bcachefs (loop2): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) error reading btree root btree=xattrs level=0: btree_node_read_error, fixing ------------[ cut here ]------------ UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:215:18 shift exponent 251 is too large for 64-bit type 'unsigned long long' CPU: 1 UID: 0 PID: 3335 Comm: syz.2.16 Not tainted 6.12.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x3e/0xe0 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_shift_out_of_bounds+0x248/0x270 lib/ubsan.c:468 __btree_node_pinned+0x105/0x110 fs/bcachefs/btree_cache.c:215 __bch2_btree_node_hash_insert+0x3f5/0x600 fs/bcachefs/btree_cache.c:292 bch2_btree_node_hash_insert+0x37/0x50 fs/bcachefs/btree_cache.c:307 __bch2_btree_root_read fs/bcachefs/btree_io.c:1744 [inline] bch2_btree_root_read+0x1bb/0x2b0 fs/bcachefs/btree_io.c:1772 read_btree_roots+0x16d/0x310 fs/bcachefs/recovery.c:566 bch2_fs_recovery+0xfea/0x1920 fs/bcachefs/recovery.c:890 bch2_fs_start+0x1c9/0x290 fs/bcachefs/super.c:1037 bch2_fs_get_tree+0x2b8/0x660 fs/bcachefs/fs.c:2201 vfs_get_tree+0x24/0xb0 fs/super.c:1814 do_new_mount+0x15a/0x3a0 fs/namespace.c:3507 do_mount fs/namespace.c:3847 [inline] __do_sys_mount fs/namespace.c:4057 [inline] __se_sys_mount+0x148/0x1b0 fs/namespace.c:4034 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x8d/0x190 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2adb7874ca Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f2adc4f7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f2adc4f7ef0 RCX: 00007f2adb7874ca RDX: 0000000020000180 RSI: 0000000020000540 RDI: 00007f2adc4f7eb0 RBP: 0000000020000180 R08: 00007f2adc4f7ef0 R09: 0000000000800000 R10: 0000000000800000 R11: 0000000000000246 R12: 0000000020000540 R13: 00007f2adc4f7eb0 R14: 000000000000596a R15: 00000000200002c0 ---[ end trace ]---