Warning: Permanently added '[localhost]:51493' (ED25519) to the list of known hosts.
executing program
syzkaller login: [ 94.020393][ T5103] loop0: detected capacity change from 0 to 32768
[ 94.146533][ T5103] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 94.166113][ T5103] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 94.169658][ T5103] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.13: inode_has_child_snapshots
[ 94.169658][ T5103] running recovery passes: check_allocations,check_inodes
[ 94.182946][ T5103] syz-executor421: attempt to access beyond end of device
[ 94.182946][ T5103] loop0: rw=6145, sector=1124800395245568, nr_sectors = 10 limit=32768
[ 94.188452][ T5103] bcachefs (loop0): superblock write error: I/O
[ 94.191770][ T5103] bcachefs (loop0): bch2_write_super(): fatal error : Unable to write superblock to sufficient devices (from bch2_fs_recovery)
[ 94.199239][ T5103] bcachefs (loop0): fatal error - emergency read only
[ 94.202221][ T5103] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1
[ 94.202221][ T5103] rw journal devs: loop0
[ 94.214041][ T5103] ------------[ cut here ]------------
[ 94.216311][ T5103] UBSAN: shift-out-of-bounds in fs/bcachefs/alloc_background.h:165:13
[ 94.219607][ T5103] shift exponent 129 is too large for 32-bit type 'unsigned int'
[ 94.223872][ T5103] CPU: 0 UID: 0 PID: 5103 Comm: syz-executor421 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[ 94.230598][ T5103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 94.234640][ T5103] Call Trace:
[ 94.235918][ T5103]
[ 94.237046][ T5103] dump_stack_lvl+0x241/0x360
[ 94.239352][ T5103] ? __pfx_dump_stack_lvl+0x10/0x10
[ 94.241408][ T5103] ? __pfx__printk+0x10/0x10
[ 94.243586][ T5103] ? bch2_prt_printf+0x559/0x6d0
[ 94.245949][ T5103] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 94.248498][ T5103] bch2_alloc_to_text+0xc79/0xce0
[ 94.250516][ T5103] ? __pfx_bch2_alloc_to_text+0x10/0x10
[ 94.252551][ T5103] ? bch2_bkey_val_to_text+0xf0/0x160
[ 94.254714][ T5103] __bch2_bkey_fsck_err+0x1c8/0x280
[ 94.256907][ T5103] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 94.259627][ T5103] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 94.262193][ T5103] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 94.264926][ T5103] ? __pfx___bch2_bkey_fsck_err+0x10/0x10
[ 94.267241][ T5103] ? bch2_alloc_v4_validate+0x165/0xef0
[ 94.269360][ T5103] bch2_alloc_v4_validate+0x931/0xef0
[ 94.271619][ T5103] ? __pfx_bch2_alloc_v4_validate+0x10/0x10
[ 94.274252][ T5103] ? bch2_bkey_val_validate+0x150/0x230
[ 94.277286][ T5103] bch2_btree_node_read_done+0x3e7e/0x5e90
[ 94.280282][ T5103] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 94.282664][ T5103] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 94.285012][ T5103] ? bch2_bkey_pick_read_device+0x137d/0x1670
[ 94.287141][ T5103] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 94.289529][ T5103] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10
[ 94.292027][ T5103] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0
[ 94.294981][ T5103] btree_node_read_work+0x68b/0x1260
[ 94.297428][ T5103] ? __pfx_btree_node_read_work+0x10/0x10
[ 94.299555][ T5103] ? __bch2_time_stats_update+0x1e0/0x370
[ 94.301849][ T5103] ? __pfx_bch2_latency_acct+0x10/0x10
[ 94.303919][ T5103] ? bio_associate_blkg+0x6c/0x230
[ 94.306070][ T5103] bch2_btree_node_read+0x2433/0x2a10
[ 94.308274][ T5103] ? __pfx_lock_release+0x10/0x10
[ 94.310861][ T5103] ? bch2_trans_unlock+0x346/0x470
[ 94.313300][ T5103] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 94.315720][ T5103] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 94.318147][ T5103] ? bch2_trans_unlock+0x3a6/0x470
[ 94.320007][ T5103] bch2_btree_root_read+0x617/0x7a0
[ 94.322136][ T5103] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 94.324441][ T5103] ? bch2_current_has_btree_trans+0x142/0x180
[ 94.327029][ T5103] read_btree_roots+0x296/0x840
[ 94.329228][ T5103] bch2_fs_recovery+0x2585/0x39c0
[ 94.331799][ T5103] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 94.334429][ T5103] ? __pfx_lock_release+0x10/0x10
[ 94.336442][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 94.338775][ T5103] ? __pfx_lock_release+0x10/0x10
