program: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000240)={0x8000}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000080026006c091700"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@probe_response={{{}, {0x7}, @device_b, @device_a, @from_mac, {0x0, 0x5}}, 0x0, @random=0x401, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x4, 0x1}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x5, 0x0, {0x8000000000000001, 0xb9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x1, 0x10}}, @void, @void}, 0x4b) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004845}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x2, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r8, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x15, 0x0, &(0x7f0000000280)) syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f6578636c2c646973636172642c6e6f7265636f766572792c6673636b2c6669785f6572726f72733d6e6f2c64656772616465642c696e6f6465735f7573655f6b65795f63616368652c6a6f75726eb207a40572616e73616374696f6e5f6e616d65732c73686172645f696e6f64655f6e756d626572732c6669785f6572726f72733d6e6f2c0022ded4357ccb96d85d8da176fd7bc1d9c5c0d740b0e609dbfdf61042a228b97411e02c64a05652f990ee7b947d90bc92"], 0x1, 0x59a9, &(0x7f0000006040)="$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") [ 74.660276][ T45] Bluetooth: hci0: command tx timeout [ 74.759123][ T5324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.017236][ T5324] loop0: detected capacity change from 0 to 32768 [ 75.124970][ T5324] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,degraded=yes,fsck,fix_errors=no,norecovery,nojournal_transaction_names,noexcl [ 75.124983][ T5324] allowing incompatible features above 0.0: (unknown version) [ 75.124988][ T5324] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 75.148489][ T5324] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 75.154455][ T5324] bcachefs (loop0): invalid bkey in superblock btree=snapshots level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key U64_MAX:0:0 durability: 0 ptr: 0:32:10 gen 0 cached unwritten [ 75.154495][ T5324] pointer spans multiple buckets (10 + 256 > 256), deleting [ 75.169440][ T5324] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 75.173063][ T5324] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 75.173063][ T5324] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 75.184068][ T5324] bcachefs (loop0): invalid btree id 251 (max 63), not fixing [ 75.198347][ T5324] bcachefs (loop0): btree node read error at btree xattrs level 0/0 [ 75.198371][ T5324] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 75.198376][ T5324] loop0 node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647 [ 75.198380][ T5324] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 75.198384][ T5324] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 75.198390][ T5324] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 75.198394][ T5324] ret btree_node_read_validate_error [ 75.234819][ T5324] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 75.241536][ T5324] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 75.251209][ T5324] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 75.257328][ T5324] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 75.257341][ T5324] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 75.257349][ T5324] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 2251799813685248 > 4294967295 [ 75.257358][ T5324] u64s 3 fields 64:0, 64:0, 32:2251799813685248, 0:0, 0:0, 0:0 [ 75.257364][ T5324] flagging btree backpointers lost data [ 75.257371][ T5324] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 75.257378][ T5324] ret btree_node_read_validate_error [ 75.289385][ T5324] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 75.295251][ T5324] ------------[ cut here ]------------ [ 75.298053][ T5324] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:212:18 [ 75.302991][ T5324] shift exponent 251 is too large for 64-bit type 'unsigned long long' [ 75.306657][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 75.306671][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.306678][ T5324] Call Trace: [ 75.306685][ T5324] [ 75.306690][ T5324] dump_stack_lvl+0x189/0x250 [ 75.306781][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.306797][ T5324] ? __pfx__printk+0x10/0x10 [ 75.306819][ T5324] ubsan_epilogue+0xa/0x40 [ 75.306831][ T5324] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 75.306889][ T5324] __bch2_btree_node_hash_insert+0x184d/0x1ab0 [ 75.306916][ T5324] ? __bch2_btree_node_hash_insert+0x200/0x1ab0 [ 75.306936][ T5324] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 75.306960][ T5324] bch2_btree_node_hash_insert+0x7e/0xc0 [ 75.306980][ T5324] bch2_btree_root_read+0x59e/0x760 [ 75.306998][ T5324] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 75.307021][ T5324] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 75.307036][ T5324] read_btree_roots+0x2c6/0x840 [ 75.307057][ T5324] ? __pfx_read_btree_roots+0x10/0x10 [ 75.307083][ T5324] bch2_fs_recovery+0x261f/0x3a50 [ 75.307098][ T5324] ? check_noncircular+0xe0/0x160 [ 75.307120][ T5324] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 75.307145][ T5324] ? __lock_acquire+0xab9/0xd20 [ 75.307168][ T5324] ? __lock_acquire+0xab9/0xd20 [ 75.307188][ T5324] ? __lock_acquire+0xab9/0xd20 [ 75.307219][ T5324] ? bch2_fs_start+0x9fe/0xd90 [ 75.307233][ T5324] ? up_write+0x1c4/0x420 [ 75.307241][ T5324] ? bch2_fs_start+0x5c4/0xd90 [ 75.307254][ T5324] bch2_fs_start+0xa99/0xd90 [ 75.307265][ T5324] ? bch2_fs_start+0x5c4/0xd90 [ 75.307278][ T5324] ? __pfx_bch2_fs_start+0x10/0x10 [ 75.307304][ T5324] ? sget+0x267/0x620 [ 75.307323][ T5324] bch2_fs_get_tree+0xafc/0x14f0 [ 75.307357][ T5324] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.307385][ T5324] ? aa_get_newest_label+0xf7/0x5d0 [ 75.307399][ T5324] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 75.307419][ T5324] ? apparmor_capable+0x137/0x1b0 [ 75.307438][ T5324] vfs_get_tree+0x92/0x2b0 [ 75.307451][ T5324] do_new_mount+0x24a/0xa40 [ 75.307469][ T5324] __se_sys_mount+0x317/0x410 [ 75.307485][ T5324] ? __pfx___se_sys_mount+0x10/0x10 [ 75.307500][ T5324] ? do_syscall_64+0xbe/0x3b0 [ 75.307546][ T5324] ? __x64_sys_mount+0x20/0xc0 [ 75.307560][ T5324] do_syscall_64+0xfa/0x3b0 [ 75.307577][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.307599][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.307610][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 75.307622][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.307632][ T5324] RIP: 0033:0x7fd0da5900ca [ 75.307644][ T5324] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.307653][ T5324] RSP: 002b:00007fd0db311e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.307668][ T5324] RAX: ffffffffffffffda RBX: 00007fd0db311ef0 RCX: 00007fd0da5900ca [ 75.307675][ T5324] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007fd0db311eb0 [ 75.307682][ T5324] RBP: 0000200000000180 R08: 00007fd0db311ef0 R09: 0000000000800000 [ 75.307688][ T5324] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540 [ 75.307694][ T5324] R13: 00007fd0db311eb0 R14: 00000000000059a9 R15: 0000200000000740 [ 75.307713][ T5324] [ 75.307717][ T5324] ---[ end trace ]--- [ 75.461853][ T5324] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 75.465169][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 75.469766][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.474638][ T5324] Call Trace: [ 75.476174][ T5324] [ 75.477498][ T5324] dump_stack_lvl+0x99/0x250 [ 75.479523][ T5324] ? __asan_memcpy+0x40/0x70 [ 75.481373][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.483701][ T5324] ? __pfx__printk+0x10/0x10 [ 75.485780][ T5324] panic+0x2db/0x790 [ 75.487706][ T5324] ? __pfx_panic+0x10/0x10 [ 75.489831][ T5324] ? _printk+0xcf/0x120 [ 75.491803][ T5324] ? __pfx__printk+0x10/0x10 [ 75.494121][ T5324] check_panic_on_warn+0x89/0xb0 [ 75.496218][ T5324] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 75.499068][ T5324] __bch2_btree_node_hash_insert+0x184d/0x1ab0 [ 75.501823][ T5324] ? __bch2_btree_node_hash_insert+0x200/0x1ab0 [ 75.504609][ T5324] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 75.507442][ T5324] bch2_btree_node_hash_insert+0x7e/0xc0 [ 75.509681][ T5324] bch2_btree_root_read+0x59e/0x760 [ 75.512175][ T5324] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 75.515247][ T5324] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 75.518505][ T5324] read_btree_roots+0x2c6/0x840 [ 75.521331][ T5324] ? __pfx_read_btree_roots+0x10/0x10 [ 75.524202][ T5324] bch2_fs_recovery+0x261f/0x3a50 [ 75.526995][ T5324] ? check_noncircular+0xe0/0x160 [ 75.529644][ T5324] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 75.532215][ T5324] ? __lock_acquire+0xab9/0xd20 [ 75.534650][ T5324] ? __lock_acquire+0xab9/0xd20 [ 75.537022][ T5324] ? __lock_acquire+0xab9/0xd20 [ 75.539381][ T5324] ? bch2_fs_start+0x9fe/0xd90 [ 75.541492][ T5324] ? up_write+0x1c4/0x420 [ 75.543479][ T5324] ? bch2_fs_start+0x5c4/0xd90 [ 75.545633][ T5324] bch2_fs_start+0xa99/0xd90 [ 75.547813][ T5324] ? bch2_fs_start+0x5c4/0xd90 [ 75.550081][ T5324] ? __pfx_bch2_fs_start+0x10/0x10 [ 75.552536][ T5324] ? sget+0x267/0x620 [ 75.554478][ T5324] bch2_fs_get_tree+0xafc/0x14f0 [ 75.556717][ T5324] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.559088][ T5324] ? aa_get_newest_label+0xf7/0x5d0 [ 75.561232][ T5324] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 75.563584][ T5324] ? apparmor_capable+0x137/0x1b0 [ 75.565834][ T5324] vfs_get_tree+0x92/0x2b0 [ 75.567867][ T5324] do_new_mount+0x24a/0xa40 [ 75.570188][ T5324] __se_sys_mount+0x317/0x410 [ 75.572735][ T5324] ? __pfx___se_sys_mount+0x10/0x10 [ 75.575123][ T5324] ? do_syscall_64+0xbe/0x3b0 [ 75.577081][ T5324] ? __x64_sys_mount+0x20/0xc0 [ 75.579077][ T5324] do_syscall_64+0xfa/0x3b0 [ 75.581016][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.583224][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.585664][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 75.587695][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.590378][ T5324] RIP: 0033:0x7fd0da5900ca [ 75.592500][ T5324] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.600791][ T5324] RSP: 002b:00007fd0db311e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.604380][ T5324] RAX: ffffffffffffffda RBX: 00007fd0db311ef0 RCX: 00007fd0da5900ca [ 75.607748][ T5324] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007fd0db311eb0 [ 75.611232][ T5324] RBP: 0000200000000180 R08: 00007fd0db311ef0 R09: 0000000000800000 [ 75.614701][ T5324] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540 [ 75.618214][ T5324] R13: 00007fd0db311eb0 R14: 00000000000059a9 R15: 0000200000000740 [ 75.622211][ T5324] [ 75.624379][ T5324] Kernel Offset: disabled [ 75.626434][ T5324] Rebooting in 86400 seconds..