program: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584", @ANYBLOB="521c"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) set_mempolicy(0x1, 0x0, 0x0) set_mempolicy(0x6, &(0x7f0000000040)=0x3, 0x6) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x4001, 0x3, 0x480, 0x2e8, 0x4c00, 0x148, 0x2e8, 0x148, 0x3e8, 0x240, 0x240, 0x3e8, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'vxcan1\x00', 'lo\x00', {}, {}, 0x1}, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "91db", 0x2}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'batadv_slave_1\x00', 'vlan1\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x818001, &(0x7f00000001c0)=ANY=[@ANYBLOB="766572626f73652c73686172645f696e6f64655f6e756d626572732c6572726f72733d636f6e74696e75652c696e6c696e655f646174612c76657273696f6e5f757067726164653d636f6d70617469626c652c6e6f6368616e6765732c70726a71756f74612c7265636f766572795f706173735f6c6173743d636865636b5f726f6f742c76657273696f6e5f757067726164653d696e636f6d70617469626c652c00a9099b"], 0x1, 0x5989, &(0x7f0000000540)="$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") [ 73.232008][ T5305] Bluetooth: hci0: command tx timeout [ 73.542094][ T5318] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 73.697859][ T5318] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 73.701885][ T5318] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 73.705600][ T5318] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 73.709790][ T5318] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 73.717216][ T5318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 73.721119][ T5318] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 73.735228][ T5318] usb 5-1: string descriptor 0 read error: -22 [ 73.738613][ T5318] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 73.744024][ T5318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.759253][ T5318] usb 5-1: config 0 descriptor?? [ 73.764703][ T5324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.775839][ T5318] hub 5-1:0.0: bad descriptor, ignoring hub [ 73.779202][ T5318] hub 5-1:0.0: probe with driver hub failed with error -5 [ 73.792596][ T5318] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 73.829554][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 74.374819][ T5324] loop0: detected capacity change from 0 to 32768 [ 74.580995][ T5324] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,prjquota,nochanges,recovery_pass_last=check_root,nojournal_transaction_names,read_only,version_upgrade=incompatible [ 74.580995][ T5324] allowing incompatible features above 0.0: (unknown version) [ 74.580995][ T5324] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 74.642439][ T5324] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 74.648871][ T5324] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing [ 74.674461][ T5324] bcachefs (loop0): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:10004000b compress none [ 74.674476][ T5324] has non ptr field, deleting [ 74.704811][ T5324] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 74.708772][ T5324] bcachefs (loop0): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 74.708772][ T5324] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive [ 74.708772][ T5324] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 74.753531][ T5324] bcachefs (loop0): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version) [ 74.753531][ T5324] [ 74.815879][ T5324] bcachefs (loop0): btree node read error at btree inodes level 0/0 [ 74.815906][ T5324] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 74.815919][ T5324] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 34342961152 > 4294967295 [ 74.816052][ T5324] u64s 3 fields 64:0, 64:0, 32:34342961152, 0:0, 0:0, 0:0 [ 74.816063][ T5324] flagging btree inodes lost data [ 74.816070][ T5324] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 74.816079][ T5324] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 74.816089][ T5324] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 74.816100][ T5324] ret btree_node_read_validate_error [ 74.869556][ T5324] bcachefs (loop0): error reading btree root btree=inodes level=0: btree_node_read_error, fixing [ 74.895135][ T5324] bcachefs (loop0): scan_for_btree_nodes... [ 74.910134][ T5327] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 17 type inode_v3 0:4097:4278190079 len 0 ver 0: (unpack error) [ 74.910160][ T5327] invalid variable length fields, deleting [ 74.927103][ T5327] ------------[ cut here ]------------ [ 74.930251][ T5327] kernel BUG at fs/bcachefs/bkey.c:389! [ 74.933901][ T5327] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 74.936717][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: read_btree_node Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 74.941338][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.946446][ T5327] RIP: 0010:bch2_bkey_pack_pos_lossy+0x13de/0x24e0 [ 74.949665][ T5327] Code: e8 a7 19 09 fe 48 ba 00 00 00 00 00 fc ff df e9 a5 f8 ff ff e8 63 a1 a5 fd 90 0f 0b e8 5b a1 a5 fd 90 0f 0b e8 53 a1 a5 fd 90 <0f> 0b e8 4b a1 a5 fd 90 0f 0b e8 43 a1 a5 fd 90 0f 0b f3 0f 1e fa [ 74.958729][ T5327] RSP: 0018:ffffc9000d41eb20 EFLAGS: 00010293 [ 74.961302][ T5327] RAX: ffffffff841abd9d RBX: 00000007ff000000 RCX: ffff8880002dc880 [ 74.964808][ T5327] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 00000007ff000000 [ 74.968994][ T5327] RBP: ffffc9000d41ed58 R08: ffffffffffffffff R09: ffffffffffffffff [ 74.972825][ T5327] R10: ffffffffffffffff R11: ffffffffffffffff R12: ffff8880524a70c4 [ 74.976262][ T5327] R13: fffffff900ffffff R14: 0000000000000000 R15: fffffffffffffffe [ 74.979748][ T5327] FS: 0000000000000000(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 74.984106][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.987395][ T5327] CR2: 00007fc31cc63000 CR3: 00000000123a1000 CR4: 0000000000352ef0 [ 74.991118][ T5327] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.994626][ T5327] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.998244][ T5327] Call Trace: [ 74.999945][ T5327] [ 75.001450][ T5327] ? __pfx___bch2_inode_validate+0x10/0x10 [ 75.004387][ T5327] ? __pfx_bch2_bkey_pack_pos_lossy+0x10/0x10 [ 75.007027][ T5327] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.009364][ T5327] ? __build_ro_aux_tree+0xafc/0x1800 [ 75.011728][ T5327] __build_ro_aux_tree+0xb21/0x1800 [ 75.014238][ T5327] ? __pfx___build_ro_aux_tree+0x10/0x10 [ 75.017208][ T5327] ? bch2_bkey_val_validate+0x205/0x3e0 [ 75.020210][ T5327] ? __pfx_bch2_bkey_val_validate+0x10/0x10 [ 75.022955][ T5327] ? __asan_memset+0x22/0x50 [ 75.025040][ T5327] bch2_bset_build_aux_tree+0x3f5/0x570 [ 75.027479][ T5327] bch2_btree_node_read_done+0x3ae8/0x5150 [ 75.030172][ T5327] ? __pfx_number+0x10/0x10 [ 75.032472][ T5327] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 75.035734][ T5327] ? bch2_extent_ptr_to_text+0x5a/0x890 [ 75.038621][ T5327] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 75.041222][ T5327] ? bch2_printbuf_make_room+0xdb/0x360 [ 75.043604][ T5327] ? enumerated_ref_put+0xbe/0x270 [ 75.045817][ T5327] btree_node_read_work+0x426/0xe30 [ 75.048286][ T5327] ? __pfx_btree_node_read_work+0x10/0x10 [ 75.051084][ T5327] ? bch2_latency_acct+0x436/0x520 [ 75.054029][ T5327] ? __pfx_bch2_latency_acct+0x10/0x10 [ 75.056835][ T5327] ? bio_associate_blkg+0x6d/0x230 [ 75.059097][ T5327] bch2_btree_node_read+0x887/0x2a00 [ 75.061429][ T5327] ? bch2_btree_node_fill+0x954/0x14f0 [ 75.063831][ T5327] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 75.066379][ T5327] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 75.069035][ T5327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.071875][ T5327] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 75.074802][ T5327] ? bch2_btree_node_mem_alloc+0xcdf/0x1820 [ 75.077436][ T5327] ? six_unlock_ip+0x302/0x430 [ 75.079765][ T5327] ? bch2_btree_node_fill+0xb47/0x14f0 [ 75.082435][ T5327] bch2_btree_node_fill+0xd12/0x14f0 [ 75.085126][ T5327] ? __pfx_bch2_btree_cache_cmp_fn+0x10/0x10 [ 75.087859][ T5327] ? __pfx_bch2_btree_node_fill+0x10/0x10 [ 75.090343][ T5327] ? btree_cache_find+0xf4/0x2d0 [ 75.092749][ T5327] ? btree_cache_find+0xf4/0x2d0 [ 75.095169][ T5327] ? btree_cache_find+0x26f/0x2d0 [ 75.097486][ T5327] ? __pfx_btree_cache_find+0x10/0x10 [ 75.100170][ T5327] bch2_btree_node_get_noiter+0xa2c/0x1000 [ 75.102826][ T5327] read_btree_nodes_worker+0x1319/0x1e20 [ 75.105369][ T5327] ? read_btree_nodes_worker+0xcef/0x1e20 [ 75.107866][ T5327] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 75.111141][ T5327] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 75.114506][ T5327] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.117051][ T5327] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 75.119752][ T5327] ? __kthread_parkme+0x7b/0x200 [ 75.121992][ T5327] ? __kthread_parkme+0x1a1/0x200 [ 75.124239][ T5327] kthread+0x70e/0x8a0 [ 75.126041][ T5327] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 75.128904][ T5327] ? __pfx_kthread+0x10/0x10 [ 75.131217][ T5327] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.133842][ T5327] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.136285][ T5327] ? __pfx_kthread+0x10/0x10 [ 75.138665][ T5327] ret_from_fork+0x3fc/0x770 [ 75.140740][ T5327] ? __pfx_ret_from_fork+0x10/0x10 [ 75.142952][ T5327] ? __pfx_kthread+0x10/0x10 [ 75.145245][ T5327] ret_from_fork_asm+0x1a/0x30 [ 75.147919][ T5327] [ 75.149658][ T5327] Modules linked in: [ 75.152428][ T5327] ---[ end trace 0000000000000000 ]--- [ 75.162801][ T5327] RIP: 0010:bch2_bkey_pack_pos_lossy+0x13de/0x24e0 [ 75.166244][ T5327] Code: e8 a7 19 09 fe 48 ba 00 00 00 00 00 fc ff df e9 a5 f8 ff ff e8 63 a1 a5 fd 90 0f 0b e8 5b a1 a5 fd 90 0f 0b e8 53 a1 a5 fd 90 <0f> 0b e8 4b a1 a5 fd 90 0f 0b e8 43 a1 a5 fd 90 0f 0b f3 0f 1e fa [ 75.177946][ T5327] RSP: 0018:ffffc9000d41eb20 EFLAGS: 00010293 [ 75.182150][ T5327] RAX: ffffffff841abd9d RBX: 00000007ff000000 RCX: ffff8880002dc880 [ 75.185933][ T5327] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 00000007ff000000 [ 75.189660][ T5327] RBP: ffffc9000d41ed58 R08: ffffffffffffffff R09: ffffffffffffffff [ 75.194336][ T5327] R10: ffffffffffffffff R11: ffffffffffffffff R12: ffff8880524a70c4 [ 75.198115][ T5327] R13: fffffff900ffffff R14: 0000000000000000 R15: fffffffffffffffe [ 75.203334][ T5327] FS: 0000000000000000(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 75.207407][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.210815][ T5327] CR2: 00007fc31cc63000 CR3: 00000000123a1000 CR4: 0000000000352ef0 [ 75.216577][ T5327] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.220273][ T5327] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.224362][ T5327] Kernel panic - not syncing: Fatal exception [ 75.227725][ T5327] Kernel Offset: disabled [ 75.230102][ T5327] Rebooting in 86400 seconds..