Warning: Permanently added '[localhost]:11031' (ED25519) to the list of known hosts.
executing program
syzkaller login: [ 95.208867][ T5104] loop0: detected capacity change from 0 to 32768
[ 95.320594][ T5104] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 95.327115][ T5104] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 95.331222][ T5104] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.13: inode_has_child_snapshots
[ 95.331222][ T5104] running recovery passes: check_allocations,check_inodes
[ 95.341390][ T5104] syz-executor159: attempt to access beyond end of device
[ 95.341390][ T5104] loop0: rw=6145, sector=1124800395245568, nr_sectors = 10 limit=32768
[ 95.348175][ T5104] bcachefs (loop0): superblock write error: I/O
[ 95.350949][ T5104] bcachefs (loop0): bch2_write_super(): fatal error : Unable to write superblock to sufficient devices (from bch2_fs_recovery)
[ 95.357778][ T5104] bcachefs (loop0): fatal error - emergency read only
[ 95.360452][ T5104] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1
[ 95.360452][ T5104] rw journal devs: loop0
[ 95.372665][ T5104] ------------[ cut here ]------------
[ 95.375109][ T5104] UBSAN: shift-out-of-bounds in fs/bcachefs/alloc_background.h:165:13
[ 95.377942][ T5104] shift exponent 129 is too large for 32-bit type 'unsigned int'
[ 95.382506][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz-executor159 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[ 95.388052][ T5104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 95.391752][ T5104] Call Trace:
[ 95.393043][ T5104]
[ 95.394182][ T5104] dump_stack_lvl+0x241/0x360
[ 95.396030][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10
[ 95.397964][ T5104] ? __pfx__printk+0x10/0x10
[ 95.399697][ T5104] ? bch2_prt_printf+0x559/0x6d0
[ 95.401532][ T5104] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 95.403862][ T5104] bch2_alloc_to_text+0xc79/0xce0
[ 95.405915][ T5104] ? __pfx_bch2_alloc_to_text+0x10/0x10
[ 95.408354][ T5104] ? bch2_bkey_val_to_text+0xf0/0x160
[ 95.410859][ T5104] __bch2_bkey_fsck_err+0x1c8/0x280
[ 95.413006][ T5104] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 95.415138][ T5104] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 95.417218][ T5104] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 95.419480][ T5104] ? __pfx___bch2_bkey_fsck_err+0x10/0x10
[ 95.421551][ T5104] ? bch2_alloc_v4_validate+0x165/0xef0
[ 95.423803][ T5104] bch2_alloc_v4_validate+0x931/0xef0
[ 95.426070][ T5104] ? __pfx_bch2_alloc_v4_validate+0x10/0x10
[ 95.428581][ T5104] ? bch2_bkey_val_validate+0x150/0x230
[ 95.430671][ T5104] bch2_btree_node_read_done+0x3e7e/0x5e90
[ 95.432846][ T5104] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 95.435011][ T5104] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 95.437555][ T5104] ? bch2_bkey_pick_read_device+0x137d/0x1670
[ 95.440765][ T5104] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 95.443850][ T5104] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10
[ 95.446786][ T5104] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0
[ 95.448905][ T5104] btree_node_read_work+0x68b/0x1260
[ 95.450883][ T5104] ? __pfx_btree_node_read_work+0x10/0x10
[ 95.453041][ T5104] ? __bch2_time_stats_update+0x1e0/0x370
[ 95.455169][ T5104] ? __pfx_bch2_latency_acct+0x10/0x10
[ 95.457136][ T5104] ? bio_associate_blkg+0x6c/0x230
[ 95.459125][ T5104] bch2_btree_node_read+0x2433/0x2a10
[ 95.461081][ T5104] ? __pfx_lock_release+0x10/0x10
[ 95.463671][ T5104] ? bch2_trans_unlock+0x346/0x470
[ 95.466677][ T5104] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 95.469409][ T5104] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 95.471916][ T5104] ? bch2_trans_unlock+0x3a6/0x470
[ 95.473757][ T5104] bch2_btree_root_read+0x617/0x7a0
[ 95.475449][ T5104] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 95.477375][ T5104] ? bch2_current_has_btree_trans+0x142/0x180
[ 95.479440][ T5104] read_btree_roots+0x296/0x840
[ 95.481208][ T5104] bch2_fs_recovery+0x2585/0x39c0
