program: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="059f80f3ea7b119fe93daaa7c808d49a", 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) sendto$packet(r3, &(0x7f0000000080)="020000ffffffba000040000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x64, 0x13, 0x200, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xfffffff7}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xb}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}]}}}]}, 0x64}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000005940), 0x1, 0x58cc, &(0x7f000000b240)="$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") ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) [ 88.205631][ T5106] Bluetooth: hci0: command tx timeout [ 88.849090][ T5122] loop0: detected capacity change from 0 to 32768 [ 89.310920][ T5122] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 89.333822][ T5122] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 89.349848][ T5122] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.13: inode_has_child_snapshots [ 89.349848][ T5122] running recovery passes: check_allocations,check_inodes [ 89.363990][ T5122] syz.0.0: attempt to access beyond end of device [ 89.363990][ T5122] loop0: rw=6145, sector=1124800395245568, nr_sectors = 10 limit=32768 [ 89.373209][ T5122] bcachefs (loop0): superblock write error: I/O [ 89.377332][ T5122] bcachefs (loop0): bch2_write_super(): fatal error : Unable to write superblock to sufficient devices (from bch2_fs_recovery) [ 89.383848][ T5122] bcachefs (loop0): fatal error - emergency read only [ 89.387697][ T5122] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1 [ 89.387697][ T5122] rw journal devs: loop0 [ 89.413650][ T5122] ------------[ cut here ]------------ [ 89.427127][ T5122] UBSAN: shift-out-of-bounds in fs/bcachefs/alloc_background.h:165:13 [ 89.431019][ T5122] shift exponent 129 is too large for 32-bit type 'unsigned int' [ 89.434111][ T5122] CPU: 0 UID: 0 PID: 5122 Comm: syz.0.0 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 89.438235][ T5122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.442896][ T5122] Call Trace: [ 89.444582][ T5122] [ 89.446022][ T5122] dump_stack_lvl+0x241/0x360 [ 89.448048][ T5122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.450102][ T5122] ? __pfx__printk+0x10/0x10 [ 89.452163][ T5122] ? bch2_prt_printf+0x559/0x6d0 [ 89.454433][ T5122] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 89.458399][ T5122] bch2_alloc_to_text+0xc79/0xce0 [ 89.461052][ T5122] ? __pfx_bch2_alloc_to_text+0x10/0x10 [ 89.463050][ T5122] ? bch2_bkey_val_to_text+0xf0/0x160 [ 89.465042][ T5122] __bch2_bkey_fsck_err+0x1c8/0x280 [ 89.466952][ T5122] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 89.469105][ T5122] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 89.471251][ T5122] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 89.473557][ T5122] ? __pfx___bch2_bkey_fsck_err+0x10/0x10 [ 89.476254][ T5122] ? bch2_alloc_v4_validate+0x165/0xef0 [ 89.479282][ T5122] bch2_alloc_v4_validate+0x931/0xef0 [ 89.481946][ T5122] ? __pfx_bch2_alloc_v4_validate+0x10/0x10 [ 89.484305][ T5122] ? bch2_bkey_val_validate+0x150/0x230 [ 89.486514][ T5122] bch2_btree_node_read_done+0x3e7e/0x5e90 [ 89.488899][ T5122] ? bch2_bkey_pick_read_device+0x221/0x1670 [ 89.491399][ T5122] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 89.494194][ T5122] ? bch2_bkey_pick_read_device+0x137d/0x1670 [ 89.497835][ T5122] ? bch2_bkey_pick_read_device+0x221/0x1670 [ 89.500880][ T5122] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10 [ 89.503278][ T5122] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0 [ 89.505584][ T5122] btree_node_read_work+0x68b/0x1260 [ 89.507686][ T5122] ? __pfx_btree_node_read_work+0x10/0x10 [ 89.509928][ T5122] ? __bch2_time_stats_update+0x1e0/0x370 [ 89.512299][ T5122] ? __pfx_bch2_latency_acct+0x10/0x10 [ 89.514687][ T5122] ? bio_associate_blkg+0x6c/0x230 [ 89.517333][ T5122] bch2_btree_node_read+0x2433/0x2a10 [ 89.520137][ T5122] ? __pfx_lock_release+0x10/0x10 [ 89.522328][ T5122] ? bch2_trans_unlock+0x346/0x470 [ 89.524165][ T5122] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 89.526268][ T5122] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 89.528648][ T5122] ? bch2_trans_unlock+0x3a6/0x470 [ 89.530493][ T5122] bch2_btree_root_read+0x617/0x7a0 [ 89.532597][ T5122] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 89.535595][ T5122] ? bch2_current_has_btree_trans+0x142/0x180 [ 89.538590][ T5122] read_btree_roots+0x296/0x840 [ 89.540610][ T5122] bch2_fs_recovery+0x2585/0x39c0 [ 89.542637][ T5122] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 89.544817][ T5122] ? __pfx_lock_release+0x10/0x10 [ 89.546868][ T5122] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 89.549360][ T5122] ? __pfx_lock_release+0x10/0x10 [ 89.551876][ T5122] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 89.554694][ T5122] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 89.557317][ T5122] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 89.559504][ T5122] ? llist_reverse_order+0x72/0x90 [ 89.561561][ T5122] bch2_fs_start+0x356/0x5b0 [ 89.563472][ T5122] bch2_fs_get_tree+0xd68/0x1710 [ 89.565578][ T5122] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 89.567900][ T5122] ? generic_parse_monolithic+0x387/0x400 [ 89.570641][ T5122] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 89.573106][ T5122] ? apparmor_capable+0x13b/0x1b0 [ 89.574945][ T5122] vfs_get_tree+0x90/0x2b0 [ 89.576605][ T5122] do_new_mount+0x2be/0xb40 [ 89.578465][ T5122] ? __pfx_do_new_mount+0x10/0x10 [ 89.580767][ T5122] __se_sys_mount+0x2d6/0x3c0 [ 89.583022][ T5122] ? __pfx___se_sys_mount+0x10/0x10 [ 89.585465][ T5122] ? exc_page_fault+0x590/0x8c0 [ 89.587823][ T5122] ? __x64_sys_mount+0x20/0xc0 [ 89.589782][ T5122] do_syscall_64+0xf3/0x230 [ 89.591609][ T5122] ? clear_bhb_loop+0x35/0x90 [ 89.593437][ T5122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.595754][ T5122] RIP: 0033:0x7f3041f7f79a [ 89.597757][ T5122] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.606271][ T5122] RSP: 002b:00007f3042daee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.609480][ T5122] RAX: ffffffffffffffda RBX: 00007f3042daeef0 RCX: 00007f3041f7f79a [ 89.612959][ T5122] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007f3042daeeb0 [ 89.616866][ T5122] RBP: 00000000200058c0 R08: 00007f3042daeef0 R09: 0000000000000000 [ 89.620338][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 89.623378][ T5122] R13: 00007f3042daeeb0 R14: 00000000000058cc R15: 0000000020005940 [ 89.626539][ T5122] [ 89.903668][ T5122] ---[ end trace ]--- [ 89.905217][ T5122] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 89.908071][ T5122] CPU: 0 UID: 0 PID: 5122 Comm: syz.0.0 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 89.912196][ T5122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.917463][ T5122] Call Trace: [ 89.919069][ T5122] [ 89.920279][ T5122] dump_stack_lvl+0x241/0x360 [ 89.922166][ T5122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.924254][ T5122] ? __pfx__printk+0x10/0x10 [ 89.926085][ T5122] ? lockdep_hardirqs_on+0x99/0x150 [ 89.928281][ T5122] ? vscnprintf+0x5d/0x90 [ 89.930118][ T5122] panic+0x349/0x880 [ 89.932113][ T5122] ? check_panic_on_warn+0x21/0xb0 [ 89.934851][ T5122] ? __pfx_panic+0x10/0x10 [ 89.936950][ T5122] ? _printk+0xd5/0x120 [ 89.938735][ T5122] ? __pfx__printk+0x10/0x10 [ 89.940682][ T5122] check_panic_on_warn+0x86/0xb0 [ 89.942648][ T5122] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 89.945194][ T5122] bch2_alloc_to_text+0xc79/0xce0 [ 89.947220][ T5122] ? __pfx_bch2_alloc_to_text+0x10/0x10 [ 89.949945][ T5122] ? bch2_bkey_val_to_text+0xf0/0x160 [ 89.952506][ T5122] __bch2_bkey_fsck_err+0x1c8/0x280 [ 89.955369][ T5122] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 89.957982][ T5122] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 89.960464][ T5122] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 89.963178][ T5122] ? __pfx___bch2_bkey_fsck_err+0x10/0x10 [ 89.965492][ T5122] ? bch2_alloc_v4_validate+0x165/0xef0 [ 89.967776][ T5122] bch2_alloc_v4_validate+0x931/0xef0 [ 89.969898][ T5122] ? __pfx_bch2_alloc_v4_validate+0x10/0x10 [ 89.972076][ T5122] ? bch2_bkey_val_validate+0x150/0x230 [ 89.974847][ T5122] bch2_btree_node_read_done+0x3e7e/0x5e90 [ 89.978594][ T5122] ? bch2_bkey_pick_read_device+0x221/0x1670 [ 89.981044][ T5122] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 89.983534][ T5122] ? bch2_bkey_pick_read_device+0x137d/0x1670 [ 89.985937][ T5122] ? bch2_bkey_pick_read_device+0x221/0x1670 [ 89.988265][ T5122] ? __pfx_bch2_bkey_pick_read_device+0x10/0x10 [ 89.990766][ T5122] ? bch2_btree_ptr_v2_to_text+0x209/0x2f0 [ 89.993699][ T5122] btree_node_read_work+0x68b/0x1260 [ 89.996548][ T5122] ? __pfx_btree_node_read_work+0x10/0x10 [ 89.999267][ T5122] ? __bch2_time_stats_update+0x1e0/0x370 [ 90.001547][ T5122] ? __pfx_bch2_latency_acct+0x10/0x10 [ 90.003720][ T5122] ? bio_associate_blkg+0x6c/0x230 [ 90.005772][ T5122] bch2_btree_node_read+0x2433/0x2a10 [ 90.008067][ T5122] ? __pfx_lock_release+0x10/0x10 [ 90.010204][ T5122] ? bch2_trans_unlock+0x346/0x470 [ 90.012751][ T5122] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 90.015340][ T5122] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 90.017963][ T5122] ? bch2_trans_unlock+0x3a6/0x470 [ 90.019767][ T5122] bch2_btree_root_read+0x617/0x7a0 [ 90.021675][ T5122] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 90.023770][ T5122] ? bch2_current_has_btree_trans+0x142/0x180 [ 90.026800][ T5122] read_btree_roots+0x296/0x840 [ 90.030018][ T5122] bch2_fs_recovery+0x2585/0x39c0 [ 90.032634][ T5122] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 90.034676][ T5122] ? __pfx_lock_release+0x10/0x10 [ 90.036603][ T5122] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 90.039026][ T5122] ? __pfx_lock_release+0x10/0x10 [ 90.041081][ T5122] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 90.043479][ T5122] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 90.045922][ T5122] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 90.048196][ T5122] ? llist_reverse_order+0x72/0x90 [ 90.050321][ T5122] bch2_fs_start+0x356/0x5b0 [ 90.052298][ T5122] bch2_fs_get_tree+0xd68/0x1710 [ 90.054398][ T5122] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 90.056747][ T5122] ? generic_parse_monolithic+0x387/0x400 [ 90.059106][ T5122] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 90.061328][ T5122] ? apparmor_capable+0x13b/0x1b0 [ 90.063501][ T5122] vfs_get_tree+0x90/0x2b0 [ 90.065706][ T5122] do_new_mount+0x2be/0xb40 [ 90.067839][ T5122] ? __pfx_do_new_mount+0x10/0x10 [ 90.069727][ T5122] __se_sys_mount+0x2d6/0x3c0 [ 90.071633][ T5122] ? __pfx___se_sys_mount+0x10/0x10 [ 90.073713][ T5122] ? exc_page_fault+0x590/0x8c0 [ 90.075860][ T5122] ? __x64_sys_mount+0x20/0xc0 [ 90.077909][ T5122] do_syscall_64+0xf3/0x230 [ 90.079858][ T5122] ? clear_bhb_loop+0x35/0x90 [ 90.082055][ T5122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.084653][ T5122] RIP: 0033:0x7f3041f7f79a [ 90.086445][ T5122] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.094472][ T5122] RSP: 002b:00007f3042daee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.098901][ T5122] RAX: ffffffffffffffda RBX: 00007f3042daeef0 RCX: 00007f3041f7f79a [ 90.102361][ T5122] RDX: 00000000200058c0 RSI: 0000000020000100 RDI: 00007f3042daeeb0 [ 90.105446][ T5122] RBP: 00000000200058c0 R08: 00007f3042daeef0 R09: 0000000000000000 [ 90.109083][ T5122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 90.112194][ T5122] R13: 00007f3042daeeb0 R14: 00000000000058cc R15: 0000000020005940 [ 90.115400][ T5122] [ 90.116865][ T5122] Kernel Offset: disabled [ 90.118747][ T5122] Rebooting in 86400 seconds..