program:
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0xfffffff8, 0xe4, &(0x7f0000000080)=""/228, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7fff, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x810000, &(0x7f0000000300)={[{@btree_node_prefetch}, {@discard}, {@fix_errors={'fix_errors', 0x3d, 'ask'}}, {@fsck}, {@btree_node_prefetch}, {@norecovery}, {@journal_flush_disabled}, {@inline_data}, {@shared_inode_numbers}, {@fix_errors={'fix_errors', 0x3d, 'no'}}], [{@smackfshat={'smackfshat', 0x3d, '}.)-([\\&,(#&$'}}]}, 0x1, 0x5985, &(0x7f0000000680)="$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")
[ 76.717094][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.719708][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 76.723043][ T5308] Bluetooth: hci0: command tx timeout
[ 77.420934][ T5323] loop0: detected capacity change from 0 to 32768
[ 77.596092][ T5323] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,fix_errors=no,norecovery,nojournal_transaction_names
[ 77.603320][ T5323] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 77.608934][ T5323] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.20: directory_size
[ 77.608934][ T5323] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 77.619391][ T5323] invalid btree id 251 (max 63), not fixing
[ 77.629005][ T5323] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0
[ 77.629027][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0
[ 77.629038][ T5323] node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647
[ 77.642536][ T5323] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[ 77.649403][ T5323] bcachefs (loop0): flagging btree xattrs lost data
[ 77.652633][ T5323] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[ 77.658820][ T5323] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[ 77.663994][ T5323] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[ 77.672883][ T5323] error reading btree root btree=xattrs level=0: btree_node_read_error, fixing
[ 77.678208][ T5323] bcachefs (loop0): error validating btree node at btree alloc level 0/0
[ 77.678230][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[ 77.678237][ T5323] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing
[ 77.694322][ T5323] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error
[ 77.694322][ T5323] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[ 77.711735][ T5323] bcachefs (loop0): error validating btree node on loop0 at btree backpointers level 0/0
[ 77.711752][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[ 77.711762][ T5323] node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 2251799813685248 > 4294967295
[ 77.711771][ T5323] u64s 3 fields 64:0, 64:0, 32:2251799813685248, 0:0, 0:0, 0:0
[ 77.735404][ T5323] bcachefs (loop0): flagging btree backpointers lost data
[ 77.738147][ T5323] bcachefs (loop0): running explicit recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0)
[ 77.743332][ T5323] error reading btree root btree=backpointers level=0: btree_node_read_error, fixing
[ 77.755069][ T5323] ------------[ cut here ]------------
[ 77.758920][ T5323] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:218:18
[ 77.762763][ T5323] shift exponent 251 is too large for 64-bit type 'unsigned long long'
[ 77.767346][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[ 77.767364][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 77.767371][ T5323] Call Trace:
[ 77.767377][ T5323]
[ 77.767381][ T5323] dump_stack_lvl+0x241/0x360
[ 77.767490][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10
[ 77.767502][ T5323] ? __pfx__printk+0x10/0x10
[ 77.767528][ T5323] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 77.767582][ T5323] __bch2_btree_node_hash_insert+0x1b1d/0x1b80
[ 77.767605][ T5323] ? __bch2_btree_node_hash_insert+0x20d/0x1b80
[ 77.767622][ T5323] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 77.767644][ T5323] bch2_btree_node_hash_insert+0x7e/0xc0
[ 77.767660][ T5323] bch2_btree_root_read+0x5c6/0x7a0
[ 77.767677][ T5323] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 77.767697][ T5323] ? bch2_current_has_btree_trans+0x142/0x180
[ 77.767711][ T5323] read_btree_roots+0x3d3/0xa70
[ 77.767735][ T5323] ? __pfx_read_btree_roots+0x10/0x10
[ 77.767747][ T5323] ? journal_replay_entry_early+0x4d/0xb70
[ 77.767771][ T5323] bch2_fs_recovery+0x260f/0x3de0
[ 77.767794][ T5323] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 77.767828][ T5323] ? __pfx_lock_release+0x10/0x10
[ 77.767844][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 77.767857][ T5323] ? __pfx_lock_release+0x10/0x10
[ 77.767878][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 77.767892][ T5323] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 77.767903][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 77.767918][ T5323] ? llist_reverse_order+0x72/0x90
[ 77.767934][ T5323] bch2_fs_start+0x37c/0x610
[ 77.767952][ T5323] bch2_fs_get_tree+0xd8d/0x1740
