program:
r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0x501c4814, &(0x7f00000000c0)={0x2})
r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x480901)
ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000480)={0x100, 0x10000, 0x1, 0x69, &(0x7f0000000280)=""/105, 0x4a, &(0x7f0000000380)=""/74, 0x64, &(0x7f0000000400)=""/100})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008007c00", @ANYRES32, @ANYBLOB="0800050002"], 0x24}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = dup(r4)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000059e000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000200)=[@flags={0x3, 0x41292}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x800001, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f5f6461710000000000000074615f636865636b73756d3d6e6f6e652c6e6f636f772c726174656c696d69745fc19e4b05745490d86572726f72732c70726a71756f74612c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00", @ANYRES16=r0], 0x1, 0x5a17, &(0x7f000000b580)="$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")
[ 70.133413][ T5309] Bluetooth: hci0: command tx timeout
[ 70.496247][ T5325] loop0: detected capacity change from 0 to 32768
[ 70.708910][ T5325] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=ro,errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only
[ 70.717030][ T5325] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 70.720418][ T5325] bcachefs (loop0): Version upgrade from 1.13: inode_has_child_snapshots to 1.7: mi_btree_bitmap incomplete
[ 70.720418][ T5325] Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.25: extent_flags
[ 70.720418][ T5325] running recovery passes: check_allocations,check_extents_to_backpointers
[ 70.737790][ T5325] bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0
[ 70.737805][ T5325] u64s 11 type btree_ptr_v2 18446744073707239423:U64_MAX:U32_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[ 70.737815][ T5325] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX
[ 70.758645][ T5325] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[ 70.764509][ T5325] bcachefs (loop0): flagging btree extents lost data
[ 70.768009][ T5325] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[ 70.773339][ T5325] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[ 70.778572][ T5325] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[ 70.786418][ T5325] error reading btree root btree=extents level=0: btree_node_read_error, fixing
[ 70.793640][ T5325] bcachefs (loop0): error validating btree node at btree dirents level 0/0
[ 70.793658][ T5325] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0
[ 70.793666][ T5325] node offset 16/24 bset u64s 36 bset byte offset 288: invalid bkey format 5, fixing
[ 70.809144][ T5325] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
[ 70.809144][ T5325] btree=dirents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0
[ 70.822198][ T5325] bcachefs (loop0): error validating btree node at btree alloc level 0/0
[ 70.822211][ T5325] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[ 70.822221][ T5325] node offset 8/24 bset u64s 375 bset byte offset 256: keys out of order: u64s 11 type alloc_v4 3:2:0 len 0 ver 0 > u64s 11 type alloc_v4 0:3:0 len 0 ver 0, fixing
[ 70.840651][ T5325] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
[ 70.840651][ T5325] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[ 70.850533][ T5325] bcachefs (loop0): pointer to nonexistent device 2
[ 70.854541][ T5325] ------------[ cut here ]------------
