./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor166543138
<...>
Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts.
execve("./syz-executor166543138", ["./syz-executor166543138"], 0x7fff82419ee0 /* 10 vars */) = 0
brk(NULL) = 0x55555b549000
brk(0x55555b549d00) = 0x55555b549d00
arch_prctl(ARCH_SET_FS, 0x55555b549380) = 0
set_tid_address(0x55555b549650) = 5220
set_robust_list(0x55555b549660, 24) = 0
rseq(0x55555b549ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor166543138", 4096) = 27
getrandom("\x02\xc7\xab\x8a\x8a\x78\x1c\x8c", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555b549d00
brk(0x55555b56ad00) = 0x55555b56ad00
brk(0x55555b56b000) = 0x55555b56b000
mprotect(0x7f5573444000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
executing program
write(1, "executing program\n", 18) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f556ae00000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f556ae00000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file0", 0777) = 0
[ 56.022515][ T5220] loop0: detected capacity change from 0 to 32768
[ 56.069019][ T5220] ------------[ cut here ]------------
[ 56.075146][ T5220] UBSAN: shift-out-of-bounds in fs/bcachefs/super-io.c:290:18
[ 56.082956][ T5220] shift exponent 255 is too large for 32-bit type 'int'
[ 56.090038][ T5220] CPU: 0 UID: 0 PID: 5220 Comm: syz-executor166 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 56.101171][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 56.111267][ T5220] Call Trace:
[ 56.114554][ T5220]
[ 56.117472][ T5220] dump_stack_lvl+0x241/0x360
[ 56.122159][ T5220] ? __pfx_dump_stack_lvl+0x10/0x10
[ 56.127343][ T5220] ? __pfx__printk+0x10/0x10
[ 56.131915][ T5220] ? __asan_memcpy+0x40/0x70
[ 56.136492][ T5220] ? vsnprintf+0x1ccd/0x1da0
[ 56.141069][ T5220] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 56.147491][ T5220] validate_sb_layout+0xafa/0xb10
[ 56.152513][ T5220] ? bch2_opt_from_sb+0xe2/0x140
[ 56.157465][ T5220] ? __pfx_validate_sb_layout+0x10/0x10
[ 56.163012][ T5220] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80
[ 56.169422][ T5220] ? bch2_opt_validate+0x2ca/0x300
[ 56.174526][ T5220] bch2_sb_validate+0x8e4/0xf70
[ 56.179362][ T5220] ? blk_status_to_errno+0x22/0x80
[ 56.184466][ T5220] ? __pfx_bch2_sb_validate+0x10/0x10
[ 56.189844][ T5220] ? bch2_sb_compatible+0x493/0x850
[ 56.195028][ T5220] ? read_one_super+0x65a/0xf40
[ 56.199866][ T5220] ? read_one_super+0xe23/0xf40
[ 56.204705][ T5220] ? __pfx_read_one_super+0x10/0x10
[ 56.209886][ T5220] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 56.215157][ T5220] ? bdev_file_open_by_path+0x382/0x480
[ 56.220693][ T5220] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 56.226571][ T5220] ? trace_kmalloc+0x1f/0xd0
[ 56.231144][ T5220] ? __asan_memcpy+0x40/0x70
[ 56.235721][ T5220] __bch2_read_super+0xc24/0x1380
[ 56.240733][ T5220] ? stack_depot_save_flags+0x6e4/0x830
[ 56.246271][ T5220] ? __pfx___bch2_read_super+0x10/0x10
[ 56.251746][ T5220] ? rcu_is_watching+0x15/0xb0
[ 56.256495][ T5220] ? __bch2_darray_resize_noprof+0x174/0x200
[ 56.262475][ T5220] ? kfree+0x4e/0x440
[ 56.266457][ T5220] ? __bch2_darray_resize_noprof+0x174/0x200
[ 56.272427][ T5220] bch2_fs_open+0x270/0x2f80
[ 56.277043][ T5220] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 56.283053][ T5220] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 56.289386][ T5220] ? lockdep_hardirqs_on+0x99/0x150
[ 56.294581][ T5220] ? __pfx_bch2_fs_open+0x10/0x10
[ 56.299596][ T5220] ? stack_trace_save+0x118/0x1d0
[ 56.304617][ T5220] ? kasan_save_track+0x51/0x80
[ 56.309452][ T5220] ? kasan_save_track+0x3f/0x80
[ 56.314314][ T5220] ? kasan_save_free_info+0x40/0x50
[ 56.319500][ T5220] ? __kasan_slab_free+0x59/0x70
[ 56.324426][ T5220] ? kfree+0x1a0/0x440
[ 56.328766][ T5220] ? sget+0x2b8/0x620
