./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1557463695
<...>
DUID 00:04:e6:d8:3e:4c:c1:15:84:42:dc:00:60:8c:e3:5f:26:b4
forked to background, child pid 4741
[ 33.901994][ T4742] 8021q: adding VLAN 0 to HW filter on device bond0
[ 33.921877][ T4742] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts.
execve("./syz-executor1557463695", ["./syz-executor1557463695"], 0x7fff1a3d6350 /* 10 vars */) = 0
brk(NULL) = 0x55556045f000
brk(0x55556045fd00) = 0x55556045fd00
arch_prctl(ARCH_SET_FS, 0x55556045f380) = 0
set_tid_address(0x55556045f650) = 5072
set_robust_list(0x55556045f660, 24) = 0
rseq(0x55556045fca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1557463695", 4096) = 28
getrandom("\xd9\x3c\x80\xde\x07\x40\x12\x72", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55556045fd00
brk(0x555560480d00) = 0x555560480d00
brk(0x555560481000) = 0x555560481000
mprotect(0x7f862d307000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8624e00000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f8624e00000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 57.070271][ T5072] loop0: detected capacity change from 0 to 32768
[ 57.114653][ T5072] ------------[ cut here ]------------
[ 57.120186][ T5072] UBSAN: shift-out-of-bounds in fs/bcachefs/replicas.c:1010:20
[ 57.128425][ T5072] shift exponent 155 is too large for 32-bit type 'int'
[ 57.135493][ T5072] CPU: 0 PID: 5072 Comm: syz-executor155 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0
[ 57.145912][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 57.155960][ T5072] Call Trace:
[ 57.159231][ T5072]
[ 57.162155][ T5072] dump_stack_lvl+0x241/0x360
[ 57.166844][ T5072] ? __pfx_dump_stack_lvl+0x10/0x10
[ 57.172032][ T5072] ? __pfx__printk+0x10/0x10
[ 57.176608][ T5072] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 57.182574][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 57.188886][ T5072] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 57.195307][ T5072] bch2_sb_dev_has_data+0x22a/0x5f0
[ 57.200495][ T5072] member_to_text+0xcb/0x1030
[ 57.205160][ T5072] ? bch2_prt_printf+0x32a/0x610
[ 57.210097][ T5072] ? bch2_sb_validate+0x9b6/0xe10
[ 57.215116][ T5072] ? __bch2_read_super+0xc9a/0x1460
[ 57.220317][ T5072] ? bch2_fs_open+0x246/0xdf0
[ 57.224995][ T5072] ? bch2_mount+0x71d/0x1320
[ 57.229588][ T5072] ? put_dec_trunc8+0x1f1/0x330
[ 57.234437][ T5072] ? __pfx_member_to_text+0x10/0x10
[ 57.239639][ T5072] ? __pfx_format_decode+0x10/0x10
[ 57.244742][ T5072] ? vsnprintf+0x948/0x1da0
[ 57.249233][ T5072] ? __asan_memcpy+0x40/0x70
[ 57.253822][ T5072] ? vsnprintf+0x1ccd/0x1da0
[ 57.258396][ T5072] ? bch2_sb_members_v1_to_text+0x161/0x2f0
[ 57.264283][ T5072] bch2_sb_members_v1_to_text+0x1aa/0x2f0
[ 57.269996][ T5072] ? bch2_prt_printf+0x4eb/0x610
[ 57.274922][ T5072] ? __pfx_bch2_sb_members_v1_to_text+0x10/0x10
[ 57.281159][ T5072] ? bch2_printbuf_tabstop_push+0xc9/0x200
[ 57.286952][ T5072] ? bch2_sb_field_to_text+0x187/0x250
[ 57.292394][ T5072] bch2_sb_field_validate+0x1f7/0x2d0
[ 57.297753][ T5072] ? __pfx_bch2_sb_field_validate+0x10/0x10
[ 57.303630][ T5072] ? submit_bio+0x2a2/0x3c0
[ 57.308119][ T5072] ? bch2_sb_compatible+0x85c/0x3bd0
[ 57.313388][ T5072] ? blk_status_to_errno+0x22/0x80
[ 57.318495][ T5072] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80
[ 57.324977][ T5072] ? bch2_opt_validate+0x2ca/0x300
[ 57.330076][ T5072] bch2_sb_validate+0x9b6/0xe10
