./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor477206815
<...>
Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts.
execve("./syz-executor477206815", ["./syz-executor477206815"], 0x7ffc01a71e00 /* 10 vars */) = 0
brk(NULL) = 0x5555842ac000
brk(0x5555842acd00) = 0x5555842acd00
arch_prctl(ARCH_SET_FS, 0x5555842ac380) = 0
set_tid_address(0x5555842ac650) = 5081
set_robust_list(0x5555842ac660, 24) = 0
rseq(0x5555842acca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor477206815", 4096) = 27
getrandom("\x4d\x52\x2f\x8b\x1e\xd4\x88\x15", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555842acd00
brk(0x5555842cdd00) = 0x5555842cdd00
brk(0x5555842ce000) = 0x5555842ce000
mprotect(0x7fc49716d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc48ec00000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fc48ec00000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file0", 0777) = 0
[ 79.094529][ T5081] loop0: detected capacity change from 0 to 32768
[ 79.194169][ T5081] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,str_hash=crc64,nojournal_transaction_names,read_only
[ 79.211316][ T5081] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 79.236115][ T5081] bcachefs (loop0): alloc_read... done
[ 79.242546][ T5081] bcachefs (loop0): stripes_read... done
[ 79.248330][ T5081] bcachefs (loop0): snapshots_read... done
[ 79.258646][ T5081] bcachefs (loop0): journal_replay... done
[ 79.264796][ T5081] bcachefs (loop0): resume_logged_ops... done
[ 79.271085][ T5081] bcachefs (loop0): scanning for old btree nodes: min_version 0.24: unwritten_extents
[ 79.280733][ T5081] bcachefs (loop0): going read-write
[ 79.290893][ T5081] ------------[ cut here ]------------
[ 79.296585][ T5081] UBSAN: shift-out-of-bounds in fs/bcachefs/move.c:986:31
[ 79.303973][ T5081] shift exponent 64 is too large for 64-bit type 'unsigned long long'
[ 79.312400][ T5081] CPU: 0 PID: 5081 Comm: syz-executor477 Not tainted 6.9.0-rc6-syzkaller-00234-g7367539ad4b0 #0
[ 79.323395][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 79.333776][ T5081] Call Trace:
[ 79.337155][ T5081]
[ 79.340120][ T5081] dump_stack_lvl+0x241/0x360
[ 79.344848][ T5081] ? __pfx_dump_stack_lvl+0x10/0x10
[ 79.350270][ T5081] ? __pfx__printk+0x10/0x10
[ 79.357894][ T5081] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 79.364480][ T5081] rewrite_old_nodes_pred+0x45e/0x620
[ 79.369986][ T5081] bch2_move_btree+0x792/0xde0
[ 79.374796][ T5081] ? finish_task_switch+0x1e5/0x870
[ 79.380027][ T5081] ? __pfx_rewrite_old_nodes_pred+0x10/0x10
[ 79.386127][ T5081] ? __pfx_bch2_move_btree+0x10/0x10
[ 79.391494][ T5081] ? __schedule+0x179e/0x4a00
[ 79.396242][ T5081] ? bch2_move_btree+0x247/0xde0
[ 79.401453][ T5081] ? bch2_move_btree+0x4b8/0xde0
[ 79.406547][ T5081] ? __pfx_lock_release+0x10/0x10
[ 79.411752][ T5081] ? __mutex_lock+0x303/0xd70
[ 79.416570][ T5081] bch2_scan_old_btree_nodes+0x14b/0x3c0
[ 79.422237][ T5081] ? bch2_get_next_online_dev+0x47f/0x4b0
[ 79.427994][ T5081] ? __pfx_bch2_scan_old_btree_nodes+0x10/0x10
[ 79.434173][ T5081] ? bch2_do_pending_node_rewrites+0x1f0/0x210
[ 79.440889][ T5081] bch2_fs_recovery+0x534e/0x6390
[ 79.445982][ T5081] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 79.451413][ T5081] ? __pfx_lock_acquire+0x10/0x10
[ 79.456460][ T5081] ? bch2_get_next_online_dev+0x48/0x4b0
