stripe_redundancy    0
  io_time[READ]        1
  io_time[WRITE]       768
  fragmentation     0
  bp_start          8
  invalid data type (got 3 should be 9): delete?, fixing
bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
  btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
  btree=subvolumes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0
bcachefs (loop0): error validating btree node on loop0 at btree snapshots level 0/0
  u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3000000 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0  
  node offset 0/16: got wrong btree node: got
  btree=snapshots level=0 seq ebb8d5a9e3463bdb 1
  min: POS_MIN
  max: SPOS_MAX
bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
bcachefs (loop0): flagging btree snapshots lost data
bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
error reading btree root btree=snapshots level=0: btree_node_read_error, fixing
bcachefs (loop0): error validating btree node on loop0 at btree lru level 0/0
  u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0  
  node offset 0/16: incorrect min_key: got 0:12884901888:0 should be POS_MIN
bcachefs (loop0): flagging btree lru lost data
error reading btree root btree=lru level=0: btree_node_read_error, fixing
bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
  btree=freespace level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
  btree=backpointers level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
  btree=deleted_inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0
bcachefs (loop0): scan_for_btree_nodes...
bcachefs (loop0): btree node scan found 7 nodes after overwrites
 done
bcachefs (loop0): check_topology...
bcachefs (loop0): btree root snapshots unreadable, must recover from scan
bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=snapshots level=0 POS_MIN - SPOS_MAX
bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0
 done
bcachefs (loop0): accounting_read... done
bcachefs (loop0): alloc_read... done
bcachefs (loop0): snapshots_read...
bcachefs (loop0): running explicit recovery pass reconstruct_snapshots (21), currently at snapshots_read (7)
 done
bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
bcachefs (loop0): done starting filesystem
bcachefs (loop0): pointer to nonexistent device 1
bcachefs (loop0): inconsistency detected - emergency read only at journal seq 10
------------[ cut here ]------------
unhandled error case in bch2_bkey_pick_read_device
WARNING: CPU: 0 PID: 5319 at fs/bcachefs/extents.c:230 bch2_bkey_pick_read_device+0x17a5/0x1a00 fs/bcachefs/extents.c:230
Modules linked in:
CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
RIP: 0010:bch2_bkey_pick_read_device+0x17a5/0x1a00 fs/bcachefs/extents.c:230
Code: a1 84 57 fd e9 d0 fd ff ff e8 97 84 57 fd c6 05 95 39 dd 0b 01 90 48 c7 c7 a0 a9 93 8c 48 c7 c6 17 c2 5a 8e e8 4c 8f 16 fd 90 <0f> 0b 90 90 e9 bc fe ff ff e8 6d 84 57 fd e9 6e ff ff ff 89 d9 80
RSP: 0018:ffffc9000d4d5480 EFLAGS: 00010246
RAX: d4f2705bcfec2200 RBX: 0000000000000000 RCX: 0000000000100000
RDX: ffffc9000e492000 RSI: 00000000000034ef RDI: 00000000000034f0
RBP: ffffc9000d4d56b0 R08: ffffffff81827862 R09: fffffbfff1d7a934
R10: dffffc0000000000 R11: fffffbfff1d7a934 R12: dffffc0000000000
R13: 1ffff92001a9aab8 R14: 0000000000000000 R15: 0000000000000000
FS:  00007fa161b426c0(0000) GS:ffff88808c5b7000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa158bff000 CR3: 000000003f366000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __bch2_read_extent+0x3ab/0x4400 fs/bcachefs/io_read.c:962
 bch2_read_extent fs/bcachefs/io_read.h:140 [inline]
 bchfs_read+0x2a88/0x3300 fs/bcachefs/fs-io-buffered.c:226
 bch2_readahead+0xe7a/0x12d0 fs/bcachefs/fs-io-buffered.c:301
 read_pages+0x193/0x590 mm/readahead.c:160
 page_cache_ra_order+0xa37/0xca0 mm/readahead.c:515
 filemap_get_pages+0x59f/0x1fc0 mm/filemap.c:2602
 filemap_read+0x466/0x1260 mm/filemap.c:2713
 bch2_read_iter+0x1179/0x14b0 fs/bcachefs/fs-io-direct.c:221
 __kernel_read+0x532/0xa10 fs/read_write.c:528
 integrity_kernel_read+0xb2/0x100 security/integrity/iint.c:28
 ima_calc_file_hash_tfm security/integrity/ima/ima_crypto.c:480 [inline]
 ima_calc_file_shash security/integrity/ima/ima_crypto.c:511 [inline]
 ima_calc_file_hash+0xb22/0x1c10 security/integrity/ima/ima_crypto.c:568
 ima_collect_measurement+0x52b/0xb20 security/integrity/ima/ima_api.c:293
 process_measurement+0x13a3/0x1fe0 security/integrity/ima/ima_main.c:383
 ima_file_check+0xdb/0x130 security/integrity/ima/ima_main.c:611
 security_file_post_open+0xb9/0x280 security/security.c:3130
 do_open fs/namei.c:3847 [inline]
 path_openat+0x2cf7/0x35d0 fs/namei.c:4004
 do_filp_open+0x284/0x4e0 fs/namei.c:4031
 do_sys_openat2+0x12b/0x1d0 fs/open.c:1429
 do_sys_open fs/open.c:1444 [inline]
 __do_sys_open fs/open.c:1452 [inline]
 __se_sys_open fs/open.c:1448 [inline]
 __x64_sys_open+0x226/0x280 fs/open.c:1448
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa160d8d169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fa161b42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007fa160fa5fa0 RCX: 00007fa160d8d169
RDX: 000000000000005c RSI: 000000000004aa3e RDI: 0000200000000200
RBP: 00007fa160e0e2a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fa160fa5fa0 R15: 00007ffc5334faa8
 </TASK>