[ 57.334917][ T5072] ? __pfx_bch2_sb_validate+0x10/0x10
[ 57.340271][ T5072] ? read_one_super+0xe94/0x3400
[ 57.345194][ T5072] ? bch2_sb_realloc+0x3cd/0x660
[ 57.350119][ T5072] ? kfree+0x4e/0x3b0
[ 57.354088][ T5072] ? bio_init+0x11e/0x250
[ 57.358400][ T5072] ? __pfx_read_one_super+0x10/0x10
[ 57.363581][ T5072] ? bch2_sb_realloc+0x424/0x660
[ 57.368501][ T5072] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 57.373769][ T5072] ? bdev_file_open_by_path+0x37e/0x430
[ 57.379300][ T5072] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 57.385174][ T5072] ? __bch2_read_super+0x29f/0x1460
[ 57.390355][ T5072] ? __asan_memcpy+0x40/0x70
[ 57.394934][ T5072] __bch2_read_super+0xc9a/0x1460
[ 57.399947][ T5072] ? __pfx___bch2_read_super+0x10/0x10
[ 57.405387][ T5072] ? kvmalloc_node+0x72/0x190
[ 57.410070][ T5072] ? rcu_is_watching+0x15/0xb0
[ 57.414818][ T5072] ? trace_kmalloc+0x1f/0xd0
[ 57.419391][ T5072] ? __kmalloc_node+0x270/0x4f0
[ 57.424224][ T5072] ? rcu_is_watching+0x15/0xb0
[ 57.428971][ T5072] ? __bch2_darray_resize+0x13e/0x1e0
[ 57.434341][ T5072] ? __bch2_darray_resize+0x13e/0x1e0
[ 57.439700][ T5072] bch2_fs_open+0x246/0xdf0
[ 57.444190][ T5072] ? kasan_save_track+0x51/0x80
[ 57.449127][ T5072] ? kasan_save_track+0x3f/0x80
[ 57.453974][ T5072] ? kasan_save_free_info+0x40/0x50
[ 57.459191][ T5072] ? poison_slab_object+0xa6/0xe0
[ 57.464209][ T5072] ? __kasan_slab_free+0x37/0x60
[ 57.469163][ T5072] ? kfree+0x153/0x3b0
[ 57.473221][ T5072] ? sget+0x2b8/0x620
[ 57.477195][ T5072] ? bch2_mount+0x652/0x1320
[ 57.481769][ T5072] ? legacy_get_tree+0xee/0x190
[ 57.486606][ T5072] ? vfs_get_tree+0x90/0x2a0
[ 57.491180][ T5072] ? do_new_mount+0x2be/0xb40
[ 57.495843][ T5072] ? __se_sys_mount+0x2d9/0x3c0
[ 57.500678][ T5072] ? do_syscall_64+0xf5/0x240
[ 57.505342][ T5072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.511401][ T5072] ? __pfx_bch2_fs_open+0x10/0x10
[ 57.516422][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 57.522739][ T5072] ? __pfx_bch2_test_super+0x10/0x10
[ 57.528008][ T5072] ? sget+0x2b8/0x620
[ 57.531983][ T5072] ? __pfx_bch2_noset_super+0x10/0x10
[ 57.537338][ T5072] bch2_mount+0x71d/0x1320
[ 57.541749][ T5072] ? __pfx_bch2_mount+0x10/0x10
[ 57.546612][ T5072] ? vfs_parse_fs_string+0x190/0x230
[ 57.551892][ T5072] ? kfree+0x4e/0x3b0
[ 57.555862][ T5072] ? vfs_parse_fs_string+0x190/0x230
[ 57.561153][ T5072] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 57.566792][ T5072] ? cap_capable+0x1b4/0x250
[ 57.571374][ T5072] legacy_get_tree+0xee/0x190
[ 57.576045][ T5072] ? __pfx_bch2_mount+0x10/0x10
[ 57.580884][ T5072] vfs_get_tree+0x90/0x2a0
[ 57.585301][ T5072] do_new_mount+0x2be/0xb40
[ 57.589802][ T5072] ? ns_capable+0x8a/0xf0
[ 57.594122][ T5072] ? __pfx_do_new_mount+0x10/0x10
[ 57.599137][ T5072] __se_sys_mount+0x2d9/0x3c0
[ 57.603804][ T5072] ? __pfx___se_sys_mount+0x10/0x10
[ 57.608987][ T5072] ? exc_page_fault+0x577/0x8a0
[ 57.613826][ T5072] ? __x64_sys_mount+0x20/0xc0
[ 57.618571][ T5072] do_syscall_64+0xf5/0x240
[ 57.623074][ T5072] ? clear_bhb_loop+0x35/0x90
[ 57.627737][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.633615][ T5072] RIP: 0033:0x7f862d2838ba
[ 57.638016][ T5072] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 57.657638][ T5072] RSP: 002b:00007ffc196899f8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 57.666057][ T5072] RAX: ffffffffffffffda RBX: 00007ffc19689a10 RCX: 00007f862d2838ba
