Warning: Permanently added '[localhost]:31125' (ED25519) to the list of known hosts.
executing program
syzkaller login: [ 92.443546][ T5104] loop0: detected capacity change from 0 to 32768
[ 92.580614][ T5104] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 92.594971][ T5104] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 92.604587][ T5104] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.13: inode_has_child_snapshots
[ 92.604587][ T5104] running recovery passes: check_allocations,check_inodes
[ 92.625176][ T5104] syz-executor159: attempt to access beyond end of device
[ 92.625176][ T5104] loop0: rw=6145, sector=1124800395245568, nr_sectors = 10 limit=32768
[ 92.631525][ T5104] bcachefs (loop0): superblock write error: I/O
[ 92.634959][ T5104] bcachefs (loop0): bch2_write_super(): fatal error : Unable to write superblock to sufficient devices (from bch2_fs_recovery)
[ 92.643140][ T5104] bcachefs (loop0): fatal error - emergency read only
[ 92.646546][ T5104] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1
[ 92.646546][ T5104] rw journal devs: loop0
[ 92.661094][ T5104] ------------[ cut here ]------------
[ 92.663048][ T5104] UBSAN: shift-out-of-bounds in fs/bcachefs/alloc_background.h:165:13
[ 92.666155][ T5104] shift exponent 129 is too large for 32-bit type 'unsigned int'
[ 92.669757][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz-executor159 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[ 92.673771][ T5104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 92.678712][ T5104] Call Trace:
[ 92.680098][ T5104]
[ 92.681362][ T5104] dump_stack_lvl+0x241/0x360
[ 92.683387][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10
[ 92.685667][ T5104] ? __pfx__printk+0x10/0x10
[ 92.687671][ T5104] ? bch2_prt_printf+0x559/0x6d0
[ 92.689648][ T5104] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 92.692054][ T5104] bch2_alloc_to_text+0xc79/0xce0
[ 92.694004][ T5104] ? __pfx_bch2_alloc_to_text+0x10/0x10
[ 92.696369][ T5104] ? bch2_bkey_val_to_text+0xf0/0x160
[ 92.699256][ T5104] __bch2_bkey_fsck_err+0x1c8/0x280
[ 92.701827][ T5104] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 92.704091][ T5104] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 92.706299][ T5104] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 92.709067][ T5104] ? __pfx___bch2_bkey_fsck_err+0x10/0x10
[ 92.711442][ T5104] ? bch2_alloc_v4_validate+0x165/0xef0
[ 92.713768][ T5104] bch2_alloc_v4_validate+0x931/0xef0
[ 92.715999][ T5104] ? __pfx_bch2_alloc_v4_validate+0x10/0x10
[ 92.718418][ T5104] ? bch2_bkey_val_validate+0x150/0x230
[ 92.720701][ T5104] bch2_btree_node_read_done+0x3e7e/0x5e90
[ 92.723082][ T5104] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 92.725579][ T5104] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 92.728322][ T5104] ? bch2_bkey_pick_read_device+0x137d/0x1670
[ 92.730977][ T5104] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 92.733366][ T5104] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10
[ 92.735698][ T5104] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0
[ 92.737950][ T5104] btree_node_read_work+0x68b/0x1260
[ 92.739987][ T5104] ? __pfx_btree_node_read_work+0x10/0x10
[ 92.742764][ T5104] ? __bch2_time_stats_update+0x1e0/0x370
[ 92.746682][ T5104] ? __pfx_bch2_latency_acct+0x10/0x10
[ 92.749133][ T5104] ? bio_associate_blkg+0x6c/0x230
[ 92.751147][ T5104] bch2_btree_node_read+0x2433/0x2a10
[ 92.753113][ T5104] ? __pfx_lock_release+0x10/0x10
[ 92.755002][ T5104] ? bch2_trans_unlock+0x346/0x470
[ 92.756951][ T5104] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 92.759145][ T5104] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 92.761656][ T5104] ? bch2_trans_unlock+0x3a6/0x470
[ 92.763640][ T5104] bch2_btree_root_read+0x617/0x7a0
[ 92.765948][ T5104] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 92.768811][ T5104] ? bch2_current_has_btree_trans+0x142/0x180
[ 92.771601][ T5104] read_btree_roots+0x296/0x840
[ 92.773454][ T5104] bch2_fs_recovery+0x2585/0x39c0
[ 92.775362][ T5104] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 92.777414][ T5104] ? __pfx_lock_release+0x10/0x10
