program: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x801}]}, 0x24}}, 0x0) connect(r0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x31, 0x2, 0x2, "0600836a330000000000000007000200268d09ff076900ff0f0040c39b08fc00", 0x3831354f}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r6, 0xfffffffc}}, 0x48) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETMODE(r9, 0x4b3a, 0xfffffffffffffffd) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2a100d3, &(0x7f00000001c0), 0x0, 0x59b2, &(0x7f0000005bc0)="$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") [ 85.649211][ T5304] Bluetooth: hci0: command tx timeout [ 86.057636][ T5322] loop0: detected capacity change from 0 to 32768 [ 86.072991][ T5322] ======================================================= [ 86.072991][ T5322] WARNING: The mand mount option has been deprecated and [ 86.072991][ T5322] and is ignored by this kernel. Remove the mand [ 86.072991][ T5322] option from the mount to silence this warning. [ 86.072991][ T5322] ======================================================= [ 86.175115][ T5322] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 86.220862][ T5322] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only [ 86.220862][ T5322] allowing incompatible features above 0.0: (unknown version) [ 86.220862][ T5322] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 86.236959][ T5322] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 86.241640][ T5322] bcachefs (loop0): Version upgrade required: [ 86.241640][ T5322] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 86.241640][ T5322] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 86.241640][ T5322] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 86.335256][ T5322] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:U64_MAX:U32_MAX len 4294967295 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:16777250:0 gen 0 invalid [ 86.335282][ T5322] checksum offset + key size > uncompressed size, deleting [ 86.355330][ T5322] bcachefs (loop0): btree node read error at btree dirents level 0/0 [ 86.355353][ T5322] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 86.355364][ T5322] loop0 node offset 0/24 bset u64s 0: invalid bkey format: incorrect number of fields: got 8, should be 6 [ 86.355373][ T5322] u64s 3 fields 0:0, 0:0, 0:0, 0:0, 0:0, 0:0 [ 86.355379][ T5322] flagging btree dirents lost data [ 86.355384][ T5322] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 86.355391][ T5322] ret btree_node_read_validate_error [ 86.384709][ T5322] bcachefs (loop0): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 86.399989][ T5322] bcachefs (loop0): invalid bkey in btree_node btree=snapshots level=0: u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 5120 children 0 0 subvol 1 tree 0 [ 86.400008][ T5322] bad parent node (5120 <= 4294967295), deleting [ 86.412341][ T5322] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 86.424001][ T5322] bcachefs (loop0): scan_for_btree_nodes... [ 86.439323][ T5325] ------------[ cut here ]------------ [ 86.444672][ T5325] kernel BUG at fs/bcachefs/bkey.c:272! [ 86.447648][ T5325] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 86.450437][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: read_btree_node Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 86.455488][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.460000][ T5325] RIP: 0010:__bch2_bkey_unpack_key+0xdeb/0xe10 [ 86.462718][ T5325] Code: e5 da 00 e9 f3 f9 ff ff e8 b2 26 a6 fd 48 c7 c7 e0 e1 75 8e 48 89 ee 4c 89 f2 e8 50 e5 da 00 e9 2e fb ff ff e8 96 26 a6 fd 90 <0f> 0b e8 8e 26 a6 fd 90 0f 0b e8 86 26 a6 fd 90 0f 0b e8 7e 26 a6 [ 86.472548][ T5325] RSP: 0018:ffffc9000d2b6a18 EFLAGS: 00010293 [ 86.475851][ T5325] RAX: ffffffff841a171a RBX: 0000000000000003 RCX: ffff88801c588000 [ 86.479473][ T5325] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 86.482922][ T5325] RBP: 0000000000000008 R08: ffffc9000d2b6caf R09: 0000000000000000 [ 86.486376][ T5325] R10: ffffc9000d2b6c90 R11: fffff52001a56d96 R12: ffffc9000d2b6c90 [ 86.490130][ T5325] R13: ffff8880437e1028 R14: ffff88803ebe48c1 R15: dffffc0000000000 [ 86.493530][ T5325] FS: 0000000000000000(0000) GS:ffff88808d265000(0000) knlGS:0000000000000000 [ 86.497243][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.500003][ T5325] CR2: 00007f335b1909c0 CR3: 0000000050c7f000 CR4: 0000000000352ef0 [ 86.503315][ T5325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.506568][ T5325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.509752][ T5325] Call Trace: [ 86.511321][ T5325] [ 86.512584][ T5325] ? bch2_bkey_swab_key+0x122/0x180 [ 86.514784][ T5325] __bch2_bkey_compat+0x4db/0xbd0 [ 86.516959][ T5325] ? __pfx___bch2_bkey_compat+0x10/0x10 [ 86.519117][ T5325] ? kfree+0x18e/0x440 [ 86.521121][ T5325] ? bch2_btree_node_fill+0xd12/0x14f0 [ 86.523467][ T5325] ? bch2_btree_node_get_noiter+0xa2c/0x1000 [ 86.525975][ T5325] ? read_btree_nodes_worker+0x1319/0x1e20 [ 86.528402][ T5325] ? kthread+0x70e/0x8a0 [ 86.530210][ T5325] ? ret_from_fork+0x3fc/0x770 [ 86.532232][ T5325] ? ret_from_fork_asm+0x1a/0x30 [ 86.534314][ T5325] ? bch2_checksum_update+0x91/0x160 [ 86.536404][ T5325] ? __pfx_bch2_checksum+0x10/0x10 [ 86.538411][ T5325] validate_bset_keys+0x6c1/0x1390 [ 86.540499][ T5325] ? validate_bset+0x1420/0x1bd0 [ 86.542727][ T5325] ? __pfx_validate_bset_keys+0x10/0x10 [ 86.545026][ T5325] ? prt_str+0x439/0x760 [ 86.546818][ T5325] ? bch2_btree_node_read_done+0x17a0/0x4f60 [ 86.549373][ T5325] bch2_btree_node_read_done+0x18c8/0x4f60 [ 86.551947][ T5325] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 86.554643][ T5325] ? bch2_extent_ptr_to_text+0x5a/0x900 [ 86.556975][ T5325] ? bch2_extent_ptr_to_text+0x5a/0x900 [ 86.559296][ T5325] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 86.561763][ T5325] ? bch2_printbuf_make_room+0xdb/0x360 [ 86.564040][ T5325] ? enumerated_ref_put+0xbe/0x270 [ 86.566290][ T5325] btree_node_read_work+0x426/0xe30 [ 86.568427][ T5325] ? __pfx_btree_node_read_work+0x10/0x10 [ 86.570668][ T5325] ? bch2_latency_acct+0x436/0x520 [ 86.572679][ T5325] ? __pfx_bch2_latency_acct+0x10/0x10 [ 86.574889][ T5325] ? bio_associate_blkg+0x6d/0x230 [ 86.577141][ T5325] bch2_btree_node_read+0x887/0x29f0 [ 86.579455][ T5325] ? bch2_btree_node_fill+0x954/0x14f0 [ 86.581771][ T5325] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 86.584175][ T5325] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 86.586629][ T5325] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.589257][ T5325] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 86.592081][ T5325] ? bch2_btree_node_mem_alloc+0xcd9/0x1820 [ 86.594622][ T5325] ? six_unlock_ip+0x302/0x430 [ 86.596630][ T5325] ? bch2_btree_node_fill+0xb47/0x14f0 [ 86.598955][ T5325] bch2_btree_node_fill+0xd12/0x14f0 [ 86.601239][ T5325] ? __pfx_bch2_btree_cache_cmp_fn+0x10/0x10 [ 86.603846][ T5325] ? __pfx_bch2_btree_node_fill+0x10/0x10 [ 86.606476][ T5325] ? btree_cache_find+0xf4/0x2d0 [ 86.608548][ T5325] ? btree_cache_find+0xf4/0x2d0 [ 86.610751][ T5325] ? btree_cache_find+0x26f/0x2d0 [ 86.612962][ T5325] ? __pfx_btree_cache_find+0x10/0x10 [ 86.615213][ T5325] bch2_btree_node_get_noiter+0xa2c/0x1000 [ 86.617580][ T5325] read_btree_nodes_worker+0x1319/0x1e20 [ 86.619946][ T5325] ? read_btree_nodes_worker+0xcef/0x1e20 [ 86.622283][ T5325] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 86.624687][ T5325] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 86.627061][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.629173][ T5325] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 86.631575][ T5325] ? __kthread_parkme+0x7b/0x200 [ 86.633639][ T5325] ? __kthread_parkme+0x1a1/0x200 [ 86.635771][ T5325] kthread+0x70e/0x8a0 [ 86.637490][ T5325] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 86.640005][ T5325] ? __pfx_kthread+0x10/0x10 [ 86.642074][ T5325] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.644233][ T5325] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.646438][ T5325] ? __pfx_kthread+0x10/0x10 [ 86.648495][ T5325] ret_from_fork+0x3fc/0x770 [ 86.650468][ T5325] ? __pfx_ret_from_fork+0x10/0x10 [ 86.652730][ T5325] ? __pfx_kthread+0x10/0x10 [ 86.654662][ T5325] ret_from_fork_asm+0x1a/0x30 [ 86.656762][ T5325] [ 86.658144][ T5325] Modules linked in: [ 86.660252][ T5325] ---[ end trace 0000000000000000 ]--- [ 86.669272][ T10] cfg80211: failed to load regulatory.db [ 86.687171][ T5325] RIP: 0010:__bch2_bkey_unpack_key+0xdeb/0xe10 [ 86.691177][ T5325] Code: e5 da 00 e9 f3 f9 ff ff e8 b2 26 a6 fd 48 c7 c7 e0 e1 75 8e 48 89 ee 4c 89 f2 e8 50 e5 da 00 e9 2e fb ff ff e8 96 26 a6 fd 90 <0f> 0b e8 8e 26 a6 fd 90 0f 0b e8 86 26 a6 fd 90 0f 0b e8 7e 26 a6 [ 86.699871][ T5325] RSP: 0018:ffffc9000d2b6a18 EFLAGS: 00010293 [ 86.702543][ T5325] RAX: ffffffff841a171a RBX: 0000000000000003 RCX: ffff88801c588000 [ 86.705940][ T5325] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 86.709804][ T5325] RBP: 0000000000000008 R08: ffffc9000d2b6caf R09: 0000000000000000 [ 86.713182][ T5325] R10: ffffc9000d2b6c90 R11: fffff52001a56d96 R12: ffffc9000d2b6c90 [ 86.716717][ T5325] R13: ffff8880437e1028 R14: ffff88803ebe48c1 R15: dffffc0000000000 [ 86.720254][ T5325] FS: 0000000000000000(0000) GS:ffff88808d265000(0000) knlGS:0000000000000000 [ 86.724679][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.727607][ T5325] CR2: 00007f335ada1796 CR3: 00000000115f6000 CR4: 0000000000352ef0 [ 86.732302][ T5325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.736916][ T5325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.741493][ T5325] Kernel panic - not syncing: Fatal exception [ 86.744396][ T5325] Kernel Offset: disabled [ 86.746327][ T5325] Rebooting in 86400 seconds..