program: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x400448c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b44732dffaff3d702f10ae0000000000c400"/32], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x80000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x8801, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x103800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x880, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x40080, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x480, 0x0) syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f0000000000)=ANY=[@ANYBLOB="62747265655f6e6f64655f70726566657463682c646973636172642c6e6f7265636f766572792c6673636b2c7265636f766572795f706173735f6c6173743d7265636f6e7374727563745f736e617073686f74732c6e6f7265636f766572792c6669785f6572726f72733d7965732c7265636f6e7374727563745f616c6c6f632c73686172645f696e6f64655f6e756d626572732c6669785f6572726f72733d6e6f2c646f6e745f6d6561737572652c0027e62572a846446ce661be2e492e311ef56e75106e4aae0239186636768a5d67de98292455a0e5931f86ae58168c9d3d3b6a7af5ab9934c4"], 0x1, 0x596a, &(0x7f000000bcc0)="$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") [ 69.700379][ T5299] Bluetooth: hci0: command tx timeout [ 69.945752][ T5314] loop0: detected capacity change from 0 to 32768 [ 70.025017][ T5314] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=no,norecovery,recovery_pass_last=reconstruct_snapshots,nojournal_transaction_names,reconstruct_alloc [ 70.025017][ T5314] allowing incompatible features above 0.0: (unknown version) [ 70.042564][ T5314] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 70.045789][ T5314] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 70.045789][ T5314] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 70.056018][ T5314] bcachefs (loop0): invalid btree id 251 (max 63), not fixing [ 70.059662][ T5314] bcachefs (loop0): dropping and reconstructing all alloc info [ 70.067631][ T5314] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 70.072996][ T5314] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 70.073012][ T5314] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 70.073020][ T5314] node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647, btree topology error: [ 70.089931][ T5314] bcachefs (loop0): flagging btree xattrs lost data [ 70.093068][ T5314] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 70.098121][ T5314] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 70.104958][ T5314] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 70.112865][ T5314] ------------[ cut here ]------------ [ 70.115110][ T5314] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:218:18 [ 70.117911][ T5314] shift exponent 251 is too large for 64-bit type 'unsigned long long' [ 70.123059][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 70.123075][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.123081][ T5314] Call Trace: [ 70.123086][ T5314] [ 70.123091][ T5314] dump_stack_lvl+0x189/0x250 [ 70.123262][ T5314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.123278][ T5314] ? __pfx__printk+0x10/0x10 [ 70.123299][ T5314] ubsan_epilogue+0xa/0x40 [ 70.123310][ T5314] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 70.123364][ T5314] __bch2_btree_node_hash_insert+0x184d/0x1ab0 [ 70.123387][ T5314] ? __bch2_btree_node_hash_insert+0x200/0x1ab0 [ 70.123404][ T5314] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 70.123426][ T5314] bch2_btree_node_hash_insert+0x7e/0xc0 [ 70.123441][ T5314] bch2_btree_root_read+0x599/0x750 [ 70.123457][ T5314] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 70.123476][ T5314] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 70.123489][ T5314] read_btree_roots+0x2cb/0x800 [ 70.123510][ T5314] ? __pfx_read_btree_roots+0x10/0x10 [ 70.123535][ T5314] bch2_fs_recovery+0x2356/0x37b0 [ 70.123559][ T5314] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 70.123582][ T5314] ? __lock_acquire+0xaac/0xd20 [ 70.123603][ T5314] ? __lock_acquire+0xaac/0xd20 [ 70.123626][ T5314] ? percpu_ref_put+0x1e/0x230 [ 70.123645][ T5314] ? bch2_get_next_online_dev+0x2d/0x4d0 [ 70.123662][ T5314] ? bch2_fs_start+0x65b/0xae0 [ 70.123678][ T5314] ? up_write+0x1c4/0x420 [ 70.123691][ T5314] bch2_fs_start+0x70b/0xae0 [ 70.123709][ T5314] ? __pfx_bch2_fs_start+0x10/0x10 [ 70.123737][ T5314] ? percpu_ref_put+0x1e/0x230 [ 70.123748][ T5314] ? percpu_ref_put+0x1e/0x230 [ 70.123761][ T5314] ? percpu_ref_put+0x188/0x230 [ 70.123774][ T5314] bch2_fs_get_tree+0xd99/0x1340 [ 70.123800][ T5314] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 70.123823][ T5314] ? aa_get_newest_label+0xf7/0x5d0 [ 70.123834][ T5314] ? vfs_parse_monolithic_sep+0x2e3/0x310 [ 70.123863][ T5314] ? apparmor_capable+0x137/0x1b0 [ 70.123884][ T5314] vfs_get_tree+0x8f/0x2b0 [ 70.123898][ T5314] do_new_mount+0x24a/0xa40 [ 70.123917][ T5314] __se_sys_mount+0x317/0x410 [ 70.123932][ T5314] ? __pfx___se_sys_mount+0x10/0x10 [ 70.123949][ T5314] ? do_syscall_64+0xba/0x210 [ 70.123996][ T5314] ? __x64_sys_mount+0x20/0xc0 [ 70.124006][ T5314] do_syscall_64+0xf6/0x210 [ 70.124014][ T5314] ? clear_bhb_loop+0x45/0xa0 [ 70.124024][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.124032][ T5314] RIP: 0033:0x7ff821f9010a [ 70.124043][ T5314] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.124052][ T5314] RSP: 002b:00007ff822eaee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.124064][ T5314] RAX: ffffffffffffffda RBX: 00007ff822eaeef0 RCX: 00007ff821f9010a [ 70.124073][ T5314] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007ff822eaeeb0 [ 70.124081][ T5314] RBP: 0000200000000180 R08: 00007ff822eaeef0 R09: 0000000000800000 [ 70.124088][ T5314] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540 [ 70.124094][ T5314] R13: 00007ff822eaeeb0 R14: 000000000000596a R15: 0000200000000000 [ 70.124111][ T5314] [ 70.124115][ T5314] ---[ end trace ]--- [ 70.259173][ T5314] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 70.262065][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) [ 70.266825][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.270930][ T5314] Call Trace: [ 70.272242][ T5314] [ 70.273402][ T5314] dump_stack_lvl+0x99/0x250 [ 70.275231][ T5314] ? __asan_memcpy+0x40/0x70 [ 70.276965][ T5314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.279097][ T5314] ? __pfx__printk+0x10/0x10 [ 70.281086][ T5314] panic+0x2db/0x790 [ 70.282656][ T5314] ? __pfx_panic+0x10/0x10 [ 70.284488][ T5314] ? _printk+0xcf/0x120 [ 70.286175][ T5314] ? __pfx__printk+0x10/0x10 [ 70.287955][ T5314] check_panic_on_warn+0x89/0xb0 [ 70.289854][ T5314] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 70.292216][ T5314] __bch2_btree_node_hash_insert+0x184d/0x1ab0 [ 70.294613][ T5314] ? __bch2_btree_node_hash_insert+0x200/0x1ab0 [ 70.297100][ T5314] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 70.299712][ T5314] bch2_btree_node_hash_insert+0x7e/0xc0 [ 70.302068][ T5314] bch2_btree_root_read+0x599/0x750 [ 70.304222][ T5314] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 70.306388][ T5314] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 70.308820][ T5314] read_btree_roots+0x2cb/0x800 [ 70.310767][ T5314] ? __pfx_read_btree_roots+0x10/0x10 [ 70.312832][ T5314] bch2_fs_recovery+0x2356/0x37b0 [ 70.314796][ T5314] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 70.316882][ T5314] ? __lock_acquire+0xaac/0xd20 [ 70.318938][ T5314] ? __lock_acquire+0xaac/0xd20 [ 70.320790][ T5314] ? percpu_ref_put+0x1e/0x230 [ 70.322610][ T5314] ? bch2_get_next_online_dev+0x2d/0x4d0 [ 70.324899][ T5314] ? bch2_fs_start+0x65b/0xae0 [ 70.326788][ T5314] ? up_write+0x1c4/0x420 [ 70.328696][ T5314] bch2_fs_start+0x70b/0xae0 [ 70.330858][ T5314] ? __pfx_bch2_fs_start+0x10/0x10 [ 70.333370][ T5314] ? percpu_ref_put+0x1e/0x230 [ 70.335745][ T5314] ? percpu_ref_put+0x1e/0x230 [ 70.338121][ T5314] ? percpu_ref_put+0x188/0x230 [ 70.340499][ T5314] bch2_fs_get_tree+0xd99/0x1340 [ 70.342478][ T5314] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 70.344771][ T5314] ? aa_get_newest_label+0xf7/0x5d0 [ 70.346951][ T5314] ? vfs_parse_monolithic_sep+0x2e3/0x310 [ 70.349152][ T5314] ? apparmor_capable+0x137/0x1b0 [ 70.351130][ T5314] vfs_get_tree+0x8f/0x2b0 [ 70.352929][ T5314] do_new_mount+0x24a/0xa40 [ 70.354750][ T5314] __se_sys_mount+0x317/0x410 [ 70.356654][ T5314] ? __pfx___se_sys_mount+0x10/0x10 [ 70.358793][ T5314] ? do_syscall_64+0xba/0x210 [ 70.360702][ T5314] ? __x64_sys_mount+0x20/0xc0 [ 70.362619][ T5314] do_syscall_64+0xf6/0x210 [ 70.364478][ T5314] ? clear_bhb_loop+0x45/0xa0 [ 70.366325][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.368651][ T5314] RIP: 0033:0x7ff821f9010a [ 70.370461][ T5314] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.377871][ T5314] RSP: 002b:00007ff822eaee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.381073][ T5314] RAX: ffffffffffffffda RBX: 00007ff822eaeef0 RCX: 00007ff821f9010a [ 70.383984][ T5314] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007ff822eaeeb0 [ 70.386879][ T5314] RBP: 0000200000000180 R08: 00007ff822eaeef0 R09: 0000000000800000 [ 70.389772][ T5314] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540 [ 70.392685][ T5314] R13: 00007ff822eaeeb0 R14: 000000000000596a R15: 0000200000000000 [ 70.395833][ T5314] [ 70.397327][ T5314] Kernel Offset: disabled [ 70.399128][ T5314] Rebooting in 86400 seconds..