version: 1.9: disk_accounting_v2 recovery passes: check_allocations errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,bkey_version_in_future emergency read only at seq 0 bcachefs (loop0): sb invalid before write: Invalid superblock section downgrade: downgrade entry overruns end of superblock section downgrade (size 120): version: 1.9: disk_accounting_v2 recovery passes: check_allocations errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,bkey_version_in_future bcachefs (loop0): btree node read error at btree extents level 0/0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c70ab18f40f86f94 written 24 min_key POS_MIN durability: 1 ptr: 0:167:0 gen 0 loop0 node offset 16/24 bset u64s 0: empty bset loop0 btree validate error flagging btree extents lost data running recovery pass check_topology (2), currently at recovery_pass_empty (0) running recovery pass check_lrus (14), currently at recovery_pass_empty (0) running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) running recovery pass check_topology (2), currently at recovery_pass_empty (0) running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) ret fsck_errors_not_fixed bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0: (unpack error) invalid variable length fields, deleting bcachefs (loop0): invalid bkey in btree_node btree=snapshots level=0: u64s 12 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 1 depth 0 skiplist 3892314112 0 0 skiplist not normalized, deleting bcachefs (loop0): sb invalid before write: Invalid superblock section downgrade: downgrade entry overruns end of superblock section downgrade (size 120): version: 1.9: disk_accounting_v2 recovery passes: check_allocations errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,bkey_version_in_future bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing bcachefs (loop0): sb invalid before write: Invalid superblock section downgrade: downgrade entry overruns end of superblock section downgrade (size 120): version: 1.9: disk_accounting_v2 recovery passes: check_allocations errors: dev_usage_buckets_wrong,dev_usage_sectors_wrong,dev_usage_fragmented_wrong,fs_usage_hidden_wrong,fs_usage_btree_wrong,fs_usage_data_wrong,fs_usage_cached_wrong,fs_usage_reserved_wrong,fs_usage_nr_inodes_wrong,fs_usage_persistent_reserved_wrong,fs_usage_replicas_wrong,bkey_version_in_future bcachefs (loop0): btree node read error at btree lru level 0/0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq cae06db3fbb516d6 written 8 min_key POS_MIN durability: 1 ptr: 0:180:0 gen 0 loop0 node offset 0/8 bset u64s 0: invalid bkey format: field 0 too large: 18446744073709551615 + 32767 > 18446744073709551615 u64s 3 fields 64:32767, 64:0, 32:0, 0:0, 255:0, 255:0 loop0 btree validate error flagging btree lru lost data running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) ret btree_node_read_err_bad_node bcachefs (loop0): error reading btree root btree=lru level=0: btree_node_read_error, fixing ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in fs/bcachefs/disk_accounting.c:238:2 index 9 is out of range for type 'const unsigned int[9]' CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 ubsan_epilogue+0xa/0x40 lib/ubsan.c:233 __ubsan_handle_out_of_bounds+0xe9/0xf0 lib/ubsan.c:455 bch2_accounting_validate+0x112f/0x1400 fs/bcachefs/disk_accounting.c:238 bch2_bkey_val_validate+0x205/0x3e0 fs/bcachefs/bkey_methods.c:143 btree_node_bkey_val_validate fs/bcachefs/btree_io.c:880 [inline] bch2_btree_node_read_done+0x4051/0x5550 fs/bcachefs/btree_io.c:1303 btree_node_read_work+0x40e/0xe60 fs/bcachefs/btree_io.c:1440 bch2_btree_node_read+0x887/0x2a00 fs/bcachefs/btree_io.c:-1 __bch2_btree_root_read fs/bcachefs/btree_io.c:1906 [inline] bch2_btree_root_read+0x5f0/0x760 fs/bcachefs/btree_io.c:1928 read_btree_roots+0x2c6/0x840 fs/bcachefs/recovery.c:615 bch2_fs_recovery+0x261f/0x3a50 fs/bcachefs/recovery.c:1006 bch2_fs_start+0xaaf/0xda0 fs/bcachefs/super.c:1213 bch2_fs_get_tree+0xb39/0x1520 fs/bcachefs/fs.c:2488 vfs_get_tree+0x8f/0x2b0 fs/super.c:1815 do_new_mount+0x2a2/0x9e0 fs/namespace.c:3808 do_mount fs/namespace.c:4136 [inline] __do_sys_mount fs/namespace.c:4347 [inline] __se_sys_mount+0x317/0x410 fs/namespace.c:4324 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5be599034a Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5be67bbe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f5be67bbef0 RCX: 00007f5be599034a RDX: 0000200000000140 RSI: 0000200000004940 RDI: 00007f5be67bbeb0 RBP: 0000200000000140 R08: 00007f5be67bbef0 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000004940 R13: 00007f5be67bbeb0 R14: 0000000000004a28 R15: 00002000000003c0 ---[ end trace ]---