./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2315444330
<...>
Warning: Permanently added '10.128.10.50' (ED25519) to the list of known hosts.
execve("./syz-executor2315444330", ["./syz-executor2315444330"], 0x7fff504dbcd0 /* 10 vars */) = 0
brk(NULL) = 0x55558eceb000
brk(0x55558ecebd00) = 0x55558ecebd00
arch_prctl(ARCH_SET_FS, 0x55558eceb380) = 0
set_tid_address(0x55558eceb650) = 5076
set_robust_list(0x55558eceb660, 24) = 0
rseq(0x55558ecebca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2315444330", 4096) = 28
getrandom("\x15\x36\x6f\x11\x04\x21\x9b\x8d", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55558ecebd00
brk(0x55558ed0cd00) = 0x55558ed0cd00
brk(0x55558ed0d000) = 0x55558ed0d000
mprotect(0x7fd9651c7000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd95cc00000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fd95cc00000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 73.308546][ T5076] loop0: detected capacity change from 0 to 32768
[ 73.347721][ T5076] ------------[ cut here ]------------
[ 73.353373][ T5076] UBSAN: shift-out-of-bounds in fs/bcachefs/replicas.c:1010:20
[ 73.361537][ T5076] shift exponent 155 is too large for 32-bit type 'int'
[ 73.369407][ T5076] CPU: 1 PID: 5076 Comm: syz-executor231 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0
[ 73.379868][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 73.390223][ T5076] Call Trace:
[ 73.393513][ T5076]
[ 73.396453][ T5076] dump_stack_lvl+0x241/0x360
[ 73.401184][ T5076] ? __pfx_dump_stack_lvl+0x10/0x10
[ 73.406414][ T5076] ? __pfx__printk+0x10/0x10
[ 73.411047][ T5076] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 73.417051][ T5076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 73.423447][ T5076] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 73.429921][ T5076] bch2_sb_dev_has_data+0x22a/0x5f0
[ 73.435149][ T5076] member_to_text+0xcb/0x1030
[ 73.439875][ T5076] ? bch2_prt_printf+0x32a/0x610
[ 73.444834][ T5076] ? bch2_sb_validate+0x9b6/0xe10
[ 73.449878][ T5076] ? __bch2_read_super+0xc9a/0x1460
[ 73.455077][ T5076] ? bch2_fs_open+0x246/0xdf0
[ 73.459773][ T5076] ? bch2_mount+0x71d/0x1320
[ 73.464367][ T5076] ? put_dec_trunc8+0x1f1/0x330
[ 73.469245][ T5076] ? __pfx_member_to_text+0x10/0x10
[ 73.474464][ T5076] ? __pfx_format_decode+0x10/0x10
[ 73.479590][ T5076] ? vsnprintf+0x948/0x1da0
[ 73.484129][ T5076] ? __asan_memcpy+0x40/0x70
[ 73.488732][ T5076] ? vsnprintf+0x1ccd/0x1da0
[ 73.493334][ T5076] ? bch2_sb_members_v1_to_text+0x161/0x2f0
[ 73.499259][ T5076] bch2_sb_members_v1_to_text+0x1aa/0x2f0
[ 73.505012][ T5076] ? bch2_prt_printf+0x4eb/0x610
[ 73.509974][ T5076] ? __pfx_bch2_sb_members_v1_to_text+0x10/0x10
[ 73.516246][ T5076] ? bch2_printbuf_tabstop_push+0xc9/0x200
[ 73.522076][ T5076] ? bch2_sb_field_to_text+0x187/0x250
[ 73.527558][ T5076] bch2_sb_field_validate+0x1f7/0x2d0
[ 73.532953][ T5076] ? __pfx_bch2_sb_field_validate+0x10/0x10
[ 73.538865][ T5076] ? submit_bio+0x2a2/0x3c0
[ 73.543385][ T5076] ? bch2_sb_compatible+0x85c/0x3bd0
[ 73.548682][ T5076] ? blk_status_to_errno+0x22/0x80
[ 73.553807][ T5076] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80
[ 73.560230][ T5076] ? bch2_opt_validate+0x2ca/0x300
[ 73.565358][ T5076] bch2_sb_validate+0x9b6/0xe10
[ 73.570277][ T5076] ? __pfx_bch2_sb_validate+0x10/0x10
[ 73.575663][ T5076] ? read_one_super+0xe94/0x3400
