Warning: Permanently added '[localhost]:60792' (ED25519) to the list of known hosts. executing program [ 77.791991][ T5311] loop0: detected capacity change from 0 to 32768 [ 77.890164][ T5311] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=ask,norecovery,recovery_pass_last=reconstruct_snapshots,nojournal_transaction_names,reconstruct_alloc [ 77.899046][ T5311] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 77.902540][ T5311] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 77.902540][ T5311] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 77.911047][ T5311] bcachefs (loop0): invalid btree id 251 (max 63), fix? [ 77.914734][ T5311] bcachefs (loop0): dropping and reconstructing all alloc info [ 77.920982][ T5311] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 77.925591][ T5311] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 77.925611][ T5311] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 77.925620][ T5311] node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647, btree topology error: [ 77.940607][ T5311] bcachefs (loop0): flagging btree xattrs lost data [ 77.944072][ T5311] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 77.949405][ T5311] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 77.955217][ T5311] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 77.962397][ T5311] ------------[ cut here ]------------ [ 77.964531][ T5311] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:218:18 [ 77.967474][ T5311] shift exponent 251 is too large for 64-bit type 'unsigned long long' [ 77.971983][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz-executor181 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 77.971998][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.972004][ T5311] Call Trace: [ 77.972008][ T5311] [ 77.972013][ T5311] dump_stack_lvl+0x241/0x360 [ 77.972123][ T5311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.972137][ T5311] ? __pfx__printk+0x10/0x10 [ 77.972156][ T5311] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 77.972205][ T5311] __bch2_btree_node_hash_insert+0x1b32/0x1ba0 [ 77.972223][ T5311] ? __bch2_btree_node_hash_insert+0x20f/0x1ba0 [ 77.972241][ T5311] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 77.972260][ T5311] bch2_btree_node_hash_insert+0x7e/0xc0 [ 77.972272][ T5311] bch2_btree_root_read+0x605/0x7e0 [ 77.972289][ T5311] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 77.972310][ T5311] ? bch2_current_has_btree_trans+0x142/0x180 [ 77.972326][ T5311] read_btree_roots+0x3d7/0xa80 [ 77.972348][ T5311] ? __pfx_read_btree_roots+0x10/0x10 [ 77.972358][ T5311] ? bch2_reconstruct_alloc+0x336/0x5d0 [ 77.972378][ T5311] bch2_fs_recovery+0x28e4/0x3e20 [ 77.972399][ T5311] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 77.972418][ T5311] ? __lock_acquire+0xad5/0xd80 [ 77.972437][ T5311] ? __lock_acquire+0xad5/0xd80 [ 77.972457][ T5311] ? bch2_fs_start+0x279/0x620 [ 77.972470][ T5311] ? up_write+0x1ab/0x590 [ 77.972484][ T5311] ? bch2_get_next_online_dev+0x4ab/0x4e0 [ 77.972497][ T5311] ? bch2_get_next_online_dev+0x2e/0x4e0 [ 77.972510][ T5311] ? __pfx_up_write+0x10/0x10 [ 77.972524][ T5311] ? llist_reverse_order+0x72/0x90 [ 77.972538][ T5311] bch2_fs_start+0x310/0x620 [ 77.972553][ T5311] bch2_fs_get_tree+0x113e/0x18f0 [ 77.972585][ T5311] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 77.972612][ T5311] ? vfs_parse_monolithic_sep+0x427/0x460 [ 77.972628][ T5311] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 77.972639][ T5311] ? rcu_is_watching+0x15/0xb0 [ 77.972652][ T5311] ? apparmor_capable+0x13b/0x1b0 [ 77.972667][ T5311] vfs_get_tree+0x90/0x2b0 [ 77.972681][ T5311] do_new_mount+0x2cf/0xb70 [ 77.972699][ T5311] ? __pfx_do_new_mount+0x10/0x10 [ 77.972720][ T5311] __se_sys_mount+0x38c/0x400 [ 77.972738][ T5311] ? __pfx___se_sys_mount+0x10/0x10 [ 77.972755][ T5311] ? __x64_sys_mount+0x20/0xc0 [ 77.972770][ T5311] do_syscall_64+0xf3/0x230 [ 77.972811][ T5311] ? clear_bhb_loop+0x45/0xa0 [ 77.972823][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.972832][ T5311] RIP: 0033:0x7f2ff6488faa [ 77.972843][ T5311] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.972850][ T5311] RSP: 002b:00007ffcaf9c69f8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 77.972862][ T5311] RAX: ffffffffffffffda RBX: 00007ffcaf9c6a10 RCX: 00007f2ff6488faa [ 77.972869][ T5311] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007ffcaf9c6a10 [ 77.972876][ T5311] RBP: 0000200000000540 R08: 00007ffcaf9c6a50 R09: 0000000000005964 [ 77.972882][ T5311] R10: 0000000000800000 R11: 0000000000000282 R12: 0000200000000180 [ 77.972888][ T5311] R13: 00007ffcaf9c6a50 R14: 0000000000000003 R15: 0000000000800000 [ 77.972903][ T5311] [ 77.972908][ T5311] ---[ end trace ]--- [ 78.105626][ T5311] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 