[ 92.779293][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 92.781570][ T5104] ? __pfx_lock_release+0x10/0x10
[ 92.784035][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 92.786938][ T5104] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 92.789304][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 92.791485][ T5104] ? llist_reverse_order+0x72/0x90
[ 92.793452][ T5104] bch2_fs_start+0x356/0x5b0
[ 92.795213][ T5104] bch2_fs_get_tree+0xd68/0x1710
[ 92.797120][ T5104] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 92.799281][ T5104] ? generic_parse_monolithic+0x387/0x400
[ 92.801915][ T5104] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 92.804803][ T5104] ? apparmor_capable+0x13b/0x1b0
[ 92.807187][ T5104] vfs_get_tree+0x90/0x2b0
[ 92.809304][ T5104] do_new_mount+0x2be/0xb40
[ 92.811048][ T5104] ? __pfx_do_new_mount+0x10/0x10
[ 92.812976][ T5104] __se_sys_mount+0x2d6/0x3c0
[ 92.814778][ T5104] ? __pfx___se_sys_mount+0x10/0x10
[ 92.816739][ T5104] ? do_syscall_64+0x100/0x230
[ 92.818573][ T5104] ? __x64_sys_mount+0x20/0xc0
[ 92.820407][ T5104] do_syscall_64+0xf3/0x230
[ 92.822085][ T5104] ? clear_bhb_loop+0x35/0x90
[ 92.824109][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.826928][ T5104] RIP: 0033:0x7f7b61a11dea
[ 92.829176][ T5104] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 92.836578][ T5104] RSP: 002b:00007ffff7f9a888 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 92.839682][ T5104] RAX: ffffffffffffffda RBX: 00007ffff7f9a8a0 RCX: 00007f7b61a11dea
[ 92.843424][ T5104] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007ffff7f9a8a0
[ 92.847457][ T5104] RBP: 0000000000000004 R08: 00007ffff7f9a8e0 R09: 00000000000058c6
[ 92.850742][ T5104] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 92.853730][ T5104] R13: 00007ffff7f9a8e0 R14: 0000000000000003 R15: 0000000001000000
[ 92.856668][ T5104]
[ 92.875194][ T5104] ---[ end trace ]---
[ 92.876946][ T5104] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 92.879680][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz-executor159 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0
[ 92.883644][ T5104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 92.887721][ T5104] Call Trace:
[ 92.889273][ T5104]
[ 92.890815][ T5104] dump_stack_lvl+0x241/0x360
[ 92.892902][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10
[ 92.895118][ T5104] ? __pfx__printk+0x10/0x10
[ 92.896809][ T5104] ? lockdep_hardirqs_on+0x99/0x150
[ 92.898736][ T5104] ? vscnprintf+0x5d/0x90
[ 92.900347][ T5104] panic+0x349/0x880
[ 92.901762][ T5104] ? check_panic_on_warn+0x21/0xb0
[ 92.903607][ T5104] ? __pfx_panic+0x10/0x10
[ 92.905340][ T5104] ? _printk+0xd5/0x120
[ 92.906996][ T5104] ? __pfx__printk+0x10/0x10
[ 92.908872][ T5104] check_panic_on_warn+0x86/0xb0
[ 92.911197][ T5104] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 92.913931][ T5104] bch2_alloc_to_text+0xc79/0xce0
[ 92.915942][ T5104] ? __pfx_bch2_alloc_to_text+0x10/0x10
[ 92.918064][ T5104] ? bch2_bkey_val_to_text+0xf0/0x160
[ 92.920071][ T5104] __bch2_bkey_fsck_err+0x1c8/0x280
[ 92.922150][ T5104] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 92.924699][ T5104] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 92.927248][ T5104] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 92.929901][ T5104] ? __pfx___bch2_bkey_fsck_err+0x10/0x10
[ 92.932016][ T5104] ? bch2_alloc_v4_validate+0x165/0xef0
[ 92.934147][ T5104] bch2_alloc_v4_validate+0x931/0xef0
[ 92.936159][ T5104] ? __pfx_bch2_alloc_v4_validate+0x10/0x10
[ 92.938482][ T5104] ? bch2_bkey_val_validate+0x150/0x230
[ 92.941698][ T5104] bch2_btree_node_read_done+0x3e7e/0x5e90
[ 92.944870][ T5104] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 92.947693][ T5104] ? __pfx_bch2_btree_node_read_done+0x10/0x10
[ 92.950234][ T5104] ? bch2_bkey_pick_read_device+0x137d/0x1670
[ 92.952466][ T5104] ? bch2_bkey_pick_read_device+0x221/0x1670
[ 92.954677][ T5104] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10
[ 92.956973][ T5104] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0