[ 73.580618][ T5076] ? bch2_sb_realloc+0x3cd/0x660
[ 73.585583][ T5076] ? kfree+0x4e/0x3b0
[ 73.589617][ T5076] ? bio_init+0x11e/0x250
[ 73.593980][ T5076] ? __pfx_read_one_super+0x10/0x10
[ 73.599191][ T5076] ? bch2_sb_realloc+0x424/0x660
[ 73.604144][ T5076] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 73.609441][ T5076] ? bdev_file_open_by_path+0x37e/0x430
[ 73.615008][ T5076] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 73.620931][ T5076] ? __bch2_read_super+0x29f/0x1460
[ 73.626247][ T5076] ? __asan_memcpy+0x40/0x70
[ 73.630877][ T5076] __bch2_read_super+0xc9a/0x1460
[ 73.635951][ T5076] ? __pfx___bch2_read_super+0x10/0x10
[ 73.641429][ T5076] ? kvmalloc_node+0x72/0x190
[ 73.646157][ T5076] ? rcu_is_watching+0x15/0xb0
[ 73.650965][ T5076] ? trace_kmalloc+0x1f/0xd0
[ 73.655573][ T5076] ? __kmalloc_node+0x270/0x4f0
[ 73.660447][ T5076] ? rcu_is_watching+0x15/0xb0
[ 73.665228][ T5076] ? __bch2_darray_resize+0x13e/0x1e0
[ 73.670726][ T5076] ? __bch2_darray_resize+0x13e/0x1e0
[ 73.676120][ T5076] bch2_fs_open+0x246/0xdf0
[ 73.680647][ T5076] ? kasan_save_track+0x51/0x80
[ 73.685539][ T5076] ? kasan_save_track+0x3f/0x80
[ 73.690424][ T5076] ? kasan_save_free_info+0x40/0x50
[ 73.695669][ T5076] ? poison_slab_object+0xa6/0xe0
[ 73.700730][ T5076] ? __kasan_slab_free+0x37/0x60
[ 73.705695][ T5076] ? kfree+0x153/0x3b0
[ 73.709800][ T5076] ? sget+0x2b8/0x620
[ 73.713796][ T5076] ? bch2_mount+0x652/0x1320
[ 73.718400][ T5076] ? legacy_get_tree+0xee/0x190
[ 73.723264][ T5076] ? vfs_get_tree+0x90/0x2a0
[ 73.727871][ T5076] ? do_new_mount+0x2be/0xb40
[ 73.732560][ T5076] ? __se_sys_mount+0x2d9/0x3c0
[ 73.737440][ T5076] ? do_syscall_64+0xf5/0x240
[ 73.742136][ T5076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.748230][ T5076] ? __pfx_bch2_fs_open+0x10/0x10
[ 73.753349][ T5076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 73.759752][ T5076] ? __pfx_bch2_test_super+0x10/0x10
[ 73.765075][ T5076] ? sget+0x2b8/0x620
[ 73.769080][ T5076] ? __pfx_bch2_noset_super+0x10/0x10
[ 73.774501][ T5076] bch2_mount+0x71d/0x1320
[ 73.778992][ T5076] ? __pfx_bch2_mount+0x10/0x10
[ 73.783894][ T5076] ? vfs_parse_fs_string+0x190/0x230
[ 73.789200][ T5076] ? kfree+0x4e/0x3b0
[ 73.793211][ T5076] ? vfs_parse_fs_string+0x190/0x230
[ 73.798512][ T5076] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 73.804162][ T5076] ? cap_capable+0x1b4/0x250
[ 73.808788][ T5076] legacy_get_tree+0xee/0x190
[ 73.813495][ T5076] ? __pfx_bch2_mount+0x10/0x10
[ 73.818375][ T5076] vfs_get_tree+0x90/0x2a0
[ 73.822908][ T5076] do_new_mount+0x2be/0xb40
[ 73.827447][ T5076] ? ns_capable+0x8a/0xf0
[ 73.831787][ T5076] ? __pfx_do_new_mount+0x10/0x10
[ 73.836832][ T5076] __se_sys_mount+0x2d9/0x3c0
[ 73.841618][ T5076] ? __pfx___se_sys_mount+0x10/0x10
[ 73.846829][ T5076] ? exc_page_fault+0x577/0x8a0
[ 73.851703][ T5076] ? __x64_sys_mount+0x20/0xc0
[ 73.856492][ T5076] do_syscall_64+0xf5/0x240
[ 73.861022][ T5076] ? clear_bhb_loop+0x35/0x90
[ 73.865719][ T5076] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.871716][ T5076] RIP: 0033:0x7fd9651438ba
[ 73.876227][ T5076] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 73.895843][ T5076] RSP: 002b:00007ffe371a9c58 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 73.904272][ T5076] RAX: ffffffffffffffda RBX: 00007ffe371a9c70 RCX: 00007fd9651438ba
[ 73.912342][ T5076] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007ffe371a9c70
