./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1184499850 <...> Warning: Permanently added '10.128.10.26' (ED25519) to the list of known hosts. execve("./syz-executor1184499850", ["./syz-executor1184499850"], 0x7ffc2bc17820 /* 10 vars */) = 0 brk(NULL) = 0x555563298000 brk(0x555563298d00) = 0x555563298d00 arch_prctl(ARCH_SET_FS, 0x555563298380) = 0 set_tid_address(0x555563298650) = 5778 set_robust_list(0x555563298660, 24) = 0 rseq(0x555563298ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1184499850", 4096) = 28 getrandom("\xb0\x06\x68\xb6\x5b\xcd\x6d\x54", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555563298d00 brk(0x5555632b9d00) = 0x5555632b9d00 brk(0x5555632ba000) = 0x5555632ba000 mprotect(0x7f193c83a000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555563298650) = 5779 ./strace-static-x86_64: Process 5779 attached [pid 5778] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5779] set_robust_list(0x555563298660, 24) = 0 [pid 5779] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5778] <... clone resumed>, child_tidptr=0x555563298650) = 5780 ./strace-static-x86_64: Process 5780 attached [pid 5779] <... openat resumed>) = 3 [pid 5780] set_robust_list(0x555563298660, 24) = 0 [pid 5778] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5780] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5779] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5781 attached [pid 5780] <... openat resumed>) = 3 [pid 5779] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5778] <... clone resumed>, child_tidptr=0x555563298650) = 5781 [pid 5778] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5781] set_robust_list(0x555563298660, 24 [pid 5779] close(3 [pid 5781] <... set_robust_list resumed>) = 0 [pid 5779] <... close resumed>) = 0 [pid 5780] ioctl(3, LOOP_CLR_FD [pid 5779] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5780] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5782 attached [pid 5778] <... clone resumed>, child_tidptr=0x555563298650) = 5782 [pid 5780] close(3 [pid 5781] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5778] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5780] <... close resumed>) = 0 [pid 5782] set_robust_list(0x555563298660, 24 [pid 5781] <... openat resumed>) = 3 [pid 5780] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5784 attached ./strace-static-x86_64: Process 5783 attached [pid 5782] <... set_robust_list resumed>) = 0 [pid 5783] set_robust_list(0x555563298660, 24 [pid 5784] set_robust_list(0x555563298660, 24 [pid 5779] <... clone resumed>, child_tidptr=0x555563298650) = 5783 [pid 5784] <... set_robust_list resumed>) = 0 [pid 5783] <... set_robust_list resumed>) = 0 [pid 5784] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5783] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5778] <... clone resumed>, child_tidptr=0x555563298650) = 5784 [pid 5782] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5783] <... prctl resumed>) = 0 [pid 5782] <... openat resumed>) = 3 [pid 5781] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5785 attached [pid 5780] <... clone resumed>, child_tidptr=0x555563298650) = 5785 [pid 5784] <... openat resumed>) = 3 [pid 5782] ioctl(3, LOOP_CLR_FD [pid 5785] set_robust_list(0x555563298660, 24 [pid 5783] setpgid(0, 0 [pid 5782] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5781] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5785] <... set_robust_list resumed>) = 0 [pid 5785] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5783] <... setpgid resumed>) = 0 [pid 5785] <... prctl resumed>) = 0 [pid 5784] ioctl(3, LOOP_CLR_FD [pid 5783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5781] close(3 [pid 5782] close(3 [pid 5785] setpgid(0, 0 [pid 5782] <... close resumed>) = 0 [pid 5785] <... setpgid resumed>) = 0 [pid 5782] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5781] <... close resumed>) = 0 [pid 5784] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5783] <... openat resumed>) = 3 [pid 5781] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5786 attached [pid 5785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5784] close(3 [pid 5783] write(3, "1000", 4 [pid 5786] set_robust_list(0x555563298660, 24 [pid 5785] write(3, "1000", 4 [pid 5784] <... close resumed>) = 0 [pid 5783] <... write resumed>) = 4 [pid 