[ 94.340748][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 94.342955][ T5103] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 94.345514][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 94.348819][ T5103] ? llist_reverse_order+0x72/0x90
[ 94.351474][ T5103] bch2_fs_start+0x356/0x5b0
[ 94.353464][ T5103] bch2_fs_get_tree+0xd68/0x1710
[ 94.355159][ T5103] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 94.357558][ T5103] ? generic_parse_monolithic+0x387/0x400
[ 94.360682][ T5103] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 94.363607][ T5103] ? apparmor_capable+0x13b/0x1b0
[ 94.365849][ T5103] vfs_get_tree+0x90/0x2b0
[ 94.367581][ T5103] do_new_mount+0x2be/0xb40
[ 94.369425][ T5103] ? __pfx_do_new_mount+0x10/0x10
[ 94.371220][ T5103] __se_sys_mount+0x2d6/0x3c0
[ 94.372937][ T5103] ? __pfx___se_sys_mount+0x10/0x10
[ 94.374744][ T5103] ? do_syscall_64+0x100/0x230
[ 94.376427][ T5103] ? __x64_sys_mount+0x20/0xc0
[ 94.378343][ T5103] do_syscall_64+0xf3/0x230
[ 94.380052][ T5103] ? clear_bhb_loop+0x35/0x90
[ 94.381940][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.384347][ T5103] RIP: 0033:0x7f57dbc21dea
[ 94.386311][ T5103] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 94.394806][ T5103] RSP: 002b:00007fff6d4f5788 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 94.399523][ T5103] RAX: ffffffffffffffda RBX: 00007fff6d4f57a0 RCX: 00007f57dbc21dea
[ 94.403731][ T5103] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007fff6d4f57a0
[ 94.406805][ T5103] RBP: 0000000000000004 R08: 00007fff6d4f57e0 R09: 00000000000058c6
[ 94.409625][ T5103] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 94.412595][ T5103] R13: 00007fff6d4f57e0 R14: 0000000000000003 R15: 0000000001000000
[ 94.415551][ T5103]
[ 94.420758][ T5103] ---[ end trace ]---
[ 94.422579][ T5103] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 94.426116][ T5103] CPU: 0 UID: 0 PID: 5103 Comm: syz-executor421 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[ 94.430544][ T5103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 94.434544][ T5103] Call Trace:
[ 94.435856][ T5103]
[ 94.436880][ T5103] dump_stack_lvl+0x241/0x360
[ 94.438842][ T5103] ? __pfx_dump_stack_lvl+0x10/0x10
[ 94.440814][ T5103] ? __pfx__printk+0x10/0x10
[ 94.443280][ T5103] ? lockdep_hardirqs_on+0x99/0x150
[ 94.446074][ T5103] ? vscnprintf+0x5d/0x90
[ 94.447613][ T5103] panic+0x349/0x880
[ 94.448993][ T5103] ? check_panic_on_warn+0x21/0xb0
[ 94.450710][ T5103] ? __pfx_panic+0x10/0x10
[ 94.452392][ T5103] ? _printk+0xd5/0x120
[ 94.453716][ T5103] ? __pfx__printk+0x10/0x10
[ 94.455179][ T5103] check_panic_on_warn+0x86/0xb0
[ 94.456989][ T5103] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 94.459295][ T5103] bch2_alloc_to_text+0xc79/0xce0
[ 94.461765][ T5103] ? __pfx_bch2_alloc_to_text+0x10/0x10
[ 94.464314][ T5103] ? bch2_bkey_val_to_text+0xf0/0x160
[ 94.466305][ T5103] __bch2_bkey_fsck_err+0x1c8/0x280
[ 94.467928][ T5103] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 94.469890][ T5103] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 94.471954][ T5103] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 94.474253][ T5103] ? __pfx___bch2_bkey_fsck_err+0x10/0x10
[ 94.476427][ T5103] ? bch2_alloc_v4_validate+0x165/0xef0
[ 94.478559][ T5103] bch2_alloc_v4_validate+0x931/0xef0
[ 94.481531][ T5103] ? __pfx_bch2_alloc_v4_validate+0x10/0x10
[ 94.484707][ T5103] ? bch2_bkey_val_validate+0x150/0x230
[ 94.486754][ T5103] bch2_btree_node_read_done+0x3e7e/0x5e90
[ 94.488776][ T5103] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 94.490934][ T5103] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 94.492983][ T5103] ? bch2_bkey_pick_read_device+0x137d/0x1670
[ 94.495038][ T5103] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 94.497400][ T5103] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10
[ 94.500506][ T5103] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0
[ 94.503259][ T5103] btree_node_read_work+0x68b/0x1260
[ 94.505343][ T5103] ? __pfx_btree_node_read_work+0x10/0x10
[ 94.507365][ T5103] ? __bch2_time_stats_update+0x1e0/0x370
[ 94.509388][ T5103] ? __pfx_bch2_latency_acct+0x10/0x10
[ 94.511389][ T5103] ? bio_associate_blkg+0x6c/0x230