[ 73.920320][ T5076] RBP: 0000000000000004 R08: 00007ffe371a9cb0 R09: 00000000000119f3
[ 73.928298][ T5076] R10: 0000000001200014 R11: 0000000000000282 R12: 0000000001200014
[ 73.936276][ T5076] R13: 00007ffe371a9cb0 R14: 0000000000000003 R15: 0000000001000000
[ 73.944286][ T5076]
[ 73.947795][ T5076] ---[ end trace ]---
[ 73.951826][ T5076] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 73.959135][ T5076] CPU: 0 PID: 5076 Comm: syz-executor231 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0
[ 73.969574][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 73.979645][ T5076] Call Trace:
[ 73.982925][ T5076]
[ 73.985857][ T5076] dump_stack_lvl+0x241/0x360
[ 73.990553][ T5076] ? __pfx_dump_stack_lvl+0x10/0x10
[ 73.995759][ T5076] ? __pfx__printk+0x10/0x10
[ 74.000394][ T5076] ? vprintk_emit+0x631/0x770
[ 74.005082][ T5076] ? vscnprintf+0x5d/0x90
[ 74.009595][ T5076] panic+0x349/0x860
[ 74.013498][ T5076] ? check_panic_on_warn+0x21/0xb0
[ 74.018615][ T5076] ? __pfx_panic+0x10/0x10
[ 74.023041][ T5076] ? _printk+0xd5/0x120
[ 74.027320][ T5076] ? __pfx__printk+0x10/0x10
[ 74.031974][ T5076] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 74.038043][ T5076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 74.044408][ T5076] check_panic_on_warn+0x86/0xb0
[ 74.049471][ T5076] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 74.056009][ T5076] bch2_sb_dev_has_data+0x22a/0x5f0
[ 74.061221][ T5076] member_to_text+0xcb/0x1030
[ 74.065906][ T5076] ? bch2_prt_printf+0x32a/0x610
[ 74.070938][ T5076] ? bch2_sb_validate+0x9b6/0xe10
[ 74.076047][ T5076] ? __bch2_read_super+0xc9a/0x1460
[ 74.081256][ T5076] ? bch2_fs_open+0x246/0xdf0
[ 74.085940][ T5076] ? bch2_mount+0x71d/0x1320
[ 74.090529][ T5076] ? put_dec_trunc8+0x1f1/0x330
[ 74.095384][ T5076] ? __pfx_member_to_text+0x10/0x10
[ 74.100789][ T5076] ? __pfx_format_decode+0x10/0x10
[ 74.105909][ T5076] ? vsnprintf+0x948/0x1da0
[ 74.110420][ T5076] ? __asan_memcpy+0x40/0x70
[ 74.115009][ T5076] ? vsnprintf+0x1ccd/0x1da0
[ 74.119871][ T5076] ? bch2_sb_members_v1_to_text+0x161/0x2f0
[ 74.125775][ T5076] bch2_sb_members_v1_to_text+0x1aa/0x2f0
[ 74.131524][ T5076] ? bch2_prt_printf+0x4eb/0x610
[ 74.136472][ T5076] ? __pfx_bch2_sb_members_v1_to_text+0x10/0x10
[ 74.142729][ T5076] ? bch2_printbuf_tabstop_push+0xc9/0x200
[ 74.148545][ T5076] ? bch2_sb_field_to_text+0x187/0x250
[ 74.154010][ T5076] bch2_sb_field_validate+0x1f7/0x2d0
[ 74.159474][ T5076] ? __pfx_bch2_sb_field_validate+0x10/0x10
[ 74.165382][ T5076] ? submit_bio+0x2a2/0x3c0
[ 74.169898][ T5076] ? bch2_sb_compatible+0x85c/0x3bd0
[ 74.175192][ T5076] ? blk_status_to_errno+0x22/0x80
[ 74.180315][ T5076] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80
[ 74.186816][ T5076] ? bch2_opt_validate+0x2ca/0x300
[ 74.191933][ T5076] bch2_sb_validate+0x9b6/0xe10
[ 74.196804][ T5076] ? __pfx_bch2_sb_validate+0x10/0x10
[ 74.202314][ T5076] ? read_one_super+0xe94/0x3400
[ 74.207268][ T5076] ? bch2_sb_realloc+0x3cd/0x660
[ 74.212225][ T5076] ? kfree+0x4e/0x3b0
[ 74.216232][ T5076] ? bio_init+0x11e/0x250
[ 74.220583][ T5076] ? __pfx_read_one_super+0x10/0x10
[ 74.225792][ T5076] ? bch2_sb_realloc+0x424/0x660
[ 74.230756][ T5076] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 74.236062][ T5076] ? bdev_file_open_by_path+0x37e/0x430