[ 56.332739][ T5220] ? bch2_fs_get_tree+0x683/0x1710
[ 56.337839][ T5220] ? vfs_get_tree+0x90/0x2b0
[ 56.342422][ T5220] ? do_new_mount+0x2be/0xb40
[ 56.347094][ T5220] ? __se_sys_mount+0x2d6/0x3c0
[ 56.351949][ T5220] ? do_syscall_64+0xf3/0x230
[ 56.356613][ T5220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.362680][ T5220] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 56.368656][ T5220] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 56.374976][ T5220] ? kasan_quarantine_put+0xdc/0x230
[ 56.380245][ T5220] ? lockdep_hardirqs_on+0x99/0x150
[ 56.385441][ T5220] ? sget+0x2b8/0x620
[ 56.389419][ T5220] ? __pfx_bch2_test_super+0x10/0x10
[ 56.394694][ T5220] ? sget+0x2b8/0x620
[ 56.398681][ T5220] ? __pfx_bch2_noset_super+0x10/0x10
[ 56.404042][ T5220] bch2_fs_get_tree+0x738/0x1710
[ 56.408983][ T5220] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 56.414352][ T5220] ? generic_parse_monolithic+0x387/0x400
[ 56.420061][ T5220] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 56.425680][ T5220] ? cap_capable+0x1b4/0x250
[ 56.430360][ T5220] ? safesetid_security_capable+0xb2/0x1d0
[ 56.436235][ T5220] vfs_get_tree+0x90/0x2b0
[ 56.440673][ T5220] do_new_mount+0x2be/0xb40
[ 56.445197][ T5220] ? __pfx_do_new_mount+0x10/0x10
[ 56.450250][ T5220] __se_sys_mount+0x2d6/0x3c0
[ 56.454942][ T5220] ? __pfx___se_sys_mount+0x10/0x10
[ 56.460157][ T5220] ? do_syscall_64+0x100/0x230
[ 56.464918][ T5220] ? __x64_sys_mount+0x20/0xc0
[ 56.469682][ T5220] do_syscall_64+0xf3/0x230
[ 56.474189][ T5220] ? clear_bhb_loop+0x35/0x90
[ 56.478854][ T5220] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.484787][ T5220] RIP: 0033:0x7f55733ccb7a
[ 56.489229][ T5220] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 56.508853][ T5220] RSP: 002b:00007fff5b40e1e8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 56.517263][ T5220] RAX: ffffffffffffffda RBX: 00007fff5b40e1f0 RCX: 00007f55733ccb7a
[ 56.525244][ T5220] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007fff5b40e1f0
[ 56.533257][ T5220] RBP: 0000000000000004 R08: 00007fff5b40e230 R09: 000000000000594e
[ 56.541226][ T5220] R10: 0000000000014001 R11: 0000000000000282 R12: 00007fff5b40e230
[ 56.549198][ T5220] R13: 0000000000000003 R14: 0000000001000000 R15: 0000000000000001
[ 56.557172][ T5220]
[ 56.561033][ T5220] ---[ end trace ]---
[ 56.565360][ T5220] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 56.572568][ T5220] CPU: 0 UID: 0 PID: 5220 Comm: syz-executor166 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0
[ 56.583680][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 56.593731][ T5220] Call Trace:
[ 56.597006][ T5220]
[ 56.599931][ T5220] dump_stack_lvl+0x241/0x360
[ 56.604609][ T5220] ? __pfx_dump_stack_lvl+0x10/0x10
[ 56.609801][ T5220] ? __pfx__printk+0x10/0x10
[ 56.614384][ T5220] ? lockdep_hardirqs_on+0x99/0x150
[ 56.619575][ T5220] ? vscnprintf+0x5d/0x90
[ 56.623905][ T5220] panic+0x349/0x880
[ 56.627798][ T5220] ? check_panic_on_warn+0x21/0xb0
[ 56.632904][ T5220] ? __pfx_panic+0x10/0x10
[ 56.637310][ T5220] ? _printk+0xd5/0x120
[ 56.641462][ T5220] ? __pfx__printk+0x10/0x10
[ 56.646045][ T5220] ? __asan_memcpy+0x40/0x70
[ 56.650629][ T5220] check_panic_on_warn+0x86/0xb0
[ 56.655564][ T5220] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 56.661983][ T5220] validate_sb_layout+0xafa/0xb10
[ 56.667001][ T5220] ? bch2_opt_from_sb+0xe2/0x140
[ 56.671930][ T5220] ? __pfx_validate_sb_layout+0x10/0x10
[ 56.677472][ T5220] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80
[ 56.683884][ T5220] ? bch2_opt_validate+0x2ca/0x300
[ 56.688988][ T5220] bch2_sb_validate+0x8e4/0xf70
[ 56.693831][ T5220] ? blk_status_to_errno+0x22/0x80
[ 56.698942][ T5220] ? __pfx_bch2_sb_validate+0x10/0x10
[ 56.704305][ T5220] ? bch2_sb_compatible+0x493/0x850
