop0): accounting_read... done [ 83.975974][ T5888] bcachefs (loop0): alloc_read... done [ 83.981830][ T5888] bcachefs (loop0): stripes_read... done [ 83.987558][ T5888] bcachefs (loop0): snapshots_read... done [ 83.993490][ T5888] bcachefs (loop0): check_allocations... [ 83.995736][ T5888] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 83.995749][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 84.026342][ T5888] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 84.026355][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 84.051066][ T5888] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 84.051079][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 84.076282][ T5888] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 84.076295][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 84.101578][ T5888] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 84.101591][ T5888] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 84.125162][ T5888] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 84.133458][ T5888] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 84.143364][ T5888] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 84.151727][ T5888] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 84.161566][ T5888] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 84.169962][ T5888] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 84.179704][ T5888] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 84.188159][ T5888] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 84.198052][ T5888] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 84.206450][ T5888] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 84.216273][ T5888] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 84.224791][ T5888] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 84.234783][ T5888] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 84.243213][ T5888] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 84.253495][ T5888] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 84.261875][ T5888] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 84.271508][ T5888] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 84.280297][ T5888] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 84.290551][ T5888] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 84.299427][ T5888] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 84.310214][ T5888] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 84.319061][ T5888] bcachefs (loop0): Ratelimiting new instances of previous error [ 84.326885][ T5888] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 84.337082][ T5888] bcachefs (loop0): Ratelimiting new instances of previous error [ 84.352577][ T5888] done [ 84.357094][ T5888] bcachefs (loop0): going read-write [pid 5888] mount("/dev/loop0", "./file0", "bcachefs", MS_NOATIME, "btree_node_mem_ptr_optimjzation,inodes_32bit,directWio,fsck,acl,norecovery,acl,str_hash=crc32c,obj_u"...) = 0 [pid 5888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5888] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5888] ioctl(4, LOOP_CLR_FD) = 0 [pid 5888] close(4) = 0 [ 84.366636][ T5888] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 84.379585][ T5888] bcachefs (loop0): done starting filesystem [ 84.398620][ T5836] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [pid 5888] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5888] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5887] <... futex resumed>) = 0 [pid 5887] close(3) = 0 [pid 5887] close(4) = -1 EBADF (Bad file descriptor) [pid 5887] close(5) = -1 EBADF (Bad file descriptor) [ 84.410628][ T5836] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [pid 5887] close(6) = -1 EBADF (Bad file descriptor) [pid 5887] close(7) = -1 EBADF (Bad file descriptor) [pid 5887] close(8) = -1 EBADF (Bad file descriptor) [pid 5887] close(9) = -1 EBADF (Bad file descriptor) [pid 5887] close(10) = -1 EBADF (Bad file descriptor) [pid 5887] close(11) = -1 EBADF (Bad file descriptor) [pid 5887] close(12) = -1 EBADF (Bad file descriptor) [pid 5887] close(13) = -1 EBADF (Bad file descriptor) [pid 5887] close(14) = -1 EBADF (Bad file descriptor) [pid 5887] close(15) = -1 EBADF (Bad file descriptor) [pid 5887] close(16) = -1 EBADF (Bad file descriptor) [pid 5887] close(17) = -1 EBADF (Bad file descriptor) [pid 5887] close(18) = -1 EBADF (Bad file descriptor) [pid 5887] close(19) = -1 EBADF (Bad file descriptor) [pid 5887] close(20) = -1 EBADF (Bad file descriptor) [pid 5887] close(21) = -1 EBADF (Bad file descriptor) [pid 5887] close(22) = -1 EBADF (Bad file descriptor) [pid 5887] close(23) = -1 EBADF (Bad file descriptor) [pid 5887] close(24) = -1 EBADF (Bad file descriptor) [pid 5887] close(25) = -1 EBADF (Bad file descriptor) [pid 5887] close(26) = -1 EBADF (Bad file descriptor) [pid 5887] close(27) = -1 EBADF (Bad file descriptor) [pid 5887] close(28) = -1 EBADF (Bad file descriptor) [pid 5887] close(29) = -1 EBADF (Bad file descriptor) [pid 5887] exit_group(0 [pid 5888] <... futex resumed>) = ? [pid 5887] <... exit_group resumed>) = ? [pid 5888] +++ exited with 0 +++ [pid 5887] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=56 /* 0.56 s */} --- [pid 5829] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./4/binderfs") = 0 [ 84.711027][ T5829] bcachefs (loop0): shutting down [ 84.716285][ T5829] bcachefs (loop0): going read-only [ 84.721482][ T5829] bcachefs (loop0): finished waiting for writes to stop [ 84.729661][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 84.752410][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17 [ 84.763306][ T5829] bcachefs (loop0): unshutdown complete, journal seq 18 [ 84.770997][ T5829] bcachefs (loop0): done going read-only, filesystem not clean [ 84.788599][ T5829] bcachefs (loop0): shutdown complete [pid 5829] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5829] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x55555f4d3830 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x55555f4d3830 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./4/file0") = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./4") = 0 [pid 5829] mkdir("./5", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5899 attached [pid 5899] set_robust_list(0x55555f4ca760, 24 [pid 5829] <... clone resumed>, child_tidptr=0x55555f4ca750) = 12 [pid 5899] <... set_robust_list resumed>) = 0 [pid 5899] chdir("./5") = 0 [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5899] setpgid(0, 0) = 0 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5899] write(3, "1000", 4) = 4 [pid 5899] close(3) = 0 [pid 5899] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5899] write(1, "executing program\n", 18executing program ) = 18 [pid 5899] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5899] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5899] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5899] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5899] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5899] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5900 attached [pid 5900] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5899] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 5900] <... rseq resumed>) = 0 [pid 5899] rt_sigprocmask(SIG_SETMASK, [], [pid 5900] set_robust_list(0x7fd27f7a89a0, 24 [pid 5899] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5900] <... set_robust_list resumed>) = 0 [pid 5899] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5899] <... futex resumed>) = 0 [pid 5900] memfd_create("syzkaller", 0 [pid 5899] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5900] <... memfd_create resumed>) = 3 [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5900] munmap(0x7fd277200000, 