program: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b09, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x91, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x74b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xd7, 0xec}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa, 0x7, 0x0, 0x10, 0x6}, 0x5a, &(0x7f0000000080)={0x5, 0xf, 0x5a, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0x1, 0xff, 0x2, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0xd, 0x6, 0x5, 0xf0f, 0xe, [0x3fcf, 0x0, 0x3f00, 0x3f00, 0xff3f30, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x0, 0x5, 0xd, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x9, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "b7152babb7ed0ca58954846f945d6002"}]}, 0x6, [{0x4d, &(0x7f0000000100)=@string={0x4d, 0x3, "48709e075817f3f7ad2e3eed6f083ff4735f14ad9ed9ac60d7cd28b44fbc795af13a85ee194815abeefaf9713bfdad0a48511c1de7a17df65eac7b98d6f782b0d3a51941075754ecd1e039"}}, {0xd6, &(0x7f0000000280)=@string={0xd6, 0x3, "f06c6ef15962030db82e68b5147fe86fff30cb1b16f9bf254f5904c90276fb935cd693d443425b6d06a1e5f93edff5b47d51d1a1b9a21eaedc65d8515c41ec51029ef327ff9d628421c1afae95cf6616c1af5b9a99194389b1af71794803a66eddba7aa8cfa20f0288d0e5ed7c28888261b98f44b6bdfe7f9517a23aa3d18e63c6e680579845e5e704290210cdfaac71b7708e56363baee9f00d8d0d810daf1489989d56aa39be81df58325b903d6859fd86b244d66ea0def7c772e252bd40ba3fb40b6e1bb81152e854d4a807c4a7eebc67dc38"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1050}}]}) syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f00000001c0)=ANY=[@ANYBLOB='no_splitbrain_check,btree_node_prefetch,norecovery,fsck,norecovery,fix_errors=ask,recovery_pass_last=check_dirents,reconsUruct_alloc,shard_inode_numbers,\x00'], 0xfe, 0x5968, &(0x7f000000bcc0)="$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") [ 81.101164][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.101243][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.102220][ T4675] Bluetooth: hci0: command tx timeout [ 81.496754][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.651153][ T9] usb 5-1: config 1 interface 0 altsetting 145 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.656193][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 81.662059][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.40 [ 81.665415][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.669367][ T9] usb 5-1: Product:  [ 81.671206][ T9] usb 5-1: Manufacturer: 泰扙ഃ⺸땨缔濨ヿᯋ烙▿奏줄瘂鏻활풓䉃浛ꄆ痢듵兽ꇑꊹ긞旜凘䅜凬鸂⟳鷿葢섡꺯쾕ᙦ꿁驛ᦙ襃꾱祱͈溦뫝꡺ꋏȏ킈⡼芈륡䒏붶翾ផ㪢톣掎垀䖘⤄ဂ鬒熬炷嚎㬶෰ඍඁᒯ颉嚝㦪膾壟嬲㶐奨蛽䒲滖쟷뵒멀됿渋렛刑哨꣔쐇枼㣜 [ 81.684169][ T9] usb 5-1: SerialNumber: ࡃ [ 82.313837][ T5334] loop0: detected capacity change from 0 to 32768 [ 82.667348][ T5334] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,no_splitbrain_check,fsck,fix_errors=ask,norecovery,recovery_pass_last=check_dirents,nojournal_transaction_names [ 82.680650][ T5334] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 82.684041][ T5334] bcachefs (loop0): Version upgrade required: [ 82.684041][ T5334] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 82.684041][ T5334] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 82.684041][ T5334] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 82.713293][ T5334] bcachefs (loop0): invalid btree id 251 (max 63), fix? [ 82.721305][ T5334] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 82.726015][ T5334] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0 [ 82.726033][ T5334] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 98c59c5 written 0 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 82.726038][ T5334] node offset 0/0: got wrong btree node: got [ 82.726042][ T5334] btree=extents level=0 seq c6c25c03258c59c5 1 [ 82.726046][ T5334] min: POS_MIN [ 82.726049][ T5334] max: SPOS_MAX, btree topology error: [ 82.753153][ T5334] bcachefs (loop0): flagging btree extents lost data [ 82.755871][ T5334] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 82.763056][ T5334] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 82.772886][ T5334] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 