78.108513][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz-executor181 Not tainted 6.15.0-rc1-syzkaller-00173-g0c7cae12f67c #0 PREEMPT(full) [ 78.113148][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.117456][ T5311] Call Trace: [ 78.118795][ T5311] [ 78.120013][ T5311] dump_stack_lvl+0x241/0x360 [ 78.121880][ T5311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.123966][ T5311] ? __pfx__printk+0x10/0x10 [ 78.125846][ T5311] ? vscnprintf+0x5d/0x90 [ 78.127735][ T5311] panic+0x349/0x880 [ 78.129381][ T5311] ? check_panic_on_warn+0x21/0xb0 [ 78.131463][ T5311] ? __pfx_panic+0x10/0x10 [ 78.133259][ T5311] ? _printk+0xd5/0x120 [ 78.134966][ T5311] ? __pfx__printk+0x10/0x10 [ 78.136683][ T5311] check_panic_on_warn+0x86/0xb0 [ 78.138501][ T5311] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 78.140769][ T5311] __bch2_btree_node_hash_insert+0x1b32/0x1ba0 [ 78.143304][ T5311] ? __bch2_btree_node_hash_insert+0x20f/0x1ba0 [ 78.145851][ T5311] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 78.148500][ T5311] bch2_btree_node_hash_insert+0x7e/0xc0 [ 78.150694][ T5311] bch2_btree_root_read+0x605/0x7e0 [ 78.152837][ T5311] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 78.155300][ T5311] ? bch2_current_has_btree_trans+0x142/0x180 [ 78.157787][ T5311] read_btree_roots+0x3d7/0xa80 [ 78.159838][ T5311] ? __pfx_read_btree_roots+0x10/0x10 [ 78.162047][ T5311] ? bch2_reconstruct_alloc+0x336/0x5d0 [ 78.164298][ T5311] bch2_fs_recovery+0x28e4/0x3e20 [ 78.166392][ T5311] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 78.168588][ T5311] ? __lock_acquire+0xad5/0xd80 [ 78.170675][ T5311] ? __lock_acquire+0xad5/0xd80 [ 78.172661][ T5311] ? bch2_fs_start+0x279/0x620 [ 78.174609][ T5311] ? up_write+0x1ab/0x590 [ 78.176393][ T5311] ? bch2_get_next_online_dev+0x4ab/0x4e0 [ 78.178710][ T5311] ? bch2_get_next_online_dev+0x2e/0x4e0 [ 78.181032][ T5311] ? __pfx_up_write+0x10/0x10 [ 78.182974][ T5311] ? llist_reverse_order+0x72/0x90 [ 78.185090][ T5311] bch2_fs_start+0x310/0x620 [ 78.186965][ T5311] bch2_fs_get_tree+0x113e/0x18f0 [ 78.189047][ T5311] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 78.191291][ T5311] ? vfs_parse_monolithic_sep+0x427/0x460 [ 78.193660][ T5311] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 78.195938][ T5311] ? rcu_is_watching+0x15/0xb0 [ 78.197833][ T5311] ? apparmor_capable+0x13b/0x1b0 [ 78.199939][ T5311] vfs_get_tree+0x90/0x2b0 [ 78.201800][ T5311] do_new_mount+0x2cf/0xb70 [ 78.203776][ T5311] ? __pfx_do_new_mount+0x10/0x10 [ 78.205827][ T5311] __se_sys_mount+0x38c/0x400 [ 78.207895][ T5311] ? __pfx___se_sys_mount+0x10/0x10 [ 78.210092][ T5311] ? __x64_sys_mount+0x20/0xc0 [ 78.212090][ T5311] do_syscall_64+0xf3/0x230 [ 78.214021][ T5311] ? clear_bhb_loop+0x45/0xa0 [ 78.216012][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.218450][ T5311] RIP: 0033:0x7f2ff6488faa [ 78.220224][ T5311] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.227808][ T5311] RSP: 002b:00007ffcaf9c69f8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 78.231271][ T5311] RAX: ffffffffffffffda RBX: 00007ffcaf9c6a10 RCX: 00007f2ff6488faa [ 78.234509][ T5311] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007ffcaf9c6a10 [ 78.237801][ T5311] RBP: 0000200000000540 R08: 00007ffcaf9c6a50 R09: 0000000000005964 [ 78.240962][ T5311] R10: 0000000000800000 R11: 0000000000000282 R12: 0000200000000180 [ 78.244126][ T5311] R13: 00007ffcaf9c6a50 R14: 0000000000000003 R15: 0000000000800000 [ 78.247327][ T5311] [ 78.248852][ T5311] Kernel Offset: disabled [ 78.250662][ T5311] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:59:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=ffffffff9aa81bc0 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d41e910 R8 =ffffffff85977d2b R9 =1ffff110066a3046 R10=dffffc0000000000 R11=ffffffff85977ce0 R12=dffffc0000000000 R13=0000000000000020 R14=0000000000000020 R15=00000000000003f8 RIP=ffffffff85977d5e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555562616380 ffffffff 00c00000 GS =0000 ffff88808c596000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005641146b5990 CR3=0000000041382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0002000000000000 Opmask01=0000000000020000 Opmask02=0000000000102008 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe6d77e60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706f6f6c28207366 656863616362205d 3131333554205b5d 3731323535392e37 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706f622028206f66 206563616362205d 313133355420205d 3731323520392930 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65725f65646f6e5f 6565727462203a30 3d6c6576656c2073 72747461783d6565 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 28205f65646d655f 656561705f20000a 3d6c65766566202c 726f7261653d6461 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000