program: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/snmp\x00') read$FUSE(r0, &(0x7f000000d740)={0x2020}, 0x2020) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000005bc0)="b36771dfe325e83cbe9ad06dfae732eb6a48fb99f4cd4c6e8c99bd2ebb41ddf9fdc18fb00dbbaab4e98e165038a2646b395722403454698b82f2ffe88e57ab66a90cb394b4f8f56b4ea6d30f3fd28b9d60b764afe314e97be2b2f078886d17e25fe45bc58b4174edf7eac7b4caf1bfa693") r1 = syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x59e3, &(0x7f00000001c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x181442, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000080)=0x4) copy_file_range(r1, &(0x7f0000000100)=0x80000001, r1, 0x0, 0x400, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000a80)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xf5ff, 0x0, 0x0}], 0x2}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000040)={r3}) [ 68.638153][ T4657] Bluetooth: hci0: command tx timeout [ 68.845933][ T5312] loop0: detected capacity change from 0 to 32768 [ 68.950792][ T5312] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 69.000068][ T5312] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 69.000068][ T5312] allowing incompatible features above 0.0: (unknown version) [ 69.029305][ T5312] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 69.033271][ T5312] bcachefs (loop0): Version upgrade required: [ 69.033271][ T5312] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 69.033271][ T5312] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 69.033271][ T5312] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 69.070505][ T5312] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 10 type inode 4100:8:U32_MAX len 8 ver 0: (unpack error) [ 69.070525][ T5312] invalid key type for btree extents (inode), deleting [ 69.080405][ T5312] bcachefs (loop0): flagging btree extents lost data [ 69.083216][ T5312] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 69.087745][ T5312] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 69.095269][ T5312] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 69.101927][ T5312] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree inodes level 0/0 [ 69.101944][ T5312] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 69.101954][ T5312] node offset 0/24 bset u64s 0: incorrect max key U64_MAX:18446462598733365247:U32_MAX, btree topology error: [ 69.118949][ T5312] bcachefs (loop0): flagging btree inodes lost data [ 69.122294][ T5312] bcachefs (loop0): error reading btree root btree=inodes level=0: btree_node_read_error, fixing [ 69.129507][ T5312] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree dirents level 0/0 [ 69.129523][ T5312] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 69.129532][ T5312] node offset 8/24 bset u64s 6: checksum error, type none: got should be , fixing [ 69.144664][ T5312] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree dirents level 0/0 [ 69.144677][ T5312] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 69.144683][ T5312] node offset 16/24: btree node data missing: expected 24 sectors, found 16, fixing [ 69.160514][ T5312] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 69.160514][ T5312] btree=dirents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 69.174375][ T5312] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 69.174392][ T5312] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 69.174400][ T5312] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 69.193051][ T5312] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 69.193051][ T5312] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 69.206984][ T5312] bcachefs (loop0): scan_for_btree_nodes... [ 69.259290][ T5312] bcachefs (loop0): btree node scan found 6 nodes after overwrites [ 69.266045][ T5312] done [ 69.268877][ T5312] bcachefs (loop0): check_topology... [ 69.270584][ T5312] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 69.277105][ T5312] bcachefs (loop0): no nodes found for btree extents, continuing [ 69.286407][ T5312] bcachefs (loop0): btree root inodes unreadable, must recover from scan [ 69.291192][ T5312] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=inodes level=0 POS_MIN - SPOS_MAX [ 69.295563][ T5312] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 U64_MAX:18446462598733365247:U32_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 69.308838][ T5312] bcachefs (loop0): btree node with incorrect max_key [ 69.308851][ T5312] at: btree=inodes level=1 [ 69.308857][ T5312] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 69.308863][ T5312] child: u64s 11 type btree_ptr_v2 U64_MAX:18446462598733365247:U32_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 69.325382][ T5312] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=inodes level=0 U64_MAX:18446462598733365248:0 - SPOS_MAX [ 69.330888][ T5312] bcachefs (loop0): set_node_max(): u64s 11 type btree_ptr_v2 U64_MAX:18446462598733365247:U32_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 -> SPOS_MAX [ 69.339920][ T5312] done [ 69.341797][ T5312] bcachefs (loop0): accounting_read... done [ 69.345299][ T5312] bcachefs (loop0): alloc_read... done [ 69.347623][ T5312] bcachefs (loop0): snapshots_read... done [ 69.350852][ T5312] bcachefs (loop0): check_allocations... [ 69.355247][ T5312] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 69.355265][ T5312] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 69.374519][ T5312] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 69.374534][ T5312] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key R POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 69.387380][ T5312] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 69.387404][ T5312] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 69.403376][ T5312] ------------[ cut here ]------------ [ 69.405906][ T5312] kernel BUG at fs/bcachefs/btree_iter.c:619! [ 69.409220][ T5312] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 69.411941][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller-00038-g707df3375124 #0 PREEMPT(full) [ 69.416761][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.420994][ T5312] RIP: 0010:bch2_btree_path_level_init+0x9fd/0xa20 [ 69.423622][ T5312] Code: 8d fb ff ff e8 84 bf a4 fd 90 0f 0b e8 7c bf a4 fd 90 0f 0b e8 74 bf a4 fd 90 0f 0b e8 6c bf a4 fd 90 0f 0b e8 64 bf a4 fd 90 <0f> 0b e8 5c bf a4 fd 90 0f 0b e8 54 bf a4 fd 90 0f 0b e8 4c bf a4 [ 69.431477][ T5312] RSP: 0018:ffffc9000d636608 EFLAGS: 00010287 [ 69.434056][ T5312] RAX: ffffffff841b10ec RBX: ffff8880525d82f0 RCX: 0000000000100000 [ 69.437379][ T5312] RDX: ffffc9000e142000 RSI: 000000000008aa2f RDI: 000000000008aa30 [ 69.440707][ T5312] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 69.444095][ T5312] R10: dffffc0000000000 R11: fffff52001ac6cb8 R12: 0000000000000000 [ 69.447691][ T5312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000008000 [ 69.451086][ T5312] FS: 00007fdfbba466c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 69.455012][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.457939][ T5312] CR2: 00007f7959e1f000 CR3: 000000003f022000 CR4: 0000000000352ef0 [ 69.461405][ T5312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.464970][ T5312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.468264][ T5312] Call Trace: [ 69.469726][ T5312] [ 69.470999][ T5312] bch2_btree_path_traverse_one+0xe31/0x2430 [ 69.473542][ T5312] ? __pfx_bch2_btree_path_verify_level+0x10/0x10 [ 69.476176][ T5312] ? bch2_btree_path_traverse_one+0x9e5/0x2430 [ 69.478819][ T5312] ? bch2_check_allocations+0x11a5/0x5470 [ 69.481162][ T5312] ? __asan_memset+0x22/0x50 [ 69.483243][ T5312] ? __pfx_bch2_btree_path_traverse_one+0x10/0x10 [ 69.486085][ T5312] ? __pfx_bch2_btree_path_verify_level+0x10/0x10 [ 69.488950][ T5312] ? __bitmap_weight+0xe4/0x100 [ 69.491041][ T5312] ? bch2_btree_path_verify_locks+0x276/0xba0 [ 69.493613][ T5312] ? bch2_btree_path_verify+0x205/0x310 [ 69.495949][ T5312] bch2_btree_iter_peek_max+0x988/0x5260 [ 69.498313][ T5312] ? bch2_check_allocations+0x11a5/0x5470 [ 69.500641][ T5312] ? bch2_check_allocations+0x1165/0x5470 [ 69.502940][ T5312] ? __pfx_bch2_btree_iter_peek_max+0x10/0x10 [ 69.505485][ T5312] ? bch2_trans_begin+0x18e6/0x1f10 [ 69.507607][ T5312] ? bch2_trans_node_iter_init+0x348/0x5e0 [ 69.510079][ T5312] ? bch2_trans_node_iter_init+0x406/0x5e0 [ 69.512371][ T5312] ? __pfx_bch2_trans_begin+0x10/0x10 [ 69.514678][ T5312] ? __pfx_bch2_trans_node_iter_init+0x10/0x10 [ 69.517133][ T5312] ? bch2_check_allocations+0x1a51/0x5470 [ 69.519457][ T5312] bch2_check_allocations+0x11a5/0x5470 [ 69.521762][ T5312] ? prb_read_valid+0x3c/0x60 [ 69.523849][ T5312] ? bch2_check_allocations+0xeb1/0x5470 [ 69.526213][ T5312] ? prb_first_seq+0xfd/0x1a0 [ 69.528216][ T5312] ? __pfx_prb_first_seq+0x10/0x10 [ 69.530451][ T5312] ? desc_read+0x1b8/0x3f0 [ 69.532280][ T5312] ? __pfx_bch2_check_allocations+0x10/0x10 [ 69.534957][ T5312] ? up+0xde/0x150 [ 69.536728][ T5312] ? __pfx__prb_read_valid+0x10/0x10 [ 69.538897][ T5312] ? __console_unlock+0x14c/0x1a0 [ 69.540912][ T5312] ? __pfx___console_unlock+0x10/0x10 [ 69.542761][ T5312] ? prb_read_valid+0x3c/0x60 [ 69.544591][ T5312] ? console_unlock+0x21b/0x270 [ 69.546268][ T5312] ? bch2_check_allocations+0x1159/0x5470 [ 69.548195][ T5312] ? irq_work_queue+0xc3/0x140 [ 69.549991][ T5312] ? bch2_check_allocations+0x1a51/0x5470 [ 69.551963][ T5312] ? __pfx_vprintk_emit+0x10/0x10 [ 69.554020][ T5312] ? rcu_is_watching+0x15/0xb0 [ 69.555872][ T5312] ? __lock_acquire+0xaac/0xd20 [ 69.557735][ T5312] ? __pfx___bch2_print+0x10/0x10 [ 69.559760][ T5312] bch2_run_recovery_pass+0xdf/0x1d0 [ 69.561806][ T5312] bch2_run_recovery_passes+0x2a0/0xdb0 [ 69.563945][ T5312] bch2_fs_recovery+0x2399/0x37b0 [ 69.566005][ T5312] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 69.568258][ T5312] ? __lock_acquire+0xaac/0xd20 [ 69.570240][ T5312] ? __lock_acquire+0xaac/0xd20 [ 69.572119][ T5312] ? percpu_ref_put+0x1e/0x230 [ 69.573921][ T5312] ? bch2_get_next_online_dev+0x2d/0x4d0 [ 69.576997][ T5312] ? bch2_fs_start+0x65b/0xae0 [ 69.579432][ T5312] ? up_write+0x1c4/0x420 [ 69.581362][ T5312] bch2_fs_start+0x70b/0xae0 [ 69.583554][ T5312] ? __pfx_bch2_fs_start+0x10/0x10 [ 69.585853][ T5312] ? percpu_ref_put+0x1e/0x230 [ 69.588188][ T5312] ? percpu_ref_put+0x1e/0x230 [ 69.590347][ T5312] ? percpu_ref_put+0x188/0x230 [ 69.592488][ T5312] bch2_fs_get_tree+0xd99/0x13a0 [ 69.595040][ T5312] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 69.597604][ T5312] ? aa_get_newest_label+0xf7/0x5d0 [ 69.599638][ T5312] ? vfs_parse_monolithic_sep+0x2e3/0x310 [ 69.601930][ T5312] ? apparmor_capable+0x137/0x1b0 [ 69.604110][ T5312] vfs_get_tree+0x8f/0x2b0 [ 69.605872][ T5312] do_new_mount+0x24a/0xa40 [ 69.607803][ T5312] __se_sys_mount+0x317/0x410 [ 69.610199][ T5312] ? __pfx___se_sys_mount+0x10/0x10 [ 69.612969][ T5312] ? do_syscall_64+0xba/0x210 [ 69.615422][ T5312] ? __x64_sys_mount+0x20/0xc0 [ 69.617523][ T5312] do_syscall_64+0xf6/0x210 [ 69.619429][ T5312] ? clear_bhb_loop+0x45/0xa0 [ 69.621440][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.623755][ T5312] RIP: 0033:0x7fdfbab9010a [ 69.625762][ T5312] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.634342][ T5312] RSP: 002b:00007fdfbba45e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.638215][ T5312] RAX: ffffffffffffffda RBX: 00007fdfbba45ef0 RCX: 00007fdfbab9010a [ 69.641627][ T5312] RDX: 00002000000000c0 RSI: 0000200000000180 RDI: 00007fdfbba45eb0 [ 69.645165][ T5312] RBP: 00002000000000c0 R08: 00007fdfbba45ef0 R09: 0000000000000000 [ 69.648584][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000180 [ 69.652093][ T5312] R13: 00007fdfbba45eb0 R14: 00000000000059e3 R15: 0000200000000000 [ 69.655311][ T5312] [ 69.656709][ T5312] Modules linked in: [ 69.659548][ T5312] ---[ end trace 0000000000000000 ]--- [ 69.672205][ T5312] RIP: 0010:bch2_btree_path_level_init+0x9fd/0xa20 [ 69.676040][ T5312] Code: 8d fb ff ff e8 84 bf a4 fd 90 0f 0b e8 7c bf a4 fd 90 0f 0b e8 74 bf a4 fd 90 0f 0b e8 6c bf a4 fd 90 0f 0b e8 64 bf a4 fd 90 <0f> 0b e8 5c bf a4 fd 90 0f 0b e8 54 bf a4 fd 90 0f 0b e8 4c bf a4 [ 69.687613][ T5312] RSP: 0018:ffffc9000d636608 EFLAGS: 00010287 [ 69.691319][ T5312] RAX: ffffffff841b10ec RBX: ffff8880525d82f0 RCX: 0000000000100000 [ 69.694789][ T5312] RDX: ffffc9000e142000 RSI: 000000000008aa2f RDI: 000000000008aa30 [ 69.698735][ T5312] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 69.702210][ T5312] R10: dffffc0000000000 R11: fffff52001ac6cb8 R12: 0000000000000000 [ 69.705599][ T5312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000008000 [ 69.716358][ T5312] FS: 00007fdfbba466c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 69.720364][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.723005][ T5312] CR2: 00007f7959e1f000 CR3: 000000003f022000 CR4: 0000000000352ef0 [ 69.726330][ T5312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.730615][ T5312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.734247][ T5312] Kernel panic - not syncing: Fatal exception [ 69.737106][ T5312] Kernel Offset: disabled [ 69.738956][ T5312] Rebooting in 86400 seconds..