[ 70.856765][ T5325] unhandled error case in bch2_bkey_pick_read_device
[ 70.859818][ T5325] WARNING: CPU: 0 PID: 5325 at fs/bcachefs/extents.c:230 bch2_bkey_pick_read_device+0x17a5/0x1a00
[ 70.864307][ T5325] Modules linked in:
[ 70.865932][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-09352-g0c86b42439b6 #0 PREEMPT(full)
[ 70.871575][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 70.875772][ T5325] RIP: 0010:bch2_bkey_pick_read_device+0x17a5/0x1a00
[ 70.878330][ T5325] Code: 91 2c 57 fd e9 d0 fd ff ff e8 87 2c 57 fd c6 05 0a bd db 0b 01 90 48 c7 c7 e0 af 93 8c 48 c7 c6 b4 8b 59 8e e8 3c 3d 16 fd 90 <0f> 0b 90 90 e9 bc fe ff ff e8 5d 2c 57 fd e9 6e ff ff ff 89 d9 80
[ 70.885763][ T5325] RSP: 0018:ffffc9000d566de0 EFLAGS: 00010246
[ 70.888094][ T5325] RAX: 57fa73b0d43db500 RBX: 0000000000000000 RCX: 0000000000100000
[ 70.891066][ T5325] RDX: ffffc9000e8c2000 RSI: 000000000004b86f RDI: 000000000004b870
[ 70.894215][ T5325] RBP: ffffc9000d567010 R08: ffffffff8182adb2 R09: 1ffff11003f847d2
[ 70.897317][ T5325] R10: dffffc0000000000 R11: ffffed1003f847d3 R12: dffffc0000000000
[ 70.900311][ T5325] R13: 1ffff92001aacde4 R14: 0000000000000000 R15: 0000000000000000
[ 70.903517][ T5325] FS: 00007f85f0a2c6c0(0000) GS:ffff88808c5dc000(0000) knlGS:0000000000000000
[ 70.907184][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 70.909688][ T5325] CR2: 0000560c6dc91068 CR3: 0000000033b50000 CR4: 0000000000352ef0
[ 70.913151][ T5325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 70.916171][ T5325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 70.919402][ T5325] Call Trace:
[ 70.920842][ T5325]
[ 70.922123][ T5325] ? __warn+0x165/0x4d0
[ 70.923986][ T5325] ? bch2_bkey_pick_read_device+0x17a5/0x1a00
[ 70.926235][ T5325] ? report_bug+0x2b3/0x500
[ 70.929118][ T5325] ? bch2_bkey_pick_read_device+0x17a5/0x1a00
[ 70.931414][ T5325] ? bch2_bkey_pick_read_device+0x17a5/0x1a00
[ 70.933809][ T5325] ? bch2_bkey_pick_read_device+0x17a7/0x1a00
[ 70.936039][ T5325] ? handle_bug+0x89/0x170
[ 70.937773][ T5325] ? exc_invalid_op+0x1a/0x50
[ 70.939492][ T5325] ? asm_exc_invalid_op+0x1a/0x20
[ 70.941515][ T5325] ? __warn_printk+0x2a2/0x360
[ 70.943360][ T5325] ? bch2_bkey_pick_read_device+0x17a5/0x1a00
[ 70.945626][ T5325] ? bch2_bkey_pick_read_device+0x29e/0x1a00
[ 70.947941][ T5325] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10
[ 70.950376][ T5325] bch2_btree_node_read+0x7ac/0x29e0
[ 70.952521][ T5325] ? bch2_btree_node_hash_insert+0x88/0xc0
[ 70.954731][ T5325] ? __mutex_unlock_slowpath+0x229/0x800
[ 70.956894][ T5325] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 70.959070][ T5325] ? bch2_trans_unlock+0x36a/0x490
[ 70.961035][ T5325] ? bch2_trans_unlock+0x3c1/0x490
[ 70.963076][ T5325] bch2_btree_root_read+0x656/0x7e0
[ 70.965085][ T5325] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 70.967260][ T5325] ? bch2_current_has_btree_trans+0x142/0x180
[ 70.969550][ T5325] read_btree_roots+0x3d7/0xa80
[ 70.971387][ T5325] ? __pfx_read_btree_roots+0x10/0x10
[ 70.973555][ T5325] ? journal_replay_entry_early+0x4d/0xba0
[ 70.975774][ T5325] ? bch2_sb_upgrade+0x1cf/0x250
[ 70.977642][ T5325] ? bch2_recovery_passes_from_stable+0x104/0x120
[ 70.980120][ T5325] bch2_fs_recovery+0x28e4/0x3e20
[ 70.982020][ T5325] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 70.984529][ T5325] ? __lock_acquire+0xad5/0xd80
[ 70.986492][ T5325] ? __lock_acquire+0xad5/0xd80
[ 70.988428][ T5325] ? __lock_acquire+0xad5/0xd80