[ 95.482972][ T5104] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 95.484768][ T5104] ? __pfx_lock_release+0x10/0x10
[ 95.486582][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 95.489274][ T5104] ? __pfx_lock_release+0x10/0x10
[ 95.491578][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 95.494197][ T5104] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 95.496290][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 95.498563][ T5104] ? llist_reverse_order+0x72/0x90
[ 95.500585][ T5104] bch2_fs_start+0x356/0x5b0
[ 95.502320][ T5104] bch2_fs_get_tree+0xd68/0x1710
[ 95.504057][ T5104] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 95.506020][ T5104] ? generic_parse_monolithic+0x387/0x400
[ 95.508176][ T5104] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 95.510524][ T5104] ? apparmor_capable+0x13b/0x1b0
[ 95.512874][ T5104] vfs_get_tree+0x90/0x2b0
[ 95.514789][ T5104] do_new_mount+0x2be/0xb40
[ 95.516615][ T5104] ? __pfx_do_new_mount+0x10/0x10
[ 95.518763][ T5104] __se_sys_mount+0x2d6/0x3c0
[ 95.520705][ T5104] ? __pfx___se_sys_mount+0x10/0x10
[ 95.522559][ T5104] ? do_syscall_64+0x100/0x230
[ 95.524145][ T5104] ? __x64_sys_mount+0x20/0xc0
[ 95.525878][ T5104] do_syscall_64+0xf3/0x230
[ 95.527608][ T5104] ? clear_bhb_loop+0x35/0x90
[ 95.529407][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.531744][ T5104] RIP: 0033:0x7f5b5fb45dea
[ 95.533494][ T5104] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 95.542021][ T5104] RSP: 002b:00007ffd58ea5898 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 95.545161][ T5104] RAX: ffffffffffffffda RBX: 00007ffd58ea58b0 RCX: 00007f5b5fb45dea
[ 95.548131][ T5104] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007ffd58ea58b0
[ 95.551171][ T5104] RBP: 0000000000000004 R08: 00007ffd58ea58f0 R09: 00000000000058c6
[ 95.554835][ T5104] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 95.558661][ T5104] R13: 00007ffd58ea58f0 R14: 0000000000000003 R15: 0000000001000000
[ 95.561765][ T5104]
[ 95.575491][ T5104] ---[ end trace ]---
[ 95.577335][ T5104] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 95.580495][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz-executor159 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[ 95.584874][ T5104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 95.588912][ T5104] Call Trace:
[ 95.590228][ T5104]
[ 95.591352][ T5104] dump_stack_lvl+0x241/0x360
[ 95.593346][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10
[ 95.595491][ T5104] ? __pfx__printk+0x10/0x10
[ 95.597775][ T5104] ? lockdep_hardirqs_on+0x99/0x150
[ 95.600155][ T5104] ? vscnprintf+0x5d/0x90
[ 95.601894][ T5104] panic+0x349/0x880
[ 95.603454][ T5104] ? check_panic_on_warn+0x21/0xb0
[ 95.605311][ T5104] ? __pfx_panic+0x10/0x10
[ 95.606987][ T5104] ? _printk+0xd5/0x120
[ 95.608523][ T5104] ? __pfx__printk+0x10/0x10
[ 95.610361][ T5104] check_panic_on_warn+0x86/0xb0
[ 95.612369][ T5104] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 95.615114][ T5104] bch2_alloc_to_text+0xc79/0xce0
[ 95.617133][ T5104] ? __pfx_bch2_alloc_to_text+0x10/0x10
[ 95.619300][ T5104] ? bch2_bkey_val_to_text+0xf0/0x160
[ 95.621326][ T5104] __bch2_bkey_fsck_err+0x1c8/0x280
[ 95.623150][ T5104] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 95.625456][ T5104] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 95.627778][ T5104] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 95.630537][ T5104] ? __pfx___bch2_bkey_fsck_err+0x10/0x10
[ 95.632512][ T5104] ? bch2_alloc_v4_validate+0x165/0xef0
[ 95.634597][ T5104] bch2_alloc_v4_validate+0x931/0xef0
[ 95.636781][ T5104] ? __pfx_bch2_alloc_v4_validate+0x10/0x10
[ 95.639119][ T5104] ? bch2_bkey_val_validate+0x150/0x230
[ 95.641397][ T5104] bch2_btree_node_read_done+0x3e7e/0x5e90
[ 95.644080][ T5104] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 95.646334][ T5104] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 95.648555][ T5104] ? bch2_bkey_pick_read_device+0x137d/0x1670