82.772950][ T5334] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 82.772960][ T5334] node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647, btree topology error: [ 82.789024][ T5334] bcachefs (loop0): flagging btree xattrs lost data [ 82.792295][ T5334] bcachefs (loop0): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 82.799777][ T5334] bcachefs (loop0): bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 82.799794][ T5334] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 82.799803][ T5334] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 82.819966][ T5334] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 82.819966][ T5334] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 82.842469][ T5334] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree backpointers level 0/0 [ 82.842486][ T5334] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 82.842495][ T5334] node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 2251799813685248 > 4294967295 [ 82.842503][ T5334] u64s 3 fields 64:0, 64:0, 32:2251799813685248, 0:0, 0:0, 0:0, btree topology error: [ 82.864635][ T5334] bcachefs (loop0): flagging btree backpointers lost data [ 82.869710][ T5334] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 82.878341][ T5334] ------------[ cut here ]------------ [ 82.881151][ T5334] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:218:18 [ 82.884103][ T5334] shift exponent 251 is too large for 64-bit type 'unsigned long long' [ 82.889080][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(full) [ 82.889098][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.889105][ T5334] Call Trace: [ 82.889111][ T5334] [ 82.889116][ T5334] dump_stack_lvl+0x241/0x360 [ 82.889239][ T5334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.889255][ T5334] ? __pfx__printk+0x10/0x10 [ 82.889277][ T5334] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 82.889333][ T5334] __bch2_btree_node_hash_insert+0x1b32/0x1ba0 [ 82.889355][ T5334] ? __bch2_btree_node_hash_insert+0x20f/0x1ba0 [ 82.889393][ T5334] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 82.889415][ T5334] bch2_btree_node_hash_insert+0x7e/0xc0 [ 82.889429][ T5334] bch2_btree_root_read+0x605/0x7e0 [ 82.889449][ T5334] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 82.889471][ T5334] ? bch2_current_has_btree_trans+0x142/0x180 [ 82.889488][ T5334] read_btree_roots+0x3d7/0xa80 [ 82.889513][ T5334] ? __pfx_read_btree_roots+0x10/0x10 [ 82.889523][ T5334] ? journal_replay_entry_early+0x4d/0xba0 [ 82.889546][ T5334] bch2_fs_recovery+0x28e4/0x3e20 [ 82.889566][ T5334] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 82.889586][ T5334] ? __lock_acquire+0xad5/0xd80 [ 82.889601][ T5334] ? __lock_acquire+0xad5/0xd80 [ 82.889618][ T5334] ? irqentry_exit+0x63/0x90 [ 82.889662][ T5334] ? lockdep_hardirqs_on+0x9d/0x150 [ 82.889685][ T5334] ? preempt_count_sub+0x66/0x170 [ 82.889700][ T5334] ? up_write+0x1ab/0x590 [ 82.889716][ T5334] ? __pfx_up_write+0x10/0x10 [ 82.889730][ T5334] ? llist_reverse_order+0x72/0x90 [ 82.889745][ T5334] bch2_fs_start+0x2fb/0x610 [ 82.889762][ T5334] bch2_fs_get_tree+0x113e/0x18f0 [ 82.889799][ T5334] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 82.889826][ T5334] ? vfs_parse_monolithic_sep+0x427/0x460 [ 82.889844][ T5334] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 82.889857][ T5334] ? rcu_is_watching+0x15/0xb0 [ 82.889873][ T5334] ? apparmor_capable+0x13b/0x1b0 [ 82.889887][ T5334] vfs_get_tree+0x90/0x2b0 [ 82.889909][ T5334] do_new_mount+0x2cf/0xb70 [ 82.889930][ T5334] ? __pfx_do_new_mount+0x10/0x10 [ 82.889950][ T5334] __se_sys_mount+0x38c/0x400 [ 82.889971][ T5334] ? __pfx___se_sys_mount+0x10/0x10 [ 82.889988][ T5334] ? __x64_sys_mount+0x20/0xc0 [ 82.890005][ T5334] do_syscall_64+0xf3/0x230 [ 82.890018][ T5334] ? clear_bhb_loop+0x45/0xa0 [ 82.890031][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.890042][ T5334] RIP: 0033:0x7f614638e90a [ 82.890054][ T5334] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.890065][ T5334] RSP: 