./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2693383514
<...>
Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts.
execve("./syz-executor2693383514", ["./syz-executor2693383514"], 0x7ffd88983cb0 /* 10 vars */) = 0
brk(NULL) = 0x555571ae3000
brk(0x555571ae3d00) = 0x555571ae3d00
arch_prctl(ARCH_SET_FS, 0x555571ae3380) = 0
set_tid_address(0x555571ae3650) = 5070
set_robust_list(0x555571ae3660, 24) = 0
rseq(0x555571ae3ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2693383514", 4096) = 28
getrandom("\x26\x05\x2f\x14\x21\x9a\xc6\xfc", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555571ae3d00
brk(0x555571b04d00) = 0x555571b04d00
brk(0x555571b05000) = 0x555571b05000
mprotect(0x7f218b8d0000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2183400000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f2183400000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file0", 0777) = 0
[ 56.478572][ T5070] loop0: detected capacity change from 0 to 32768
[ 56.515415][ T5070] ------------[ cut here ]------------
[ 56.521034][ T5070] UBSAN: shift-out-of-bounds in fs/bcachefs/replicas.c:1010:20
[ 56.529598][ T5070] shift exponent 155 is too large for 32-bit type 'int'
[ 56.536979][ T5070] CPU: 0 PID: 5070 Comm: syz-executor269 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0
[ 56.547515][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 56.557599][ T5070] Call Trace:
[ 56.560889][ T5070]
[ 56.563961][ T5070] dump_stack_lvl+0x241/0x360
[ 56.568864][ T5070] ? __pfx_dump_stack_lvl+0x10/0x10
[ 56.574159][ T5070] ? __pfx__printk+0x10/0x10
[ 56.579074][ T5070] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 56.585264][ T5070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 56.591594][ T5070] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 56.598119][ T5070] bch2_sb_dev_has_data+0x22a/0x5f0
[ 56.603326][ T5070] member_to_text+0xcb/0x1030
[ 56.608092][ T5070] ? bch2_prt_printf+0x32a/0x610
[ 56.613024][ T5070] ? bch2_sb_validate+0x9b6/0xe10
[ 56.618063][ T5070] ? __bch2_read_super+0xc9a/0x1460
[ 56.623264][ T5070] ? bch2_fs_open+0x246/0xdf0
[ 56.627941][ T5070] ? bch2_mount+0x71d/0x1320
[ 56.632530][ T5070] ? put_dec_trunc8+0x1f1/0x330
[ 56.637390][ T5070] ? __pfx_member_to_text+0x10/0x10
[ 56.642599][ T5070] ? __pfx_format_decode+0x10/0x10
[ 56.647707][ T5070] ? vsnprintf+0x948/0x1da0
[ 56.652226][ T5070] ? __asan_memcpy+0x40/0x70
[ 56.656824][ T5070] ? vsnprintf+0x1ccd/0x1da0
[ 56.661426][ T5070] ? bch2_sb_members_v1_to_text+0x161/0x2f0
[ 56.667451][ T5070] bch2_sb_members_v1_to_text+0x1aa/0x2f0
[ 56.673458][ T5070] ? bch2_prt_printf+0x4eb/0x610
[ 56.678429][ T5070] ? __pfx_bch2_sb_members_v1_to_text+0x10/0x10
[ 56.685498][ T5070] ? bch2_printbuf_tabstop_push+0xc9/0x200
[ 56.691318][ T5070] ? bch2_sb_field_to_text+0x187/0x250
[ 56.696953][ T5070] bch2_sb_field_validate+0x1f7/0x2d0
[ 56.702430][ T5070] ? __pfx_bch2_sb_field_validate+0x10/0x10
[ 56.708339][ T5070] ? submit_bio+0x2a2/0x3c0
[ 56.712953][ T5070] ? bch2_sb_compatible+0x85c/0x3bd0
[ 56.718272][ T5070] ? blk_status_to_errno+0x22/0x80
[ 56.723410][ T5070] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80
[ 56.729829][ T5070] ? bch2_opt_validate+0x2ca/0x300
[ 56.735343][ T5070] bch2_sb_validate+0x9b6/0xe10
[ 56.740545][ T5070] ? __pfx_bch2_sb_validate+0x10/0x10
[ 56.745932][ T5070] ? read_one_super+0xe94/0x3400
