loop0: detected capacity change from 0 to 32768
bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=none,compression=lz4,str_hash=crc32c,journal_flush_disabled,norecovery,reconstruct_alloc
bcachefs (loop0): recovering from clean shutdown, journal seq 10
bcachefs (loop0): Version upgrade required:
Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
  running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
bcachefs (loop0): dropping and reconstructing all alloc info
bcachefs (loop0): accounting_read... done
bcachefs (loop0): alloc_read... done
bcachefs (loop0): snapshots_read... done
bcachefs (loop0): done starting filesystem
process 'syz.0.0' launched './file2' with NULL argv: empty string added
bcachefs (loop0): pointer to nonexistent device 237
------------[ cut here ]------------
unhandled error case in bch2_bkey_pick_read_device
WARNING: CPU: 0 PID: 5324 at fs/bcachefs/extents.c:230 bch2_bkey_pick_read_device+0x17a5/0x1a00 fs/bcachefs/extents.c:230
Modules linked in:
CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:bch2_bkey_pick_read_device+0x17a5/0x1a00 fs/bcachefs/extents.c:230
Code: a1 84 57 fd e9 d0 fd ff ff e8 97 84 57 fd c6 05 95 39 dd 0b 01 90 48 c7 c7 a0 a9 93 8c 48 c7 c6 17 c2 5a 8e e8 4c 8f 16 fd 90 <0f> 0b 90 90 e9 bc fe ff ff e8 6d 84 57 fd e9 6e ff ff ff 89 d9 80
RSP: 0018:ffffc9000d3e6400 EFLAGS: 00010246
RAX: dbc2dd4ab4e3a200 RBX: 0000000000000000 RCX: 0000000000100000
RDX: ffffc9000e7ea000 RSI: 0000000000007306 RDI: 0000000000007307
RBP: ffffc9000d3e6630 R08: ffffffff81827862 R09: fffffbfff1d7a934
R10: dffffc0000000000 R11: fffffbfff1d7a934 R12: dffffc0000000000
R13: 1ffff92001a7cca8 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f241f7646c0(0000) GS:ffff88808c5b7000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055f4f73b62a8 CR3: 0000000043262000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __bch2_read_extent+0x3ab/0x4400 fs/bcachefs/io_read.c:962
 bch2_read_extent fs/bcachefs/io_read.h:140 [inline]
 bchfs_read+0x2a88/0x3300 fs/bcachefs/fs-io-buffered.c:226
 bch2_readahead+0xe7a/0x12d0 fs/bcachefs/fs-io-buffered.c:301
 read_pages+0x193/0x590 mm/readahead.c:160
 page_cache_ra_order+0xa37/0xca0 mm/readahead.c:515
 filemap_get_pages+0x59f/0x1fc0 mm/filemap.c:2602
 filemap_read+0x466/0x1260 mm/filemap.c:2713
 bch2_read_iter+0x1179/0x14b0 fs/bcachefs/fs-io-direct.c:221
 __kernel_read+0x532/0xa10 fs/read_write.c:528
 prepare_binprm fs/exec.c:1712 [inline]
 search_binary_handler fs/exec.c:1759 [inline]
 exec_binprm fs/exec.c:1805 [inline]
 bprm_execve+0x8ac/0x1440 fs/exec.c:1857
 do_execveat_common+0x57c/0x710 fs/exec.c:1964
 do_execveat fs/exec.c:2049 [inline]
 __do_sys_execveat fs/exec.c:2123 [inline]
 __se_sys_execveat fs/exec.c:2117 [inline]
 __x64_sys_execveat+0xc4/0xe0 fs/exec.c:2117
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f241e98d169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f241f764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
RAX: ffffffffffffffda RBX: 00007f241eba5fa0 RCX: 00007f241e98d169
RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c
RBP: 00007f241ea0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f241eba5fa0 R15: 00007ffc51a56688
 </TASK>