[ 79.462110][ T5081] ? __pfx_lock_release+0x10/0x10
[ 79.467254][ T5081] ? __mutex_lock+0x2ef/0xd70
[ 79.471959][ T5081] ? bch2_get_next_online_dev+0x48/0x4b0
[ 79.477730][ T5081] ? bch2_get_next_online_dev+0x47f/0x4b0
[ 79.483608][ T5081] ? llist_reverse_order+0x72/0x90
[ 79.488790][ T5081] bch2_fs_start+0x356/0x5b0
[ 79.493472][ T5081] bch2_fs_open+0xa8d/0xdf0
[ 79.498085][ T5081] ? __pfx_bch2_fs_open+0x10/0x10
[ 79.503163][ T5081] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 79.509548][ T5081] ? __pfx_bch2_test_super+0x10/0x10
[ 79.514879][ T5081] ? sget+0x2b8/0x620
[ 79.518937][ T5081] ? __pfx_bch2_noset_super+0x10/0x10
[ 79.524445][ T5081] bch2_mount+0x71d/0x1320
[ 79.528954][ T5081] ? __pfx_bch2_mount+0x10/0x10
[ 79.533870][ T5081] ? vfs_parse_fs_string+0x190/0x230
[ 79.539272][ T5081] ? kfree+0x4e/0x3a0
[ 79.543289][ T5081] ? vfs_parse_fs_string+0x190/0x230
[ 79.548611][ T5081] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 79.554472][ T5081] ? cap_capable+0x1b4/0x250
[ 79.559134][ T5081] legacy_get_tree+0xee/0x190
[ 79.563939][ T5081] ? __pfx_bch2_mount+0x10/0x10
[ 79.568814][ T5081] vfs_get_tree+0x90/0x2a0
[ 79.573253][ T5081] do_new_mount+0x2be/0xb40
[ 79.577812][ T5081] ? ns_capable+0x8a/0xf0
[ 79.582176][ T5081] ? __pfx_do_new_mount+0x10/0x10
[ 79.587231][ T5081] __se_sys_mount+0x2d9/0x3c0
[ 79.592029][ T5081] ? __pfx___se_sys_mount+0x10/0x10
[ 79.597283][ T5081] ? do_syscall_64+0x102/0x240
[ 79.602153][ T5081] ? __x64_sys_mount+0x20/0xc0
[ 79.607421][ T5081] do_syscall_64+0xf5/0x240
[ 79.612230][ T5081] ? clear_bhb_loop+0x35/0x90
[ 79.616933][ T5081] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.623107][ T5081] RIP: 0033:0x7fc4970e98fa
[ 79.627645][ T5081] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.648966][ T5081] RSP: 002b:00007fff723ad538 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 79.657416][ T5081] RAX: ffffffffffffffda RBX: 00007fff723ad540 RCX: 00007fc4970e98fa
[ 79.665409][ T5081] RDX: 0000000020011a00 RSI: 0000000020000100 RDI: 00007fff723ad540
[ 79.673400][ T5081] RBP: 0000000000000004 R08: 00007fff723ad580 R09: 005f617461646174
[ 79.681389][ T5081] R10: 0000000003004081 R11: 0000000000000282 R12: 00007fff723ad580
[ 79.689421][ T5081] R13: 0000000000000003 R14: 0000000001000000 R15: 0000000000000001
[ 79.697429][ T5081]
[ 79.700718][ T5081] ---[ end trace ]---
[ 79.705120][ T5081] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 79.712366][ T5081] CPU: 0 PID: 5081 Comm: syz-executor477 Not tainted 6.9.0-rc6-syzkaller-00234-g7367539ad4b0 #0
[ 79.722829][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 79.732946][ T5081] Call Trace:
[ 79.737482][ T5081]
[ 79.740447][ T5081] dump_stack_lvl+0x241/0x360
[ 79.745260][ T5081] ? __pfx_dump_stack_lvl+0x10/0x10
[ 79.750635][ T5081] ? __pfx__printk+0x10/0x10
[ 79.755721][ T5081] ? vprintk_emit+0x631/0x770
[ 79.761196][ T5081] ? vscnprintf+0x5d/0x90
[ 79.765631][ T5081] panic+0x349/0x860
[ 79.769569][ T5081] ? check_panic_on_warn+0x21/0xb0
[ 79.774822][ T5081] ? __pfx_panic+0x10/0x10
[ 79.780722][ T5081] ? _printk+0xd5/0x120
[ 79.785027][ T5081] ? __pfx__printk+0x10/0x10
[ 79.789790][ T5081] check_panic_on_warn+0x86/0xb0
[ 79.795050][ T5081] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 79.801895][ T5081] rewrite_old_nodes_pred+0x45e/0x620