138412032) = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5900] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5900] close(3) = 0 [pid 5900] close(4) = 0 [pid 5900] mkdir("./file0", 0777) = 0 [ 86.237198][ T5900] loop0: detected capacity change from 0 to 32768 [ 86.300456][ T5900] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 86.318679][ T5900] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 86.327260][ T5900] bcachefs (loop0): Version upgrade required: [ 86.327260][ T5900] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 86.327260][ T5900] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 86.327260][ T5900] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 86.408282][ T5900] bcachefs (loop0): check_topology... done [ 86.414325][ T5900] bcachefs (loop0): accounting_read... done [ 86.420407][ T5900] bcachefs (loop0): alloc_read... done [ 86.426180][ T5900] bcachefs (loop0): stripes_read... done [ 86.431939][ T5900] bcachefs (loop0): snapshots_read... done [ 86.438222][ T5900] bcachefs (loop0): check_allocations... [ 86.439720][ T5900] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 86.439732][ T5900] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 86.470062][ T5900] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 86.470075][ T5900] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 86.495045][ T5900] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 86.495058][ T5900] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 86.520106][ T5900] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 86.520118][ T5900] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 86.546887][ T5900] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 86.546899][ T5900] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 86.571170][ T5900] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.579624][ T5900] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.589497][ T5900] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.597863][ T5900] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.607690][ T5900] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.616052][ T5900] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.625812][ T5900] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.634186][ T5900] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.644038][ T5900] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.652381][ T5900] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.662356][ T5900] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.670759][ T5900] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.680506][ T5900] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.688896][ T5900] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 86.698626][ T5900] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 86.707000][ T5900] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 86.716543][ T5900] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 86.725347][ T5900] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 86.735521][ T5900] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 86.744427][ T5900] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 86.754759][ T5900] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 86.763537][ T5900] bcachefs (loop0): Ratelimiting new instances of previous error [ 86.771423][ T5900] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 86.781537][ T5900] bcachefs (loop0): Ratelimiting new instances of previous error [ 86.795694][ T5900] done [ 86.799731][ T5900] bcachefs (loop0): going read-write [pid 5900] mount("/dev/loop0", "./file0", "bcachefs", MS_NOATIME, "btree_node_mem_ptr_optimjzation,inodes_32bit,directWio,fsck,acl,norecovery,acl,str_hash=crc32c,obj_u"...) = 0 [pid 5900] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5900] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5900] ioctl(4, LOOP_CLR_FD) = 0 [pid 5900] close(4) = 0 [pid 5900] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5900] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5899] <... futex resumed>) = 0 [pid 5899] close(3) = 0 [pid 5899] close(4) = -1 EBADF (Bad file descriptor) [pid 5899] close(5) = -1 EBADF (Bad file descriptor) [pid 5899] close(6) = -1 EBADF (Bad file descriptor) [pid 5899] close(7) = -1 EBADF (Bad file descriptor) [pid 5899] close(8) = -1 EBADF (Bad file descriptor) [pid 5899] close(9) = -1 EBADF (Bad file descriptor) [pid 5899] close(10) = -1 EBADF (Bad file descriptor) [pid 5899] close(11) = -1 EBADF (Bad file descriptor) [pid 5899] close(12) = -1 EBADF (Bad file descriptor) [pid 5899] close(13) = -1 EBADF (Bad file descriptor) [pid 5899] close(14) = -1 EBADF (Bad file descriptor) [pid 5899] close(15) = -1 EBADF (Bad file descriptor) [pid 5899] close(16) = -1 EBADF (Bad file descriptor) [pid 5899] close(17) = -1 EBADF (Bad file descriptor) [pid 5899] close(18) = -1 EBADF (Bad file descriptor) [pid 5899] close(19) = -1 EBADF (Bad file descriptor) [pid 5899] close(20) = -1 EBADF (Bad file descriptor) [pid 5899] close(21) = -1 EBADF (Bad file descriptor) [pid 5899] close(22) = -1 EBADF (Bad file descriptor) [ 86.808871][ T5900] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 86.820710][ T5900] bcachefs (loop0): done starting filesystem [ 86.843436][ T5835] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [pid 5899] close(23) = -1 EBADF (Bad file descriptor) [pid 5899] close(24) = -1 EBADF (Bad file descriptor) [pid 5899] close(25) = -1 EBADF (Bad file descriptor) [pid 5899] close(26) = -1 EBADF (Bad file descriptor) [pid 5899] close(27) = -1 EBADF (Bad file descriptor) [pid 5899] close(28) = -1 EBADF (Bad file descriptor) [pid 5899] close(29) = -1 EBADF (Bad file descriptor) [pid 5899] exit_group(0 [pid 5900] <... futex resumed>) = ? [pid 5899] <... exit_group resumed>) = ? [pid 5900] +++ exited with 0 +++ [pid 5899] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=58 /* 0.58 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5829] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./5/binderfs") = 0 [ 86.856790][ T5835] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [ 86.882539][ T5829] bcachefs (loop0): shutting down [ 86.887887][ T5829] bcachefs (loop0): going read-only [ 86.893098][ T5829] bcachefs (loop0): finished waiting for writes to stop [ 86.901534][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 86.924782][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17 [ 86.936149][ T5829] bcachefs (loop0): unshutdown complete, journal seq 18 [ 86.943613][ T5829] bcachefs (loop0): done going read-only, filesystem not clean [ 86.960331][ T5829] bcachefs (loop0): shutdown complete [pid 5829] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5829] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x55555f4d3830 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x55555f4d3830 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./5/file0") = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./5") = 0 [pid 5829] mkdir("./6", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5911 attached [pid 5911] set_robust_list(0x55555f4ca760, 24) = 0 [pid 5911] chdir("./6" [pid 5829] <... clone resumed>, child_tidptr=0x55555f4ca750) = 14 [pid 5911] <... chdir resumed>) = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5911] setpgid(0, 0) = 0 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5911] write(3, "1000", 4) = 4 [pid 5911] close(3) = 0 [pid 5911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5911] write(1, "executing program\n", 18executing program ) = 18 [pid 5911] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5911] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5911] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5911] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5911] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5911] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5912 