[ 94.513427][ T5103] bch2_btree_node_read+0x2433/0x2a10
[ 94.515598][ T5103] ? __pfx_lock_release+0x10/0x10
[ 94.518267][ T5103] ? bch2_trans_unlock+0x346/0x470
[ 94.521216][ T5103] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 94.523737][ T5103] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 94.526066][ T5103] ? bch2_trans_unlock+0x3a6/0x470
[ 94.527750][ T5103] bch2_btree_root_read+0x617/0x7a0
[ 94.529778][ T5103] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 94.531876][ T5103] ? bch2_current_has_btree_trans+0x142/0x180
[ 94.533979][ T5103] read_btree_roots+0x296/0x840
[ 94.535662][ T5103] bch2_fs_recovery+0x2585/0x39c0
[ 94.537782][ T5103] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 94.540667][ T5103] ? __pfx_lock_release+0x10/0x10
[ 94.542959][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 94.545017][ T5103] ? __pfx_lock_release+0x10/0x10
[ 94.546959][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 94.548978][ T5103] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 94.551138][ T5103] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 94.552998][ T5103] ? llist_reverse_order+0x72/0x90
[ 94.554714][ T5103] bch2_fs_start+0x356/0x5b0
[ 94.556231][ T5103] bch2_fs_get_tree+0xd68/0x1710
[ 94.557905][ T5103] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 94.559903][ T5103] ? generic_parse_monolithic+0x387/0x400
[ 94.562115][ T5103] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 94.564423][ T5103] ? apparmor_capable+0x13b/0x1b0
[ 94.566735][ T5103] vfs_get_tree+0x90/0x2b0
[ 94.568462][ T5103] do_new_mount+0x2be/0xb40
[ 94.570415][ T5103] ? __pfx_do_new_mount+0x10/0x10
[ 94.572496][ T5103] __se_sys_mount+0x2d6/0x3c0
[ 94.574579][ T5103] ? __pfx___se_sys_mount+0x10/0x10
[ 94.576640][ T5103] ? do_syscall_64+0x100/0x230
[ 94.578775][ T5103] ? __x64_sys_mount+0x20/0xc0
[ 94.580785][ T5103] do_syscall_64+0xf3/0x230
[ 94.582821][ T5103] ? clear_bhb_loop+0x35/0x90
[ 94.584698][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.586876][ T5103] RIP: 0033:0x7f57dbc21dea
[ 94.588499][ T5103] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 94.598769][ T5103] RSP: 002b:00007fff6d4f5788 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 94.601831][ T5103] RAX: ffffffffffffffda RBX: 00007fff6d4f57a0 RCX: 00007f57dbc21dea
[ 94.604787][ T5103] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007fff6d4f57a0
[ 94.607690][ T5103] RBP: 0000000000000004 R08: 00007fff6d4f57e0 R09: 00000000000058c6
[ 94.610735][ T5103] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 94.614067][ T5103] R13: 00007fff6d4f57e0 R14: 0000000000000003 R15: 0000000001000000
[ 94.618249][ T5103]
[ 94.619883][ T5103] Kernel Offset: disabled
[ 94.621661][ T5103] Rebooting in 86400 seconds..
VM DIAGNOSIS:
07:13:38 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000067 RBX=ffffffff9a715e60 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002c0de90
R8 =ffffffff854a53fb R9 =1ffff11003dcd046 R10=dffffc0000000000 R11=ffffffff854a53b0
R12=dffffc0000000000 R13=ffffffff9a410f15 R14=0000000000000067 R15=00000000000003f8
RIP=ffffffff854a542e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555571f3380 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fde5967e748 CR3=0000000012006000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000020000001 Opmask01=0000000000000000 Opmask02=0000000000000010 Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2e07c850 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333c003120646565 6e202c3020657661 68203a656c62616c 6961766120736500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336003120646565 6420263020657661 6220306566626166 6361766120736500
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6c6c616620000a 6e2064656e655f61 636168202c27313d 636961616f5f6c61
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020573330200000 2020573235362036 3124342020202020 34363600655f6520
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a57393a3b3f5e 2a5157323f3c333c 3b243e332a2a2a51 343c3600797e6562
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5566666b7e790a00 796f6e6564635561 696f626926796465 637e6b696566666b
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000