program: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) r0 = gettid() r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000040)) syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f0000002340)={[{@btree_node_prefetch}, {@usrquota}, {@norecovery}, {@fsck}, {@btree_node_prefetch}, {@norecovery}, {@fix_errors={'fix_errors', 0x3d, 'yes'}}, {@inodes_use_key_cache}, {@shared_inode_numbers}, {@fix_errors={'fix_errors', 0x3d, 'ask'}}], [{@dont_measure}]}, 0x1, 0x596a, &(0x7f000000bcc0)="$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") [ 58.713958][ T4674] Bluetooth: hci0: command tx timeout [ 58.803768][ T1348] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.953147][ T1348] usb 5-1: Using ep0 maxpacket: 16 [ 58.958586][ T1348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.962431][ T1348] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 58.966782][ T1348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.971436][ T1348] usb 5-1: config 0 descriptor?? [ 58.980701][ T1348] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 59.407733][ T5323] loop0: detected capacity change from 0 to 32768 [ 59.507446][ T5323] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,usrquota,fsck,fix_errors=ask,norecovery,nojournal_transaction_names [ 59.516896][ T5323] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 59.520216][ T5323] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 59.520216][ T5323] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 59.532006][ T5323] invalid btree id 251 (max 63), fix? [ 59.540493][ T5323] bcachefs (loop0): error validating btree node on loop0 at btree xattrs level 0/0 [ 59.540516][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 59.540526][ T5323] node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686479671623680:50331647 [ 59.556174][ T5323] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 59.561114][ T5323] bcachefs (loop0): flagging btree xattrs lost data [ 59.566120][ T5323] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 59.570736][ T5323] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 59.576495][ T5323] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 59.582840][ T5323] error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 59.589310][ T5323] bcachefs (loop0): error validating btree node at btree alloc level 0/0 [ 59.589328][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 59.589342][ T5323] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 59.622777][ T5323] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 59.622777][ T5323] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 59.657400][ T5323] bcachefs (loop0): error validating btree node on loop0 at btree backpointers level 0/0 [ 59.657474][ T5323] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 59.657485][ T5323] node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 2251799813685248 > 4294967295 [ 59.657494][ T5323] u64s 3 fields 64:0, 64:0, 32:2251799813685248, 0:0, 0:0, 0:0 [ 59.678043][ T5323] bcachefs (loop0): flagging btree backpointers lost data [ 59.680861][ T5323] bcachefs (loop0): running explicit recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 59.687201][ T5323] error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 59.694781][ T5323] ------------[ cut here ]------------ [ 59.697733][ T5323] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:218:18 [ 59.701410][ T5323] shift exponent 251 is too large for 64-bit type 'unsigned long long' [ 59.706137][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 59.706157][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.706165][ T5323] Call Trace: [ 59.706170][ T5323] [ 59.706176][ T5323] dump_stack_lvl+0x241/0x360 [ 59.706333][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.706350][ T5323] ? __pfx__printk+0x10/0x10 [ 59.706369][ T5323] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 59.706430][ T5323] __bch2_btree_node_hash_insert+0x1b32/0x1ba0 [ 59.706453][ T5323] ? __bch2_btree_node_hash_insert+0x20f/0x1ba0 [ 59.706472][ T5323] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 59.706494][ T5323] bch2_btree_node_hash_insert+0x7e/0xc0 [ 59.706511][ T5323] bch2_btree_root_read+0x605/0x7e0 [ 59.706527][ T5323] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 59.706546][ T5323] ? bch2_current_has_btree_trans+0x142/0x180 [ 59.706559][ T5323] read_btree_roots+0x3d7/0xa80 [ 59.706583][ T5323] ? __pfx_read_btree_roots+0x10/0x10 [ 59.706598][ T5323] ? journal_replay_entry_early+0x4d/0xba0 [ 59.706621][ T5323] bch2_fs_recovery+0x28e4/0x3e20 [ 59.706637][ T5323] ? preempt_schedule_common+0x84/0xd0 [ 59.706707][ T5323] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 59.706729][ T5323] ? irqentry_exit+0x63/0x90 [ 59.706743][ T5323] ? lockdep_hardirqs_on+0x9d/0x150 [ 59.706757][ T5323] ? preempt_schedule+0xe4/0xf0 [ 59.706770][ T5323] ? preempt_schedule_common+0x84/0xd0 [ 59.706785][ T5323] ? __lock_acquire+0xad5/0xd80 [ 59.706805][ T5323] ? __lock_acquire+0xad5/0xd80 [ 59.706831][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 59.706846][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 59.706860][ T5323] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 59.706872][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 59.706888][ T5323] ? llist_reverse_order+0x72/0x90 [ 59.706904][ T5323] bch2_fs_start+0x37c/0x620 [ 59.706924][ T5323] bch2_fs_get_tree+0x1270/0x18d0 [ 59.706951][ T5323] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 59.706973][ T5323] ? vfs_parse_monolithic_sep+0x427/0x460 [ 59.706987][ T5323] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 59.706999][ T5323] ? rcu_is_watching+0x15/0xb0 [ 59.707014][ T5323] ? apparmor_capable+0x13b/0x1b0 [ 59.707031][ T5323] vfs_get_tree+0x90/0x2b0 [ 59.707047][ T5323] do_new_mount+0x2cf/0xb70 [ 59.707066][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 59.707087][ T5323] __se_sys_mount+0x38c/0x400 [ 59.707100][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 59.707114][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 59.707125][ T5323] do_syscall_64+0xf3/0x230 [ 59.707141][ T5323] ? clear_bhb_loop+0x45/0xa0 [ 59.707154][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.707166][ T5323] RIP: 0033:0x7f92a4f8e90a [ 59.707177][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.707186][ T5323] RSP: 002b:00007f92a5e87e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.707201][ T5323] RAX: ffffffffffffffda RBX: 00007f92a5e87ef0 RCX: 00007f92a4f8e90a [ 59.707209][ T5323] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007f92a5e87eb0 [ 59.707216][ T5323] RBP: 0000200000000180 R08: 00007f92a5e87ef0 R09: 0000000000800000 [ 59.707225][ T5323] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540 [ 59.707231][ T5323] R13: 00007f92a5e87eb0 R14: 000000000000596a R15: 0000200000002340 [ 59.707246][ T5323] [ 59.707316][ T5323] ---[ end trace ]--- [ 59.859304][ T5323] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 59.862125][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 59.866371][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.870428][ T5323] Call Trace: [ 59.871747][ T5323] [ 59.872952][ T5323] dump_stack_lvl+0x241/0x360 [ 59.874827][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.876823][ T5323] ? __pfx__printk+0x10/0x10 [ 59.878600][ T5323] ? vscnprintf+0x5d/0x90 [ 59.880327][ T5323] panic+0x349/0x880 [ 59.881845][ T5323] ? check_panic_on_warn+0x21/0xb0 [ 59.883873][ T5323] ? __pfx_panic+0x10/0x10 [ 59.885513][ T5323] ? _printk+0xd5/0x120 [ 59.887141][ T5323] ? __pfx__printk+0x10/0x10 [ 59.888905][ T5323] check_panic_on_warn+0x86/0xb0 [ 59.890814][ T5323] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 59.893241][ T5323] __bch2_btree_node_hash_insert+0x1b32/0x1ba0 [ 59.895709][ T5323] ? __bch2_btree_node_hash_insert+0x20f/0x1ba0 [ 59.898081][ T5323] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 59.900605][ T5323] bch2_btree_node_hash_insert+0x7e/0xc0 [ 59.902864][ T5323] bch2_btree_root_read+0x605/0x7e0 [ 59.904932][ T5323] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 59.907209][ T5323] ? bch2_current_has_btree_trans+0x142/0x180 [ 59.909591][ T5323] read_btree_roots+0x3d7/0xa80 [ 59.911505][ T5323] ? __pfx_read_btree_roots+0x10/0x10 [ 59.913672][ T5323] ? journal_replay_entry_early+0x4d/0xba0 [ 59.916033][ T5323] bch2_fs_recovery+0x28e4/0x3e20 [ 59.918012][ T5323] ? preempt_schedule_common+0x84/0xd0 [ 59.920112][ T5323] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 59.922238][ T5323] ? irqentry_exit+0x63/0x90 [ 59.924046][ T5323] ? lockdep_hardirqs_on+0x9d/0x150 [ 59.925939][ T5323] ? preempt_schedule+0xe4/0xf0 [ 59.927850][ T5323] ? preempt_schedule_common+0x84/0xd0 [ 59.929943][ T5323] ? __lock_acquire+0xad5/0xd80 [ 59.931903][ T5323] ? __lock_acquire+0xad5/0xd80 [ 59.933843][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 59.936021][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 59.938178][ T5323] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 59.940353][ T5323] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 59.942513][ T5323] ? llist_reverse_order+0x72/0x90 [ 59.944534][ T5323] bch2_fs_start+0x37c/0x620 [ 59.946321][ T5323] bch2_fs_get_tree+0x1270/0x18d0 [ 59.948216][ T5323] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 59.950242][ T5323] ? vfs_parse_monolithic_sep+0x427/0x460 [ 59.952435][ T5323] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 59.954714][ T5323] ? rcu_is_watching+0x15/0xb0 [ 59.956529][ T5323] ? apparmor_capable+0x13b/0x1b0 [ 59.958450][ T5323] vfs_get_tree+0x90/0x2b0 [ 59.960158][ T5323] do_new_mount+0x2cf/0xb70 [ 59.962043][ T5323] ? __pfx_do_new_mount+0x10/0x10 [ 59.963994][ T5323] __se_sys_mount+0x38c/0x400 [ 59.965795][ T5323] ? __pfx___se_sys_mount+0x10/0x10 [ 59.967803][ T5323] ? __x64_sys_mount+0x20/0xc0 [ 59.969740][ T5323] do_syscall_64+0xf3/0x230 [ 59.971529][ T5323] ? clear_bhb_loop+0x45/0xa0 [ 59.973356][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.975662][ T5323] RIP: 0033:0x7f92a4f8e90a [ 59.977406][ T5323] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.984806][ T5323] RSP: 002b:00007f92a5e87e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.988105][ T5323] RAX: ffffffffffffffda RBX: 00007f92a5e87ef0 RCX: 00007f92a4f8e90a [ 59.991094][ T5323] RDX: 0000200000000180 RSI: 0000200000000540 RDI: 00007f92a5e87eb0 [ 59.993948][ T5323] RBP: 0000200000000180 R08: 00007f92a5e87ef0 R09: 0000000000800000 [ 59.996786][ T5323] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000540 [ 59.999752][ T5323] R13: 00007f92a5e87eb0 R14: 000000000000596a R15: 0000200000002340 [ 60.002616][ T5323] [ 60.004110][ T5323] Kernel Offset: disabled [ 60.005772][ T5323] Rebooting in 86400 seconds..