./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1937702918 <...> Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. execve("./syz-executor1937702918", ["./syz-executor1937702918"], 0x7ffef5f59690 /* 10 vars */) = 0 brk(NULL) = 0x555584dbe000 brk(0x555584dbed00) = 0x555584dbed00 arch_prctl(ARCH_SET_FS, 0x555584dbe380) = 0 set_tid_address(0x555584dbe650) = 5820 set_robust_list(0x555584dbe660, 24) = 0 rseq(0x555584dbeca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1937702918", 4096) = 28 getrandom("\x69\xfd\x90\xe1\x3d\xda\x94\xfa", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555584dbed00 brk(0x555584ddfd00) = 0x555584ddfd00 brk(0x555584de0000) = 0x555584de0000 mprotect(0x7fb0bcc40000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5821 attached [pid 5821] set_robust_list(0x555584dbe660, 24 [pid 5820] <... clone resumed>, child_tidptr=0x555584dbe650) = 5821 [pid 5821] <... set_robust_list resumed>) = 0 [pid 5821] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5821] setpgid(0, 0) = 0 [pid 5821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5821] write(3, "1000", 4) = 4 [pid 5821] close(3) = 0 [pid 5821] write(1, "executing program\n", 18executing program ) = 18 [pid 5821] memfd_create("syzkaller", 0) = 3 [pid 5821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb0b4600000 [pid 5821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5821] munmap(0x7fb0b4600000, 138412032) = 0 [pid 5821] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5821] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5821] close(3) = 0 [pid 5821] close(4) = 0 [pid 5821] mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0 [ 67.931362][ T5821] loop0: detected capacity change from 0 to 32768 [ 68.001538][ T5821] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,no_splitbrain_check,fsck,fix_errors=ask,norecovery,nojournal_transaction_names,reconstruct_alloc [ 68.023755][ T5821] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 68.032048][ T5821] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.13: inode_has_child_snapshots [ 68.032048][ T5821] running recovery passes: check_allocations,check_inodes [ 68.053688][ T5821] bcachefs (loop0): dropping and reconstructing all alloc info [ 68.063596][ T5821] invalid btree id 251 (max 63), fix? [ 68.075839][ T5821] ------------[ cut here ]------------ [ 68.081473][ T5821] UBSAN: shift-out-of-bounds in fs/bcachefs/btree_cache.c:215:18 [ 68.089277][ T5821] shift exponent 251 is too large for 64-bit type 'unsigned long long' [ 68.097639][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz-executor193 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 68.108748][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.118845][ T5821] Call Trace: [ 68.122161][ T5821] [ 68.125133][ T5821] dump_stack_lvl+0x241/0x360 [ 68.129892][ T5821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.135184][ T5821] ? __pfx__printk+0x10/0x10 [ 68.139982][ T5821] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 68.146584][ T5821] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 68.152588][ T5821] __btree_node_pinned+0x80b/0x850 [ 68.157711][ T5821] __bch2_btree_node_hash_insert+0xd02/0x1310 [ 68.163783][ T5821] ? __bch2_btree_node_hash_insert+0x20c/0x1310 [ 68.170033][ T5821] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 68.176588][ T5821] bch2_btree_node_hash_insert+0x7e/0xc0 [ 68.182231][ T5821] bch2_btree_root_read+0x5c6/0x7a0 [ 68.187528][ T5821] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 68.193285][ T5821] ? bch2_current_has_btree_trans+0x142/0x180 [ 68.199471][ T5821] read_btree_roots+0x296/0x840 [ 68.204346][ T5821] bch2_fs_recovery+0x2585/0x39d0 [ 68.209412][ T5821] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 68.214818][ T5821] ? __pfx_lock_release+0x10/0x10 [ 68.219850][ T5821] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 68.225498][ T5821] ? __pfx_lock_release+0x10/0x10 [ 68.230532][ T5821] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 68.236176][ T5821] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 68.241919][ T5821] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 68.248093][ T5821] ? llist_reverse_order+0x72/0x90 [ 68.253210][ T5821] bch2_fs_start+0x356/0x5b0 [ 68.257817][ T5821] bch2_fs_get_tree+0xd68/0x1710 [ 68.262783][ T5821] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 68.268179][ T5821] ? smack_fs_context_parse_param+0xff/0x170 [ 68.274191][ T5821] ? generic_parse_monolithic+0x387/0x400 [ 68.279951][ T5821] ? cap_capable+0x1b4/0x250 [ 68.284552][ T5821] ? safesetid_security_capable+0xb2/0x1d0 [ 68.290367][ T5821] vfs_get_tree+0x90/0x2b0 [ 68.294799][ T5821] do_new_mount+0x2be/0xb40 [ 68.299831][ T5821] ? __pfx_do_new_mount+0x10/0x10 [ 68.304911][ T5821] __se_sys_mount+0x2d6/0x3c0 [ 68.309607][ T5821] ? __pfx___se_sys_mount+0x10/0x10 [ 68.314812][ T5821] ? do_syscall_64+0x100/0x230 [ 68.319599][ T5821] ? __x64_sys_mount+0x20/0xc0 [ 68.324372][ T5821] do_syscall_64+0xf3/0x230 [ 68.328909][ T5821] ? clear_bhb_loop+0x35/0x90 [ 68.333608][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.339549][ T5821] RIP: 0033:0x7fb0bcbc8f3a [ 68.344003][ T5821] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 68.363809][ T5821] RSP: 002b:00007ffecf5c55f8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 68.372260][ T5821] RAX: ffffffffffffffda RBX: 00007ffecf5c5610 RCX: 00007fb0bcbc8f3a [ 68.380330][ T5821] RDX: 0000000020000180 RSI: 0000000020000540 RDI: 00007ffecf5c5610 [ 68.388309][ T5821] RBP: 0000000000000004 R08: 00007ffecf5c5650 R09: 0000000000005965 [ 68.396329][ T5821] R10: 0000000000800000 R11: 0000000000000282 R12: 0000000000800000 [ 68.404311][ T5821] R13: 00007ffecf5c5650 R14: 0000000000000003 R15: 0000000001000000 [ 68.412299][ T5821] [ 68.415914][ T5821] ---[ end trace ]--- [ 68.420126][ T5821] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 68.427334][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz-executor193 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 68.438625][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.448689][ T5821] Call Trace: [ 68.451968][ T5821] [ 68.454917][ T5821] dump_stack_lvl+0x241/0x360 [ 68.459651][ T5821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.465654][ T5821] ? __pfx__printk+0x10/0x10 [ 68.470349][ T5821] ? lockdep_hardirqs_on+0x99/0x150 [ 68.475560][ T5821] ? vscnprintf+0x5d/0x90 [ 68.479980][ T5821] panic+0x349/0x880 [ 68.483996][ T5821] ? check_panic_on_warn+0x21/0xb0 [ 68.489140][ T5821] ? __pfx_panic+0x10/0x10 [ 68.493559][ T5821] ? _printk+0xd5/0x120 [ 68.497751][ T5821] ? __pfx__printk+0x10/0x10 [ 68.503164][ T5821] check_panic_on_warn+0x86/0xb0 [ 68.508198][ T5821] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 68.514635][ T5821] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 68.521355][ T5821] __btree_node_pinned+0x80b/0x850 [ 68.526577][ T5821] __bch2_btree_node_hash_insert+0xd02/0x1310 [ 68.532659][ T5821] ? __bch2_btree_node_hash_insert+0x20c/0x1310 [ 68.539031][ T5821] ? __pfx___bch2_btree_node_hash_insert+0x10/0x10 [ 68.545848][ T5821] bch2_btree_node_hash_insert+0x7e/0xc0 [ 68.551499][ T5821] bch2_btree_root_read+0x5c6/0x7a0 [ 68.557133][ T5821] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 68.563344][ T5821] ? bch2_current_has_btree_trans+0x142/0x180 [ 68.569441][ T5821] read_btree_roots+0x296/0x840 [ 68.574307][ T5821] bch2_fs_recovery+0x2585/0x39d0 [ 68.579780][ T5821] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 68.585174][ T5821] ? __pfx_lock_release+0x10/0x10 [ 68.590203][ T5821] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 68.595838][ T5821] ? __pfx_lock_release+0x10/0x10 [ 68.600871][ T5821] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 68.606516][ T5821] ? bch2_get_next_online_dev+0x4b9/0x4f0 [ 68.612243][ T5821] ? bch2_get_next_online_dev+0x2b/0x4f0 [ 68.617904][ T5821] ? llist_reverse_order+0x72/0x90 [ 68.623041][ T5821] bch2_fs_start+0x356/0x5b0 [ 68.627673][ T5821] bch2_fs_get_tree+0xd68/0x1710 [ 68.632639][ T5821] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 68.638012][ T5821] ? smack_fs_context_parse_param+0xff/0x170 [ 68.644159][ T5821] ? generic_parse_monolithic+0x387/0x400 [ 68.650235][ T5821] ? cap_capable+0x1b4/0x250 [ 68.654821][ T5821] ? safesetid_security_capable+0xb2/0x1d0 [ 68.660638][ T5821] vfs_get_tree+0x90/0x2b0 [ 68.665151][ T5821] do_new_mount+0x2be/0xb40 [ 68.669794][ T5821] ? __pfx_do_new_mount+0x10/0x10 [ 68.674851][ T5821] __se_sys_mount+0x2d6/0x3c0 [ 68.679536][ T5821] ? __pfx___se_sys_mount+0x10/0x10 [ 68.684752][ T5821] ? do_syscall_64+0x100/0x230 [ 68.689649][ T5821] ? __x64_sys_mount+0x20/0xc0 [ 68.694427][ T5821] do_syscall_64+0xf3/0x230 [ 68.698948][ T5821] ? clear_bhb_loop+0x35/0x90 [ 68.703627][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.709529][ T5821] RIP: 0033:0x7fb0bcbc8f3a [ 68.713953][ T5821] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 68.733582][ T5821] RSP: 002b:00007ffecf5c55f8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 68.742137][ T5821] RAX: ffffffffffffffda RBX: 00007ffecf5c5610 RCX: 00007fb0bcbc8f3a [ 68.750117][ T5821] RDX: 0000000020000180 RSI: 0000000020000540 RDI: 00007ffecf5c5610 [ 68.759240][ T5821] RBP: 0000000000000004 R08: 00007ffecf5c5650 R09: 0000000000005965 [ 68.767215][ T5821] R10: 0000000000800000 R11: 0000000000000282 R12: 0000000000800000 [ 68.775706][ T5821] R13: 00007ffecf5c5650 R14: 0000000000000003 R15: 0000000001000000 [ 68.784407][ T5821] [ 68.788102][ T5821] Kernel Offset: disabled [ 68.792559][ T5821] Rebooting in 86400 seconds..