attached [pid 5912] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5911] <... clone3 resumed> => {parent_tid=[15]}, 88) = 15 [pid 5912] <... rseq resumed>) = 0 [pid 5911] rt_sigprocmask(SIG_SETMASK, [], [pid 5912] set_robust_list(0x7fd27f7a89a0, 24 [pid 5911] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5912] <... set_robust_list resumed>) = 0 [pid 5911] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5911] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5912] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5912] memfd_create("syzkaller", 0) = 3 [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5912] munmap(0x7fd277200000, 138412032) = 0 [pid 5912] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5912] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5912] close(3) = 0 [pid 5912] close(4) = 0 [pid 5912] mkdir("./file0", 0777) = 0 [ 88.305977][ T5912] loop0: detected capacity change from 0 to 32768 [ 88.372460][ T5912] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 88.390707][ T5912] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 88.399290][ T5912] bcachefs (loop0): Version upgrade required: [ 88.399290][ T5912] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 88.399290][ T5912] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 88.399290][ T5912] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 88.480598][ T5912] bcachefs (loop0): check_topology... done [ 88.486589][ T5912] bcachefs (loop0): accounting_read... done [ 88.493374][ T5912] bcachefs (loop0): alloc_read... done [ 88.499056][ T5912] bcachefs (loop0): stripes_read... done [ 88.505046][ T5912] bcachefs (loop0): snapshots_read... done [ 88.511125][ T5912] bcachefs (loop0): check_allocations... [ 88.513183][ T5912] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 88.513195][ T5912] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 88.543416][ T5912] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 88.543429][ T5912] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 88.567617][ T5912] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 88.567630][ T5912] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 88.592588][ T5912] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 88.592600][ T5912] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 88.617908][ T5912] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 88.617922][ T5912] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 88.641498][ T5912] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 88.649886][ T5912] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 88.659859][ T5912] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 88.668281][ T5912] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 88.678018][ T5912] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 88.687089][ T5912] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 88.696933][ T5912] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 88.705314][ T5912] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 88.715149][ T5912] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 88.723475][ T5912] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 88.733345][ T5912] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 88.741740][ T5912] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 88.751456][ T5912] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 88.759812][ T5912] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 88.769536][ T5912] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 88.777897][ T5912] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 88.787450][ T5912] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 88.796369][ T5912] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 88.806533][ T5912] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 88.815422][ T5912] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 88.825806][ T5912] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 88.834664][ T5912] bcachefs (loop0): Ratelimiting new instances of previous error [ 88.842439][ T5912] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 88.852557][ T5912] bcachefs (loop0): Ratelimiting new instances of previous error [ 88.865539][ T5912] done [ 88.869511][ T5912] bcachefs (loop0): going read-write [ 88.878681][ T5912] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 88.900990][ T5912] bcachefs (loop0): done starting filesystem [ 88.904126][ T5835] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [ 88.910437][ T5912] bcachefs (loop0): __bch2_inode_peek(): error looking up inum 1:4096: ENOENT_inode [ 88.922511][ T5835] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [ 88.929644][ T5912] bcachefs (loop0): bch2_fs_get_tree(): error mounting: error getting root inode ENOENT_inode [ 88.948527][ T5912] bcachefs (loop0): shutting down [ 88.954056][ T5912] bcachefs (loop0): going read-only [ 88.959338][ T5912] bcachefs (loop0): finished waiting for writes to stop [ 88.967536][ T5912] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 88.988331][ T5912] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17 [ 88.999093][ T5912] bcachefs (loop0): unshutdown complete, journal seq 18 [ 89.006632][ T5912] bcachefs (loop0): done going read-only, filesystem not clean [ 89.024432][ T5912] bcachefs (loop0): shutdown complete [pid 5912] mount("/dev/loop0", "./file0", "bcachefs", MS_NOATIME, "btree_node_mem_ptr_optimjzation,inodes_32bit,directWio,fsck,acl,norecovery,acl,str_hash=crc32c,obj_u"...) = -1 ENOENT (No such file or directory) [pid 5912] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5912] ioctl(3, LOOP_CLR_FD) = 0 [ 89.816052][ T5912] bcachefs: bch2_fs_get_tree() error: ENOENT_inode [pid 5912] close(3) = 0 [pid 5912] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5911] <... futex resumed>) = 0 [pid 5912] <... futex resumed>) = 1 [pid 5911] close(3 [pid 5912] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 5911] close(4) = -1 EBADF (Bad file descriptor) [pid 5911] close(5) = -1 EBADF (Bad file descriptor) [pid 5911] close(6) = -1 EBADF (Bad file descriptor) [pid 5911] close(7) = -1 EBADF (Bad file descriptor) [pid 5911] close(8) = -1 EBADF (Bad file descriptor) [pid 5911] close(9) = -1 EBADF (Bad file descriptor) [pid 5911] close(10) = -1 EBADF (Bad file descriptor) [pid 5911] close(11) = -1 EBADF (Bad file descriptor) [pid 5911] close(12) = -1 EBADF (Bad file descriptor) [pid 5911] close(13) = -1 EBADF (Bad file descriptor) [pid 5911] close(14) = -1 EBADF (Bad file descriptor) [pid 5911] close(15) = -1 EBADF (Bad file descriptor) [pid 5911] close(16) = -1 EBADF (Bad file descriptor) [pid 5911] close(17) = -1 EBADF (Bad file descriptor) [pid 5911] close(18) = -1 EBADF (Bad file descriptor) [pid 5911] close(19) = -1 EBADF (Bad file descriptor) [pid 5911] close(20) = -1 EBADF (Bad file descriptor) [pid 5911] close(21) = -1 EBADF (Bad file descriptor) [pid 5911] close(22) = -1 EBADF (Bad file descriptor) [pid 5911] close(23) = -1 EBADF (Bad file descriptor) [pid 5911] close(24) = -1 EBADF (Bad file descriptor) [pid 5911] close(25) = -1 EBADF (Bad file descriptor) [pid 5911] close(26) = -1 EBADF (Bad file descriptor) [pid 5911] close(27) = -1 EBADF (Bad file descriptor) [pid 5911] close(28) = -1 EBADF (Bad file descriptor) [pid 5911] close(29) = -1 EBADF (Bad file descriptor) [pid 5911] exit_group(0 [pid 5912] <... futex resumed>) = ? [pid 5911] <... exit_group resumed>) = ? [pid 5912] +++ exited with 0 +++ [pid 5911] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=83 /* 0.83 s */} --- [pid 5829] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./6/binderfs") = 0 [pid 5829] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x55555f4d3830 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x55555f4d3830 