[ 92.959117][ T5104] btree_node_read_work+0x68b/0x1260
[ 92.961070][ T5104] ? __pfx_btree_node_read_work+0x10/0x10
[ 92.963182][ T5104] ? __bch2_time_stats_update+0x1e0/0x370
[ 92.965242][ T5104] ? __pfx_bch2_latency_acct+0x10/0x10
[ 92.967580][ T5104] ? bio_associate_blkg+0x6c/0x230
[ 92.970723][ T5104] bch2_btree_node_read+0x2433/0x2a10
[ 92.973183][ T5104] ? __pfx_lock_release+0x10/0x10
[ 92.975105][ T5104] ? bch2_trans_unlock+0x346/0x470
[ 92.976965][ T5104] ? __pfx_bch2_btree_node_read+0x10/0x10
[ 92.979042][ T5104] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10
[ 92.981433][ T5104] ? bch2_trans_unlock+0x3a6/0x470
[ 92.983337][ T5104] bch2_btree_root_read+0x617/0x7a0
[ 92.985290][ T5104] ? __pfx_bch2_btree_root_read+0x10/0x10
[ 92.987550][ T5104] ? bch2_current_has_btree_trans+0x142/0x180
[ 92.990951][ T5104] read_btree_roots+0x296/0x840
[ 92.993828][ T5104] bch2_fs_recovery+0x2585/0x39c0
[ 92.995683][ T5104] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 92.997611][ T5104] ? __pfx_lock_release+0x10/0x10
[ 92.999399][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 93.001520][ T5104] ? __pfx_lock_release+0x10/0x10
[ 93.003378][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 93.005431][ T5104] ? bch2_get_next_online_dev+0x4b9/0x4f0
[ 93.007655][ T5104] ? bch2_get_next_online_dev+0x2b/0x4f0
[ 93.011488][ T5104] ? llist_reverse_order+0x72/0x90
[ 93.014566][ T5104] bch2_fs_start+0x356/0x5b0
[ 93.016313][ T5104] bch2_fs_get_tree+0xd68/0x1710
[ 93.018164][ T5104] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 93.020071][ T5104] ? generic_parse_monolithic+0x387/0x400
[ 93.022125][ T5104] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 93.024076][ T5104] ? apparmor_capable+0x13b/0x1b0
[ 93.025924][ T5104] vfs_get_tree+0x90/0x2b0
[ 93.027565][ T5104] do_new_mount+0x2be/0xb40
[ 93.029416][ T5104] ? __pfx_do_new_mount+0x10/0x10
[ 93.032456][ T5104] __se_sys_mount+0x2d6/0x3c0
[ 93.035214][ T5104] ? __pfx___se_sys_mount+0x10/0x10
[ 93.037487][ T5104] ? do_syscall_64+0x100/0x230
[ 93.039261][ T5104] ? __x64_sys_mount+0x20/0xc0
[ 93.041004][ T5104] do_syscall_64+0xf3/0x230
[ 93.042683][ T5104] ? clear_bhb_loop+0x35/0x90
[ 93.044383][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.046480][ T5104] RIP: 0033:0x7f7b61a11dea
[ 93.048067][ T5104] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 93.057126][ T5104] RSP: 002b:00007ffff7f9a888 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 93.060161][ T5104] RAX: ffffffffffffffda RBX: 00007ffff7f9a8a0 RCX: 00007f7b61a11dea
[ 93.063055][ T5104] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007ffff7f9a8a0
[ 93.066175][ T5104] RBP: 0000000000000004 R08: 00007ffff7f9a8e0 R09: 00000000000058c6
[ 93.069740][ T5104] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 93.072948][ T5104] R13: 00007ffff7f9a8e0 R14: 0000000000000003 R15: 0000000001000000
[ 93.075861][ T5104]
[ 93.077546][ T5104] Kernel Offset: disabled
[ 93.079294][ T5104] Rebooting in 86400 seconds..
VM DIAGNOSIS:
08:31:44 Registers:
info registers vcpu 0
CPU#0
RAX=000000000000002e RBX=ffffffff9a715e60 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002c0dd50
R8 =ffffffff854a53fb R9 =1ffff11003d60046 R10=dffffc0000000000 R11=ffffffff854a53b0
R12=dffffc0000000000 R13=ffffffff9a410f35 R14=000000000000002e R15=00000000000003f8
RIP=ffffffff854a542e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557846d380 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000055e1f66420d0 CR3=00000000121ea000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000440401 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff7f9aa20 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b61a95560 00007f7b61a895d8
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7b61a7ab44 00007f7b61a8e240
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d73726f7272 6500747865003036 36396f7369007265 6c6c616b7a797300
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40571856574a5757 4000515d40001513 131c4a564c005740 4949444e5f5c5600
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000