program: syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00_'], 0x20}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x8}) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001}}]}, 0x40}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xb0080, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f6578636c2c646973636172642c6e6f7265636f766572792c6673636b2c7265636ff66572795f706173735f6c6173743d7265636f6e7374727563745f736e617073686f74732c6e6f7265792c6669785f6572726f72733d61736b2c6a6f75726e616c5f747240000000000000007e5f6e616d65732c73686172645f696e6f64655f6e756d626572732c6669785f6572726f72733d7965732c000000000000"], 0x1, 0x59a5, &(0x7f0000006040)="$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") close(r3) [ 74.533035][ T5302] Bluetooth: hci0: command tx timeout [ 74.957086][ T5323] loop0: detected capacity change from 0 to 32768 [ 75.205056][ T5323] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=ask,norecovery,nojournal_transaction_names,noexcl [ 75.205075][ T5323] allowing incompatible features above 0.0: (unknown version) [ 75.205082][ T5323] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 75.225423][ T5323] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 75.230755][ T5323] bcachefs (loop0): invalid bkey in superblock btree=snapshots level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key U64_MAX:0:0 durability: 0 ptr: 0:32:10 gen 0 cached unwritten [ 75.230791][ T5323] pointer spans multiple buckets (10 + 256 > 256), deleting [ 75.246313][ T5323] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 75.250232][ T5323] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 75.250232][ T5323] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 75.266070][ T5323] bcachefs (loop0): invalid btree id 251 (max 63), fix? [ 75.332554][ T5323] bcachefs (loop0): error validating btree node at btree xattrs level 0/0 [ 75.332577][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 75.332582][ T5323] loop0 node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647, btree topology error: running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 75.354575][ T5323] bcachefs (loop0): btree node read error at btree xattrs level 0/0 [ 75.354589][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 75.354598][ T5323] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 75.354605][ T5323] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 75.354612][ T5323] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 75.354620][ T5323] ret btree_node_read_validate_error [ 75.384180][ T5323] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 75.390356][ T5323] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 75.390382][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 75.390392][ T5323] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 75.417651][ T5323] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree freespace level 0/0 [ 75.417667][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 75.417678][ T5323] node offset 24/32 bset u64s 24 bset byte offset 168: bad k->u64s 0 (min 3 max 253), fix? [ 75.435311][ T5323] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree freespace level 0/0 [ 75.435325][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 75.435335][ T5323] node offset 24/32 bset u64s 24 bset byte offset 168: bad k->u64s 0 (min 3 max 253), fix? [ 75.435343][ T5323] Unable to continue, halting [ 75.457845][ T5323] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 75.466144][ T5323] bcachefs (loop0): error validating btree node at btree backpointers level 0/0 [ 75.466159][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 75.466168][ T5323] loop0 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 2251799813685248 > 4294967295 [ 75.466177][ T5323] u64s 3 fields 64:0, 64:0, 32:2251799813685248, 0:0, 0:0, 0:0, btree topology error: [ 75.487656][ T5323] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 75.487669][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 75.487678][ T5323] flagging btree backpointers lost data [ 75.487684][ T5323] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 75.487692][ T5323] ret btree_node_read_validate_error [ 75.510179][ T5323] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 75.517510][ T5323] ------------[ cut here ]------------ [ 75.520439][ T5323] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:212:18 [ 75.525441][ T5323] shift exponent 251 is too large for 64-bit type 'unsigned long long' [ 75.529683][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) [ 75.529701][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.529709][ T5323] Call Trace: [ 75.529716][ T5323] [ 75.529723][ T5323] dump_stack_lvl+0x189/0x250 [ 75.529831][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.529850][ T5323] ? __pfx__printk+0x10/0x10 [ 75.529874][ T5323] ubsan_epilogue+0xa/0x40 [ 75.529888][ T5323] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 75.529951][ T5323] __bch2_btree_node_hash_insert+0x184d/0x1ab0 [ 75.529976][ T5323] ? __bch2_btree_node_hash_insert+0x200/0x1ab0 [ 75.529995][ T5323] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 75.530021][ T5323] bch2_btree_node_hash_insert+0x7e/0xc0 [ 75.530038][ T5323] bch2_btree_root_read+0x59e/0x760 [ 75.530058][ T5323] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 75.530083][ T5323] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 75.530098][ T5323] read_btree_roots+0x2c6/0x840 [ 75.530122][ T5323] ? __pfx_read_btree_roots+0x10/0x10 [ 75.530149][ T5323] bch2_fs_recovery+0x261f/0x3a50 [ 75.530163][ T5323] ? check_noncircular+0xe0/0x160 [ 75.530199][ T5323] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 75.530228][ T5323] ? __lock_acquire+0xab9/0xd20 [ 75.530254][ T5323] ? __lock_acquire+0xab9/0xd20 [ 75.530277][ T5323] ? __lock_acquire+0xab9/0xd20 [ 75.530307][ T5323] ? bch2_fs_start+0x9fe/0xd90 [ 75.530321][ T5323] ? up_write+0x1c4/0x420 [ 75.530330][ T5323] ? bch2_fs_start+0x5c4/0xd90 [ 75.530343][ T5323] bch2_fs_start+0xa99/0xd90 [ 75.530355][ T5323] ? bch2_fs_start+0x5c4/0xd90 [ 75.530369][ T5323] ? __pfx_bch2_fs_start+0x10/0x10 [ 75.530397][ T5323] ? sget+0x267/0x620 [ 75.530416][ T5323] bch2_fs_get_tree+0xafc/0x14f0 [ 75.530457][ T5323] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.530511][ T5323] ? aa_get_newest_label+0xf7/0x5d0 [ 75.530529][ T5323] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 75.530553][ T5323] ? apparmor_capable+0x137/0x1b0 [ 75.530575][ T5323] vfs_get_tree+0x92/0x2b0 [ 75.530589][ T5323] do_new_mount+0x24a/0xa40 [ 75.530607][ T5323] __se_sys_mount+0x317/0x410 [ 75.530624][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 75.530663][ T5323] ? do_syscall_64+0xbe/0x3b0 [ 75.530766][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 75.530781][ T5323] do_syscall_64+0xfa/0x3b0 [ 75.530798][ T5323] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.530813][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.530824][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 75.530837][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.530848][ T5323] RIP: 0033:0x7fcb597900ca [ 75.530862][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.530870][ T5323] RSP: 002b:00007fcb5a63be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.530889][ T5323] RAX: ffffffffffffffda RBX: 00007fcb5a63bef0 RCX: 00007fcb597900ca [ 75.530898][ T5323] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007fcb5a63beb0 [ 75.530908][ T5323] RBP: 0000200000000180 R08: 00007fcb5a63bef0 R09: 0000000000800000 [ 75.530915][ T5323] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540 [ 75.530923][ T5323] R13: 00007fcb5a63beb0 R14: 00000000000059a5 R15: 00002000000000c0 [ 75.530942][ T5323] [ 75.531090][ T5323] ---[ end trace ]--- [ 75.718633][ T5323] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 75.722062][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00346-gafa9a6f4f574 #0 PREEMPT(full) [ 75.727545][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.732390][ T5323] Call Trace: [ 75.733953][ T5323] [ 75.735275][ T5323] dump_stack_lvl+0x99/0x250 [ 75.737461][ T5323] ? __asan_memcpy+0x40/0x70 [ 75.739753][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.742247][ T5323] ? __pfx__printk+0x10/0x10 [ 75.744069][ T5323] panic+0x2db/0x790 [ 75.745607][ T5323] ? __pfx_panic+0x10/0x10 [ 75.747466][ T5323] ? _printk+0xcf/0x120 [ 75.749173][ T5323] ? __pfx__printk+0x10/0x10 [ 75.751356][ T5323] check_panic_on_warn+0x89/0xb0 [ 75.753571][ T5323] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 75.756633][ T5323] __bch2_btree_node_hash_insert+0x184d/0x1ab0 [ 75.759541][ T5323] ? __bch2_btree_node_hash_insert+0x200/0x1ab0 [ 75.762553][ T5323] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 75.765359][ T5323] bch2_btree_node_hash_insert+0x7e/0xc0 [ 75.767963][ T5323] bch2_btree_root_read+0x59e/0x760 [ 75.770605][ T5323] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 75.773399][ T5323] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 75.776147][ T5323] read_btree_roots+0x2c6/0x840 [ 75.778316][ T5323] ? __pfx_read_btree_roots+0x10/0x10 [ 75.780617][ T5323] bch2_fs_recovery+0x261f/0x3a50 [ 75.782916][ T5323] ? check_noncircular+0xe0/0x160 [ 75.785436][ T5323] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 75.788149][ T5323] ? __lock_acquire+0xab9/0xd20 [ 75.791018][ T5323] ? __lock_acquire+0xab9/0xd20 [ 75.793359][ T5323] ? __lock_acquire+0xab9/0xd20 [ 75.795506][ T5323] ? bch2_fs_start+0x9fe/0xd90 [ 75.797788][ T5323] ? up_write+0x1c4/0x420 [ 75.799824][ T5323] ? bch2_fs_start+0x5c4/0xd90 [ 75.802221][ T5323] bch2_fs_start+0xa99/0xd90 [ 75.804540][ T5323] ? bch2_fs_start+0x5c4/0xd90 [ 75.806831][ T5323] ? __pfx_bch2_fs_start+0x10/0x10 [ 75.809121][ T5323] ? sget+0x267/0x620 [ 75.810894][ T5323] bch2_fs_get_tree+0xafc/0x14f0 [ 75.813118][ T5323] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.815488][ T5323] ? aa_get_newest_label+0xf7/0x5d0 [ 75.817904][ T5323] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 75.820654][ T5323] ? apparmor_capable+0x137/0x1b0 [ 75.823641][ T5323] vfs_get_tree+0x92/0x2b0 [ 75.825691][ T5323] do_new_mount+0x24a/0xa40 [ 75.827713][ T5323] __se_sys_mount+0x317/0x410 [ 75.829946][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 75.832381][ T5323] ? do_syscall_64+0xbe/0x3b0 [ 75.834752][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 75.837030][ T5323] do_syscall_64+0xfa/0x3b0 [ 75.838990][ T5323] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.841400][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.844444][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 75.846675][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.849247][ T5323] RIP: 0033:0x7fcb597900ca [ 75.851162][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.860511][ T5323] RSP: 002b:00007fcb5a63be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.864771][ T5323] RAX: ffffffffffffffda RBX: 00007fcb5a63bef0 RCX: 00007fcb597900ca [ 75.868392][ T5323] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007fcb5a63beb0 [ 75.871834][ T5323] RBP: 0000200000000180 R08: 00007fcb5a63bef0 R09: 0000000000800000 [ 75.875324][ T5323] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540 [ 75.879450][ T5323] R13: 00007fcb5a63beb0 R14: 00000000000059a5 R15: 00002000000000c0 [ 75.883401][ T5323] [ 75.885114][ T5323] Kernel Offset: disabled [ 75.887169][ T5323] Rebooting in 86400 seconds..