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./6/file0") = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./6") = 0 [pid 5829] mkdir("./7", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5923 attached [pid 5923] set_robust_list(0x55555f4ca760, 24) = 0 [pid 5923] chdir("./7" [pid 5829] <... clone resumed>, child_tidptr=0x55555f4ca750) = 16 [pid 5923] <... chdir resumed>) = 0 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0) = 0 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5923] write(3, "1000", 4) = 4 [pid 5923] close(3) = 0 [pid 5923] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5923] write(1, "executing program\n", 18executing program ) = 18 [pid 5923] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5923] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5923] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5923] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5923] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5924 attached [pid 5924] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5923] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 5924] <... rseq resumed>) = 0 [pid 5923] rt_sigprocmask(SIG_SETMASK, [], [pid 5924] set_robust_list(0x7fd27f7a89a0, 24 [pid 5923] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5924] <... set_robust_list resumed>) = 0 [pid 5923] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] rt_sigprocmask(SIG_SETMASK, [], [pid 5923] <... futex resumed>) = 0 [pid 5924] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5923] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5924] memfd_create("syzkaller", 0) = 3 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5924] munmap(0x7fd277200000, 138412032) = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5924] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5924] close(3) = 0 [pid 5924] close(4) = 0 [pid 5924] mkdir("./file0", 0777) = 0 [ 90.739682][ T5924] loop0: detected capacity change from 0 to 32768 [ 90.812338][ T5924] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 90.830601][ T5924] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 90.838740][ T5924] bcachefs (loop0): Version upgrade required: [ 90.838740][ T5924] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 90.838740][ T5924] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 90.838740][ T5924] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 90.919234][ T5924] bcachefs (loop0): check_topology... done [ 90.925495][ T5924] bcachefs (loop0): accounting_read... done [ 90.931723][ T5924] bcachefs (loop0): alloc_read... done [ 90.937341][ T5924] bcachefs (loop0): stripes_read... done [ 90.943019][ T5924] bcachefs (loop0): snapshots_read... done [ 90.948946][ T5924] bcachefs (loop0): check_allocations... [ 90.950554][ T5924] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 90.950566][ T5924] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 90.980940][ T5924] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 90.980953][ T5924] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 91.005144][ T5924] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 91.005157][ T5924] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 91.029700][ T5924] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 91.029712][ T5924] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 91.055795][ T5924] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 91.055809][ T5924] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 91.079515][ T5924] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 91.087907][ T5924] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 91.097858][ T5924] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 91.106649][ T5924] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 91.116475][ T5924] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 91.124808][ T5924] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 91.134971][ T5924] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 91.143348][ T5924] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 91.153254][ T5924] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 91.161619][ T5924] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 91.171346][ T5924] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 91.179685][ T5924] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 91.189420][ T5924] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 91.197765][ T5924] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 91.208292][ T5924] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 91.216660][ T5924] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 91.226193][ T5924] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 91.234981][ T5924] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 91.245290][ T5924] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 91.254687][ T5924] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 91.265017][ T5924] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 91.273847][ T5924] bcachefs (loop0): Ratelimiting new instances of previous error [ 91.281643][ T5924] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 91.291775][ T5924] bcachefs (loop0): Ratelimiting new instances of previous error [ 91.304008][ T5924] done [ 91.308369][ T5924] bcachefs (loop0): going read-write [pid 5924] mount("/dev/loop0", "./file0", "bcachefs", MS_NOATIME, "btree_node_mem_ptr_optimjzation,inodes_32bit,directWio,fsck,acl,norecovery,acl,str_hash=crc32c,obj_u"...) = 0 [pid 5924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5924] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5924] ioctl(4, LOOP_CLR_FD) = 0 [pid 5924] close(4) = 0 [pid 5924] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5924] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5923] <... futex resumed>) = 0 [pid 5923] close(3) = 0 [pid 5923] close(4) = -1 EBADF (Bad file descriptor) [pid 5923] close(5) = -1 EBADF (Bad file descriptor) [pid 5923] close(6) = -1 EBADF (Bad file descriptor) [pid 5923] close(7) = -1 EBADF (Bad file descriptor) [pid 5923] close(8) = -1 EBADF (Bad file descriptor) [pid 5923] close(9) = -1 EBADF (Bad file descriptor) [pid 5923] close(10) = -1 EBADF (Bad file descriptor) [pid 5923] close(11) = -1 EBADF (Bad file descriptor) [pid 5923] close(12) = -1 EBADF (Bad file descriptor) [pid 5923] close(13) = -1 EBADF (Bad file descriptor) [pid 5923] close(14) = -1 EBADF (Bad file descriptor) [pid 5923] close(15) = -1 EBADF (Bad file descriptor) [pid 5923] close(16) = -1 EBADF (Bad file descriptor) [pid 5923] close(17) = -1 EBADF (Bad file descriptor) [pid 5923] close(18) = -1 EBADF (Bad file descriptor) [pid 5923] close(19) = -1 EBADF (Bad file descriptor) [pid 5923] close(20) = -1 EBADF (Bad file descriptor) [pid 5923] close(21) = -1 EBADF (Bad file descriptor) [pid 5923] close(22) = -1 EBADF (Bad file descriptor) [pid 5923] close(23) = -1 EBADF (Bad file descriptor) [pid 5923] close(24) = -1 EBADF (Bad file descriptor) [pid 5923] close(25) = -1 EBADF (Bad file descriptor) [pid 5923] close(26) = -1 EBADF (Bad file descriptor) [pid 5923] close(27) = -1 EBADF (Bad file descriptor) [pid 5923] close(28) = -1 EBADF (Bad file descriptor) [pid 5923] close(29) = -1 EBADF (Bad file descriptor) [ 91.317189][ T5924] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 91.328578][ T5924] bcachefs (loop0): done starting filesystem [ 91.346711][ T46] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [ 91.360156][ T46] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [pid 5923] exit_group(0 [pid 5924] <... futex resumed>) = ? [pid 5923] <... exit_group resumed>) = ? [pid 5924] +++ exited with 0 +++ [pid 5923] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=54 /* 0.54 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5829] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./7/binderfs") = 