program: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000020000004400000008000300", @ANYRES32=r3, @ANYBLOB="ffffff0000007abe"], 0x30}}, 0x0) r4 = socket$inet_sctp(0x2, 0x4, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = dup2(r5, r5) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f00000003c0)={r7, @in={{0x2, 0x0, @private}}}, &(0x7f0000000000)=0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000100010073797a310000000060000000160a010200000000000000000100000009000219bbc8792de1978a0073797a30000000000900010073797a300000000008000740000000032c000380080002400000000008000140000000000000014000000000140000001000010000000000000000000000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000140)=0xffffffff) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x400, 0x2c7d, 0x213, 0x80, 0x9, 0x80000000, 0x3, 0x6, r7}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x210}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\b', @ANYRES16=r12, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08000700", @ANYRES32=r13, @ANYBLOB="1bd6a5c152f89eb022be9dcc2a5f605c909c27990a51012aeca875f8cb4d3b90b53133e1e0b1f48541f00a01e199594ff839aadec38363d64709d8e8ea5c67522f63300331f29930cd2b1eaa6747d104bee379012e09e5518817381d6cf33b741096e3628b5e8e99ca26aee9018b1e79e65c773eea8d764d7ee3f9e01d656f2916101cb0de4262a50ae5f197e4dd33d3878912a860768d493ce3296817e058dfb740a1b784e71f61b145ec78"], 0x30}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xd9f}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x3}}}]}}]}, 0x45c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000840)={'erspan0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0x20, 0x10, 0xffffff7f, 0x401, {{0x25, 0x4, 0x2, 0x4, 0x94, 0x65, 0x0, 0x2, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0xce, 0x0, 0x9, [0x18000]}, @lsrr={0x83, 0x1b, 0xb9, [@multicast1, @local, @broadcast, @local, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0x44, [@multicast2, @local, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x0, [{@remote, 0x1}, {@multicast2, 0x5}, {@rand_addr=0x64010101, 0x7}]}, @ssrr={0x89, 0xb, 0xf5, [@local, @multicast2]}, @timestamp={0x44, 0x20, 0x17, 0x0, 0x2, [0xb, 0x7fff, 0x1, 0x8, 0x6, 0x0, 0x80]}, @rr={0x7, 0x7, 0xb3, [@private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x9, 0x6, 0x3, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast1, 0x1, 0x8000, 0x4, 0x4}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'veth0_vlan\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="080026bd70000000df25060000005c00058008000300e8c7103ae628d5e6ab6a", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000014000200697036746e6c300000000000000000000800030003000000080003000200000014000200766574683000000000000000000000003c0001800800030001000000140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626174616476000c00018008000100", @ANYRES32=r10, @ANYBLOB="540001801400020077673100000000000000000000000000140002006c6f00000000000000000000000000001400020065727370616e30000000000000000000140002006e6574706369300000000000000000003c000180140002007767310000000000000000000000000008000100", @ANYRES32=r13, @ANYRES8=r18, @ANYRES32=r16, @ANYBLOB="0800030001000000080003000000000008000100", @ANYRES32=r17, @ANYRESDEC=r14, @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000002000018014000200697036746e6c3000000000000000000008000300030000002000018008000100", @ANYRES32=r19, @ANYBLOB="14000200766972745f7769666930000000000000"], 0x208}, 0x1, 0x0, 0x0, 0x4040081}, 0x840) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x800000, &(0x7f00000000c0)=ANY=[], 0x0, 0x5a61, &(0x7f0000005b80)="$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") [ 75.256762][ T5311] Bluetooth: hci0: command tx timeout [ 75.298689][ T5332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.0'. [ 75.373804][ T5333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.0'. [ 75.388850][ T5333] sch_tbf: peakrate 3 is lower than or equals to rate 3487 ! [ 75.777053][ T5332] loop0: detected capacity change from 0 to 32768 [ 76.024022][ T5332] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 76.024736][ T5332] allowing incompatible features above 0.0: (unknown version) [ 76.024747][ T5332] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 76.046169][ T5332] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 76.049955][ T5332] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 76.052894][ T5332] bcachefs (loop0): Version upgrade required: [ 76.052894][ T5332] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 76.052894][ T5332] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 76.052894][ T5332] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 76.150131][ T5332] bcachefs (loop0): btree node read error at btree extents level 0/0 [ 76.150161][ T5332] u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 76.150171][ T5332] loop0 node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 76.150179][ T5332] loop0 btree validate error [ 76.150185][ T5332] flagging btree extents lost data [ 76.150191][ T5332] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 76.150199][ T5332] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 76.150206][ T5332] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 76.150214][ T5332] ret btree_node_read_err_bad_node [ 76.189662][ T5332] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 76.197983][ T5332] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 16 type inode_v3 0:4096:4294904831 len 0 ver 0: (unpack error) [ 76.198008][ T5332] invalid variable length fields, deleting [ 76.209166][ T5332] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0: [ 76.209176][ T5332] mode=40755 [ 76.209180][ T5332] flags=(15300000) [ 76.209183][ T5332] journal_seq=4 [ 76.209187][ T5332] hash_seed=ece93825deac2443 [ 76.209190][ T5332] hash_type=siphash [ 76.209194][ T5332] bi_size=0 [ 76.209198][ T5332] bi_sectors=0 [ 76.209201][ T5332] bi_version=0 [ 76.209204][ T5332] bi_atime=2770562249 [ 76.209207][ T5332] bi_ctime=2780562352 [ 76.209211][ T5332] bi_mtime=2780562352 [ 76.209215][ T5332] bi_otime=2770562249 [ 76.209218][ T5332] bi_uid=0 [ 76.209222][ T5332] bi_gid=0 [ 76.209225][ T5332] bi_nlink=0 [ 76.209228][ T5332] bi_generation=0 [ 76.209231][ T5332] bi_dev=0 [ 76.209235][ T5332] bi_data_checksum=0 [ 76.209238][ T5332] bi_compression=101 [ 76.209241][ T5332] bi_project=0 [ 76.209246][ T5332] bi_background_compression=0 [ 76.209249][ T5332] bi_data_replicas=0 [ 76.209252][ T5332] bi_promote_target=0 [ 76.209256][ T5332] bi_foreground_target=0 [ 76.209259][ T5332] bi_background_target=0 [ 76.209263][ T5332] bi_erasure_code=0 [ 76.209267][ T5332] bi_fields_set=0 [ 76.209270][ T5332] bi_dir=4096 [ 76.209274][ T5332] bi_dir_offset=189491840996961599 [ 76.209277][ T5332] bi_subvol=0 [ 76.209280][ T5332] bi_parent_subvol=0 [ 76.209284][ T5332] bi_nocow=0 [ 76.209287][ T5332] bi_depth=0 [ 76.209290][ T5332] bi_inodes_32bit=0 [ 76.209293][ T5332] bi_casefold=0 [ 76.209297][ T5332] invalid compression opt 100, deleting [ 76.296620][ T5332] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 11 type alloc_v4 0:0:1024 len 0 ver 0: [ 76.296638][ T5332] gen 0 oldest_gen 0 data_type sb [ 76.296643][ T5332] journal_seq_nonempty 1 [ 76.296650][ T5332] journal_seq_empty 1769481 [ 76.296656][ T5332] need_discard 1 [ 76.296661][ T5332] need_inc_gen 1 [ 76.296668][ T5332] dirty_sectors 256 [ 76.296674][ T5332] stripe_sectors 