5786] <... set_robust_list resumed>) = 0 [pid 5785] <... write resumed>) = 4 executing program [pid 5783] close(3./strace-static-x86_64: Process 5787 attached [pid 5786] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5785] close(3 [pid 5784] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5786] <... prctl resumed>) = 0 [pid 5782] <... clone resumed>, child_tidptr=0x555563298650) = 5786 [pid 5783] <... close resumed>) = 0 [pid 5786] setpgid(0, 0 [pid 5785] <... close resumed>) = 0 [pid 5786] <... setpgid resumed>) = 0 [pid 5785] write(1, "executing program\n", 18 [pid 5786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program [pid 5785] <... write resumed>) = 18 [pid 5783] write(1, "executing program\n", 18 [pid 5781] <... clone resumed>, child_tidptr=0x555563298650) = 5787 ./strace-static-x86_64: Process 5788 attached [pid 5787] set_robust_list(0x555563298660, 24 [pid 5786] <... openat resumed>) = 3 [pid 5785] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=584}, [pid 5783] <... write resumed>) = 18 [pid 5788] set_robust_list(0x555563298660, 24 [pid 5787] <... set_robust_list resumed>) = 0 [pid 5786] write(3, "1000", 4 [pid 5785] <... prlimit64 resumed>NULL) = 0 [pid 5783] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=584}, [pid 5788] <... set_robust_list resumed>) = 0 [pid 5787] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5786] <... write resumed>) = 4 [pid 5785] sched_setscheduler(0, SCHED_FIFO, [7] [pid 5784] <... clone resumed>, child_tidptr=0x555563298650) = 5788 [pid 5783] <... prlimit64 resumed>NULL) = 0 [pid 5788] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5787] <... prctl resumed>) = 0 [pid 5786] close(3 [pid 5785] <... sched_setscheduler resumed>) = 0 [pid 5783] sched_setscheduler(0, SCHED_FIFO, [7] [pid 5788] <... prctl resumed>) = 0 [pid 5787] setpgid(0, 0 [pid 5786] <... close resumed>) = 0 [pid 5785] memfd_create("syzkaller", 0 [pid 5783] <... sched_setscheduler resumed>) = 0 [pid 5788] setpgid(0, 0 [pid 5787] <... setpgid resumed>) = 0 executing program [pid 5786] write(1, "executing program\n", 18 [pid 5785] <... memfd_create resumed>) = 3 [pid 5783] memfd_create("syzkaller", 0 [pid 5788] <... setpgid resumed>) = 0 [pid 5787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5786] <... write resumed>) = 18 [pid 5785] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5783] <... memfd_create resumed>) = 3 [pid 5788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5787] <... openat resumed>) = 3 [pid 5785] <... mmap resumed>) = 0x7f1934200000 [pid 5783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5788] <... openat resumed>) = 3 [pid 5787] write(3, "1000", 4 [pid 5786] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=584}, [pid 5783] <... mmap resumed>) = 0x7f1934200000 [pid 5787] <... write resumed>) = 4 [pid 5786] <... prlimit64 resumed>NULL) = 0 [pid 5785] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5788] write(3, "1000", 4 [pid 5787] close(3 [pid 5785] <... write resumed>) = 16777216 [pid 5783] <... write resumed>) = 16777216 executing program [pid 5787] <... close resumed>) = 0 [pid 5785] munmap(0x7f1934200000, 138412032 [pid 5783] munmap(0x7f1934200000, 138412032 [pid 5788] <... write resumed>) = 4 [pid 5787] write(1, "executing program\n", 18 [pid 5786] sched_setscheduler(0, SCHED_FIFO, [7] [pid 5785] <... munmap resumed>) = 0 [pid 5783] <... munmap resumed>) = 0 [pid 5788] close(3 [pid 5787] <... write resumed>) = 18 [pid 5786] <... sched_setscheduler resumed>) = 0 [pid 5785] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5783] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5788] <... close resumed>) = 0 [pid 5787] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=584}, executing program [pid 5786] memfd_create("syzkaller", 0 [pid 5785] <... openat resumed>) = 4 [pid 5783] <... openat resumed>) = 4 [pid 5788] write(1, "executing program\n", 18 [pid 5787] <... prlimit64 resumed>NULL) = 0 [pid 5786] <... memfd_create resumed>) = 3 [pid 5785] ioctl(4, LOOP_SET_FD, 3 [pid 5783] ioctl(4, LOOP_SET_FD, 3 [pid 5788] <... write resumed>) = 18 [pid 5787] sched_setscheduler(0, SCHED_FIFO, [7] [pid 5786] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5785] <... ioctl resumed>) = 0 [pid 5787] <... sched_setscheduler resumed>) = 0 [pid 5786] <... mmap resumed>) = 0x7f1934200000 [pid 