002b:00007f6147145e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.890078][ T5334] RAX: ffffffffffffffda RBX: 00007f6147145ef0 RCX: 00007f614638e90a [ 82.890087][ T5334] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007f6147145eb0 [ 82.890095][ T5334] RBP: 0000200000000180 R08: 00007f6147145ef0 R09: 0000000000800000 [ 82.890103][ T5334] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540 [ 82.890109][ T5334] R13: 00007f6147145eb0 R14: 0000000000005968 R15: 00002000000001c0 [ 82.890128][ T5334] [ 82.890185][ T5334] ---[ end trace ]--- [ 83.027775][ T5334] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 83.030928][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(full) [ 83.035142][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.039327][ T5334] Call Trace: [ 83.040702][ T5334] [ 83.041882][ T5334] dump_stack_lvl+0x241/0x360 [ 83.043687][ T5334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.045643][ T5334] ? __pfx__printk+0x10/0x10 [ 83.047439][ T5334] ? vscnprintf+0x5d/0x90 [ 83.049233][ T5334] panic+0x349/0x880 [ 83.050842][ T5334] ? check_panic_on_warn+0x21/0xb0 [ 83.052880][ T5334] ? __pfx_panic+0x10/0x10 [ 83.054730][ T5334] ? _printk+0xd5/0x120 [ 83.056360][ T5334] ? __pfx__printk+0x10/0x10 [ 83.058123][ T5334] check_panic_on_warn+0x86/0xb0 [ 83.060054][ T5334] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 83.062682][ T5334] __bch2_btree_node_hash_insert+0x1b32/0x1ba0 [ 83.065098][ T5334] ? __bch2_btree_node_hash_insert+0x20f/0x1ba0 [ 83.067489][ T5334] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 83.069661][ T5334] bch2_btree_node_hash_insert+0x7e/0xc0 [ 83.071766][ T5334] bch2_btree_root_read+0x605/0x7e0 [ 83.073814][ T5334] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 83.075976][ T5334] ? bch2_current_has_btree_trans+0x142/0x180 [ 83.078691][ T5334] read_btree_roots+0x3d7/0xa80 [ 83.081006][ T5334] ? __pfx_read_btree_roots+0x10/0x10 [ 83.083430][ T5334] ? journal_replay_entry_early+0x4d/0xba0 [ 83.085816][ T5334] bch2_fs_recovery+0x28e4/0x3e20 [ 83.087616][ T5334] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 83.089482][ T5334] ? __lock_acquire+0xad5/0xd80 [ 83.091260][ T5334] ? __lock_acquire+0xad5/0xd80 [ 83.092984][ T5334] ? irqentry_exit+0x63/0x90 [ 83.094670][ T5334] ? lockdep_hardirqs_on+0x9d/0x150 [ 83.096586][ T5334] ? preempt_count_sub+0x66/0x170 [ 83.098661][ T5334] ? up_write+0x1ab/0x590 [ 83.100374][ T5334] ? __pfx_up_write+0x10/0x10 [ 83.102211][ T5334] ? llist_reverse_order+0x72/0x90 [ 83.104222][ T5334] bch2_fs_start+0x2fb/0x610 [ 83.106049][ T5334] bch2_fs_get_tree+0x113e/0x18f0 [ 83.108020][ T5334] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 83.110194][ T5334] ? vfs_parse_monolithic_sep+0x427/0x460 [ 83.112343][ T5334] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 83.114456][ T5334] ? rcu_is_watching+0x15/0xb0 [ 83.116267][ T5334] ? apparmor_capable+0x13b/0x1b0 [ 83.118290][ T5334] vfs_get_tree+0x90/0x2b0 [ 83.120050][ T5334] do_new_mount+0x2cf/0xb70 [ 83.121873][ T5334] ? __pfx_do_new_mount+0x10/0x10 [ 83.123879][ T5334] __se_sys_mount+0x38c/0x400 [ 83.125806][ T5334] ? __pfx___se_sys_mount+0x10/0x10 [ 83.127837][ T5334] ? __x64_sys_mount+0x20/0xc0 [ 83.129699][ T5334] do_syscall_64+0xf3/0x230 [ 83.131462][ T5334] ? clear_bhb_loop+0x45/0xa0 [ 83.133337][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.135744][ T5334] RIP: 0033:0x7f614638e90a [ 83.137393][ T5334] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.144570][ T5334] RSP: 002b:00007f6147145e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.147977][ T5334] RAX: ffffffffffffffda RBX: 00007f6147145ef0 RCX: 00007f614638e90a [ 83.150859][ T5334] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007f6147145eb0 [ 83.153852][ T5334] RBP: 0000200000000180 R08: 00007f6147145ef0 R09: 0000000000800000 [ 83.157164][ T5334] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540 [ 83.160481][ T5334] R13: 00007f6147145eb0 R14: 0000000000005968 R15: 00002000000001c0 [ 83.163787][ T5334] [ 83.165426][ T5334] Kernel Offset: disabled [ 83.167199][ T5334] Rebooting in 86400 seconds..