program: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x90}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioperm(0x20a, 0xf, 0xfffffffffffffff9) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1a10000, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESOCT, @ANYRES8, @ANYRES64], 0x1, 0x5a6e, &(0x7f0000005c00)="$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") [ 85.201809][ T5312] Bluetooth: hci0: command tx timeout [ 85.233624][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.0'. [ 85.251777][ T5331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.562735][ T5331] loop0: detected capacity change from 0 to 32768 [ 85.689869][ T5331] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 85.689869][ T5331] allowing incompatible features above 0.0: (unknown version) [ 85.689869][ T5331] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 85.706532][ T5331] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 85.712763][ T5331] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 85.716502][ T5331] bcachefs (loop0): Version upgrade required: [ 85.716502][ T5331] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 85.716502][ T5331] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 85.716502][ T5331] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 85.794959][ T5331] bcachefs (loop0): btree node read error at btree extents level 0/0 [ 85.794979][ T5331] u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 85.794989][ T5331] loop0 node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 85.794995][ T5331] flagging btree extents lost data [ 85.795000][ T5331] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 85.795007][ T5331] ret btree_node_read_validate_error [ 85.822823][ T5331] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 85.829063][ T5331] bcachefs (loop0): btree node read error at btree inodes level 0/0 [ 85.829076][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 85.829084][ T5331] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 12094627905536 > 4294967295 [ 85.829103][ T5331] u64s 3 fields 64:0, 64:0, 32:12094627905536, 0:0, 0:0, 0:0 [ 85.829109][ T5331] flagging btree inodes lost data [ 85.829114][ T5331] ret btree_node_read_validate_error [ 85.854574][ T5331] bcachefs (loop0): error reading btree root btree=inodes level=0: btree_node_read_error, fixing [ 85.859991][ T5331] bcachefs (loop0): btree node read error at btree dirents level 0/0 [ 85.860002][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 85.860007][ T5331] loop0 node offset 0/24 bset u64s 0: incorrect btree id [ 85.860011][ T5331] flagging btree dirents lost data [ 85.860015][ T5331] ret btree_node_read_validate_error [ 85.879452][ T5331] bcachefs (loop0): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 85.886314][ T5331] bcachefs (loop0): btree node read error at btree xattrs level 0/0 [ 85.886328][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 85.886335][ T5331] loop0 node offset 8/16 bset u64s 32522: bset past end of btree node (offset 8 len 512 but written 16) [ 85.886343][ T5331] flagging btree xattrs lost data [ 85.886348][ T5331] ret fsck_errors_not_fixed [ 85.906733][ T5331] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 85.912877][ T5331] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 85.912891][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 85.912900][ T5331] loop0 node offset 0/24 bset u64s 65535: unsupported bset version 63.1018 [ 85.912907][ T5331] flagging btree alloc lost data [ 85.912914][ T5331] ret btree_node_read_err_incompatible [ 85.933465][ T5331] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 85.941084][ T5331] bcachefs (loop0): btree node read error at btree snapshots level 0/0 [ 85.942335][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 85.942347][ T5331] loop0 node offset 0/16: bad magic: want 59513f585d347cd2, got fffffb585d347cd2 [ 85.942355][ T5331] flagging btree snapshots lost data [ 85.942362][ T5331] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 