5783] <... ioctl resumed>) = 0 [ 219.161955][ T5785] loop1: detected capacity change from 0 to 32768 [ 219.161955][ T5783] loop0: detected capacity change from 0 to 32768 [pid 5788] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=584}, [pid 5787] memfd_create("syzkaller", 0 [pid 5785] close(3 [pid 5783] close(3 [pid 5788] <... prlimit64 resumed>NULL) = 0 [pid 5787] <... memfd_create resumed>) = 3 [pid 5785] <... close resumed>) = 0 [pid 5783] <... close resumed>) = 0 [pid 5788] sched_setscheduler(0, SCHED_FIFO, [7] [pid 5787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5785] close(4 [pid 5783] close(4 [pid 5788] <... sched_setscheduler resumed>) = 0 [pid 5787] <... mmap resumed>) = 0x7f1934200000 [pid 5785] <... close resumed>) = 0 [pid 5783] <... close resumed>) = 0 [pid 5788] memfd_create("syzkaller", 0 [pid 5786] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5785] mkdir("./file1", 0777 [pid 5783] mkdir("./file1", 0777 [pid 5788] <... memfd_create resumed>) = 3 [pid 5787] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5785] <... mkdir resumed>) = 0 [pid 5783] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5786] <... write resumed>) = 16777216 [pid 5785] mount("/dev/loop1", "./file1", "bcachefs", 0, "" [pid 5783] mount("/dev/loop0", "./file1", "bcachefs", 0, "" [pid 5788] <... mmap resumed>) = 0x7f1934200000 [pid 5786] munmap(0x7f1934200000, 138412032 [pid 5788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5787] <... write resumed>) = 16777216 [pid 5787] munmap(0x7f1934200000, 138412032 [pid 5786] <... munmap resumed>) = 0 [pid 5787] <... munmap resumed>) = 0 [pid 5786] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5787] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5786] <... openat resumed>) = 4 [pid 5787] <... openat resumed>) = 4 [pid 5786] ioctl(4, LOOP_SET_FD, 3 [pid 5787] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5786] <... ioctl resumed>) = 0 [pid 5787] close(3 [pid 5786] close(3 [pid 5787] <... close resumed>) = 0 [pid 5786] <... close resumed>) = 0 [pid 5787] close(4 [pid 5786] close(4 [pid 5787] <... close resumed>) = 0 [pid 5786] <... close resumed>) = 0 [pid 5787] mkdir("./file1", 0777 [ 220.539845][ T5786] loop3: detected capacity change from 0 to 32768 [ 220.548362][ T5787] loop2: detected capacity change from 0 to 32768 [pid 5786] mkdir("./file1", 0777 [pid 5787] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5786] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 5787] mount("/dev/loop2", "./file1", "bcachefs", 0, "" [pid 5786] mount("/dev/loop3", "./file1", "bcachefs", 0, "" [pid 5788] <... write resumed>) = 16777216 [pid 5788] munmap(0x7f1934200000, 138412032) = 0 [pid 5788] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5788] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5788] close(3) = 0 [pid 5788] close(4) = 0 [pid 5788] mkdir("./file1", 0777) = -1 EEXIST (File exists) [ 220.871352][ T5788] loop4: detected capacity change from 0 to 32768 [ 220.937831][ T5783] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 220.955012][ T5783] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 220.965021][ T5783] bcachefs (loop0): Version upgrade required: [ 220.965021][ T5783] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 220.965021][ T5783] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 220.965021][ T5783] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 221.075186][ T5785] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 221.084959][ T5785] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 221.093668][ T5783] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 221.093771][ T5783] mode=100755 [ 221.093834][ T5783] flags=(15300000) [ 221.093898][ T5783] journal_seq=4 [ 221.093960][ T5783] hash_seed=d483206f1ed95abf [ 221.094034][ T5783] hash_type=siphash [ 221.094096][ T5783] bi_size=100 [ 221.094157][ T5783] bi_sectors=8 [ 221.094220][ T5783] bi_version=1126999418470400 [ 221.094287][ T5783] bi_atime=0 [ 221.094347][ T5783] bi_ctime=0 [ 221.094408][ T5783] bi_mtime=0 [ 221.094469][ T5783] bi_otime=2780562352 [ 221.094533][ T5783] bi_uid=2780562352 [ 221.094596][ T5783] bi_gid=0 [ 221.094657][ T5783] bi_nlink=2780562352 [ 221.094721][ T5783] bi_generation=0 [ 221.094783][ T5783] bi_dev=0 [ 221.094843][ T5783] bi_data_checksum=0 [ 221.094907][ T5783] bi_compression=56 [ 221.094970][ T5783] bi_project=0 [ 221.095038][ T5783] bi_background_compression=0 [ 221.095103][ T5783] bi_data_replicas=0 [ 221.095168][ T5783] bi_promote_target=0 [ 221.095232][ T5783] bi_foreground_target=0 [ 221.095298][ T5783] bi_background_target=0 [ 221.095364][ T5783] bi_erasure_code=0 [ 221.095427][ T5783] bi_fields_set=0 [ 221.095489][ T5783] bi_dir=0 [ 221.095549][ T5783] bi_dir_offset=0 [ 221.095611][ T5783] bi_subvol=0 [ 221.095671][ T5783] bi_parent_subvol=0 [ 221.095734][ T5783] bi_nocow=0 [ 221.095794][ T5783] bi_depth=0 [ 221.095855][ T5783] bi_inodes_32bit=0 [ 221.095921][ T5783] invalid compression opt 55: delete?, fixing [ 221.276918][ T5783] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 221.277030][ T5783] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 221.277153][ T5783] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 221.319247][ T5783] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 221.319247][ T5783] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 221.351259][ T5783] bcachefs (loop0): error validating btree node on loop0 at btree subvolumes level 0/0 [ 221.351357][ T5783] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key 0:19984723346456576:0 durability: 1 ptr: 0:35:0 gen 0 [ 221.351454][ T5783] node offset 0/16: incorrect min_key: got POS_MIN should be 0:19984723346456576:0 [ 221.361906][ T5787] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 221.376644][ T5783] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 221.377240][ T5783] bcachefs (loop0): flagging btree subvolumes lost data [ 221.386557][ T5787] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 221.395534][ T5783] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 221.440318][ T5783] error reading btree root btree=subvolumes level=0: btree_node_read_error, fixing [ 221.465343][ T5786] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 221.475020][ T5786] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 221.483734][ T5783] bcachefs (loop0): error validating btree node on loop0 at btree backpointers level 0/0 [ 221.483843][ T5783] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key 0:0:512 durability: 1 ptr: 0:37:0 gen 0 [ 221.483955][ T5783] node offset 0/24: incorrect min_key: got POS_MIN should be 0:0:512 [ 221.517468][ T5783] bcachefs (loop0): flagging btree backpointers lost data [ 221.529749][ T5783] error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 221.551601][ T5783] bcachefs (loop0): scan_for_btree_nodes... [ 221.655966][ T5788] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 221.672067][ T5788] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 222.094442][ T5783] bcachefs (loop0): btree node scan found 7 nodes after overwrites [ 222.102940][ T5783] done [ 222.115271][ T5783] bcachefs (loop0): check_topology... [ 222.120694][ T5783] bcachefs (loop0): btree root subvolumes unreadable, must recover from scan [ 222.136094][ T5783] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=subvolumes level=0 POS_MIN - SPOS_MAX [ 222.148468][ T5783] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 222.208152][ T5783] done [ 222.594280][ T5787] bcachefs: bch2_fs_get_tree() error: EINVAL [ 222.621626][ T5783] bcachefs (loop0): accounting_read... done [ 222.626649][ T5785] bcachefs: bch2_fs_get_tree() error: EINVAL [ 222.629378][ T5783] bcachefs (loop0): alloc_read... done [ 222.642418][ T5783] bcachefs (loop0): stripes_read... done [ 222.649703][ T5783] bcachefs (loop0): snapshots_read... done [ 222.656281][ T5783] bcachefs (loop0): check_allocations... [ 222.668186][ T5788] bcachefs: bch2_fs_get_tree() error: EINVAL [pid 5788] mount("/dev/loop4", "./file1", "bcachefs", 0, "" [pid 5787] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5785] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5787] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5785] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5787] <... openat resumed>) = 3 [pid 5785] <... openat resumed>) = 3 [pid 5787] ioctl(3, LOOP_CLR_FD [pid 5785] ioctl(3, LOOP_CLR_FD [pid 5787] <... ioctl resumed>) = 0 [pid 5785] <... ioctl resumed>) = 0 [pid 5787] close(3 [ 223.125039][ T5783] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 223.125149][ T5783] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [pid 5785] close(3 [pid 