[ 95.650807][ T5104] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 95.652937][ T5104] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10
[ 95.655067][ T5104] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0
[ 95.657560][ T5104] btree_node_read_work+0x68b/0x1260
[ 95.660553][ T5104] ? __pfx_btree_node_read_work+0x10/0x10
[ 95.663675][ T5104] ? __bch2_time_stats_update+0x1e0/0x370
[ 95.666025][ T5104] ? __pfx_bch2_latency_acct+0x10/0x10
[ 95.668026][ T5104] ? bio_associate_blkg+0x6c/0x230
[ 95.669921][ T5104] bch2_btree_node_read+0x2433/0x2a10
[ 95.671923][ T5104] ? __pfx_lock_release+0x10/0x10
[ 95.673981][ T5104] ? bch2_trans_unlock+0x346/0x470
[ 95.675840][ T5104] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 95.678161][ T5104] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 95.681029][ T5104] ? bch2_trans_unlock+0x3a6/0x470
[ 95.683629][ T5104] bch2_btree_root_read+0x617/0x7a0
[ 95.686061][ T5104] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 95.688375][ T5104] ? bch2_current_has_btree_trans+0x142/0x180
[ 95.690622][ T5104] read_btree_roots+0x296/0x840
[ 95.692521][ T5104] bch2_fs_recovery+0x2585/0x39c0
[ 95.694338][ T5104] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 95.696458][ T5104] ? __pfx_lock_release+0x10/0x10
[ 95.699055][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 95.701644][ T5104] ? __pfx_lock_release+0x10/0x10
[ 95.703545][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 95.705643][ T5104] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 95.707719][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 95.709705][ T5104] ? llist_reverse_order+0x72/0x90
[ 95.711705][ T5104] bch2_fs_start+0x356/0x5b0
[ 95.714322][ T5104] bch2_fs_get_tree+0xd68/0x1710
[ 95.716987][ T5104] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 95.719424][ T5104] ? generic_parse_monolithic+0x387/0x400
[ 95.721517][ T5104] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 95.724283][ T5104] ? apparmor_capable+0x13b/0x1b0
[ 95.726214][ T5104] vfs_get_tree+0x90/0x2b0
[ 95.727828][ T5104] do_new_mount+0x2be/0xb40
[ 95.729578][ T5104] ? __pfx_do_new_mount+0x10/0x10
[ 95.731535][ T5104] __se_sys_mount+0x2d6/0x3c0
[ 95.733344][ T5104] ? __pfx___se_sys_mount+0x10/0x10
[ 95.735320][ T5104] ? do_syscall_64+0x100/0x230
[ 95.737078][ T5104] ? __x64_sys_mount+0x20/0xc0
[ 95.739027][ T5104] do_syscall_64+0xf3/0x230
[ 95.740601][ T5104] ? clear_bhb_loop+0x35/0x90
[ 95.742508][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.744611][ T5104] RIP: 0033:0x7f5b5fb45dea
[ 95.746140][ T5104] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 95.754721][ T5104] RSP: 002b:00007ffd58ea5898 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 95.757598][ T5104] RAX: ffffffffffffffda RBX: 00007ffd58ea58b0 RCX: 00007f5b5fb45dea
[ 95.760517][ T5104] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007ffd58ea58b0
[ 95.765017][ T5104] RBP: 0000000000000004 R08: 00007ffd58ea58f0 R09: 00000000000058c6
[ 95.768469][ T5104] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 95.771310][ T5104] R13: 00007ffd58ea58f0 R14: 0000000000000003 R15: 0000000001000000
[ 95.774367][ T5104]
[ 95.775889][ T5104] Kernel Offset: disabled
[ 95.777657][ T5104] Rebooting in 86400 seconds..
VM DIAGNOSIS:
07:48:43 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000032 RBX=ffffffff9a715e60 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002e4de90
R8 =ffffffff854a53fb R9 =1ffff110065ba046 R10=dffffc0000000000 R11=ffffffff854a53b0
R12=dffffc0000000000 R13=ffffffff9a410f1d R14=0000000000000032 R15=00000000000003f8
RIP=ffffffff854a542e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555568080380 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005555626be4e8 CR3=00000000410f4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd58ea5a30 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b5fbc9560 00007f5b5fbbd5d8
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b5fbaeb44 00007f5b5fbc2240
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000