[ 56.709495][ T5220] ? read_one_super+0x65a/0xf40
[ 56.714336][ T5220] ? read_one_super+0xe23/0xf40
[ 56.719185][ T5220] ? __pfx_read_one_super+0x10/0x10
[ 56.724377][ T5220] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 56.729662][ T5220] ? bdev_file_open_by_path+0x382/0x480
[ 56.735201][ T5220] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 56.741084][ T5220] ? trace_kmalloc+0x1f/0xd0
[ 56.745669][ T5220] ? __asan_memcpy+0x40/0x70
[ 56.750253][ T5220] __bch2_read_super+0xc24/0x1380
[ 56.755272][ T5220] ? stack_depot_save_flags+0x6e4/0x830
[ 56.760812][ T5220] ? __pfx___bch2_read_super+0x10/0x10
[ 56.766312][ T5220] ? rcu_is_watching+0x15/0xb0
[ 56.771069][ T5220] ? __bch2_darray_resize_noprof+0x174/0x200
[ 56.777044][ T5220] ? kfree+0x4e/0x440
[ 56.781023][ T5220] ? __bch2_darray_resize_noprof+0x174/0x200
[ 56.787005][ T5220] bch2_fs_open+0x270/0x2f80
[ 56.791598][ T5220] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 56.797577][ T5220] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 56.803904][ T5220] ? lockdep_hardirqs_on+0x99/0x150
[ 56.809093][ T5220] ? __pfx_bch2_fs_open+0x10/0x10
[ 56.814110][ T5220] ? stack_trace_save+0x118/0x1d0
[ 56.819147][ T5220] ? kasan_save_track+0x51/0x80
[ 56.823993][ T5220] ? kasan_save_track+0x3f/0x80
[ 56.828837][ T5220] ? kasan_save_free_info+0x40/0x50
[ 56.834027][ T5220] ? __kasan_slab_free+0x59/0x70
[ 56.838956][ T5220] ? kfree+0x1a0/0x440
[ 56.843014][ T5220] ? sget+0x2b8/0x620
[ 56.846993][ T5220] ? bch2_fs_get_tree+0x683/0x1710
[ 56.852098][ T5220] ? vfs_get_tree+0x90/0x2b0
[ 56.856683][ T5220] ? do_new_mount+0x2be/0xb40
[ 56.861351][ T5220] ? __se_sys_mount+0x2d6/0x3c0
[ 56.866194][ T5220] ? do_syscall_64+0xf3/0x230
[ 56.870864][ T5220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.876941][ T5220] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 56.882921][ T5220] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 56.889248][ T5220] ? kasan_quarantine_put+0xdc/0x230
[ 56.894527][ T5220] ? lockdep_hardirqs_on+0x99/0x150
[ 56.899721][ T5220] ? sget+0x2b8/0x620
[ 56.903699][ T5220] ? __pfx_bch2_test_super+0x10/0x10
[ 56.908999][ T5220] ? sget+0x2b8/0x620
[ 56.912977][ T5220] ? __pfx_bch2_noset_super+0x10/0x10
[ 56.918346][ T5220] bch2_fs_get_tree+0x738/0x1710
[ 56.923295][ T5220] ? __pfx_bch2_fs_get_tree+0x10/0x10
[ 56.928674][ T5220] ? generic_parse_monolithic+0x387/0x400
[ 56.934397][ T5220] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 56.940028][ T5220] ? cap_capable+0x1b4/0x250
[ 56.944613][ T5220] ? safesetid_security_capable+0xb2/0x1d0
[ 56.950421][ T5220] vfs_get_tree+0x90/0x2b0
[ 56.954837][ T5220] do_new_mount+0x2be/0xb40
[ 56.959337][ T5220] ? __pfx_do_new_mount+0x10/0x10
[ 56.964361][ T5220] __se_sys_mount+0x2d6/0x3c0
[ 56.969041][ T5220] ? __pfx___se_sys_mount+0x10/0x10
[ 56.974235][ T5220] ? do_syscall_64+0x100/0x230
[ 56.978995][ T5220] ? __x64_sys_mount+0x20/0xc0
[ 56.983756][ T5220] do_syscall_64+0xf3/0x230
[ 56.988259][ T5220] ? clear_bhb_loop+0x35/0x90
[ 56.992925][ T5220] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.998816][ T5220] RIP: 0033:0x7f55733ccb7a
[ 57.003233][ T5220] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 57.022830][ T5220] RSP: 002b:00007fff5b40e1e8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 57.031245][ T5220] RAX: ffffffffffffffda RBX: 00007fff5b40e1f0 RCX: 00007f55733ccb7a
[ 57.039212][ T5220] RDX: 00000000200058c0 RSI: 0000000020005900 RDI: 00007fff5b40e1f0
[ 57.047265][ T5220] RBP: 0000000000000004 R08: 00007fff5b40e230 R09: 000000000000594e
[ 57.055320][ T5220] R10: 0000000000014001 R11: 0000000000000282 R12: 00007fff5b40e230
[ 57.063284][ T5220] R13: 0000000000000003 R14: 0000000001000000 R15: 0000000000000001
[ 57.071258][ T5220]
[ 57.074648][ T5220] Kernel Offset: disabled
[ 57.079006][ T5220] Rebooting in 86400 seconds..