5788] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 5787] <... close resumed>) = 0 [pid 5785] <... close resumed>) = 0 [ 223.185230][ T5783] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 223.185335][ T5783] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [pid 5788] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5785] exit_group(0 [pid 5787] exit_group(0 [pid 5780] kill(-5785, SIGKILL [pid 5779] kill(-5783, SIGKILL [pid 5780] <... kill resumed>) = 0 [pid 5779] <... kill resumed>) = 0 [pid 5780] kill(5785, SIGKILL) = 0 [pid 5779] kill(5783, SIGKILL) = 0 [pid 5787] <... exit_group resumed>) = ? [pid 5787] +++ exited with 0 +++ [ 223.248667][ T5786] bcachefs: bch2_fs_get_tree() error: EINVAL [ 223.286915][ T5783] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 223.287028][ T5783] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 223.384374][ T5783] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 223.384482][ T5783] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 223.432115][ T5783] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 223.432224][ T5783] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 223.465183][ T5783] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.474481][ T5783] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.486893][ T5783] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.495661][ T5783] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.507005][ T5783] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.515784][ T5783] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.527193][ T5783] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.535977][ T5783] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.547216][ T5783] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.555993][ T5783] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.567454][ T5783] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.576231][ T5783] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.587527][ T5783] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.596306][ T5783] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.607582][ T5783] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.616369][ T5783] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 223.627231][ T5783] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 223.636503][ T5783] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 223.648044][ T5783] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 223.657459][ T5783] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 223.668951][ T5783] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 223.678367][ T5783] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 223.689865][ T5783] bucket 0:12 gen 0 has wrong data_type: got free, should be journal, fixing [ 223.699368][ T5783] bucket 0:12 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 223.710929][ T5783] bucket 0:13 gen 0 has wrong data_type: got free, should be journal, fixing [ 223.720368][ T5783] bucket 0:13 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [pid 5781] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5787, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=170 /* 1.70 s */} --- [pid 5781] restart_syscall(<... resuming interrupted clone ...> [pid 5788] <... openat resumed>) = 3 [pid 5788] ioctl(3, LOOP_CLR_FD) = 0 [pid 5781] <... restart_syscall resumed>) = 0 [pid 5782] kill(-5786, SIGKILL) = 0 [pid 5781] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5782] kill(5786, SIGKILL [pid 5781] <... openat resumed>) = 3 [pid 5782] <... kill resumed>) = 0 [pid 5781] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5781] close(3) = 0 [pid 5781] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5788] close(3 [pid 5786] <... mount resumed>) = ? [pid 5785] <... exit_group resumed>) = ? [pid 5786] +++ killed by SIGKILL +++ [pid 5785] +++ killed by SIGKILL +++ ./strace-static-x86_64: Process 5830 attached [pid 5782] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5786, si_uid=0, si_status=SIGKILL, si_utime=8 /* 0.08 s */, si_stime=123 /* 1.23 s */} --- [pid 5780] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5785, si_uid=0, si_status=SIGKILL, si_utime=5 /* 0.05 s */, si_stime=165 /* 1.65 s */} --- [pid 5830] set_robust_list(0x555563298660, 24 [pid 5784] kill(-5788, SIGKILL [pid 