[ 57.674020][ T5072] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007ffc19689a10
[ 57.681994][ T5072] RBP: 0000000000000004 R08: 00007ffc19689a50 R09: 00000000000119f3
[ 57.689957][ T5072] R10: 0000000001200014 R11: 0000000000000282 R12: 0000000001200014
[ 57.697921][ T5072] R13: 00007ffc19689a50 R14: 0000000000000003 R15: 0000000001000000
[ 57.705886][ T5072]
[ 57.709072][ T5072] ---[ end trace ]---
[ 57.713062][ T5072] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 57.720246][ T5072] CPU: 0 PID: 5072 Comm: syz-executor155 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0
[ 57.730643][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 57.740687][ T5072] Call Trace:
[ 57.743958][ T5072]
[ 57.746877][ T5072] dump_stack_lvl+0x241/0x360
[ 57.751554][ T5072] ? __pfx_dump_stack_lvl+0x10/0x10
[ 57.756750][ T5072] ? __pfx__printk+0x10/0x10
[ 57.761332][ T5072] ? vprintk_emit+0x631/0x770
[ 57.766006][ T5072] ? vscnprintf+0x5d/0x90
[ 57.770327][ T5072] panic+0x349/0x860
[ 57.774217][ T5072] ? check_panic_on_warn+0x21/0xb0
[ 57.779323][ T5072] ? __pfx_panic+0x10/0x10
[ 57.783729][ T5072] ? _printk+0xd5/0x120
[ 57.787881][ T5072] ? __pfx__printk+0x10/0x10
[ 57.792461][ T5072] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 57.798432][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 57.804754][ T5072] check_panic_on_warn+0x86/0xb0
[ 57.809685][ T5072] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 57.816205][ T5072] bch2_sb_dev_has_data+0x22a/0x5f0
[ 57.821411][ T5072] member_to_text+0xcb/0x1030
[ 57.826083][ T5072] ? bch2_prt_printf+0x32a/0x610
[ 57.831011][ T5072] ? bch2_sb_validate+0x9b6/0xe10
[ 57.836024][ T5072] ? __bch2_read_super+0xc9a/0x1460
[ 57.841209][ T5072] ? bch2_fs_open+0x246/0xdf0
[ 57.845890][ T5072] ? bch2_mount+0x71d/0x1320
[ 57.850557][ T5072] ? put_dec_trunc8+0x1f1/0x330
[ 57.855402][ T5072] ? __pfx_member_to_text+0x10/0x10
[ 57.860602][ T5072] ? __pfx_format_decode+0x10/0x10
[ 57.865708][ T5072] ? vsnprintf+0x948/0x1da0
[ 57.870200][ T5072] ? __asan_memcpy+0x40/0x70
[ 57.874783][ T5072] ? vsnprintf+0x1ccd/0x1da0
[ 57.879363][ T5072] ? bch2_sb_members_v1_to_text+0x161/0x2f0
[ 57.885251][ T5072] bch2_sb_members_v1_to_text+0x1aa/0x2f0
[ 57.890972][ T5072] ? bch2_prt_printf+0x4eb/0x610
[ 57.895908][ T5072] ? __pfx_bch2_sb_members_v1_to_text+0x10/0x10
[ 57.902155][ T5072] ? bch2_printbuf_tabstop_push+0xc9/0x200
[ 57.907958][ T5072] ? bch2_sb_field_to_text+0x187/0x250
[ 57.913410][ T5072] bch2_sb_field_validate+0x1f7/0x2d0
[ 57.918868][ T5072] ? __pfx_bch2_sb_field_validate+0x10/0x10
[ 57.924756][ T5072] ? submit_bio+0x2a2/0x3c0
[ 57.929250][ T5072] ? bch2_sb_compatible+0x85c/0x3bd0
[ 57.934527][ T5072] ? blk_status_to_errno+0x22/0x80
[ 57.939629][ T5072] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80
[ 57.946034][ T5072] ? bch2_opt_validate+0x2ca/0x300
[ 57.951139][ T5072] bch2_sb_validate+0x9b6/0xe10
[ 57.955994][ T5072] ? __pfx_bch2_sb_validate+0x10/0x10
[ 57.961355][ T5072] ? read_one_super+0xe94/0x3400
[ 57.966283][ T5072] ? bch2_sb_realloc+0x3cd/0x660
[ 57.971216][ T5072] ? kfree+0x4e/0x3b0
[ 57.975193][ T5072] ? bio_init+0x11e/0x250
[ 57.979522][ T5072] ? __pfx_read_one_super+0x10/0x10
[ 57.984715][ T5072] ? bch2_sb_realloc+0x424/0x660
[ 57.989731][ T5072] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 57.995005][ T5072] ? bdev_file_open_by_path+0x37e/0x430