[ 79.807692][ T5081] bch2_move_btree+0x792/0xde0
[ 79.812597][ T5081] ? finish_task_switch+0x1e5/0x870
[ 79.817945][ T5081] ? __pfx_rewrite_old_nodes_pred+0x10/0x10
[ 79.823961][ T5081] ? __pfx_bch2_move_btree+0x10/0x10
[ 79.829670][ T5081] ? __schedule+0x179e/0x4a00
[ 79.834402][ T5081] ? bch2_move_btree+0x247/0xde0
[ 79.839666][ T5081] ? bch2_move_btree+0x4b8/0xde0
[ 79.844613][ T5081] ? __pfx_lock_release+0x10/0x10
[ 79.849675][ T5081] ? __mutex_lock+0x303/0xd70
[ 79.854431][ T5081] bch2_scan_old_btree_nodes+0x14b/0x3c0
[ 79.860433][ T5081] ? bch2_get_next_online_dev+0x47f/0x4b0
[ 79.866274][ T5081] ? __pfx_bch2_scan_old_btree_nodes+0x10/0x10
[ 79.873203][ T5081] ? bch2_do_pending_node_rewrites+0x1f0/0x210
[ 79.879519][ T5081] bch2_fs_recovery+0x534e/0x6390
[ 79.884988][ T5081] ? __pfx_bch2_fs_recovery+0x10/0x10
[ 79.890541][ T5081] ? __pfx_lock_acquire+0x10/0x10
[ 79.895774][ T5081] ? bch2_get_next_online_dev+0x48/0x4b0
[ 79.901537][ T5081] ? __pfx_lock_release+0x10/0x10
[ 79.907161][ T5081] ? __mutex_lock+0x2ef/0xd70
[ 79.912247][ T5081] ? bch2_get_next_online_dev+0x48/0x4b0
[ 79.921039][ T5081] ? bch2_get_next_online_dev+0x47f/0x4b0
[ 79.928127][ T5081] ? llist_reverse_order+0x72/0x90
[ 79.934901][ T5081] bch2_fs_start+0x356/0x5b0
[ 79.939902][ T5081] bch2_fs_open+0xa8d/0xdf0
[ 79.944836][ T5081] ? __pfx_bch2_fs_open+0x10/0x10
[ 79.950197][ T5081] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 79.956837][ T5081] ? __pfx_bch2_test_super+0x10/0x10
[ 79.962190][ T5081] ? sget+0x2b8/0x620
[ 79.967153][ T5081] ? __pfx_bch2_noset_super+0x10/0x10
[ 79.972658][ T5081] bch2_mount+0x71d/0x1320
[ 79.977308][ T5081] ? __pfx_bch2_mount+0x10/0x10
[ 79.982747][ T5081] ? vfs_parse_fs_string+0x190/0x230
[ 79.988631][ T5081] ? kfree+0x4e/0x3a0
[ 79.993323][ T5081] ? vfs_parse_fs_string+0x190/0x230
[ 80.000678][ T5081] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 80.006618][ T5081] ? cap_capable+0x1b4/0x250
[ 80.011249][ T5081] legacy_get_tree+0xee/0x190
[ 80.015959][ T5081] ? __pfx_bch2_mount+0x10/0x10
[ 80.020952][ T5081] vfs_get_tree+0x90/0x2a0
[ 80.025396][ T5081] do_new_mount+0x2be/0xb40
[ 80.029983][ T5081] ? ns_capable+0x8a/0xf0
[ 80.035066][ T5081] ? __pfx_do_new_mount+0x10/0x10
[ 80.040229][ T5081] __se_sys_mount+0x2d9/0x3c0
[ 80.045015][ T5081] ? __pfx___se_sys_mount+0x10/0x10
[ 80.051039][ T5081] ? do_syscall_64+0x102/0x240
[ 80.055956][ T5081] ? __x64_sys_mount+0x20/0xc0
[ 80.060745][ T5081] do_syscall_64+0xf5/0x240
[ 80.065268][ T5081] ? clear_bhb_loop+0x35/0x90
[ 80.070263][ T5081] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.076905][ T5081] RIP: 0033:0x7fc4970e98fa
[ 80.081980][ T5081] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 80.101640][ T5081] RSP: 002b:00007fff723ad538 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 80.110444][ T5081] RAX: ffffffffffffffda RBX: 00007fff723ad540 RCX: 00007fc4970e98fa
[ 80.118454][ T5081] RDX: 0000000020011a00 RSI: 0000000020000100 RDI: 00007fff723ad540
[ 80.126549][ T5081] RBP: 0000000000000004 R08: 00007fff723ad580 R09: 005f617461646174
[ 80.134561][ T5081] R10: 0000000003004081 R11: 0000000000000282 R12: 00007fff723ad580
[ 80.142757][ T5081] R13: 0000000000000003 R14: 0000000001000000 R15: 0000000000000001
[ 80.150879][ T5081]
[ 80.154199][ T5081] Kernel Offset: disabled
[ 80.158663][ T5081] Rebooting in 86400 seconds..