[ 56.750894][ T5070] ? bch2_sb_realloc+0x3cd/0x660
[ 56.755856][ T5070] ? kfree+0x4e/0x3b0
[ 56.759852][ T5070] ? bio_init+0x11e/0x250
[ 56.764189][ T5070] ? __pfx_read_one_super+0x10/0x10
[ 56.769441][ T5070] ? bch2_sb_realloc+0x424/0x660
[ 56.774416][ T5070] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 56.779964][ T5070] ? bdev_file_open_by_path+0x37e/0x430
[ 56.785509][ T5070] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 56.791394][ T5070] ? __bch2_read_super+0x29f/0x1460
[ 56.796588][ T5070] ? __asan_memcpy+0x40/0x70
[ 56.801185][ T5070] __bch2_read_super+0xc9a/0x1460
[ 56.806215][ T5070] ? __pfx___bch2_read_super+0x10/0x10
[ 56.811665][ T5070] ? kvmalloc_node+0x72/0x190
[ 56.816801][ T5070] ? rcu_is_watching+0x15/0xb0
[ 56.821647][ T5070] ? trace_kmalloc+0x1f/0xd0
[ 56.826232][ T5070] ? __kmalloc_node+0x270/0x4f0
[ 56.831099][ T5070] ? rcu_is_watching+0x15/0xb0
[ 56.835857][ T5070] ? __bch2_darray_resize+0x13e/0x1e0
[ 56.841226][ T5070] ? __bch2_darray_resize+0x13e/0x1e0
[ 56.846595][ T5070] bch2_fs_open+0x246/0xdf0
[ 56.851101][ T5070] ? kasan_save_track+0x51/0x80
[ 56.855947][ T5070] ? kasan_save_track+0x3f/0x80
[ 56.860786][ T5070] ? kasan_save_free_info+0x40/0x50
[ 56.866090][ T5070] ? poison_slab_object+0xa6/0xe0
[ 56.871148][ T5070] ? __kasan_slab_free+0x37/0x60
[ 56.876117][ T5070] ? kfree+0x153/0x3b0
[ 56.880196][ T5070] ? sget+0x2b8/0x620
[ 56.884189][ T5070] ? bch2_mount+0x652/0x1320
[ 56.890708][ T5070] ? legacy_get_tree+0xee/0x190
[ 56.895572][ T5070] ? vfs_get_tree+0x90/0x2a0
[ 56.900363][ T5070] ? do_new_mount+0x2be/0xb40
[ 56.905036][ T5070] ? __se_sys_mount+0x2d9/0x3c0
[ 56.909879][ T5070] ? do_syscall_64+0xf5/0x240
[ 56.914590][ T5070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 56.920677][ T5070] ? __pfx_bch2_fs_open+0x10/0x10
[ 56.925750][ T5070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 56.932090][ T5070] ? __pfx_bch2_test_super+0x10/0x10
[ 56.937371][ T5070] ? sget+0x2b8/0x620
[ 56.941347][ T5070] ? __pfx_bch2_noset_super+0x10/0x10
[ 56.946714][ T5070] bch2_mount+0x71d/0x1320
[ 56.951144][ T5070] ? __pfx_bch2_mount+0x10/0x10
[ 56.956001][ T5070] ? vfs_parse_fs_string+0x190/0x230
[ 56.961281][ T5070] ? kfree+0x4e/0x3b0
[ 56.965264][ T5070] ? vfs_parse_fs_string+0x190/0x230
[ 56.970545][ T5070] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 56.976169][ T5070] ? cap_capable+0x1b4/0x250
[ 56.981014][ T5070] legacy_get_tree+0xee/0x190
[ 56.985685][ T5070] ? __pfx_bch2_mount+0x10/0x10
[ 56.990527][ T5070] vfs_get_tree+0x90/0x2a0
[ 56.995052][ T5070] do_new_mount+0x2be/0xb40
[ 56.999611][ T5070] ? ns_capable+0x8a/0xf0
[ 57.004109][ T5070] ? __pfx_do_new_mount+0x10/0x10
[ 57.009220][ T5070] __se_sys_mount+0x2d9/0x3c0
[ 57.013895][ T5070] ? __pfx___se_sys_mount+0x10/0x10
[ 57.019085][ T5070] ? exc_page_fault+0x577/0x8a0
[ 57.023933][ T5070] ? __x64_sys_mount+0x20/0xc0
[ 57.028692][ T5070] do_syscall_64+0xf5/0x240
[ 57.033279][ T5070] ? clear_bhb_loop+0x35/0x90
[ 57.037953][ T5070] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.043841][ T5070] RIP: 0033:0x7f218b84c8ba
[ 57.048268][ T5070] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 57.068244][ T5070] RSP: 002b:00007ffdd2f02a78 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 57.076685][ T5070] RAX: ffffffffffffffda RBX: 00007ffdd2f02a90 RCX: 00007f218b84c8ba
[ 57.084663][ T5070] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007ffdd2f02a90
