program:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000200001030200000001000000020000001e00000000000000080017004e21bfad"], 0x24}}, 0x40000) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0xc, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e)
syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x814400, &(0x7f00000002c0)={[{@btree_node_prefetch}, {@discard}, {@norecovery}, {@fsck}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'reconstruct_snapshots'}}, {@norecovery}, {@fix_errors={'fix_errors', 0x3d, 'ask'}}, {@reconstruct_alloc}, {@shared_inode_numbers}, {@fix_errors={'fix_errors', 0x3d, 'no'}}], [{@dont_measure}]}, 0x1, 0x59ab, &(0x7f0000000680)="$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")
[ 67.959611][ T5307] Bluetooth: hci0: command tx timeout
[ 68.022325][ T5323] syz.0.0 uses obsolete (PF_INET,SOCK_PACKET)
[ 68.343502][ T5324] loop0: detected capacity change from 0 to 32768
[ 68.598490][ T5324] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=no,norecovery,recovery_pass_last=reconstruct_snapshots,nojournal_transaction_names,reconstruct_alloc
[ 68.610731][ T5324] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 68.614083][ T5324] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags
[ 68.614083][ T5324] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 68.624620][ T5324] bcachefs (loop0): invalid btree id 251 (max 63), not fixing
[ 68.628738][ T5324] bcachefs (loop0): dropping and reconstructing all alloc info
[ 68.635040][ T5324] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[ 68.640115][ T5324] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0
[ 68.640132][ T5324] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0
[ 68.640140][ T5324] node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647, btree topology error:
[ 68.656397][ T5324] bcachefs (loop0): flagging btree xattrs lost data
[ 68.660071][ T5324] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[ 68.665119][ T5324] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[ 68.672385][ T5324] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing
[ 68.679358][ T5324] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree subvolumes level 0/0
[ 68.679381][ T5324] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 0 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0
[ 68.679389][ T5324] node offset 8/0 bset u64s 5: checksum error, type none: got should be , fixing
[ 68.694987][ T5324] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
[ 68.694987][ T5324] btree=subvolumes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 0 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0
[ 68.708918][ T5324] ------------[ cut here ]------------
[ 68.711112][ T5324] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:218:18
[ 68.714209][ T5324] shift exponent 251 is too large for 64-bit type 'unsigned long long'
[ 68.721884][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full)
[ 68.721900][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.721907][ T5324] Call Trace:
[ 68.721912][ T5324]
[ 68.721917][ T5324] dump_stack_lvl+0x241/0x360
[ 68.722055][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.722071][ T5324] ? __pfx__printk+0x10/0x10
[ 68.722095][ T5324] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 68.722161][ T5324] __bch2_btree_node_hash_insert+0x1b32/0x1ba0
[ 68.722183][ T5324] ? __bch2_btree_node_hash_insert+0x20f/0x1ba0
[ 68.722197][ T5324] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 68.722218][ T5324] bch2_btree_node_hash_insert+0x7e/0xc0
[ 68.722233][ T5324] bch2_btree_root_read+0x605/0x7e0
[ 68.722253][ T5324] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 68.722277][ T5324] ? bch2_current_has_btree_trans+0x142/0x180
[ 68.722295][ T5324] read_btree_roots+0x3d7/0xa80
[ 68.722319][ T5324] ? __pfx_read_btree_roots+0x10/0x10
[ 68.722331][ T5324] ? bch2_reconstruct_alloc+0x336/0x5d0
[ 68.722354][ T5324] bch2_fs_recovery+0x28e4/0x3e20
[ 68.722387][ T5324] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 68.722409][ T5324] ? __lock_acquire+0xad5/0xd80
[ 68.722433][ T5324] ? __lock_acquire+0xad5/0xd80
[ 68.722457][ T5324] ? bch2_fs_start+0x279/0x620
[ 68.722473][ T5324] ? up_write+0x1ab/0x590
[ 68.722490][ T5324] ? bch2_get_next_online_dev+0x4ab/0x4e0
[ 68.722504][ T5324] ? bch2_get_next_online_dev+0x2e/0x4e0
[ 68.722520][ T5324] ? __pfx_up_write+0x10/0x10
[ 68.722537][ T5324] ? llist_reverse_order+0x72/0x90
[ 68.722552][ T5324] bch2_fs_start+0x310/0x620
[ 68.722570][ T5324] bch2_fs_get_tree+0x113e/0x18f0
[ 68.722608][ T5324] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 68.722637][ T5324] ? vfs_parse_monolithic_sep+0x427/0x460
[ 68.722657][ T5324] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 68.722669][ T5324] ? rcu_is_watching+0x15/0xb0