[ 74.241619][ T5076] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 74.247511][ T5076] ? __bch2_read_super+0x29f/0x1460
[ 74.252733][ T5076] ? __asan_memcpy+0x40/0x70
[ 74.257354][ T5076] __bch2_read_super+0xc9a/0x1460
[ 74.262430][ T5076] ? __pfx___bch2_read_super+0x10/0x10
[ 74.267918][ T5076] ? kvmalloc_node+0x72/0x190
[ 74.272657][ T5076] ? rcu_is_watching+0x15/0xb0
[ 74.277439][ T5076] ? trace_kmalloc+0x1f/0xd0
[ 74.282044][ T5076] ? __kmalloc_node+0x270/0x4f0
[ 74.286921][ T5076] ? rcu_is_watching+0x15/0xb0
[ 74.291791][ T5076] ? __bch2_darray_resize+0x13e/0x1e0
[ 74.297176][ T5076] ? __bch2_darray_resize+0x13e/0x1e0
[ 74.302557][ T5076] bch2_fs_open+0x246/0xdf0
[ 74.307461][ T5076] ? kasan_save_track+0x51/0x80
[ 74.312334][ T5076] ? kasan_save_track+0x3f/0x80
[ 74.317369][ T5076] ? kasan_save_free_info+0x40/0x50
[ 74.322596][ T5076] ? poison_slab_object+0xa6/0xe0
[ 74.327633][ T5076] ? __kasan_slab_free+0x37/0x60
[ 74.332663][ T5076] ? kfree+0x153/0x3b0
[ 74.336740][ T5076] ? sget+0x2b8/0x620
[ 74.340720][ T5076] ? bch2_mount+0x652/0x1320
[ 74.345309][ T5076] ? legacy_get_tree+0xee/0x190
[ 74.350160][ T5076] ? vfs_get_tree+0x90/0x2a0
[ 74.354750][ T5076] ? do_new_mount+0x2be/0xb40
[ 74.359427][ T5076] ? __se_sys_mount+0x2d9/0x3c0
[ 74.364379][ T5076] ? do_syscall_64+0xf5/0x240
[ 74.369188][ T5076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.375353][ T5076] ? __pfx_bch2_fs_open+0x10/0x10
[ 74.380399][ T5076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 74.386757][ T5076] ? __pfx_bch2_test_super+0x10/0x10
[ 74.392042][ T5076] ? sget+0x2b8/0x620
[ 74.396024][ T5076] ? __pfx_bch2_noset_super+0x10/0x10
[ 74.401400][ T5076] bch2_mount+0x71d/0x1320
[ 74.405848][ T5076] ? __pfx_bch2_mount+0x10/0x10
[ 74.410714][ T5076] ? vfs_parse_fs_string+0x190/0x230
[ 74.416007][ T5076] ? kfree+0x4e/0x3b0
[ 74.419999][ T5076] ? vfs_parse_fs_string+0x190/0x230
[ 74.425287][ T5076] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 74.430921][ T5076] ? cap_capable+0x1b4/0x250
[ 74.435517][ T5076] legacy_get_tree+0xee/0x190
[ 74.440205][ T5076] ? __pfx_bch2_mount+0x10/0x10
[ 74.445060][ T5076] vfs_get_tree+0x90/0x2a0
[ 74.449485][ T5076] do_new_mount+0x2be/0xb40
[ 74.453998][ T5076] ? ns_capable+0x8a/0xf0
[ 74.458330][ T5076] ? __pfx_do_new_mount+0x10/0x10
[ 74.463379][ T5076] __se_sys_mount+0x2d9/0x3c0
[ 74.468076][ T5076] ? __pfx___se_sys_mount+0x10/0x10
[ 74.473290][ T5076] ? exc_page_fault+0x577/0x8a0
[ 74.478326][ T5076] ? __x64_sys_mount+0x20/0xc0
[ 74.483093][ T5076] do_syscall_64+0xf5/0x240
[ 74.487606][ T5076] ? clear_bhb_loop+0x35/0x90
[ 74.492290][ T5076] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.498192][ T5076] RIP: 0033:0x7fd9651438ba
[ 74.502620][ T5076] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 74.522276][ T5076] RSP: 002b:00007ffe371a9c58 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 74.530703][ T5076] RAX: ffffffffffffffda RBX: 00007ffe371a9c70 RCX: 00007fd9651438ba
[ 74.538676][ T5076] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007ffe371a9c70
[ 74.546687][ T5076] RBP: 0000000000000004 R08: 00007ffe371a9cb0 R09: 00000000000119f3
[ 74.554692][ T5076] R10: 0000000001200014 R11: 0000000000000282 R12: 0000000001200014
[ 74.562941][ T5076] R13: 00007ffe371a9cb0 R14: 0000000000000003 R15: 0000000001000000
[ 74.570978][ T5076]
[ 74.574355][ T5076] Kernel Offset: disabled
[ 74.578816][ T5076] Rebooting in 86400 seconds..