2 [ 76.296679][ T5332] cached_sectors 0 [ 76.296684][ T5332] stripe 0 [ 76.296690][ T5332] stripe_redundancy 0 [ 76.296695][ T5332] io_time[READ] 1407374883553281 [ 76.296702][ T5332] io_time[WRITE] 0 [ 76.296708][ T5332] fragmentation 0 [ 76.296713][ T5332] bp_start 6 [ 76.296718][ T5332] [ 76.296723][ T5332] nonzero snapshot, deleting [ 76.366950][ T5332] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 76.379196][ T5332] bcachefs (loop0): btree node read error at btree deleted_inodes level 0/0 [ 76.379207][ T5332] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 260 min_key R 8589934592:0:0 durability: 1 ptr: 0:42:0 gen 0 [ 76.379213][ T5332] loop0 node offset 8/260: btree node data missing: expected 260 sectors, found 8 [ 76.379218][ T5332] loop0 btree validate error [ 76.379221][ T5332] repair success (rewriting node) [ 76.401110][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.401182][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.419130][ T5332] bcachefs (loop0): check_topology... [ 76.419223][ T5332] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 76.426316][ T5332] bcachefs (loop0): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 76.432001][ T5332] bcachefs (loop0): bch2_check_root(): error restart_recovery [ 76.436273][ T5332] bcachefs (loop0): scan_for_btree_nodes... [ 76.447612][ T5332] bcachefs (loop0): btree node scan found 1 nodes after overwrites [ 76.453609][ T5332] done [ 76.455876][ T5332] bcachefs (loop0): check_topology... [ 76.455952][ T5332] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 76.461468][ T5332] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX [ 76.466848][ T5332] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 76.479515][ T5332] done [ 76.480874][ T5332] bcachefs (loop0): accounting_read... done [ 76.485681][ T5332] bcachefs (loop0): alloc_read... done [ 76.489374][ T5332] bcachefs (loop0): snapshots_read... done [ 76.493651][ T5332] bcachefs (loop0): check_allocations... [ 76.497007][ T5332] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 76.497028][ T5332] while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:34:0 gen 0, fixing [ 76.511278][ T5332] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 76.511292][ T5332] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 76.523245][ T5332] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 76.523256][ T5332] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 76.536309][ T5332] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 76.536325][ T5332] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 76.548366][ T5332] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 76.548381][ T5332] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 76.561026][ T5332] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 76.561042][ T5332] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 76.572393][ T5332] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 76.572403][ T5332] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 76.586291][ T5332] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 76.586305][ T5332] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 76.599667][ T5332] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 76.599683][ T5332] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 76.611018][ T5332] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 76.611028][ T5332] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 76.623364][ T5332] ------------[ cut here ]------------ [ 76.627102][ T5332] kernel BUG at fs/bcachefs/btree_iter.c:633! [ 76.631319][ T5332] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 76.634430][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted 6.16.0-syzkaller-04055-g14bed9bc81ba #0 PREEMPT(full) [ 76.639025][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.643607][ T5332] RIP: 0010:bch2_btree_path_level_init+0x9e9/0xa20 [ 76.646589][ T5332] Code: c1 0f 8c 9e fb ff ff 4c 89 f7 e8 e2 30 fe fd e9 91 fb ff ff e8 d8 a9 9a fd 90 0f 0b e8 d0 a9 9a fd 90 0f 0b e8 c8 a9 9a fd 90 <0f> 0b e8 c0 a9 9a fd 90 0f 0b e8 b8 a9 9a fd 90 0f 0b e8 b0 a9 9a [ 76.655174][ T5332] RSP: 0018:ffffc9000d40e4a0 EFLAGS: 00010287 [ 76.657568][ T5332] RAX: ffffffff84250b48 RBX: ffff888052f54360 RCX: 0000000000100000 [ 76.660756][ T5332] RDX: ffffc9000deb2000 RSI: 00000000000ac559 RDI: 00000000000ac55a [ 76.664213][ T5332] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 76.667931][ T5332] R10: dffffc0000000000 R11: fffff52001a81c88 R12: 0000000000000000 [ 76.671225][ T5332] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000200000000 [ 76.674447][ T5332] FS: 00007fe512a8b6c0(0000) GS:ffff88808d27b000(0000) knlGS:0000000000000000 [ 76.678238][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.681172][ T5332] CR2: 00007f78529909c0 CR3: 0000000042abb000 CR4: 0000000000352ef0 [ 76.684760][ T5332] Call Trace: [ 76.686354][ T5332] [ 76.687706][ T5332] bch2_btree_path_traverse_one+0xfec/0x21d0 [ 76.690279][ T5332] ? bch2_btree_path_traverse_one+0x91e/0x21d0 [ 76.693023][ T5332] ? bch2_check_allocations+0x120d/0x57b0 [ 76.695360][ T5332] ? bch2_btree_iter_verify+0x1d/0x360 [ 76.697702][ T5332] bch2_btree_iter_peek_max+0x9e8/0x58f0 [ 76.700057][ T5332] ? bch2_check_allocations+0x120d/0x57b0 [ 76.702499][ T5332] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.704974][ T5332] ? __pfx_bch2_btree_iter_peek_max+0x10/0x10 [ 76.707714][ T5332] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 76.710317][ T5332] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.712665][ T5332] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 76.714977][ T5332] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 76.717873][ T5332] ? mean_and_variance_weighted_get_mean+0x6f/0xc0 [ 76.720797][ T5332] ? __bch2_time_stats_update+0x2ec/0x390 [ 76.723445][ T5332] ? bch2_trans_begin+0x1a71/0x2310 [ 76.725706][ T5332] ? bch2_trans_node_iter_init+0x348/0x5e0 [ 76.728271][ T5332] ? bch2_trans_node_iter_init+0x406/0x5e0 [ 76.731035][ T5332] ? __pfx_bch2_trans_begin+0x10/0x10 [ 76.733938][ T5332] ? __pfx_bch2_trans_node_iter_init+0x10/0x10 [ 76.736658][ T5332] ? bch2_check_allocations+0x1aa1/0x57b0 [ 76.739112][ T5332] bch2_check_allocations+0x120d/0x57b0 [ 76.741560][ T5332] ? prb_read_valid+0x3c/0x60 [ 76.743569][ T5332] ? desc_read+0x1b8/0x3f0 [ 76.745537][ T5332] ? bch2_check_allocations+0xed1/0x57b0 [ 76.748002][ T5332] ? prb_first_seq+0xfd/0x1a0 [ 76.750453][ T5332] ? __pfx_prb_first_seq+0x10/0x10 [ 76.752738][ T5332] ? desc_read+0x1b8/0x3f0 [ 76.754832][ T5332] ? __pfx_bch2_check_allocations+0x10/0x10 [ 76.757397][ T5332] ? up+0xde/0x150 [ 76.759146][ T5332] ? __pfx__prb_read_valid+0x10/0x10 [ 76.761693][ T5332] ? __console_unlock+0x14c/0x1a0 [ 76.764118][ T5332] ? __pfx___console_unlock+0x10/0x10 [ 76.766771][ T5332] ? prb_read_valid+0x3c/0x60 [ 76.768797][ T5332] ? console_unlock+0x21b/0x270 [ 76.770905][ T5332] ? bch2_check_allocations+0x11c1/0x57b0 [ 76.773432][ T5332] ? irq_work_queue+0xc3/0x140 [ 76.775465][ T5332] ? bch2_check_allocations+0x1aa1/0x57b0 [ 76.777822][ T5332] ? __pfx_vprintk_emit+0x10/0x10 [ 76.780024][ T5332] ? do_raw_spin_lock+0x121/0x290 [ 76.782370][ T5332] ? __pfx___bch2_print+0x10/0x10 [ 76.784959][ T5332] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.787529][ T5332] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.789888][ T5332] __bch2_run_recovery_passes+0x392/0x1010 [ 76.792387][ T5332] bch2_run_recovery_passes+0x184/0x210 [ 76.794781][ T5332] bch2_fs_recovery+0x2690/0x3a50 [ 76.796937][ T5332] ? check_noncircular+0xe0/0x160 [ 76.799096][ T5332] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 76.801380][ T5332] ? __lock_acquire+0xab9/0xd20 [ 76.803576][ T5332] ? __lock_acquire+0xab9/0xd20 [ 76.805851][ T5332] ? __lock_acquire+0xab9/0xd20 [ 76.808035][ T5332] ? bch2_fs_start+0xa0f/0xda0 [ 76.810586][ T5332] ? up_write+0x1c4/0x420 [ 76.813570][ T5332] ? bch2_fs_start+0x5e7/0xda0 [ 76.816157][ T5332] bch2_fs_start+0xaaf/0xda0 [ 76.818570][ T5332] ? bch2_fs_start+0x5e7/0xda0 [ 76.820602][ T5332] ? __pfx_bch2_fs_start+0x10/0x10 [ 76.823124][ T5332] ? sget+0x267/0x620 [ 76.824934][ T5332] bch2_fs_get_tree+0xb39/0x1520 [ 76.827493][ T5332] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 76.830180][ T5332] ? aa_get_newest_label+0xf7/0x5d0 [ 76.832856][ T5332] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 76.835557][ T5332] ? rcu_is_watching+0x15/0xb0 [ 76.838016][ T5332] vfs_get_tree+0x8f/0x2b0 [ 76.840006][ T5332] do_new_mount+0x2a2/0x9e0 [ 76.842073][ T5332] ? ns_capable+0x8a/0xf0 [ 76.844237][ T5332] ? __pfx_do_new_mount+0x10/0x10 [ 76.846426][ T5332] ? path_mount+0x61c/0xfe0 [ 76.848594][ T5332] ? user_path_at+0x44/0x60 [ 76.851044][ T5332] __se_sys_mount+0x317/0x410 [ 76.853791][ T5332] ? __pfx___se_sys_mount+0x10/0x10 [ 76.856155][ T5332] ? do_syscall_64+0xbe/0x3b0 [ 76.858252][ T5332] ? __x64_sys_mount+0x20/0xc0 [ 76.860380][ T5332] do_syscall_64+0xfa/0x3b0 [ 76.862235][ T5332] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.864625][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.867280][ T5332] ? clear_bhb_loop+0x60/0xb0 [ 76.869930][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.872800][ T5332] RIP: 0033:0x7fe511b9014a [ 76.874991][ T5332] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.883882][ T5332] RSP: 002b:00007fe512a8ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.887630][ T5332] RAX: ffffffffffffffda RBX: 00007fe512a8aef0 RCX: 00007fe511b9014a [ 76.891363][ T5332] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fe512a8aeb0 [ 76.894907][ T5332] RBP: 0000200000000080 R08: 00007fe512a8aef0 R09: 0000000000800000 [ 76.898754][ T5332] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000040 [ 76.902224][ T5332] R13: 00007fe512a8aeb0 R14: 0000000000005a61 R15: 00002000000000c0 [ 76.905742][ T5332] [ 76.907270][ T5332] Modules linked in: [ 76.910136][ T5332] ---[ end trace 0000000000000000 ]--- [ 76.919382][ T5332] RIP: 0010:bch2_btree_path_level_init+0x9e9/0xa20 [ 76.922232][ T5332] Code: c1 0f 8c 9e fb ff ff 4c 89 f7 e8 e2 30 fe fd e9 91 fb ff ff e8 d8 a9 9a fd 90 0f 0b e8 d0 a9 9a fd 90 0f 0b e8 c8 a9 9a fd 90 <0f> 0b e8 c0 a9 9a fd 90 0f 0b e8 b8 a9 9a fd 90 0f 0b e8 b0 a9 9a [ 76.933718][ T5332] RSP: 0018:ffffc9000d40e4a0 EFLAGS: 00010287 [ 76.937189][ T5332] RAX: ffffffff84250b48 RBX: ffff888052f54360 RCX: 0000000000100000 [ 76.940684][ T5332] RDX: ffffc9000deb2000 RSI: 00000000000ac559 RDI: 00000000000ac55a [ 76.944833][ T5332] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 76.948406][ T5332] R10: dffffc0000000000 R11: fffff52001a81c88 R12: 0000000000000000 [ 76.953199][ T5332] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000200000000 [ 76.957361][ T5332] FS: 00007fe512a8b6c0(0000) GS:ffff88808d27b000(0000) knlGS:0000000000000000 [ 76.961536][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.965389][ T5332] CR2: 00007f78529909c0 CR3: 0000000042abb000 CR4: 0000000000352ef0 [ 76.969970][ T5332] Kernel panic - not syncing: Fatal exception [ 76.973312][ T5332] Kernel Offset: disabled [ 76.975209][ T5332] Rebooting in 86400 seconds..