[ 68.722687][ T5324] ? apparmor_capable+0x13b/0x1b0
[ 68.722702][ T5324] vfs_get_tree+0x90/0x2b0
[ 68.722718][ T5324] do_new_mount+0x2cf/0xb70
[ 68.722739][ T5324] ? __pfx_do_new_mount+0x10/0x10
[ 68.722761][ T5324] __se_sys_mount+0x38c/0x400
[ 68.722781][ T5324] ? __pfx___se_sys_mount+0x10/0x10
[ 68.722802][ T5324] ? __x64_sys_mount+0x20/0xc0
[ 68.722819][ T5324] do_syscall_64+0xf3/0x230
[ 68.722878][ T5324] ? clear_bhb_loop+0x45/0xa0
[ 68.722892][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.722904][ T5324] RIP: 0033:0x7f519f98e90a
[ 68.722916][ T5324] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.722924][ T5324] RSP: 002b:00007f51a07a4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 68.722937][ T5324] RAX: ffffffffffffffda RBX: 00007f51a07a4ef0 RCX: 00007f519f98e90a
[ 68.722944][ T5324] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007f51a07a4eb0
[ 68.722951][ T5324] RBP: 0000200000000180 R08: 00007f51a07a4ef0 R09: 0000000000814400
[ 68.722958][ T5324] R10: 0000000000814400 R11: 0000000000000246 R12: 0000200000000540
[ 68.722965][ T5324] R13: 00007f51a07a4eb0 R14: 00000000000059ab R15: 00002000000002c0
[ 68.722982][ T5324]
[ 68.722988][ T5324] ---[ end trace ]---
[ 68.867457][ T5324] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 68.870328][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full)
[ 68.875139][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.879524][ T5324] Call Trace:
[ 68.881154][ T5324]
[ 68.882427][ T5324] dump_stack_lvl+0x241/0x360
[ 68.884205][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.886182][ T5324] ? __pfx__printk+0x10/0x10
[ 68.887881][ T5324] ? vscnprintf+0x5d/0x90
[ 68.889517][ T5324] panic+0x349/0x880
[ 68.891018][ T5324] ? check_panic_on_warn+0x21/0xb0
[ 68.892933][ T5324] ? __pfx_panic+0x10/0x10
[ 68.894628][ T5324] ? _printk+0xd5/0x120
[ 68.896202][ T5324] ? __pfx__printk+0x10/0x10
[ 68.897970][ T5324] check_panic_on_warn+0x86/0xb0
[ 68.899927][ T5324] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 68.902324][ T5324] __bch2_btree_node_hash_insert+0x1b32/0x1ba0
[ 68.904713][ T5324] ? __bch2_btree_node_hash_insert+0x20f/0x1ba0
[ 68.907057][ T5324] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 68.909453][ T5324] bch2_btree_node_hash_insert+0x7e/0xc0
[ 68.912083][ T5324] bch2_btree_root_read+0x605/0x7e0
[ 68.914618][ T5324] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 68.917390][ T5324] ? bch2_current_has_btree_trans+0x142/0x180
[ 68.920054][ T5324] read_btree_roots+0x3d7/0xa80
[ 68.921990][ T5324] ? __pfx_read_btree_roots+0x10/0x10
[ 68.923912][ T5324] ? bch2_reconstruct_alloc+0x336/0x5d0
[ 68.926026][ T5324] bch2_fs_recovery+0x28e4/0x3e20
[ 68.927916][ T5324] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 68.929954][ T5324] ? __lock_acquire+0xad5/0xd80
[ 68.931818][ T5324] ? __lock_acquire+0xad5/0xd80
[ 68.933754][ T5324] ? bch2_fs_start+0x279/0x620
[ 68.935541][ T5324] ? up_write+0x1ab/0x590
[ 68.937221][ T5324] ? bch2_get_next_online_dev+0x4ab/0x4e0
[ 68.939300][ T5324] ? bch2_get_next_online_dev+0x2e/0x4e0
[ 68.941434][ T5324] ? __pfx_up_write+0x10/0x10
[ 68.943270][ T5324] ? llist_reverse_order+0x72/0x90
[ 68.945211][ T5324] bch2_fs_start+0x310/0x620
[ 68.946996][ T5324] bch2_fs_get_tree+0x113e/0x18f0
[ 68.948829][ T5324] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 68.950992][ T5324] ? vfs_parse_monolithic_sep+0x427/0x460
[ 68.953269][ T5324] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 68.955329][ T5324] ? rcu_is_watching+0x15/0xb0
[ 68.957219][ T5324] ? apparmor_capable+0x13b/0x1b0
[ 68.959135][ T5324] vfs_get_tree+0x90/0x2b0
[ 68.960959][ T5324] do_new_mount+0x2cf/0xb70
[ 68.962821][ T5324] ? __pfx_do_new_mount+0x10/0x10
[ 68.964724][ T5324] __se_sys_mount+0x38c/0x400
[ 68.966525][ T5324] ? __pfx___se_sys_mount+0x10/0x10
[ 68.968387][ T5324] ? __x64_sys_mount+0x20/0xc0
[ 68.970272][ T5324] do_syscall_64+0xf3/0x230
[ 68.971943][ T5324] ? clear_bhb_loop+0x45/0xa0
[ 68.973922][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.976114][ T5324] RIP: 0033:0x7f519f98e90a
[ 68.977932][ T5324] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.985385][ T5324] RSP: 002b:00007f51a07a4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 68.988835][ T5324] RAX: ffffffffffffffda RBX: 00007f51a07a4ef0 RCX: 00007f519f98e90a
[ 68.992132][ T5324] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007f51a07a4eb0
[ 68.995368][ T5324] RBP: 0000200000000180 R08: 00007f51a07a4ef0 R09: 0000000000814400
[ 68.998680][ T5324] R10: 0000000000814400 R11: 0000000000000246 R12: 0000200000000540
[ 69.002153][ T5324] R13: 00007f51a07a4eb0 R14: 00000000000059ab R15: 00002000000002c0
[ 69.005456][ T5324]
[ 69.006971][ T5324] Kernel Offset: disabled
[ 69.008820][ T5324] Rebooting in 86400 seconds..