85.942370][ T5331] ret btree_node_read_validate_error [ 85.967841][ T5331] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 85.974713][ T5331] bcachefs (loop0): btree node read error at btree lru level 0/0 [ 85.974727][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 8573157376:562640715776:0 durability: 1 ptr: 0:28:0 gen 0 [ 85.974737][ T5331] loop0 node offset 0/16: incorrect min_key: got 33554432:0:0 should be 8573157376:562640715776:0 [ 85.974746][ T5331] flagging btree lru lost data [ 85.974752][ T5331] ret btree_node_read_validate_error [ 85.996016][ T5331] bcachefs (loop0): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 86.003568][ T5331] bcachefs (loop0): invalid bkey in btree_node btree=freespace level=0: u64s 5 type deleted 0:32:0 len 16777216 ver 0 [ 86.003589][ T5331] size != 0, deleting [ 86.013539][ T5331] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 86.019455][ T5331] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 86.019468][ T5331] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 86.019478][ T5331] loop0 node offset 0/24 bset u64s 0: incorrect btree id [ 86.019485][ T5331] flagging btree backpointers lost data [ 86.019492][ T5331] ret btree_node_read_validate_error [ 86.039566][ T5331] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 86.049556][ T5331] bcachefs (loop0): scan_for_btree_nodes... [ 86.055222][ T5334] bcachefs (loop0): sb invalid before write: Unsupported superblock version 63.1018: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive) [ 86.055248][ T5334] emergency read only at seq 10 [ 86.075044][ T5334] ------------[ cut here ]------------ [ 86.077564][ T5334] kernel BUG at fs/bcachefs/bkey.c:389! [ 86.080214][ T5334] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 86.082973][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: read_btree_node Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 86.088108][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.092637][ T5334] RIP: 0010:bch2_bkey_pack_pos_lossy+0x13de/0x24e0 [ 86.095564][ T5334] Code: e8 a7 26 09 fe 48 ba 00 00 00 00 00 fc ff df e9 a5 f8 ff ff e8 13 b4 a5 fd 90 0f 0b e8 0b b4 a5 fd 90 0f 0b e8 03 b4 a5 fd 90 <0f> 0b e8 fb b3 a5 fd 90 0f 0b e8 f3 b3 a5 fd 90 0f 0b f3 0f 1e fa [ 86.103788][ T5334] RSP: 0018:ffffc9000d4f6b20 EFLAGS: 00010293 [ 86.106386][ T5334] RAX: ffffffff841aa7cd RBX: 00000b0000000000 RCX: ffff888000680000 [ 86.109791][ T5334] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 00000b0000000000 [ 86.113197][ T5334] RBP: ffffc9000d4f6d58 R08: ffffffffffffffff R09: ffffffffffffffff [ 86.116589][ T5334] R10: ffffffffffffffff R11: ffffffffffffffff R12: ffff8880444830c4 [ 86.120071][ T5334] R13: fffff500ffffffff R14: 0000000000000000 R15: fffffffffffffffe [ 86.123504][ T5334] FS: 0000000000000000(0000) GS:ffff88808d255000(0000) knlGS:0000000000000000 [ 86.127387][ T5334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.130141][ T5334] CR2: 00007f70b07909c0 CR3: 00000000513c7000 CR4: 0000000000352ef0 [ 86.133503][ T5334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.136913][ T5334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.140368][ T5334] Call Trace: [ 86.141868][ T5334] [ 86.143172][ T5334] ? __pfx___bch2_inode_validate+0x10/0x10 [ 86.145796][ T5334] ? __pfx_bch2_bkey_pack_pos_lossy+0x10/0x10 [ 86.148469][ T5334] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.150686][ T5334] ? __build_ro_aux_tree+0xafc/0x1800 [ 86.152976][ T5334] __build_ro_aux_tree+0xb21/0x1800 [ 86.155179][ T5334] ? __pfx___build_ro_aux_tree+0x10/0x10 [ 86.157591][ T5334] ? bch2_bkey_val_validate+0x202/0x3e0 [ 86.159956][ T5334] ? __pfx_bch2_bkey_val_validate+0x10/0x10 [ 86.162378][ T5334] ? __asan_memset+0x22/0x50 [ 86.164367][ T5334] bch2_bset_build_aux_tree+0x3f5/0x570 [ 86.166750][ T5334] bch2_btree_node_read_done+0x3ae8/0x5150 [ 86.169357][ T5334] ? __pfx_number+0x10/0x10 [ 86.171369][ T5334] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 86.174081][ T5334] ? bch2_extent_ptr_to_text+0x5a/0x890 [ 86.176495][ T5334] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 86.178978][ T5334] ? bch2_printbuf_make_room+0xdb/0x360 [ 86.181327][ T5334] ? enumerated_ref_put+0xbe/0x270 [ 86.183578][ T5334] btree_node_read_work+0x426/0xe30 [ 86.185848][ T5334] ? __pfx_btree_node_read_work+0x10/0x10 [ 86.188386][ T5334] ? bch2_latency_acct+0x436/0x520 [ 86.190663][ T5334] ? __pfx_bch2_latency_acct+0x10/0x10 [ 86.193101][ T5334] ? bio_associate_blkg+0x6d/0x230 [ 86.195260][ T5334] bch2_btree_node_read+0x887/0x2a00 [ 86.197535][ T5334] ? bch2_btree_node_fill+0x954/0x14f0 [ 86.199845][ T5334] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 86.202395][ T5334] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 86.204769][ T5334] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.207468][ T5334] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 86.210292][ T5334] ? bch2_btree_node_mem_alloc+0xcdf/0x1820 [ 86.212881][ T5334] ? six_unlock_ip+0x302/0x430 [ 86.215010][ T5334] ? bch2_btree_node_fill+0xb47/0x14f0 [ 86.217368][ T5334] bch2_btree_node_fill+0xd12/0x14f0 [ 86.219642][ T5334] ? __pfx_bch2_btree_cache_cmp_fn+0x10/0x10 [ 86.222187][ T5334] ? __pfx_bch2_btree_node_fill+0x10/0x10 [ 86.224587][ T5334] ? btree_cache_find+0xf4/0x2d0 [ 86.226698][ T5334] ? btree_cache_find+0xf4/0x2d0 [ 86.228867][ T5334] ? btree_cache_find+0x26f/0x2d0 [ 86.231091][ T5334] ? __pfx_btree_cache_find+0x10/0x10 [ 86.233501][ T5334] bch2_btree_node_get_noiter+0xa2c/0x1000 [ 86.236050][ T5334] read_btree_nodes_worker+0x1319/0x1e20 [ 86.238549][ T5334] ? read_btree_nodes_worker+0xcef/0x1e20 [ 86.241002][ T5334] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 86.243589][ T5334] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 86.246126][ T5334] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.248415][ T5334] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 86.250971][ T5334] ? __kthread_parkme+0x7b/0x200 [ 86.253153][ T5334] ? __kthread_parkme+0x1a1/0x200 [ 86.255378][ T5334] kthread+0x70e/0x8a0 [ 86.257206][ T5334] ? __pfx_read_btree_nodes_worker+0x10/0x10 [ 86.259789][ T5334] ? __pfx_kthread+0x10/0x10 [ 86.261831][ T5334] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.264156][ T5334] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.266528][ T5334] ? __pfx_kthread+0x10/0x10 [ 86.268599][ T5334] ret_from_fork+0x3f9/0x770 [ 86.270631][ T5334] ? __pfx_ret_from_fork+0x10/0x10 [ 86.272848][ T5334] ? __pfx_kthread+0x10/0x10 [ 86.274859][ T5334] ret_from_fork_asm+0x1a/0x30 [ 86.276895][ T5334] [ 86.278740][ T5334] Modules linked in: [ 86.281428][ T5334] ---[ end trace 0000000000000000 ]--- [ 86.297281][ T5334] RIP: 0010:bch2_bkey_pack_pos_lossy+0x13de/0x24e0 [ 86.300257][ T5334] Code: e8 a7 26 09 fe 48 ba 00 00 00 00 00 fc ff df e9 a5 f8 ff ff e8 13 b4 a5 fd 90 0f 0b e8 0b b4 a5 fd 90 0f 0b e8 03 b4 a5 fd 90 <0f> 0b e8 fb b3 a5 fd 90 0f 0b e8 f3 b3 a5 fd 90 0f 0b f3 0f 1e fa [ 86.310051][ T5334] RSP: 0018:ffffc9000d4f6b20 EFLAGS: 00010293 [ 86.313329][ T5334] RAX: ffffffff841aa7cd RBX: 00000b0000000000 RCX: ffff888000680000 [ 86.316740][ T5334] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 00000b0000000000 [ 86.320400][ T5334] RBP: ffffc9000d4f6d58 R08: ffffffffffffffff R09: ffffffffffffffff [ 86.324493][ T5334] R10: ffffffffffffffff R11: ffffffffffffffff R12: ffff8880444830c4 [ 86.328214][ T5334] R13: fffff500ffffffff R14: 0000000000000000 R15: fffffffffffffffe [ 86.331857][ T5334] FS: 0000000000000000(0000) GS:ffff88808d255000(0000) knlGS:0000000000000000 [ 86.335678][ T5334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.338708][ T5334] CR2: 00007f70b07909c0 CR3: 0000000011434000 CR4: 0000000000352ef0 [ 86.343917][ T5334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.347488][ T5334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.351472][ T5334] Kernel panic - not syncing: Fatal exception [ 86.354661][ T5334] Kernel Offset: disabled [ 86.356665][ T5334] Rebooting in 86400 seconds..