[ 57.092630][ T5070] RBP: 0000000000000004 R08: 00007ffdd2f02ad0 R09: 00000000000119f3
[ 57.100595][ T5070] R10: 0000000001200014 R11: 0000000000000282 R12: 0000000001200014
[ 57.108559][ T5070] R13: 00007ffdd2f02ad0 R14: 0000000000000003 R15: 0000000001000000
[ 57.116542][ T5070]
[ 57.119981][ T5070] ---[ end trace ]---
[ 57.124381][ T5070] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 57.131688][ T5070] CPU: 0 PID: 5070 Comm: syz-executor269 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0
[ 57.142116][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 57.152439][ T5070] Call Trace:
[ 57.155802][ T5070]
[ 57.158728][ T5070] dump_stack_lvl+0x241/0x360
[ 57.163521][ T5070] ? __pfx_dump_stack_lvl+0x10/0x10
[ 57.168743][ T5070] ? __pfx__printk+0x10/0x10
[ 57.173353][ T5070] ? vprintk_emit+0x631/0x770
[ 57.178034][ T5070] ? vscnprintf+0x5d/0x90
[ 57.182366][ T5070] panic+0x349/0x860
[ 57.186256][ T5070] ? check_panic_on_warn+0x21/0xb0
[ 57.191361][ T5070] ? __pfx_panic+0x10/0x10
[ 57.195763][ T5070] ? _printk+0xd5/0x120
[ 57.199907][ T5070] ? __pfx__printk+0x10/0x10
[ 57.204491][ T5070] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 57.210530][ T5070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 57.216856][ T5070] check_panic_on_warn+0x86/0xb0
[ 57.221779][ T5070] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 57.228191][ T5070] bch2_sb_dev_has_data+0x22a/0x5f0
[ 57.233389][ T5070] member_to_text+0xcb/0x1030
[ 57.238050][ T5070] ? bch2_prt_printf+0x32a/0x610
[ 57.242971][ T5070] ? bch2_sb_validate+0x9b6/0xe10
[ 57.247978][ T5070] ? __bch2_read_super+0xc9a/0x1460
[ 57.253165][ T5070] ? bch2_fs_open+0x246/0xdf0
[ 57.257853][ T5070] ? bch2_mount+0x71d/0x1320
[ 57.262441][ T5070] ? put_dec_trunc8+0x1f1/0x330
[ 57.267370][ T5070] ? __pfx_member_to_text+0x10/0x10
[ 57.272678][ T5070] ? __pfx_format_decode+0x10/0x10
[ 57.277794][ T5070] ? vsnprintf+0x948/0x1da0
[ 57.282285][ T5070] ? __asan_memcpy+0x40/0x70
[ 57.286861][ T5070] ? vsnprintf+0x1ccd/0x1da0
[ 57.291435][ T5070] ? bch2_sb_members_v1_to_text+0x161/0x2f0
[ 57.297319][ T5070] bch2_sb_members_v1_to_text+0x1aa/0x2f0
[ 57.303035][ T5070] ? bch2_prt_printf+0x4eb/0x610
[ 57.307959][ T5070] ? __pfx_bch2_sb_members_v1_to_text+0x10/0x10
[ 57.314193][ T5070] ? bch2_printbuf_tabstop_push+0xc9/0x200
[ 57.319989][ T5070] ? bch2_sb_field_to_text+0x187/0x250
[ 57.325448][ T5070] bch2_sb_field_validate+0x1f7/0x2d0
[ 57.330812][ T5070] ? __pfx_bch2_sb_field_validate+0x10/0x10
[ 57.336688][ T5070] ? submit_bio+0x2a2/0x3c0
[ 57.341175][ T5070] ? bch2_sb_compatible+0x85c/0x3bd0
[ 57.346462][ T5070] ? blk_status_to_errno+0x22/0x80
[ 57.351558][ T5070] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80
[ 57.357951][ T5070] ? bch2_opt_validate+0x2ca/0x300
[ 57.363047][ T5070] bch2_sb_validate+0x9b6/0xe10
[ 57.367901][ T5070] ? __pfx_bch2_sb_validate+0x10/0x10
[ 57.373254][ T5070] ? read_one_super+0xe94/0x3400
[ 57.378199][ T5070] ? bch2_sb_realloc+0x3cd/0x660
[ 57.383166][ T5070] ? kfree+0x4e/0x3b0
[ 57.387169][ T5070] ? bio_init+0x11e/0x250
[ 57.392267][ T5070] ? __pfx_read_one_super+0x10/0x10
[ 57.397455][ T5070] ? bch2_sb_realloc+0x424/0x660
[ 57.402382][ T5070] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 57.407739][ T5070] ? bdev_file_open_by_path+0x37e/0x430