0 [ 91.530703][ T5829] bcachefs (loop0): shutting down [ 91.535925][ T5829] bcachefs (loop0): going read-only [ 91.541145][ T5829] bcachefs (loop0): finished waiting for writes to stop [ 91.549531][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 91.570088][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17 [ 91.580846][ T5829] bcachefs (loop0): unshutdown complete, journal seq 18 [ 91.588882][ T5829] bcachefs (loop0): done going read-only, filesystem not clean [ 91.612847][ T5829] bcachefs (loop0): shutdown complete [pid 5829] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5829] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x55555f4d3830 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x55555f4d3830 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./7/file0") = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./7") = 0 [pid 5829] mkdir("./8", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5936 attached [pid 5936] set_robust_list(0x55555f4ca760, 24 [pid 5829] <... clone resumed>, child_tidptr=0x55555f4ca750) = 18 [pid 5936] <... set_robust_list resumed>) = 0 [pid 5936] chdir("./8") = 0 [pid 5936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5936] setpgid(0, 0) = 0 [pid 5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5936] write(3, "1000", 4) = 4 [pid 5936] close(3) = 0 [pid 5936] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5936] write(1, "executing program\n", 18) = 18 [pid 5936] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5936] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5936] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5936] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5936] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5936] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5936] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5937 attached [pid 5937] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5936] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 5937] <... rseq resumed>) = 0 [pid 5937] set_robust_list(0x7fd27f7a89a0, 24) = 0 [pid 5936] rt_sigprocmask(SIG_SETMASK, [], [pid 5937] rt_sigprocmask(SIG_SETMASK, [], [pid 5936] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5937] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5936] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5937] memfd_create("syzkaller", 0 [pid 5936] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5937] <... memfd_create resumed>) = 3 [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5937] munmap(0x7fd277200000, 138412032) = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5937] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5937] close(3) = 0 [pid 5937] close(4) = 0 [pid 5937] mkdir("./file0", 0777) = 0 [ 92.966898][ T5937] loop0: detected capacity change from 0 to 32768 [ 93.042820][ T5937] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 93.061560][ T5937] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 93.069713][ T5937] bcachefs (loop0): Version upgrade required: [ 93.069713][ T5937] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 93.069713][ T5937] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 93.069713][ T5937] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 93.150821][ T5937] bcachefs (loop0): check_topology... done [ 93.156858][ T5937] bcachefs (loop0): accounting_read... done [ 93.163879][ T5937] bcachefs (loop0): alloc_read... done [ 93.169475][ T5937] bcachefs (loop0): stripes_read... done [ 93.175270][ T5937] bcachefs (loop0): snapshots_read... done [ 93.181206][ T5937] bcachefs (loop0): check_allocations... [ 93.182753][ T5937] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 93.182766][ T5937] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 93.213042][ T5937] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 93.213055][ T5937] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 93.237350][ T5937] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 93.237363][ T5937] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 93.262291][ T5937] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 93.262314][ T5937] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 93.288054][ T5937] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 93.288068][ T5937] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 93.311757][ T5937] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 93.320156][ T5937] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 93.330011][ T5937] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 93.338415][ T5937] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 93.348214][ T5937] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 93.356618][ T5937] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 93.366486][ T5937] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 93.376403][ T5937] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 93.386312][ T5937] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 93.394793][ T5937] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 93.404669][ T5937] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 93.412998][ T5937] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 93.423060][ T5937] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 93.431522][ T5937] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 93.441265][ T5937] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 93.449653][ T5937] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 93.459260][ T5937] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 93.468076][ T5937] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 93.478235][ T5937] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 93.487138][ T5937] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 93.497382][ T5937] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 93.506210][ T5937] bcachefs (loop0): Ratelimiting new instances of previous error [ 93.514069][ T5937] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 93.524251][ T5937] bcachefs (loop0): Ratelimiting new instances of previous error [ 93.537353][ T5937] done [ 93.541261][ T5937] bcachefs (loop0): going read-write [pid 5937] mount("/dev/loop0", "./file0", "bcachefs", MS_NOATIME, "btree_node_mem_ptr_optimjzation,inodes_32bit,directWio,fsck,acl,norecovery,acl,str_hash=crc32c,obj_u"...) = 0 [pid 5937] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5937] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5937] ioctl(4, LOOP_CLR_FD) = 0 [pid 5937] close(4) = 0 [pid 5937] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5937] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5936] <... futex resumed>) = 0 [pid 5936] close(3) = 0 [pid 5936] close(4) = -1 EBADF (Bad file descriptor) [pid 5936] close(5) = -1 EBADF (Bad file descriptor) [ 93.549929][ T5937] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 93.563219][ T5937] bcachefs (loop0): done starting filesystem [ 93.579560][ T46] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [ 93.591936][ T46] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [pid 5936] close(6) = -1 EBADF (Bad file descriptor) [pid 5936] close(7) = -1 EBADF (Bad file descriptor) [pid 5936] close(8) = -1 EBADF (Bad file descriptor) [pid 5936] close(9) = -1 EBADF (Bad file descriptor) [pid 5936] close(10) = -1 EBADF (Bad file descriptor) [pid 5936] close(11) = -1 EBADF (Bad file descriptor) [pid 5936] close(12) = -1 EBADF (Bad file descriptor) [pid 5936] close(13) = -1 EBADF (Bad file descriptor) [pid 5936] close(14) = -1 EBADF (Bad file descriptor) [pid 5936] close(15) = -1 EBADF (Bad file descriptor) [pid 5936] close(16) = -1 EBADF (Bad file descriptor) [pid 5936] close(17) = -1 EBADF (Bad file descriptor) [pid 5936] close(18) = -1 EBADF (Bad file descriptor) [pid 5936] close(19) = -1 