[ 58.000540][ T5072] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 58.006423][ T5072] ? __bch2_read_super+0x29f/0x1460
[ 58.011613][ T5072] ? __asan_memcpy+0x40/0x70
[ 58.016198][ T5072] __bch2_read_super+0xc9a/0x1460
[ 58.021222][ T5072] ? __pfx___bch2_read_super+0x10/0x10
[ 58.026669][ T5072] ? kvmalloc_node+0x72/0x190
[ 58.031367][ T5072] ? rcu_is_watching+0x15/0xb0
[ 58.036124][ T5072] ? trace_kmalloc+0x1f/0xd0
[ 58.040712][ T5072] ? __kmalloc_node+0x270/0x4f0
[ 58.045576][ T5072] ? rcu_is_watching+0x15/0xb0
[ 58.050344][ T5072] ? __bch2_darray_resize+0x13e/0x1e0
[ 58.055730][ T5072] ? __bch2_darray_resize+0x13e/0x1e0
[ 58.061117][ T5072] bch2_fs_open+0x246/0xdf0
[ 58.065626][ T5072] ? kasan_save_track+0x51/0x80
[ 58.070481][ T5072] ? kasan_save_track+0x3f/0x80
[ 58.075343][ T5072] ? kasan_save_free_info+0x40/0x50
[ 58.080550][ T5072] ? poison_slab_object+0xa6/0xe0
[ 58.085569][ T5072] ? __kasan_slab_free+0x37/0x60
[ 58.090500][ T5072] ? kfree+0x153/0x3b0
[ 58.094569][ T5072] ? sget+0x2b8/0x620
[ 58.098545][ T5072] ? bch2_mount+0x652/0x1320
[ 58.103128][ T5072] ? legacy_get_tree+0xee/0x190
[ 58.107974][ T5072] ? vfs_get_tree+0x90/0x2a0
[ 58.112574][ T5072] ? do_new_mount+0x2be/0xb40
[ 58.117262][ T5072] ? __se_sys_mount+0x2d9/0x3c0
[ 58.122112][ T5072] ? do_syscall_64+0xf5/0x240
[ 58.126793][ T5072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.132874][ T5072] ? __pfx_bch2_fs_open+0x10/0x10
[ 58.137911][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 58.144247][ T5072] ? __pfx_bch2_test_super+0x10/0x10
[ 58.149522][ T5072] ? sget+0x2b8/0x620
[ 58.153505][ T5072] ? __pfx_bch2_noset_super+0x10/0x10
[ 58.158868][ T5072] bch2_mount+0x71d/0x1320
[ 58.163291][ T5072] ? __pfx_bch2_mount+0x10/0x10
[ 58.168146][ T5072] ? vfs_parse_fs_string+0x190/0x230
[ 58.173425][ T5072] ? kfree+0x4e/0x3b0
[ 58.177407][ T5072] ? vfs_parse_fs_string+0x190/0x230
[ 58.182682][ T5072] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 58.188304][ T5072] ? cap_capable+0x1b4/0x250
[ 58.192888][ T5072] legacy_get_tree+0xee/0x190
[ 58.197556][ T5072] ? __pfx_bch2_mount+0x10/0x10
[ 58.202404][ T5072] vfs_get_tree+0x90/0x2a0
[ 58.206902][ T5072] do_new_mount+0x2be/0xb40
[ 58.211395][ T5072] ? ns_capable+0x8a/0xf0
[ 58.215719][ T5072] ? __pfx_do_new_mount+0x10/0x10
[ 58.220743][ T5072] __se_sys_mount+0x2d9/0x3c0
[ 58.225417][ T5072] ? __pfx___se_sys_mount+0x10/0x10
[ 58.230611][ T5072] ? exc_page_fault+0x577/0x8a0
[ 58.235460][ T5072] ? __x64_sys_mount+0x20/0xc0
[ 58.240218][ T5072] do_syscall_64+0xf5/0x240
[ 58.244717][ T5072] ? clear_bhb_loop+0x35/0x90
[ 58.249388][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.255273][ T5072] RIP: 0033:0x7f862d2838ba
[ 58.259678][ T5072] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 58.279274][ T5072] RSP: 002b:00007ffc196899f8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 58.287679][ T5072] RAX: ffffffffffffffda RBX: 00007ffc19689a10 RCX: 00007f862d2838ba
[ 58.295641][ T5072] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007ffc19689a10
[ 58.303606][ T5072] RBP: 0000000000000004 R08: 00007ffc19689a50 R09: 00000000000119f3
[ 58.311565][ T5072] R10: 0000000001200014 R11: 0000000000000282 R12: 0000000001200014
[ 58.319526][ T5072] R13: 00007ffc19689a50 R14: 0000000000000003 R15: 0000000001000000
[ 58.327498][ T5072]
[ 58.330591][ T5072] Kernel Offset: disabled
[ 58.334931][ T5072] Rebooting in 86400 seconds..