[ 77.768008][ T5323] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 77.768040][ T5323] ? generic_parse_monolithic+0x387/0x400
[ 77.768064][ T5323] ? rcu_is_watching+0x15/0xb0
[ 77.768076][ T5323] ? apparmor_capable+0x13b/0x1b0
[ 77.768095][ T5323] vfs_get_tree+0x90/0x2b0
[ 77.768114][ T5323] do_new_mount+0x2be/0xb40
[ 77.768134][ T5323] ? __pfx_do_new_mount+0x10/0x10
[ 77.768154][ T5323] __se_sys_mount+0x2d6/0x3c0
[ 77.768170][ T5323] ? __pfx___se_sys_mount+0x10/0x10
[ 77.768181][ T5323] ? exc_page_fault+0x590/0x8b0
[ 77.768232][ T5323] ? __x64_sys_mount+0x20/0xc0
[ 77.768244][ T5323] do_syscall_64+0xf3/0x230
[ 77.768262][ T5323] ? clear_bhb_loop+0x35/0x90
[ 77.768285][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.768299][ T5323] RIP: 0033:0x7f372978e54a
[ 77.768312][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 77.768321][ T5323] RSP: 002b:00007f372a662e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 77.768333][ T5323] RAX: ffffffffffffffda RBX: 00007f372a662ef0 RCX: 00007f372978e54a
[ 77.768341][ T5323] RDX: 0000000020000180 RSI: 0000000020000540 RDI: 00007f372a662eb0
[ 77.768348][ T5323] RBP: 0000000020000180 R08: 00007f372a662ef0 R09: 0000000000810000
[ 77.768355][ T5323] R10: 0000000000810000 R11: 0000000000000246 R12: 0000000020000540
[ 77.768363][ T5323] R13: 00007f372a662eb0 R14: 0000000000005985 R15: 0000000020000300
[ 77.768380][ T5323]
[ 77.768384][ T5323] ---[ end trace ]---
[ 77.903586][ T5323] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 77.906346][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0
[ 77.910013][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 77.913740][ T5323] Call Trace:
[ 77.914984][ T5323]
[ 77.916090][ T5323] dump_stack_lvl+0x241/0x360
[ 77.917833][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10
[ 77.919742][ T5323] ? __pfx__printk+0x10/0x10
[ 77.921424][ T5323] ? vscnprintf+0x5d/0x90
[ 77.923066][ T5323] panic+0x349/0x880
[ 77.924590][ T5323] ? check_panic_on_warn+0x21/0xb0
[ 77.926495][ T5323] ? __pfx_panic+0x10/0x10
[ 77.928139][ T5323] ? _printk+0xd5/0x120
[ 77.929542][ T5323] ? __pfx__printk+0x10/0x10
[ 77.931161][ T5323] check_panic_on_warn+0x86/0xb0
[ 77.932866][ T5323] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 77.935196][ T5323] __bch2_btree_node_hash_insert+0x1b1d/0x1b80
[ 77.937514][ T5323] ? __bch2_btree_node_hash_insert+0x20d/0x1b80
[ 77.939752][ T5323] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 77.942086][ T5323] bch2_btree_node_hash_insert+0x7e/0xc0
[ 77.944157][ T5323] bch2_btree_root_read+0x5c6/0x7a0
[ 77.946137][ T5323] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 77.948297][ T5323] ? bch2_current_has_btree_trans+0x142/0x180
[ 77.950554][ T5323] read_btree_roots+0x3d3/0xa70
[ 77.952451][ T5323] ? __pfx_read_btree_roots+0x10/0x10
[ 77.954366][ T5323] ? journal_replay_entry_early+0x4d/0xb70
[ 77.956840][ T5323] bch2_fs_recovery+0x260f/0x3de0
[ 77.958825][ T5323] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 77.960887][ T5323] ? __pfx_lock_release+0x10/0x10
[ 77.962719][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 77.964696][ T5323] ? __pfx_lock_release+0x10/0x10
[ 77.966641][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 77.968763][ T5323] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 77.970848][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 77.972812][ T5323] ? llist_reverse_order+0x72/0x90
[ 77.974566][ T5323] bch2_fs_start+0x37c/0x610
[ 77.976305][ T5323] bch2_fs_get_tree+0xd8d/0x1740
[ 77.978069][ T5323] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 77.980131][ T5323] ? generic_parse_monolithic+0x387/0x400
[ 77.982145][ T5323] ? rcu_is_watching+0x15/0xb0
[ 77.983917][ T5323] ? apparmor_capable+0x13b/0x1b0
[ 77.985798][ T5323] vfs_get_tree+0x90/0x2b0
[ 77.987489][ T5323] do_new_mount+0x2be/0xb40
[ 77.989121][ T5323] ? __pfx_do_new_mount+0x10/0x10
[ 77.990938][ T5323] __se_sys_mount+0x2d6/0x3c0
[ 77.992680][ T5323] ? __pfx___se_sys_mount+0x10/0x10
[ 77.994384][ T5323] ? exc_page_fault+0x590/0x8b0
[ 77.996120][ T5323] ? __x64_sys_mount+0x20/0xc0
[ 77.997942][ T5323] do_syscall_64+0xf3/0x230
[ 77.999695][ T5323] ? clear_bhb_loop+0x35/0x90
[ 78.001422][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 78.003381][ T5323] RIP: 0033:0x7f372978e54a
[ 78.004884][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 78.011455][ T5323] RSP: 002b:00007f372a662e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 78.014382][ T5323] RAX: ffffffffffffffda RBX: 00007f372a662ef0 RCX: 00007f372978e54a
[ 78.017276][ T5323] RDX: 0000000020000180 RSI: 0000000020000540 RDI: 00007f372a662eb0
[ 78.020035][ T5323] RBP: 0000000020000180 R08: 00007f372a662ef0 R09: 0000000000810000
[ 78.022874][ T5323] R10: 0000000000810000 R11: 0000000000000246 R12: 0000000020000540
[ 78.025521][ T5323] R13: 00007f372a662eb0 R14: 0000000000005985 R15: 0000000020000300
[ 78.028211][ T5323]
[ 78.029519][ T5323] Kernel Offset: disabled
[ 78.031089][ T5323] Rebooting in 86400 seconds..