EBADF (Bad file descriptor) [pid 5936] close(20) = -1 EBADF (Bad file descriptor) [pid 5936] close(21) = -1 EBADF (Bad file descriptor) [pid 5936] close(22) = -1 EBADF (Bad file descriptor) [pid 5936] close(23) = -1 EBADF (Bad file descriptor) [pid 5936] close(24) = -1 EBADF (Bad file descriptor) [pid 5936] close(25) = -1 EBADF (Bad file descriptor) [pid 5936] close(26) = -1 EBADF (Bad file descriptor) [pid 5936] close(27) = -1 EBADF (Bad file descriptor) [pid 5936] close(28) = -1 EBADF (Bad file descriptor) [pid 5936] close(29) = -1 EBADF (Bad file descriptor) [pid 5936] exit_group(0 [pid 5937] <... futex resumed>) = ? [pid 5937] +++ exited with 0 +++ [pid 5936] <... exit_group resumed>) = ? [pid 5936] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=60 /* 0.60 s */} --- [pid 5829] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./8/binderfs") = 0 [ 93.926676][ T5829] bcachefs (loop0): shutting down [ 93.931743][ T5829] bcachefs (loop0): going read-only [ 93.937225][ T5829] bcachefs (loop0): finished waiting for writes to stop [ 93.945055][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 93.966239][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18 [ 93.976904][ T5829] bcachefs (loop0): unshutdown complete, journal seq 19 [ 93.985296][ T5829] bcachefs (loop0): done going read-only, filesystem not clean [ 94.001788][ T5829] bcachefs (loop0): shutdown complete [pid 5829] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5829] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x55555f4d3830 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x55555f4d3830 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./8/file0") = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./8") = 0 [pid 5829] mkdir("./9", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5948 attached [pid 5948] set_robust_list(0x55555f4ca760, 24) = 0 [pid 5948] chdir("./9" [pid 5829] <... clone resumed>, child_tidptr=0x55555f4ca750) = 20 [pid 5948] <... chdir resumed>) = 0 [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5948] setpgid(0, 0) = 0 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5948] write(3, "1000", 4) = 4 [pid 5948] close(3) = 0 [pid 5948] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5948] write(1, "executing program\n", 18executing program ) = 18 [pid 5948] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5948] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5948] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5948] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5948] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5948] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5948] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5949 attached [pid 5949] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5948] <... clone3 resumed> => {parent_tid=[21]}, 88) = 21 [pid 5948] rt_sigprocmask(SIG_SETMASK, [], [pid 5949] <... rseq resumed>) = 0 [pid 5948] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5949] set_robust_list(0x7fd27f7a89a0, 24 [pid 5948] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5949] <... set_robust_list resumed>) = 0 [pid 5949] rt_sigprocmask(SIG_SETMASK, [], [pid 5948] <... futex resumed>) = 0 [pid 5949] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5948] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5949] memfd_create("syzkaller", 0) = 3 [pid 5949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5949] munmap(0x7fd277200000, 138412032) = 0 [pid 5949] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5949] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5949] close(3) = 0 [pid 5949] close(4) = 0 [pid 5949] mkdir("./file0", 0777) = 0 [ 95.371954][ T5949] loop0: detected capacity change from 0 to 32768 [ 95.442274][ T5949] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 95.460623][ T5949] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 95.469008][ T5949] bcachefs (loop0): Version upgrade required: [ 95.469008][ T5949] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 95.469008][ T5949] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 95.469008][ T5949] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 95.552181][ T5949] bcachefs (loop0): check_topology... done [ 95.558209][ T5949] bcachefs (loop0): accounting_read... done [ 95.564576][ T5949] bcachefs (loop0): alloc_read... done [ 95.570236][ T5949] bcachefs (loop0): stripes_read... done [ 95.576458][ T5949] bcachefs (loop0): snapshots_read... done [ 95.582394][ T5949] bcachefs (loop0): check_allocations... [ 95.584193][ T5949] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 95.584206][ T5949] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 95.614844][ T5949] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 95.614863][ T5949] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 95.639176][ T5949] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 95.639195][ T5949] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 95.663622][ T5949] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 95.663635][ T5949] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 95.689544][ T5949] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 95.689558][ T5949] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 95.713241][ T5949] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 95.721664][ T5949] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 95.731581][ T5949] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 95.739952][ T5949] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 95.749827][ T5949] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 95.758181][ T5949] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 95.767963][ T5949] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 95.776432][ T5949] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 95.786176][ T5949] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 95.794613][ T5949] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 95.804497][ T5949] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 95.812837][ T5949] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 95.822680][ T5949] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 95.831353][ T5949] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 95.841385][ T5949] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 95.849750][ T5949] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 95.859380][ T5949] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 95.868164][ T5949] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 95.878360][ T5949] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 95.887229][ T5949] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 95.897556][ T5949] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 95.906430][ T5949] bcachefs (loop0): Ratelimiting new instances of previous error [ 95.914207][ T5949] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 95.924343][ T5949] bcachefs (loop0): Ratelimiting new instances of previous error [ 95.937188][ T5949] done [ 95.941162][ T5949] bcachefs (loop0): going read-write [pid 5949] mount("/dev/loop0", "./file0", "bcachefs", MS_NOATIME, "btree_node_mem_ptr_optimjzation,inodes_32bit,directWio,fsck,acl,norecovery,acl,str_hash=crc32c,obj_u"...) = 0 [pid 5949] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5949] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5949] ioctl(4, LOOP_CLR_FD) = 0 [pid 5949] close(4) = 0 [pid 5949] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5949] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5948] <... futex resumed>) = 0 [pid 5948] close(3) = 0 [pid 5948] close(4) = -1 EBADF (Bad file descriptor) [pid 5948] close(5) = -1 EBADF (Bad file descriptor) [pid 5948] close(6) = -1 EBADF (Bad file descriptor) [pid 5948] close(7) = -1 EBADF (Bad file