Warning: Permanently added '[localhost]:51493' (ED25519) to the list of known hosts. executing program syzkaller login: [ 94.020393][ T5103] loop0: detected capacity change from 0 to 32768 [ 94.146533][ T5103] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 94.166113][ T5103] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 94.169658][ T5103] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.13: inode_has_child_snapshots [ 94.169658][ T5103] running recovery passes: check_allocations,check_inodes [ 94.182946][ T5103] syz-executor421: attempt to access beyond end of device [ 94.182946][ T5103] loop0: rw=6145, sector=1124800395245568, nr_sectors = 10 limit=32768 [ 94.188452][ T5103] bcachefs (loop0): superblock write error: I/O [ 94.191770][ T5103] bcachefs (loop0): bch2_write_super(): fatal error : Unable to write superblock to sufficient devices (from bch2_fs_recovery) [ 94.199239][ T5103] bcachefs (loop0): fatal error - emergency read only [ 94.202221][ T5103] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1 [ 94.202221][ T5103] rw journal devs: loop0 [ 94.214041][ T5103] ------------[ cut here ]------------ [ 94.216311][ T5103] UBSAN: shift-out-of-bounds in fs/bcachefs/alloc_background.h:165:13 [ 94.219607][ T5103] shift exponent 129 is too large for 32-bit type 'unsigned int' [ 94.223872][ T5103] CPU: 0 UID: 0 PID: 5103 Comm: syz-executor421 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 94.230598][ T5103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.234640][ T5103] Call Trace: [ 94.235918][ T5103] <TASK> [ 94.237046][ T5103] dump_stack_lvl+0x241/0x360 [ 94.239352][ T5103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.241408][ T5103] ? __pfx__printk+0x10/0x10 [ 94.243586][ T5103] ? bch2_prt_printf+0x559/0x6d0 [ 94.245949][ T5103] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 94.248498][ T5103] bch2_alloc_to_text+0xc79/0xce0 [ 94.250516][ T5103] ? __pfx_bch2_alloc_to_text+0x10/0x10 [ 94.252551][ T5103] ? bch2_bkey_val_to_text+0xf0/0x160 [ 94.254714][ T5103] __bch2_bkey_fsck_err+0x1c8/0x280 [ 94.256907][ T5103] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 94.259627][ T5103] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 94.262193][ T5103] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 94.264926][ T5103] ? __pfx___bch2_bkey_fsck_err+0x10/0x10 [ 94.267241][ T5103] ? bch2_alloc_v4_validate+0x165/0xef0 [ 94.269360][ T5103] bch2_alloc_v4_validate+0x931/0xef0 [ 94.271619][ T5103] ? __pfx_bch2_alloc_v4_validate+0x10/0x10 [ 94.274252][ T5103] ? bch2_bkey_val_validate+0x150/0x230 [ 94.277286][ T5103] bch2_btree_node_read_done+0x3e7e/0x5e90 [ 94.280282][ T5103] ? bch2_bkey_pick_read_device+0x221/0x1670 [ 94.282664][ T5103] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 94.285012][ T5103] ? bch2_bkey_pick_read_device+0x137d/0x1670 [ 94.287141][ T5103] ? bch2_bkey_pick_read_device+0x221/0x1670 [ 94.289529][ T5103] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10 [ 94.292027][ T5103] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0 [ 94.294981][ T5103] btree_node_read_work+0x68b/0x1260 [ 94.297428][ T5103] ? __pfx_btree_node_read_work+0x10/0x10 [ 94.299555][ T5103] ? __bch2_time_stats_update+0x1e0/0x370 [ 94.301849][ T5103] ? __pfx_bch2_latency_acct+0x10/0x10 [ 94.303919][ T5103] ? bio_associate_blkg+0x6c/0x230 [ 94.306070][ T5103] bch2_btree_node_read+0x2433/0x2a10 [ 94.308274][ T5103] ? __pfx_lock_release+0x10/0x10 [ 94.310861][ T5103] ? bch2_trans_unlock+0x346/0x470 [ 94.313300][ T5103] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 94.315720][ T5103] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 94.318147][ T5103] ? bch2_trans_unlock+0x3a6/0x470 [ 94.320007][ T5103] bch2_btree_root_read+0x617/0x7a0 [ 94.322136][ T5103] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 94.324441][ T5103] ? bch2_current_has_btree_trans+0x142/0x180 [ 94.327029][ T5103] read_btree_roots+0x296/0x840 [ 94.329228][ T5103] bch2_fs_recovery+0x2585/0x39c0 [ 94.331799][ T5103] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 94.334429][ T5103] ? __pfx_lock_release+0x10/0x10 [ 94.336442][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 94.338775][ T5103] ? __pfx_lock_release+0x10/0x10 [ 94.340748][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 94.342955][ T5103] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 94.345514][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 94.348819][ T5103] ? llist_reverse_order+0x72/0x90 [ 94.351474][ T5103] bch2_fs_start+0x356/0x5b0 [ 94.353464][ T5103] bch2_fs_get_tree+0xd68/0x1710 [ 94.355159][ T5103] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 94.357558][ T5103] ? generic_parse_monolithic+0x387/0x400 [ 94.360682][ T5103] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 94.363607][ T5103] ? apparmor_capable+0x13b/0x1b0 [ 94.365849][ T5103] vfs_get_tree+0x90/0x2b0 [ 94.367581][ T5103] do_new_mount+0x2be/0xb40 [ 94.369425][ T5103] ? __pfx_do_new_mount+0x10/0x10 [ 94.371220][ T5103] __se_sys_mount+0x2d6/0x3c0 [ 94.372937][ T5103] ? __pfx___se_sys_mount+0x10/0x10 [ 94.374744][ T5103] ? do_syscall_64+0x100/0x230 [ 94.376427][ T5103] ? __x64_sys_mount+0x20/0xc0 [ 94.378343][ T5103] do_syscall_64+0xf3/0x230 [ 94.380052][ T5103] ? clear_bhb_loop+0x35/0x90 [ 94.381940][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.384347][ T5103] RIP: 0033:0x7f57dbc21dea [ 94.386311][ T5103] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 94.394806][ T5103] RSP: 002b:00007fff6d4f5788 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 94.399523][ T5103] RAX: ffffffffffffffda RBX: 00007fff6d4f57a0 RCX: 00007f57dbc21dea [ 94.403731][ T5103] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007fff6d4f57a0 [ 94.406805][ T5103] RBP: 0000000000000004 R08: 00007fff6d4f57e0 R09: 00000000000058c6 [ 94.409625][ T5103] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 94.412595][ T5103] R13: 00007fff6d4f57e0 R14: 0000000000000003 R15: 0000000001000000 [ 94.415551][ T5103] </TASK> [ 94.420758][ T5103] ---[ end trace ]--- [ 94.422579][ T5103] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 94.426116][ T5103] CPU: 0 UID: 0 PID: 5103 Comm: syz-executor421 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 94.430544][ T5103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.434544][ T5103] Call Trace: [ 94.435856][ T5103] <TASK> [ 94.436880][ T5103] dump_stack_lvl+0x241/0x360 [ 94.438842][ T5103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.440814][ T5103] ? __pfx__printk+0x10/0x10 [ 94.443280][ T5103] ? lockdep_hardirqs_on+0x99/0x150 [ 94.446074][ T5103] ? vscnprintf+0x5d/0x90 [ 94.447613][ T5103] panic+0x349/0x880 [ 94.448993][ T5103] ? check_panic_on_warn+0x21/0xb0 [ 94.450710][ T5103] ? __pfx_panic+0x10/0x10 [ 94.452392][ T5103] ? _printk+0xd5/0x120 [ 94.453716][ T5103] ? __pfx__printk+0x10/0x10 [ 94.455179][ T5103] check_panic_on_warn+0x86/0xb0 [ 94.456989][ T5103] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 94.459295][ T5103] bch2_alloc_to_text+0xc79/0xce0 [ 94.461765][ T5103] ? __pfx_bch2_alloc_to_text+0x10/0x10 [ 94.464314][ T5103] ? bch2_bkey_val_to_text+0xf0/0x160 [ 94.466305][ T5103] __bch2_bkey_fsck_err+0x1c8/0x280 [ 94.467928][ T5103] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 94.469890][ T5103] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 94.471954][ T5103] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 94.474253][ T5103] ? __pfx___bch2_bkey_fsck_err+0x10/0x10 [ 94.476427][ T5103] ? bch2_alloc_v4_validate+0x165/0xef0 [ 94.478559][ T5103] bch2_alloc_v4_validate+0x931/0xef0 [ 94.481531][ T5103] ? __pfx_bch2_alloc_v4_validate+0x10/0x10 [ 94.484707][ T5103] ? bch2_bkey_val_validate+0x150/0x230 [ 94.486754][ T5103] bch2_btree_node_read_done+0x3e7e/0x5e90 [ 94.488776][ T5103] ? bch2_bkey_pick_read_device+0x221/0x1670 [ 94.490934][ T5103] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 94.492983][ T5103] ? bch2_bkey_pick_read_device+0x137d/0x1670 [ 94.495038][ T5103] ? bch2_bkey_pick_read_device+0x221/0x1670 [ 94.497400][ T5103] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10 [ 94.500506][ T5103] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0 [ 94.503259][ T5103] btree_node_read_work+0x68b/0x1260 [ 94.505343][ T5103] ? __pfx_btree_node_read_work+0x10/0x10 [ 94.507365][ T5103] ? __bch2_time_stats_update+0x1e0/0x370 [ 94.509388][ T5103] ? __pfx_bch2_latency_acct+0x10/0x10 [ 94.511389][ T5103] ? bio_associate_blkg+0x6c/0x230 [ 94.513427][ T5103] bch2_btree_node_read+0x2433/0x2a10 [ 94.515598][ T5103] ? __pfx_lock_release+0x10/0x10 [ 94.518267][ T5103] ? bch2_trans_unlock+0x346/0x470 [ 94.521216][ T5103] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 94.523737][ T5103] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 94.526066][ T5103] ? bch2_trans_unlock+0x3a6/0x470 [ 94.527750][ T5103] bch2_btree_root_read+0x617/0x7a0 [ 94.529778][ T5103] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 94.531876][ T5103] ? bch2_current_has_btree_trans+0x142/0x180 [ 94.533979][ T5103] read_btree_roots+0x296/0x840 [ 94.535662][ T5103] bch2_fs_recovery+0x2585/0x39c0 [ 94.537782][ T5103] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 94.540667][ T5103] ? __pfx_lock_release+0x10/0x10 [ 94.542959][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 94.545017][ T5103] ? __pfx_lock_release+0x10/0x10 [ 94.546959][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 94.548978][ T5103] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 94.551138][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 94.552998][ T5103] ? llist_reverse_order+0x72/0x90 [ 94.554714][ T5103] bch2_fs_start+0x356/0x5b0 [ 94.556231][ T5103] bch2_fs_get_tree+0xd68/0x1710 [ 94.557905][ T5103] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 94.559903][ T5103] ? generic_parse_monolithic+0x387/0x400 [ 94.562115][ T5103] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 94.564423][ T5103] ? apparmor_capable+0x13b/0x1b0 [ 94.566735][ T5103] vfs_get_tree+0x90/0x2b0 [ 94.568462][ T5103] do_new_mount+0x2be/0xb40 [ 94.570415][ T5103] ? __pfx_do_new_mount+0x10/0x10 [ 94.572496][ T5103] __se_sys_mount+0x2d6/0x3c0 [ 94.574579][ T5103] ? __pfx___se_sys_mount+0x10/0x10 [ 94.576640][ T5103] ? do_syscall_64+0x100/0x230 [ 94.578775][ T5103] ? __x64_sys_mount+0x20/0xc0 [ 94.580785][ T5103] do_syscall_64+0xf3/0x230 [ 94.582821][ T5103] ? clear_bhb_loop+0x35/0x90 [ 94.584698][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.586876][ T5103] RIP: 0033:0x7f57dbc21dea [ 94.588499][ T5103] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 94.598769][ T5103] RSP: 002b:00007fff6d4f5788 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 94.601831][ T5103] RAX: ffffffffffffffda RBX: 00007fff6d4f57a0 RCX: 00007f57dbc21dea [ 94.604787][ T5103] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007fff6d4f57a0 [ 94.607690][ T5103] RBP: 0000000000000004 R08: 00007fff6d4f57e0 R09: 00000000000058c6 [ 94.610735][ T5103] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 94.614067][ T5103] R13: 00007fff6d4f57e0 R14: 0000000000000003 R15: 0000000001000000 [ 94.618249][ T5103] </TASK> [ 94.619883][ T5103] Kernel Offset: disabled [ 94.621661][ T5103] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:13:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000067 RBX=ffffffff9a715e60 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002c0de90 R8 =ffffffff854a53fb R9 =1ffff11003dcd046 R10=dffffc0000000000 R11=ffffffff854a53b0 R12=dffffc0000000000 R13=ffffffff9a410f15 R14=0000000000000067 R15=00000000000003f8 RIP=ffffffff854a542e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555571f3380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fde5967e748 CR3=0000000012006000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000001 Opmask01=0000000000000000 Opmask02=0000000000000010 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2e07c850 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333c003120646565 6e202c3020657661 68203a656c62616c 6961766120736500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336003120646565 6420263020657661 6220306566626166 6361766120736500 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6c6c616620000a 6e2064656e655f61 636168202c27313d 636961616f5f6c61 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020573330200000 2020573235362036 3124342020202020 34363600655f6520 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a57393a3b3f5e 2a5157323f3c333c 3b243e332a2a2a51 343c3600797e6562 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5566666b7e790a00 796f6e6564635561 696f626926796465 637e6b696566666b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000