5782] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5830] <... set_robust_list resumed>) = 0 [pid 5784] <... kill resumed>) = 0 [pid 5782] <... openat resumed>) = 3 [pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5784] kill(5788, SIGKILL [pid 5782] ioctl(3, LOOP_CLR_FD [pid 5830] <... prctl resumed>) = 0 [pid 5784] <... kill resumed>) = 0 [pid 5782] <... ioctl resumed>) = 0 [pid 5830] setpgid(0, 0 [pid 5782] close(3 [pid 5781] <... clone resumed>, child_tidptr=0x555563298650) = 5830 [pid 5830] <... setpgid resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5780] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5830] <... openat resumed>) = 3 [pid 5780] ioctl(3, LOOP_CLR_FD [ 223.731896][ T5783] bucket 0:14 gen 0 has wrong data_type: got free, should be journal, fixing [ 223.741412][ T5783] bucket 0:14 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 223.753015][ T5783] bucket 0:15 gen 0 has wrong data_type: got free, should be journal, fixing [ 223.762442][ T5783] bucket 0:15 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 223.774280][ T5783] bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.784510][ T5783] bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.796071][ T5783] bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.805071][ T5783] bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.816461][ T5783] bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.825710][ T5783] bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.837268][ T5783] bucket 0:19 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.846144][ T5783] bucket 0:19 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.857634][ T5783] bucket 0:20 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.866521][ T5783] bucket 0:20 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.877996][ T5783] bucket 0:21 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.887095][ T5783] bucket 0:21 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.898297][ T5783] bucket 0:22 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.907292][ T5783] bucket 0:22 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.918520][ T5783] bucket 0:23 gen 0 has wrong data_type: got free, should be sb, fixing [ 223.927624][ T5783] bucket 0:23 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 223.938646][ T5783] bucket 0:24 gen 0 has wrong data_type: got free, should be journal, fixing [ 223.948227][ T5783] bucket 0:24 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 223.959939][ T5783] bucket 0:26 gen 0 has wrong data_type: got free, should be btree, fixing [ 223.969293][ T5783] bucket 0:26 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 223.981836][ T5783] bucket 0:27 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 223.991920][ T5783] bucket 0:27 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 224.003673][ T5783] bucket 0:29 gen 0 has wrong data_type: got free, should be btree, fixing [ 224.013130][ T5783] bucket 0:29 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 224.024877][ T5783] bucket 0:32 gen 0 has wrong data_type: got sb, should be btree, fixing [ 224.034762][ T5783] bucket 0:34 gen 0 has wrong data_type: got user, should be need_discard, fixing [ 224.044659][ T5783] bucket 0:34 gen 0 data type need_discard has wrong dirty_sectors: got 16, should be 0, fixing [ 224.056391][ T5783] bucket 0:35 gen 0 has wrong data_type: got free, should be btree, fixing [ 224.065686][ T5783] bucket 0:35 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 224.077462][ T5783] bucket 0:37 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 224.087544][ T5783] bucket 0:37 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 224.099212][ T5783] bucket 0:38 gen 0 has wrong data_type: got free, should be btree, fixing [ 224.108602][ T5783] bucket 0:38 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 224.120282][ T5783] bucket 0:41 gen 0 has wrong data_type: got free, should be btree, fixing [ 224.129753][ T5783] bucket 0:41 gen 0 data type btree has wrong dirty_sectors: got 0, should be 256, fixing [ 224.148665][ T5783] bucket 0:120 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.157815][ T5783] bucket 0:120 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.169228][ T5783] bucket 0:121 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.178323][ T5783] bucket 0:121 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.189798][ T5783] bucket 0:122 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.198911][ T5783] bucket 0:122 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.210481][ T5783] bucket 0:123 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.219605][ T5783] bucket 0:123 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [pid 5830] write(3, "1000", 4 [pid 5780] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5830] <... write resumed>) = 4 [pid 5788] <... close resumed>) = ? [pid 5830] close(3 [pid 5788] +++ killed by SIGKILL +++ [pid 5780] close(3 [pid 5830] <... close resumed>) = 0 [pid 5780] <... close resumed>) = 0 [pid 5830] write(1, "executing program\n", 18 [pid 5780] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program ./strace-static-x86_64: Process 5832 attached [pid 5830] <... write resumed>) = 18 [pid 5784] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5788, si_uid=0, si_status=SIGKILL, si_utime=4 /* 0.04 s */, si_stime=169 /* 1.69 s */} --- [pid 5830] prlimit64(0, RLIMIT_RTPRIO, {rlim_cur=8, rlim_max=584}, [pid 5832] set_robust_list(0x555563298660, 24 [pid 5830] <... prlimit64 resumed>NULL) = 0 [pid 5784] restart_syscall(<... resuming interrupted kill ...> [pid 5832] <... set_robust_list resumed>) = 0 [pid 5830] sched_setscheduler(0, SCHED_FIFO, [7] [pid 5784] <... restart_syscall resumed>) = 0 [pid 5832] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5830] <... sched_setscheduler resumed>) = 0 [ 224.231037][ T5783] bucket 0:124 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.240146][ T5783] bucket 0:124 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.251615][ T5783] bucket 0:125 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.260763][ T5783] bucket 0:125 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.272090][ T5783] bucket 0:126 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.281183][ T5783] bucket 0:126 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.292610][ T5783] bucket 0:127 gen 0 has wrong data_type: got free, should be sb, fixing [ 224.301688][ T5783] bucket 0:127 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 224.409416][ T5783] done [ 224.423866][ T5783] bcachefs (loop0): going read-write [pid 5830] memfd_create("syzkaller", 0 [pid 5832] <... prctl resumed>) = 0 [pid 5830] <... memfd_create resumed>) = 3 [pid 5832] setpgid(0, 0 [pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5832] <... setpgid resumed>) = 0 [pid 5830] <... mmap resumed>) = 0x7f1934200000 [pid 5832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5784] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5832] <... openat resumed>) = 3 [pid 5784] <... openat resumed>) = 3 [ 224.457739][ T5783] bcachefs (loop0): journal_replay... [ 224.668912][ T63] ===================================================== [ 224.681826][ T63] BUG: KMSAN: uninit-value in bch2_btree_node_iter_init+0x319a/0x51a0 [ 224.690422][ T63] bch2_btree_node_iter_init+0x319a/0x51a0 [ 224.696501][ T63] bch2_btree_path_level_init+0x821/0xc80 [ 224.703061][ T63] bch2_btree_path_traverse_one+0x32fd/0x4790 [ 224.709575][ T63] bch2_btree_iter_peek_node+0x31e/0x10f0 [ 224.715603][ T63] async_btree_node_rewrite_work+0x29b/0x1aa0 [ 224.722087][ T63] process_scheduled_works+0xc1a/0x1e80 [ 224.728338][ T63] worker_thread+0xea7/0x14f0 [ 224.733226][ T63] kthread+0x6b9/0xef0 [ 224.737657][ T63] ret_from_fork+0x6d/0x90 [ 224.742297][ T63] ret_from_fork_asm+0x1a/0x30 [ 224.747446][ T63] [ 224.749900][ T63] Uninit was created at: [ 224.754454][ T63] ___kmalloc_large_node+0x22c/0x370 [ 224.760183][ T63] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 224.766144][ T63] __kmalloc_node_noprof+0xc96/0x1250 [ 224.771939][ T63] __kvmalloc_node_noprof+0xc0/0x2d0 [ 224.777742][ T63] bch2_btree_node_mem_alloc+0xa96/0x2f10 [ 224.783755][ T63] bch2_btree_reserve_get+0x37f/0x2290 [ 224.789644][ T63] bch2_btree_update_start+0x1af9/0x2d60 [ 224.795523][ T63] bch2_btree_split_leaf+0x120/0xc90 [ 224.801198][ T63] bch2_trans_commit_error+0x1c0/0x1d60 [ 224.807122][ T63] __bch2_trans_commit+0x1d5f/0xd310 [ 224.812615][ T63] bch2_journal_replay+0x3125/0x4e20 [ 224.818519][ T63] bch2_run_recovery_passes+0x5a2/0x1160 [ 224.824398][ T63] bch2_fs_recovery+0x489c/0x6230 [ 224.829827][ T63] bch2_fs_start+0x7ca/0xc20 [ 224.834688][ T63] bch2_fs_get_tree+0x1564/0x24e0 [ 224.840118][ T63] vfs_get_tree+0xb1/0x5a0 [ 224.844771][ T63] do_new_mount+0x71f/0x15e0 [ 224.849835][ T63] path_mount+0x742/0x1f10 [ 224.854493][ T63] __se_sys_mount+0x71f/0x800 [ 224.859558][ T63] __x64_sys_mount+0xe4/0x150 [ 224.864499][ T63] x64_sys_call+0x39bf/0x3c30 [ 224.869581][ T63] do_syscall_64+0xcd/0x1e0 [ 224.874353][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.880681][ T63] [ 224.883162][ T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 224.894286][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.906233][ T63] Workqueue: btree_node_rewrite async_btree_node_rewrite_work [ 224.914233][ T63] ===================================================== [ 224.921452][ T63] Disabling lock debugging due to kernel taint [ 224.927933][ T63] Kernel panic - not syncing: kmsan.panic set ... [ 224.934531][ T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:4 Tainted: G B 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 224.946975][ T63] Tainted: [B]=BAD_PAGE [ 224.951274][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.961541][ T63] Workqueue: btree_node_rewrite async_btree_node_rewrite_work [ 224.969326][ T63] Call Trace: [ 224.972752][ T63] [ 224.975827][ T63] dump_stack_lvl+0x216/0x2d0 [ 224.980723][ T63] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 224.986815][ T63] dump_stack+0x1e/0x24 [ 224.991178][ T63] panic+0x4e2/0xcf0 [ 224.995362][ T63] ? kmsan_get_metadata+0xf1/0x1c0 [ 225.000778][ T63] kmsan_report+0x2c7/0x2d0 [ 225.005569][ T63] ? __msan_memmove+0x114/0x1c0 [ 225.010675][ T63] ? kmsan_get_metadata+0x13e/0x1c0 [ 225.016143][ T63] ? __msan_warning+0x95/0x120 [ 225.021173][ T63] ? bch2_btree_node_iter_init+0x319a/0x51a0 [ 225.027433][ T63] ? bch2_btree_path_level_init+0x821/0xc80 [ 225.033605][ T63] ? bch2_btree_path_traverse_one+0x32fd/0x4790 [ 225.040126][ T63] ? bch2_btree_iter_peek_node+0x31e/0x10f0 [ 225.046311][ T63] ? async_btree_node_rewrite_work+0x29b/0x1aa0 [ 225.052829][ T63] ? process_scheduled_works+0xc1a/0x1e80 [ 225.058843][ T63] ? worker_thread+0xea7/0x14f0 [ 225.063909][ T63] ? kthread+0x6b9/0xef0 [ 225.068381][ T63] ? ret_from_fork+0x6d/0x90 [ 225.073209][ T63] ? ret_from_fork_asm+0x1a/0x30 [ 225.078399][ T63] ? filter_irq_stacks+0x60/0x1a0 [ 225.083678][ T63] ? kmsan_get_metadata+0x13e/0x1c0 [ 225.089137][ T63] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 225.095249][ T63] ? __bkey_unpack_pos+0x760/0x8e0 [ 225.100600][ T63] ? kmsan_get_metadata+0x13e/0x1c0 [ 225.106066][ T63] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 225.112167][ T63] ? __bch2_bkey_cmp_packed_format_checked+0x91c/0x960 [ 225.119292][ T63] ? kmsan_get_metadata+0x13e/0x1c0 [ 225.124784][ T63] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 225.130867][ T63] __msan_warning+0x95/0x120 [ 225.135698][ T63] bch2_btree_node_iter_init+0x319a/0x51a0 [ 225.141822][ T63] ? kmsan_get_metadata+0x13e/0x1c0 [ 225.147293][ T63] bch2_btree_path_level_init+0x821/0xc80 [ 225.153306][ T63] bch2_btree_path_traverse_one+0x32fd/0x4790 [ 225.159678][ T63] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 225.165789][ T63] ? bch2_btree_path_verify_locks+0x675/0x1980 [ 225.172229][ T63] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 225.178764][ T63] ? kmsan_get_metadata+0x13e/0x1c0 [ 225.184238][ T63] ? async_btree_node_rewrite_work+0x29b/0x1aa0 [ 225.190814][ T63] ? async_btree_node_rewrite_work+0x29b/0x1aa0 [ 225.197342][ T63] bch2_btree_iter_peek_node+0x31e/0x10f0 [ 225.203364][ T63] ? kmsan_get_metadata+0x13e/0x1c0 [ 225.208842][ T63] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 225.214964][ T63] async_btree_node_rewrite_work+0x29b/0x1aa0 [ 225.221326][ T63] ? async_btree_node_rewrite_work+0x280/0x1aa0 [ 225.227881][ T63] ? __pfx_async_btree_node_rewrite_work+0x10/0x10 [ 225.234666][ T63] process_scheduled_works+0xc1a/0x1e80 [ 225.240559][ T63] worker_thread+0xea7/0x14f0 [ 225.245486][ T63] kthread+0x6b9/0xef0 [ 225.249780][ T63] ? __pfx_worker_thread+0x10/0x10 [ 225.255139][ T63] ? __pfx_kthread+0x10/0x10 [ 225.259963][ T63] ret_from_fork+0x6d/0x90 [ 225.264612][ T63] ? __pfx_kthread+0x10/0x10 [ 225.269442][ T63] ret_from_fork_asm+0x1a/0x30 [ 225.274463][ T63] [ 225.277984][ T63] Kernel Offset: disabled [ 225.282421][ T63] Rebooting in 86400 seconds..