descriptor) [pid 5948] close(8) = -1 EBADF (Bad file descriptor) [pid 5948] close(9) = -1 EBADF (Bad file descriptor) [pid 5948] close(10) = -1 EBADF (Bad file descriptor) [pid 5948] close(11) = -1 EBADF (Bad file descriptor) [pid 5948] close(12) = -1 EBADF (Bad file descriptor) [pid 5948] close(13) = -1 EBADF (Bad file descriptor) [pid 5948] close(14) = -1 EBADF (Bad file descriptor) [pid 5948] close(15) = -1 EBADF (Bad file descriptor) [pid 5948] close(16) = -1 EBADF (Bad file descriptor) [pid 5948] close(17) = -1 EBADF (Bad file descriptor) [pid 5948] close(18) = -1 EBADF (Bad file descriptor) [pid 5948] close(19) = -1 EBADF (Bad file descriptor) [pid 5948] close(20) = -1 EBADF (Bad file descriptor) [pid 5948] close(21) = -1 EBADF (Bad file descriptor) [pid 5948] close(22) = -1 EBADF (Bad file descriptor) [pid 5948] close(23) = -1 EBADF (Bad file descriptor) [pid 5948] close(24) = -1 EBADF (Bad file descriptor) [pid 5948] close(25) = -1 EBADF (Bad file descriptor) [pid 5948] close(26) = -1 EBADF (Bad file descriptor) [pid 5948] close(27) = -1 EBADF (Bad file descriptor) [pid 5948] close(28) = -1 EBADF (Bad file descriptor) [pid 5948] close(29) = -1 EBADF (Bad file descriptor) [pid 5948] exit_group(0 [pid 5949] <... futex resumed>) = ? [pid 5948] <... exit_group resumed>) = ? [pid 5949] +++ exited with 0 +++ [pid 5948] +++ exited with 0 +++ [pid 5829] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=54 /* 0.54 s */} --- [pid 5829] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5829] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5829] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=80, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 4 entries */, 32768) = 112 [pid 5829] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] unlink("./9/binderfs") = 0 [ 95.953081][ T5949] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 95.966274][ T5949] bcachefs (loop0): done starting filesystem [ 95.981415][ T5835] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [ 95.994299][ T5835] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [ 96.035482][ T5829] bcachefs (loop0): shutting down [ 96.040555][ T5829] bcachefs (loop0): going read-only [ 96.047829][ T5829] bcachefs (loop0): finished waiting for writes to stop [ 96.055733][ T5829] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 96.077834][ T5829] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17 [ 96.088415][ T5829] bcachefs (loop0): unshutdown complete, journal seq 18 [ 96.096059][ T5829] bcachefs (loop0): done going read-only, filesystem not clean [ 96.112995][ T5829] bcachefs (loop0): shutdown complete [pid 5829] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5829] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5829] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5829] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5829] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 [pid 5829] getdents64(4, 0x55555f4d3830 /* 2 entries */, 32768) = 48 [pid 5829] getdents64(4, 0x55555f4d3830 /* 0 entries */, 32768) = 0 [pid 5829] close(4) = 0 [pid 5829] rmdir("./9/file0") = 0 [pid 5829] getdents64(3, 0x55555f4cb7f0 /* 0 entries */, 32768) = 0 [pid 5829] close(3) = 0 [pid 5829] rmdir("./9") = 0 [pid 5829] mkdir("./10", 0777) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5829] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5829] close(3) = 0 [pid 5829] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5960 attached , child_tidptr=0x55555f4ca750) = 22 [pid 5960] set_robust_list(0x55555f4ca760, 24) = 0 [pid 5960] chdir("./10") = 0 [pid 5960] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5960] setpgid(0, 0) = 0 [pid 5960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5960] write(3, "1000", 4) = 4 [pid 5960] close(3) = 0 [pid 5960] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5960] write(1, "executing program\n", 18executing program ) = 18 [pid 5960] futex(0x7fd27f8846cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5960] rt_sigaction(SIGRT_1, {sa_handler=0x7fd27f824ff0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fd27f7c5300}, NULL, 8) = 0 [pid 5960] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5960] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd27f788000 [pid 5960] mprotect(0x7fd27f789000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5960] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5960] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fd27f7a8990, parent_tid=0x7fd27f7a8990, exit_signal=0, stack=0x7fd27f788000, stack_size=0x20240, tls=0x7fd27f7a86c0}./strace-static-x86_64: Process 5962 attached [pid 5962] rseq(0x7fd27f7a8fe0, 0x20, 0, 0x53053053 [pid 5960] <... clone3 resumed> => {parent_tid=[23]}, 88) = 23 [pid 5960] rt_sigprocmask(SIG_SETMASK, [], [pid 5962] <... rseq resumed>) = 0 [pid 5962] set_robust_list(0x7fd27f7a89a0, 24) = 0 [pid 5962] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5960] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5962] futex(0x7fd27f8846c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5960] futex(0x7fd27f8846c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5960] futex(0x7fd27f8846cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5962] memfd_create("syzkaller", 0) = 3 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd277200000 [pid 5962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5962] munmap(0x7fd277200000, 138412032) = 0 [pid 5962] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5962] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5962] close(3) = 0 [pid 5962] close(4) = 0 [pid 5962] mkdir("./file0", 0777) = 0 [ 97.545807][ T5962] loop0: detected capacity change from 0 to 32768 [ 97.617131][ T5962] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names [ 97.635093][ T5962] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 97.643101][ T5962] bcachefs (loop0): Version upgrade required: [ 97.643101][ T5962] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 97.643101][ T5962] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 97.643101][ T5962] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 97.723938][ T5962] bcachefs (loop0): check_topology... done [ 97.729783][ T5962] bcachefs (loop0): accounting_read... done [ 97.735900][ T5962] bcachefs (loop0): alloc_read... done [ 97.741500][ T5962] bcachefs (loop0): stripes_read... done [ 97.747215][ T5962] bcachefs (loop0): snapshots_read... done [ 97.753227][ T5962] bcachefs (loop0): check_allocations... [ 97.754978][ T5962] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 97.754997][ T5962] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 97.785496][ T5962] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 97.785509][ T5962] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 97.809790][ T5962] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 97.809803][ T5962] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 97.834974][ T5962] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 97.834988][ T5962] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 97.862365][ T5962] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 97.862384][ T5962] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 97.886006][ T5962] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.894427][ T5962] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.904304][ T5962] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.912576][ T5962] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.922387][ T5962] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.930747][ T5962] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.940762][ T5962] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.949209][ T5962] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.959035][ T5962] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.967402][ T5962] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.977204][ T5962] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.985549][ T5962] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.995379][ T5962] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 98.003758][ T5962] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 98.013455][ T5962] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 98.021881][ T5962] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 98.031502][ T5962] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 98.040284][ T5962] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 98.050600][ T5962] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 98.059520][ T5962] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 98.069870][ T5962] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 98.078722][ T5962] bcachefs (loop0): Ratelimiting new instances of previous error [ 98.086561][ T5962] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 98.096891][ T5962] bcachefs (loop0): Ratelimiting new instances of previous error [ 98.109498][ T5962] done [ 98.113462][ T5962] bcachefs (loop0): going read-write [ 98.122250][ T5962] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 98.138679][ T5962] bcachefs (loop0): done starting filesystem [ 98.145285][ T5835] bcachefs (loop0): bch2_delete_dead_snapshots(): error deleting snapshot 4294967295 ENOENT_bkey_type_mismatch [ 98.154984][ T5962] bcachefs (loop0): __bch2_inode_peek(): error looking up inum 1:4096: ENOENT_inode [ 98.157835][ T5835] bcachefs (loop0): bch2_delete_dead_snapshots(): error ENOENT_bkey_type_mismatch [ 98.169879][ T5962] bcachefs (loop0): bch2_fs_get_tree(): error mounting: error getting root inode ENOENT_inode [ 98.186579][ T5962] bcachefs (loop0): shutting down [ 98.191611][ T5962] bcachefs (loop0): going read-only [ 98.196988][ T5962] bcachefs (loop0): finished waiting for writes to stop [ 98.204973][ T5962] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 98.225391][ T5962] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 16 [ 98.237120][ T5962] bcachefs (loop0): unshutdown complete, journal seq 17 [ 98.244959][ T5962] bcachefs (loop0): done going read-only, filesystem not clean [ 98.262631][ T5962] bcachefs (loop0): shutdown complete [ 98.927789][ T5962] ------------[ cut here ]------------ [ 98.935372][ T5962] kernel BUG at fs/bcachefs/btree_cache.c:594! [ 98.942452][ T5962] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 98.949428][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz-executor386 Not tainted 6.12.0-rc5-syzkaller-00063-g0fc810ae3ae1 #0 [ 98.960531][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.970583][ T5962] RIP: 0010:bch2_fs_btree_cache_exit+0x1124/0x1130 [ 98.977082][ T5962] Code: fd 90 0f 0b e8 2d 3c 84 fd 90 0f 0b e8 25 3c 84 fd 90 0f 0b e8 1d 3c 84 fd 90 0f 0b e8 15 3c 84 fd 90 0f 0b e8 0d 3c 84 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 98.996684][ T5962] RSP: 0018:ffffc90003f87838 EFLAGS: 00010293 [ 99.002745][ T5962] RAX: ffffffff84109db3 RBX: 0000000000000002 RCX: ffff888026b15a00 [ 99.010706][ T5962] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 99.018666][ T5962] RBP: 1ffff1100ff84116 R08: ffffffff84109457 R09: 1ffff1100e4703b6 [ 99.026626][ T5962] R10: dffffc0000000000 R11: ffffed100e4703b7 R12: ffff888072381c78 [ 99.034588][ T5962] R13: ffff888072380000 R14: 0000000000000000 R15: dffffc0000000000 [ 99.042547][ T5962] FS: 00007fd27f7a86c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 99.051469][ T5962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.058042][ T5962] CR2: 000055fbbc3a0680 CR3: 0000000034524000 CR4: 00000000003526f0 [ 99.066004][ T5962] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.073966][ T5962] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.082011][ T5962] Call Trace: [ 99.085297][ T5962] [ 99.088235][ T5962] ? __die_body+0x5f/0xb0 [ 99.092583][ T5962] ? die+0x9e/0xc0 [ 99.096344][ T5962] ? do_trap+0x15a/0x3a0 [ 99.100582][ T5962] ? bch2_fs_btree_cache_exit+0x1124/0x1130 [ 99.106470][ T5962] ? do_error_trap+0x1dc/0x2c0 [ 99.111224][ T5962] ? bch2_fs_btree_cache_exit+0x1124/0x1130 [ 99.117109][ T5962] ? __pfx_do_error_trap+0x10/0x10 [ 99.122217][ T5962] ? handle_invalid_op+0x34/0x40 [ 99.127158][ T5962] ? bch2_fs_btree_cache_exit+0x1124/0x1130 [ 99.133040][ T5962] ? exc_invalid_op+0x38/0x50 [ 99.137727][ T5962] ? asm_exc_invalid_op+0x1a/0x20 [ 99.142744][ T5962] ? bch2_fs_btree_cache_exit+0x7c7/0x1130 [ 99.148542][ T5962] ? bch2_fs_btree_cache_exit+0x1123/0x1130 [ 99.154428][ T5962] ? bch2_fs_btree_cache_exit+0x1124/0x1130 [ 99.160310][ T5962] ? bch2_fs_btree_cache_exit+0x1123/0x1130 [ 99.166197][ T5962] bch2_fs_release+0x20e/0x7d0 [ 99.170957][ T5962] ? kobject_put+0x44d/0x480 [ 99.175541][ T5962] kobject_put+0x22f/0x480 [ 99.179954][ T5962] deactivate_locked_super+0xc4/0x130 [ 99.185316][ T5962] bch2_fs_get_tree+0xcf3/0x1710 [ 99.190255][ T5962] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 99.195625][ T5962] ? generic_parse_monolithic+0x387/0x400 [ 99.201355][ T5962] ? cap_capable+0x1b4/0x250 [ 99.205937][ T5962] ? safesetid_security_capable+0xb2/0x1d0 [ 99.211736][ T5962] vfs_get_tree+0x90/0x2b0 [ 99.216152][ T5962] do_new_mount+0x2be/0xb40 [ 99.220649][ T5962] ? __pfx_do_new_mount+0x10/0x10 [ 99.225670][ T5962] __se_sys_mount+0x2d6/0x3c0 [ 99.230345][ T5962] ? __pfx___se_sys_mount+0x10/0x10 [ 99.235538][ T5962] ? do_syscall_64+0x100/0x230 [ 99.240298][ T5962] ? __x64_sys_mount+0x20/0xc0 [ 99.245053][ T5962] do_syscall_64+0xf3/0x230 [ 99.249549][ T5962] ? clear_bhb_loop+0x35/0x90 [ 99.254216][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.260100][ T5962] RIP: 0033:0x7fd27f7fea5a [ 99.264515][ T5962] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 1e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 99.284112][ T5962] RSP: 002b:00007fd27f7a7fd8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 99.292519][ T5962] RAX: ffffffffffffffda RBX: 00007fd27f7a7ff0 RCX: 00007fd27f7fea5a [ 99.300491][ T5962] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007fd27f7a7ff0 [ 99.308453][ T5962] RBP: 0000000000000004 R08: 00007fd27f7a8030 R09: 00000000000058aa [ 99.316414][ T5962] R10: 0000000000000400 R11: 0000000000000282 R12: 00007fd27f7a8030 [ 99.324387][ T5962] R13: 0000000000000400 R14: 0000000000000003 R15: 0000000001000000 [ 99.332378][ T5962] [ 99.335392][ T5962] Modules linked in: [ 99.339982][ T5962] ---[ end trace 0000000000000000 ]--- [ 99.348621][ T5962] RIP: 0010:bch2_fs_btree_cache_exit+0x1124/0x1130 [ 99.355242][ T5962] Code: fd 90 0f 0b e8 2d 3c 84 fd 90 0f 0b e8 25 3c 84 fd 90 0f 0b e8 1d 3c 84 fd 90 0f 0b e8 15 3c 84 fd 90 0f 0b e8 0d 3c 84 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 99.375062][ T5962] RSP: 0018:ffffc90003f87838 EFLAGS: 00010293 [ 99.381160][ T5962] RAX: ffffffff84109db3 RBX: 0000000000000002 RCX: ffff888026b15a00 [ 99.389191][ T5962] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 99.397684][ T5962] RBP: 1ffff1100ff84116 R08: ffffffff84109457 R09: 1ffff1100e4703b6 [ 99.406308][ T5962] R10: dffffc0000000000 R11: ffffed100e4703b7 R12: ffff888072381c78 [ 99.414359][ T5962] R13: ffff888072380000 R14: 0000000000000000 R15: dffffc0000000000 [ 99.422341][ T5962] FS: 00007fd27f7a86c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 99.431340][ T5962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.437971][ T5962] CR2: 000055fbbc39f600 CR3: 0000000034524000 CR4: 00000000003526f0 [ 99.446088][ T5962] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.454218][ T5962] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.462206][ T5962] Kernel panic - not syncing: Fatal exception [ 99.468654][ T5962] Kernel Offset: disabled [ 99.472985][ T5962] Rebooting in 86400 seconds..