[ 57.413268][ T5070] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 57.419175][ T5070] ? __bch2_read_super+0x29f/0x1460
[ 57.424372][ T5070] ? __asan_memcpy+0x40/0x70
[ 57.428964][ T5070] __bch2_read_super+0xc9a/0x1460
[ 57.434006][ T5070] ? __pfx___bch2_read_super+0x10/0x10
[ 57.439579][ T5070] ? kvmalloc_node+0x72/0x190
[ 57.444303][ T5070] ? rcu_is_watching+0x15/0xb0
[ 57.449129][ T5070] ? trace_kmalloc+0x1f/0xd0
[ 57.453742][ T5070] ? __kmalloc_node+0x270/0x4f0
[ 57.458617][ T5070] ? rcu_is_watching+0x15/0xb0
[ 57.463371][ T5070] ? __bch2_darray_resize+0x13e/0x1e0
[ 57.468763][ T5070] ? __bch2_darray_resize+0x13e/0x1e0
[ 57.474142][ T5070] bch2_fs_open+0x246/0xdf0
[ 57.478638][ T5070] ? kasan_save_track+0x51/0x80
[ 57.483472][ T5070] ? kasan_save_track+0x3f/0x80
[ 57.488307][ T5070] ? kasan_save_free_info+0x40/0x50
[ 57.493507][ T5070] ? poison_slab_object+0xa6/0xe0
[ 57.498519][ T5070] ? __kasan_slab_free+0x37/0x60
[ 57.503436][ T5070] ? kfree+0x153/0x3b0
[ 57.507487][ T5070] ? sget+0x2b8/0x620
[ 57.511467][ T5070] ? bch2_mount+0x652/0x1320
[ 57.516139][ T5070] ? legacy_get_tree+0xee/0x190
[ 57.521001][ T5070] ? vfs_get_tree+0x90/0x2a0
[ 57.525609][ T5070] ? do_new_mount+0x2be/0xb40
[ 57.530274][ T5070] ? __se_sys_mount+0x2d9/0x3c0
[ 57.535207][ T5070] ? do_syscall_64+0xf5/0x240
[ 57.539972][ T5070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.546117][ T5070] ? __pfx_bch2_fs_open+0x10/0x10
[ 57.551144][ T5070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 57.557463][ T5070] ? __pfx_bch2_test_super+0x10/0x10
[ 57.562735][ T5070] ? sget+0x2b8/0x620
[ 57.566699][ T5070] ? __pfx_bch2_noset_super+0x10/0x10
[ 57.572071][ T5070] bch2_mount+0x71d/0x1320
[ 57.576496][ T5070] ? __pfx_bch2_mount+0x10/0x10
[ 57.581348][ T5070] ? vfs_parse_fs_string+0x190/0x230
[ 57.586649][ T5070] ? kfree+0x4e/0x3b0
[ 57.590623][ T5070] ? vfs_parse_fs_string+0x190/0x230
[ 57.595914][ T5070] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 57.601582][ T5070] ? cap_capable+0x1b4/0x250
[ 57.606173][ T5070] legacy_get_tree+0xee/0x190
[ 57.610842][ T5070] ? __pfx_bch2_mount+0x10/0x10
[ 57.615678][ T5070] vfs_get_tree+0x90/0x2a0
[ 57.620536][ T5070] do_new_mount+0x2be/0xb40
[ 57.625031][ T5070] ? ns_capable+0x8a/0xf0
[ 57.629363][ T5070] ? __pfx_do_new_mount+0x10/0x10
[ 57.634383][ T5070] __se_sys_mount+0x2d9/0x3c0
[ 57.639057][ T5070] ? __pfx___se_sys_mount+0x10/0x10
[ 57.644329][ T5070] ? exc_page_fault+0x577/0x8a0
[ 57.649170][ T5070] ? __x64_sys_mount+0x20/0xc0
[ 57.653923][ T5070] do_syscall_64+0xf5/0x240
[ 57.658435][ T5070] ? clear_bhb_loop+0x35/0x90
[ 57.663097][ T5070] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.669064][ T5070] RIP: 0033:0x7f218b84c8ba
[ 57.673561][ T5070] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 57.693170][ T5070] RSP: 002b:00007ffdd2f02a78 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 57.701584][ T5070] RAX: ffffffffffffffda RBX: 00007ffdd2f02a90 RCX: 00007f218b84c8ba
[ 57.709636][ T5070] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007ffdd2f02a90
[ 57.717598][ T5070] RBP: 0000000000000004 R08: 00007ffdd2f02ad0 R09: 00000000000119f3
[ 57.725551][ T5070] R10: 0000000001200014 R11: 0000000000000282 R12: 0000000001200014
[ 57.733500][ T5070] R13: 00007ffdd2f02ad0 R14: 0000000000000003 R15: 0000000001000000
[ 57.741518][ T5070]
[ 57.744923][ T5070] Kernel Offset: disabled
[ 57.749263][ T5070] Rebooting in 86400 seconds..