program: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000080)={0x10000000000000, 0xfffffffb}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc056b1c4a068303c}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x5f0827ee, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014000b800800ed000001000008000a0000000000"], 0x44}}, 0x10) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYBLOB="44c11635e5719c0ed427dfe8dca3a13f308420ce12d66e4f3954272f27c391b91d27035dc159019ebbe92069af0d921ec1c14e856e0f3da316557c90abcd", @ANYRES64=r2, @ANYRES8=r3, @ANYRES8=r2, @ANYRES64=0x0], 0x1, 0x5939, &(0x7f000000b640)="$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") r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000005c80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000040), 0x1}], 0x1}}, {{&(0x7f00000015c0)={0xa, 0x0, 0x0, @mcast2}, 0x10, &(0x7f0000005380)=[{&(0x7f0000005e40)='S', 0x1}], 0xe}}], 0x2, 0xc1) write$FUSE_BMAP(r5, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x80000001}}, 0x18) [ 86.498368][ T5328] syz.0.0 (5328) used greatest stack depth: 18560 bytes left [ 86.617654][ T10] cfg80211: failed to load regulatory.db [ 85.958142][ T5311] Bluetooth: hci0: command tx timeout [ 86.306744][ T5328] loop0: detected capacity change from 0 to 32768 [ 86.543994][ T5328] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,nocow,no_data_io [ 86.551542][ T5328] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 86.554875][ T5328] bcachefs (loop0): Version upgrade required: [ 86.554875][ T5328] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 86.554875][ T5328] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 86.554875][ T5328] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 86.594868][ T5328] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 86.594888][ T5328] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 86.594898][ T5328] node offset 8/16: btree node data missing: expected 16 sectors, found 8, exiting [ 86.611242][ T10] cfg80211: failed to load regulatory.db [ 86.626505][ T5328] bcachefs (loop0): Unable to continue, halting [ 86.629817][ T5328] bcachefs (loop0): flagging btree xattrs lost data [ 86.632656][ T5328] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 86.637341][ T5328] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 86.646897][ T5328] error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 86.652953][ T5328] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 86.652967][ T5328] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 86.652977][ T5328] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 86.670098][ T5328] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 86.670098][ T5328] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 86.687217][ T5328] bcachefs (loop0): pointer to nonexistent device 3 [ 86.691853][ T5328] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 10 [ 86.695490][ T5328] ------------[ cut here ]------------ [ 86.697798][ T5328] unhandled error case in bch2_bkey_pick_read_device [ 86.701627][ T5328] WARNING: CPU: 0 PID: 5328 at fs/bcachefs/extents.c:230 bch2_bkey_pick_read_device+0x17a5/0x1a00 [ 86.705889][ T5328] Modules linked in: [ 86.707465][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 86.712445][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.716710][ T5328] RIP: 0010:bch2_bkey_pick_read_device+0x17a5/0x1a00 [ 86.719755][ T5328] Code: 51 ba 56 fd e9 d0 fd ff ff e8 47 ba 56 fd c6 05 2a 83 dc 0b 01 90 48 c7 c7 e0 ce 93 8c 48 c7 c6 f6 f8 5a 8e e8 cc c2 15 fd 90 <0f> 0b 90 90 e9 bc fe ff ff e8 1d ba 56 fd e9 6e ff ff ff 89 d9 80 [ 86.727178][ T5328] RSP: 0018:ffffc9000d2fede0 EFLAGS: 00010246 [ 86.730080][ T5328] RAX: 3e0db6a742287a00 RBX: 0000000000000000 RCX: 0000000000100000 [ 86.733274][ T5328] RDX: ffffc9000e392000 RSI: 0000000000050721 RDI: 0000000000050722 [ 86.736412][ T5328] RBP: ffffc9000d2ff010 R08: ffffffff81828852 R09: fffffbfff1d7a980 [ 86.739695][ T5328] R10: dffffc0000000000 R11: fffffbfff1d7a980 R12: dffffc0000000000 [ 86.742820][ T5328] R13: 1ffff92001a5fde4 R14: 0000000000000000 R15: 0000000000000000 [ 86.746198][ T5328] FS: 00007f28d45436c0(0000) GS:ffff88808c5b1000(0000) knlGS:0000000000000000 [ 86.749799][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.752639][ T5328] CR2: 000056222ab17018 CR3: 0000000043ce2000 CR4: 0000000000352ef0 [ 86.755923][ T5328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.759479][ T5328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.762766][ T5328] Call Trace: [ 86.764429][ T5328] [ 86.765923][ T5328] ? bch2_bkey_pick_read_device+0x29e/0x1a00 [ 86.769421][ T5328] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10 [ 86.772450][ T5328] bch2_btree_node_read+0x7ac/0x29e0 [ 86.774534][ T5328] ? bch2_btree_node_hash_insert+0x88/0xc0 [ 86.776696][ T5328] ? __mutex_unlock_slowpath+0x229/0x800 [ 86.779018][ T5328] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 86.781335][ T5328] ? bch2_trans_unlock+0x36a/0x490 [ 86.783869][ T5328] ? bch2_trans_unlock+0x3c1/0x490 [ 86.786285][ T5328] bch2_btree_root_read+0x656/0x7e0 [ 86.788621][ T5328] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 86.790934][ T5328] ? bch2_current_has_btree_trans+0x142/0x180 [ 86.793430][ T5328] read_btree_roots+0x3d7/0xa80 [ 86.795405][ T5328] ? __pfx_read_btree_roots+0x10/0x10 [ 86.797598][ T5328] ? journal_replay_entry_early+0x4d/0xba0 [ 86.799940][ T5328] ? bch2_sb_upgrade+0x1cf/0x250 [ 86.801983][ T5328] ? bch2_recovery_passes_from_stable+0x104/0x120 [ 86.804464][ T5328] bch2_fs_recovery+0x28e4/0x3e20 [ 86.806442][ T5328] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 86.808647][ T5328] ? __lock_acquire+0xad5/0xd80 [ 86.810568][ T5328] ? __lock_acquire+0xad5/0xd80 [ 86.812437][ T5328] ? __lock_acquire+0xad5/0xd80 [ 86.814619][ T5328] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 86.816927][ T5328] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 86.819479][ T5328] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 86.821934][ T5328] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 86.824187][ T5328] ? llist_reverse_order+0x72/0x90 [ 86.826309][ T5328] bch2_fs_start+0x37c/0x620 [ 86.828493][ T5328] bch2_fs_get_tree+0x1270/0x18d0 [ 86.830431][ T5328] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 86.832541][ T5328] ? vfs_parse_monolithic_sep+0x427/0x460 [ 86.834851][ T5328] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 86.837114][ T5328] ? rcu_is_watching+0x15/0xb0 [ 86.839126][ T5328] ? apparmor_capable+0x13b/0x1b0 [ 86.841159][ T5328] vfs_get_tree+0x90/0x2b0 [ 86.842863][ T5328] do_new_mount+0x2cf/0xb70 [ 86.844688][ T5328] ? __pfx_do_new_mount+0x10/0x10 [ 86.846794][ T5328] __se_sys_mount+0x38c/0x400 [ 86.848770][ T5328] ? __pfx___se_sys_mount+0x10/0x10 [ 86.850837][ T5328] ? __x64_sys_mount+0x20/0xc0 [ 86.852684][ T5328] do_syscall_64+0xf3/0x230 [ 86.854511][ T5328] ? clear_bhb_loop+0x45/0xa0 [ 86.856295][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.858698][ T5328] RIP: 0033:0x7f28d378e90a [ 86.860273][ T5328] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.867686][ T5328] RSP: 002b:00007f28d4542e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.870829][ T5328] RAX: ffffffffffffffda RBX: 00007f28d4542ef0 RCX: 00007f28d378e90a [ 86.874102][ T5328] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007f28d4542eb0 [ 86.877134][ T5328] RBP: 00002000000000c0 R08: 00007f28d4542ef0 R09: 0000000000800000 [ 86.880361][ T5328] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000000 [ 86.883471][ T5328] R13: 00007f28d4542eb0 R14: 0000000000005939 R15: 0000200000000380 [ 86.886603][ T5328] [ 86.887930][ T5328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.890818][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-11125-g609706855d90 #0 PREEMPT(full) [ 86.895194][ T5328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.899509][ T5328] Call Trace: [ 86.900825][ T5328] [ 86.902040][ T5328] dump_stack_lvl+0x241/0x360 [ 86.903928][ T5328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.905891][ T5328] ? __pfx__printk+0x10/0x10 [ 86.907747][ T5328] ? vscnprintf+0x5d/0x90 [ 86.909496][ T5328] panic+0x349/0x880 [ 86.910998][ T5328] ? __warn+0x174/0x4d0 [ 86.912544][ T5328] ? __pfx_panic+0x10/0x10 [ 86.914293][ T5328] __warn+0x344/0x4d0 [ 86.915847][ T5328] ? bch2_bkey_pick_read_device+0x17a5/0x1a00 [ 86.918109][ T5328] report_bug+0x2b3/0x500 [ 86.919737][ T5328] ? bch2_bkey_pick_read_device+0x17a5/0x1a00 [ 86.921835][ T5328] ? bch2_bkey_pick_read_device+0x17a5/0x1a00 [ 86.923882][ T5328] ? bch2_bkey_pick_read_device+0x17a7/0x1a00 [ 86.925958][ T5328] handle_bug+0x89/0x170 [ 86.927397][ T5328] exc_invalid_op+0x1a/0x50 [ 86.928956][ T5328] asm_exc_invalid_op+0x1a/0x20 [ 86.930627][ T5328] RIP: 0010:bch2_bkey_pick_read_device+0x17a5/0x1a00 [ 86.932832][ T5328] Code: 51 ba 56 fd e9 d0 fd ff ff e8 47 ba 56 fd c6 05 2a 83 dc 0b 01 90 48 c7 c7 e0 ce 93 8c 48 c7 c6 f6 f8 5a 8e e8 cc c2 15 fd 90 <0f> 0b 90 90 e9 bc fe ff ff e8 1d ba 56 fd e9 6e ff ff ff 89 d9 80 [ 86.939919][ T5328] RSP: 0018:ffffc9000d2fede0 EFLAGS: 00010246 [ 86.942213][ T5328] RAX: 3e0db6a742287a00 RBX: 0000000000000000 RCX: 0000000000100000 [ 86.945362][ T5328] RDX: ffffc9000e392000 RSI: 0000000000050721 RDI: 0000000000050722 [ 86.948511][ T5328] RBP: ffffc9000d2ff010 R08: ffffffff81828852 R09: fffffbfff1d7a980 [ 86.951550][ T5328] R10: dffffc0000000000 R11: fffffbfff1d7a980 R12: dffffc0000000000 [ 86.954520][ T5328] R13: 1ffff92001a5fde4 R14: 0000000000000000 R15: 0000000000000000 [ 86.957686][ T5328] ? __warn_printk+0x2a2/0x360 [ 86.959616][ T5328] ? bch2_bkey_pick_read_device+0x29e/0x1a00 [ 86.962036][ T5328] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10 [ 86.964465][ T5328] bch2_btree_node_read+0x7ac/0x29e0 [ 86.966503][ T5328] ? bch2_btree_node_hash_insert+0x88/0xc0 [ 86.968798][ T5328] ? __mutex_unlock_slowpath+0x229/0x800 [ 86.971039][ T5328] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 86.973212][ T5328] ? bch2_trans_unlock+0x36a/0x490 [ 86.975252][ T5328] ? bch2_trans_unlock+0x3c1/0x490 [ 86.977091][ T5328] bch2_btree_root_read+0x656/0x7e0 [ 86.978956][ T5328] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 86.981039][ T5328] ? bch2_current_has_btree_trans+0x142/0x180 [ 86.983264][ T5328] read_btree_roots+0x3d7/0xa80 [ 86.985054][ T5328] ? __pfx_read_btree_roots+0x10/0x10 [ 86.986994][ T5328] ? journal_replay_entry_early+0x4d/0xba0 [ 86.989144][ T5328] ? bch2_sb_upgrade+0x1cf/0x250 [ 86.990884][ T5328] ? bch2_recovery_passes_from_stable+0x104/0x120 [ 86.993102][ T5328] bch2_fs_recovery+0x28e4/0x3e20 [ 86.994891][ T5328] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 86.996926][ T5328] ? __lock_acquire+0xad5/0xd80 [ 86.998868][ T5328] ? __lock_acquire+0xad5/0xd80 [ 87.000781][ T5328] ? __lock_acquire+0xad5/0xd80 [ 87.002706][ T5328] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 87.004816][ T5328] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 87.007078][ T5328] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 87.009338][ T5328] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 87.011525][ T5328] ? llist_reverse_order+0x72/0x90 [ 87.013530][ T5328] bch2_fs_start+0x37c/0x620 [ 87.015302][ T5328] bch2_fs_get_tree+0x1270/0x18d0 [ 87.017184][ T5328] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 87.019314][ T5328] ? vfs_parse_monolithic_sep+0x427/0x460 [ 87.021604][ T5328] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 87.023742][ T5328] ? rcu_is_watching+0x15/0xb0 [ 87.025611][ T5328] ? apparmor_capable+0x13b/0x1b0 [ 87.027549][ T5328] vfs_get_tree+0x90/0x2b0 [ 87.029334][ T5328] do_new_mount+0x2cf/0xb70 [ 87.030990][ T5328] ? __pfx_do_new_mount+0x10/0x10 [ 87.032946][ T5328] __se_sys_mount+0x38c/0x400 [ 87.034801][ T5328] ? __pfx___se_sys_mount+0x10/0x10 [ 87.036935][ T5328] ? __x64_sys_mount+0x20/0xc0 [ 87.038907][ T5328] do_syscall_64+0xf3/0x230 [ 87.040769][ T5328] ? clear_bhb_loop+0x45/0xa0 [ 87.042510][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.044817][ T5328] RIP: 0033:0x7f28d378e90a [ 87.046552][ T5328] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.053798][ T5328] RSP: 002b:00007f28d4542e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.056886][ T5328] RAX: ffffffffffffffda RBX: 00007f28d4542ef0 RCX: 00007f28d378e90a [ 87.060016][ T5328] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007f28d4542eb0 [ 87.062996][ T5328] RBP: 00002000000000c0 R08: 00007f28d4542ef0 R09: 0000000000800000 [ 87.065936][ T5328] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000000 [ 87.068861][ T5328] R13: 00007f28d4542eb0 R14: 0000000000005939 R15: 0000200000000380 [ 87.071825][ T5328] [ 87.073298][ T5328] Kernel Offset: disabled [ 87.075038][ T5328] Rebooting in 86400 seconds..