[ 70.990407][ T5325] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 70.992550][ T5325] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 70.994816][ T5325] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 70.997066][ T5325] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 70.999244][ T5325] ? llist_reverse_order+0x72/0x90
[ 71.001222][ T5325] bch2_fs_start+0x37c/0x620
[ 71.003132][ T5325] bch2_fs_get_tree+0x1270/0x18d0
[ 71.005159][ T5325] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 71.007339][ T5325] ? vfs_parse_monolithic_sep+0x427/0x460
[ 71.009943][ T5325] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 71.012235][ T5325] ? rcu_is_watching+0x15/0xb0
[ 71.014477][ T5325] ? apparmor_capable+0x13b/0x1b0
[ 71.016540][ T5325] vfs_get_tree+0x90/0x2b0
[ 71.018409][ T5325] do_new_mount+0x2cf/0xb70
[ 71.020324][ T5325] ? __pfx_do_new_mount+0x10/0x10
[ 71.022505][ T5325] __se_sys_mount+0x38c/0x400
[ 71.024454][ T5325] ? __pfx___se_sys_mount+0x10/0x10
[ 71.026685][ T5325] ? __x64_sys_mount+0x20/0xc0
[ 71.028694][ T5325] do_syscall_64+0xf3/0x230
[ 71.030534][ T5325] ? clear_bhb_loop+0x45/0xa0
[ 71.032542][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 71.034992][ T5325] RIP: 0033:0x7f85efb8e90a
[ 71.036785][ T5325] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 71.044272][ T5325] RSP: 002b:00007f85f0a2be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 71.047636][ T5325] RAX: ffffffffffffffda RBX: 00007f85f0a2bef0 RCX: 00007f85efb8e90a
[ 71.050700][ T5325] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 00007f85f0a2beb0
[ 71.053932][ T5325] RBP: 00002000000000c0 R08: 00007f85f0a2bef0 R09: 0000000000800001
[ 71.057219][ T5325] R10: 0000000000800001 R11: 0000000000000246 R12: 0000200000000040
[ 71.060365][ T5325] R13: 00007f85f0a2beb0 R14: 0000000000005a17 R15: 0000200000000100
[ 71.063730][ T5325]
[ 71.065007][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 71.067842][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-09352-g0c86b42439b6 #0 PREEMPT(full)
[ 71.072010][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 71.076082][ T5325] Call Trace:
[ 71.077461][ T5325]
[ 71.078659][ T5325] dump_stack_lvl+0x241/0x360
[ 71.080198][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10
[ 71.082179][ T5325] ? __pfx__printk+0x10/0x10
[ 71.083995][ T5325] ? vscnprintf+0x5d/0x90
[ 71.085658][ T5325] panic+0x349/0x880
[ 71.087168][ T5325] ? __warn+0x174/0x4d0
[ 71.088666][ T5325] ? __pfx_panic+0x10/0x10
[ 71.090377][ T5325] __warn+0x344/0x4d0
[ 71.091861][ T5325] ? bch2_bkey_pick_read_device+0x17a5/0x1a00
[ 71.094250][ T5325] report_bug+0x2b3/0x500
[ 71.096009][ T5325] ? bch2_bkey_pick_read_device+0x17a5/0x1a00
[ 71.098440][ T5325] ? bch2_bkey_pick_read_device+0x17a5/0x1a00
[ 71.100845][ T5325] ? bch2_bkey_pick_read_device+0x17a7/0x1a00
[ 71.103165][ T5325] handle_bug+0x89/0x170
[ 71.104916][ T5325] exc_invalid_op+0x1a/0x50
[ 71.106852][ T5325] asm_exc_invalid_op+0x1a/0x20
[ 71.108872][ T5325] RIP: 0010:bch2_bkey_pick_read_device+0x17a5/0x1a00
[ 71.111468][ T5325] Code: 91 2c 57 fd e9 d0 fd ff ff e8 87 2c 57 fd c6 05 0a bd db 0b 01 90 48 c7 c7 e0 af 93 8c 48 c7 c6 b4 8b 59 8e e8 3c 3d 16 fd 90 <0f> 0b 90 90 e9 bc fe ff ff e8 5d 2c 57 fd e9 6e ff ff ff 89 d9 80
[ 71.119116][ T5325] RSP: 0018:ffffc9000d566de0 EFLAGS: 00010246
[ 71.122107][ T5325] RAX: 57fa73b0d43db500 RBX: 0000000000000000 RCX: 0000000000100000
[ 71.125308][ T5325] RDX: ffffc9000e8c2000 RSI: 000000000004b86f RDI: 000000000004b870
