------------[ cut here ]------------
kernel BUG at fs/bcachefs/btree_iter.c:1850!
Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
CPU: 1 UID: 0 PID: 1127 Comm: kworker/u8:6 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Workqueue: btree_update btree_interior_update_work
RIP: 0010:bch2_btree_path_peek_slot+0xa25/0xd60 fs/bcachefs/btree_iter.c:1850
Code: 0c 48 89 43 1c 41 8b 44 24 14 45 31 e4 89 43 24 e9 11 fa ff ff e8 2b eb 92 fd 31 db 45 31 e4 e9 02 fa ff ff e8 1c eb 92 fd 90 <0f> 0b e8 14 eb 92 fd 90 0f 0b e8 0c eb 92 fd 90 0f 0b e8 14 28 f5
RSP: 0018:ffffc900043ee040 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffc900043ee4b0 RCX: ffffffff8426dec7
RDX: ffff888027333c00 RSI: ffffffff8426e824 RDI: 0000000000000003
RBP: ffffc900043ee0d0 R08: 0000000000000003 R09: 0000000000000000
R10: 0000000000000100 R11: 0000000000000001 R12: ffff888012dd0458
R13: ffff888012dd0478 R14: fffffffffffff765 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f90252c2723 CR3: 00000000545c4000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 bch2_btree_iter_peek_slot+0x959/0x2640 fs/bcachefs/btree_iter.c:2799
 __bch2_bkey_get_iter fs/bcachefs/btree_iter.h:573 [inline]
 bch2_bkey_get_iter fs/bcachefs/btree_iter.h:587 [inline]
 bch2_check_discard_freespace_key+0x316/0x14c0 fs/bcachefs/alloc_background.c:1404
 try_alloc_bucket fs/bcachefs/alloc_foreground.c:291 [inline]
 bch2_bucket_alloc_freelist+0xbd0/0x1360 fs/bcachefs/alloc_foreground.c:442
 bch2_bucket_alloc_trans+0x804/0xba0 fs/bcachefs/alloc_foreground.c:574
 bch2_bucket_alloc_set_trans+0x433/0xc80 fs/bcachefs/alloc_foreground.c:730
 __open_bucket_add_buckets+0x955/0x11c0 fs/bcachefs/alloc_foreground.c:973
 open_bucket_add_buckets+0x1a9/0x380 fs/bcachefs/alloc_foreground.c:1017
 bch2_alloc_sectors_start_trans+0x988/0x1c10 fs/bcachefs/alloc_foreground.c:1376
 __bch2_btree_node_alloc+0x71e/0xe40 fs/bcachefs/btree_update_interior.c:322
 bch2_btree_reserve_get+0x21d/0x330 fs/bcachefs/btree_update_interior.c:532
 bch2_btree_update_start+0x13d0/0x2040 fs/bcachefs/btree_update_interior.c:1230
 bch2_btree_split_leaf+0xcf/0x830 fs/bcachefs/btree_update_interior.c:1851
 bch2_trans_commit_error+0x41f/0xe10 fs/bcachefs/btree_trans_commit.c:908
 __bch2_trans_commit+0x21a2/0x7d70 fs/bcachefs/btree_trans_commit.c:1085
 bch2_trans_commit fs/bcachefs/btree_update.h:183 [inline]
 btree_update_nodes_written fs/bcachefs/btree_update_interior.c:706 [inline]
 btree_interior_update_work+0x1d6d/0x2d90 fs/bcachefs/btree_update_interior.c:844
 process_one_work+0x9c8/0x1ba0 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3b2/0x750 kernel/kthread.c:464
 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:bch2_btree_path_peek_slot+0xa25/0xd60 fs/bcachefs/btree_iter.c:1850
Code: 0c 48 89 43 1c 41 8b 44 24 14 45 31 e4 89 43 24 e9 11 fa ff ff e8 2b eb 92 fd 31 db 45 31 e4 e9 02 fa ff ff e8 1c eb 92 fd 90 <0f> 0b e8 14 eb 92 fd 90 0f 0b e8 0c eb 92 fd 90 0f 0b e8 14 28 f5
RSP: 0018:ffffc900043ee040 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffffc900043ee4b0 RCX: ffffffff8426dec7
RDX: ffff888027333c00 RSI: ffffffff8426e824 RDI: 0000000000000003
RBP: ffffc900043ee0d0 R08: 0000000000000003 R09: 0000000000000000
R10: 0000000000000100 R11: 0000000000000001 R12: ffff888012dd0458
R13: ffff888012dd0478 R14: fffffffffffff765 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055b0a6119680 CR3: 000000000df80000 CR4: 0000000000350ef0