[ 71.128545][ T5325] RBP: ffffc9000d567010 R08: ffffffff8182adb2 R09: 1ffff11003f847d2
[ 71.131888][ T5325] R10: dffffc0000000000 R11: ffffed1003f847d3 R12: dffffc0000000000
[ 71.135019][ T5325] R13: 1ffff92001aacde4 R14: 0000000000000000 R15: 0000000000000000
[ 71.138348][ T5325] ? __warn_printk+0x2a2/0x360
[ 71.140447][ T5325] ? bch2_bkey_pick_read_device+0x29e/0x1a00
[ 71.142908][ T5325] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10
[ 71.145512][ T5325] bch2_btree_node_read+0x7ac/0x29e0
[ 71.147700][ T5325] ? bch2_btree_node_hash_insert+0x88/0xc0
[ 71.150125][ T5325] ? __mutex_unlock_slowpath+0x229/0x800
[ 71.152373][ T5325] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 71.154767][ T5325] ? bch2_trans_unlock+0x36a/0x490
[ 71.156944][ T5325] ? bch2_trans_unlock+0x3c1/0x490
[ 71.159127][ T5325] bch2_btree_root_read+0x656/0x7e0
[ 71.161362][ T5325] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 71.163716][ T5325] ? bch2_current_has_btree_trans+0x142/0x180
[ 71.166214][ T5325] read_btree_roots+0x3d7/0xa80
[ 71.168198][ T5325] ? __pfx_read_btree_roots+0x10/0x10
[ 71.170422][ T5325] ? journal_replay_entry_early+0x4d/0xba0
[ 71.172767][ T5325] ? bch2_sb_upgrade+0x1cf/0x250
[ 71.174691][ T5325] ? bch2_recovery_passes_from_stable+0x104/0x120
[ 71.177159][ T5325] bch2_fs_recovery+0x28e4/0x3e20
[ 71.179253][ T5325] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 71.181412][ T5325] ? __lock_acquire+0xad5/0xd80
[ 71.183283][ T5325] ? __lock_acquire+0xad5/0xd80
[ 71.185263][ T5325] ? __lock_acquire+0xad5/0xd80
[ 71.187443][ T5325] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 71.189786][ T5325] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 71.192077][ T5325] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 71.194462][ T5325] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 71.196905][ T5325] ? llist_reverse_order+0x72/0x90
[ 71.198940][ T5325] bch2_fs_start+0x37c/0x620
[ 71.200877][ T5325] bch2_fs_get_tree+0x1270/0x18d0
[ 71.202850][ T5325] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 71.205003][ T5325] ? vfs_parse_monolithic_sep+0x427/0x460
[ 71.207281][ T5325] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 71.209450][ T5325] ? rcu_is_watching+0x15/0xb0
[ 71.211330][ T5325] ? apparmor_capable+0x13b/0x1b0
[ 71.213393][ T5325] vfs_get_tree+0x90/0x2b0
[ 71.215269][ T5325] do_new_mount+0x2cf/0xb70
[ 71.217216][ T5325] ? __pfx_do_new_mount+0x10/0x10
[ 71.219310][ T5325] __se_sys_mount+0x38c/0x400
[ 71.221218][ T5325] ? __pfx___se_sys_mount+0x10/0x10
[ 71.223263][ T5325] ? __x64_sys_mount+0x20/0xc0
[ 71.225225][ T5325] do_syscall_64+0xf3/0x230
[ 71.227076][ T5325] ? clear_bhb_loop+0x45/0xa0
[ 71.228990][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 71.231387][ T5325] RIP: 0033:0x7f85efb8e90a
[ 71.233251][ T5325] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 71.240567][ T5325] RSP: 002b:00007f85f0a2be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 71.243902][ T5325] RAX: ffffffffffffffda RBX: 00007f85f0a2bef0 RCX: 00007f85efb8e90a
[ 71.247060][ T5325] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 00007f85f0a2beb0
[ 71.250265][ T5325] RBP: 00002000000000c0 R08: 00007f85f0a2bef0 R09: 0000000000800001
[ 71.253314][ T5325] R10: 0000000000800001 R11: 0000000000000246 R12: 0000200000000040
[ 71.256481][ T5325] R13: 00007f85f0a2beb0 R14: 0000000000005a17 R15: 0000200000000100
[ 71.259758][ T5325]
[ 71.261263][ T5325] Kernel Offset: disabled
[ 71.262820][ T5325] Rebooting in 86400 seconds..