./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3975706901
<...>
Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts.
execve("./syz-executor3975706901", ["./syz-executor3975706901"], 0x7fffbe755e70 /* 10 vars */) = 0
brk(NULL) = 0x5555720c4000
brk(0x5555720c4d00) = 0x5555720c4d00
arch_prctl(ARCH_SET_FS, 0x5555720c4380) = 0
set_tid_address(0x5555720c4650) = 5075
set_robust_list(0x5555720c4660, 24) = 0
rseq(0x5555720c4ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3975706901", 4096) = 28
getrandom("\xd0\x0f\x97\x9f\x30\x7d\x20\x26", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555720c4d00
brk(0x5555720e5d00) = 0x5555720e5d00
brk(0x5555720e6000) = 0x5555720e6000
mprotect(0x7f16b9991000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f16b1400000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f16b1400000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 57.246314][ T5075] loop0: detected capacity change from 0 to 32768
[ 57.294582][ T5075] ------------[ cut here ]------------
[ 57.300091][ T5075] UBSAN: shift-out-of-bounds in fs/bcachefs/replicas.c:1010:20
[ 57.307807][ T5075] shift exponent 155 is too large for 32-bit type 'int'
[ 57.314910][ T5075] CPU: 0 PID: 5075 Comm: syz-executor397 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0
[ 57.325345][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 57.335394][ T5075] Call Trace:
[ 57.338663][ T5075]
[ 57.341589][ T5075] dump_stack_lvl+0x241/0x360
[ 57.346276][ T5075] ? __pfx_dump_stack_lvl+0x10/0x10
[ 57.351492][ T5075] ? __pfx__printk+0x10/0x10
[ 57.356087][ T5075] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 57.362054][ T5075] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 57.368392][ T5075] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 57.374842][ T5075] bch2_sb_dev_has_data+0x22a/0x5f0
[ 57.380043][ T5075] member_to_text+0xcb/0x1030
[ 57.384711][ T5075] ? bch2_prt_printf+0x32a/0x610
[ 57.389641][ T5075] ? bch2_sb_validate+0x9b6/0xe10
[ 57.394653][ T5075] ? __bch2_read_super+0xc9a/0x1460
[ 57.399836][ T5075] ? bch2_fs_open+0x246/0xdf0
[ 57.404503][ T5075] ? bch2_mount+0x71d/0x1320
[ 57.409102][ T5075] ? put_dec_trunc8+0x1f1/0x330
[ 57.413937][ T5075] ? __pfx_member_to_text+0x10/0x10
[ 57.419131][ T5075] ? __pfx_format_decode+0x10/0x10
[ 57.424236][ T5075] ? vsnprintf+0x948/0x1da0
[ 57.428760][ T5075] ? __asan_memcpy+0x40/0x70
[ 57.433374][ T5075] ? vsnprintf+0x1ccd/0x1da0
[ 57.437976][ T5075] ? bch2_sb_members_v1_to_text+0x161/0x2f0
[ 57.443879][ T5075] bch2_sb_members_v1_to_text+0x1aa/0x2f0
[ 57.449608][ T5075] ? bch2_prt_printf+0x4eb/0x610
[ 57.454546][ T5075] ? __pfx_bch2_sb_members_v1_to_text+0x10/0x10
[ 57.460796][ T5075] ? bch2_printbuf_tabstop_push+0xc9/0x200
[ 57.466616][ T5075] ? bch2_sb_field_to_text+0x187/0x250
[ 57.472088][ T5075] bch2_sb_field_validate+0x1f7/0x2d0
[ 57.477469][ T5075] ? __pfx_bch2_sb_field_validate+0x10/0x10
[ 57.483371][ T5075] ? submit_bio+0x2a2/0x3c0
[ 57.487873][ T5075] ? bch2_sb_compatible+0x85c/0x3bd0
[ 57.493153][ T5075] ? blk_status_to_errno+0x22/0x80
[ 57.498261][ T5075] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80
[ 57.504668][ T5075] ? bch2_opt_validate+0x2ca/0x300
[ 57.509774][ T5075] bch2_sb_validate+0x9b6/0xe10
[ 57.514628][ T5075] ? __pfx_bch2_sb_validate+0x10/0x10
[ 57.519994][ T5075] ? read_one_super+0xe94/0x3400
[ 57.524928][ T5075] ? bch2_sb_realloc+0x3cd/0x660
[ 57.529864][ T5075] ? kfree+0x4e/0x3b0
[ 57.533843][ T5075] ? bio_init+0x11e/0x250
[ 57.538165][ T5075] ? __pfx_read_one_super+0x10/0x10
[ 57.543354][ T5075] ? bch2_sb_realloc+0x424/0x660
[ 57.548284][ T5075] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 57.553560][ T5075] ? bdev_file_open_by_path+0x37e/0x430
[ 57.559165][ T5075] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 57.565078][ T5075] ? __bch2_read_super+0x29f/0x1460
[ 57.570284][ T5075] ? __asan_memcpy+0x40/0x70
[ 57.574879][ T5075] __bch2_read_super+0xc9a/0x1460
[ 57.579912][ T5075] ? __pfx___bch2_read_super+0x10/0x10
[ 57.585371][ T5075] ? kvmalloc_node+0x72/0x190
[ 57.590073][ T5075] ? rcu_is_watching+0x15/0xb0
[ 57.594917][ T5075] ? trace_kmalloc+0x1f/0xd0
[ 57.599598][ T5075] ? __kmalloc_node+0x270/0x4f0
[ 57.604447][ T5075] ? rcu_is_watching+0x15/0xb0
[ 57.609202][ T5075] ? __bch2_darray_resize+0x13e/0x1e0
[ 57.614571][ T5075] ? __bch2_darray_resize+0x13e/0x1e0
[ 57.619946][ T5075] bch2_fs_open+0x246/0xdf0
[ 57.624454][ T5075] ? kasan_save_track+0x51/0x80
[ 57.629304][ T5075] ? kasan_save_track+0x3f/0x80
[ 57.634151][ T5075] ? kasan_save_free_info+0x40/0x50
[ 57.639343][ T5075] ? poison_slab_object+0xa6/0xe0
[ 57.644367][ T5075] ? __kasan_slab_free+0x37/0x60
[ 57.649313][ T5075] ? kfree+0x153/0x3b0
[ 57.653381][ T5075] ? sget+0x2b8/0x620
[ 57.657353][ T5075] ? bch2_mount+0x652/0x1320
[ 57.661934][ T5075] ? legacy_get_tree+0xee/0x190
[ 57.666781][ T5075] ? vfs_get_tree+0x90/0x2a0
[ 57.671362][ T5075] ? do_new_mount+0x2be/0xb40
[ 57.676030][ T5075] ? __se_sys_mount+0x2d9/0x3c0
[ 57.680874][ T5075] ? do_syscall_64+0xf5/0x240
[ 57.685545][ T5075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.691614][ T5075] ? __pfx_bch2_fs_open+0x10/0x10
[ 57.696649][ T5075] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 57.702983][ T5075] ? __pfx_bch2_test_super+0x10/0x10
[ 57.708272][ T5075] ? sget+0x2b8/0x620
[ 57.712248][ T5075] ? __pfx_bch2_noset_super+0x10/0x10
[ 57.717619][ T5075] bch2_mount+0x71d/0x1320
[ 57.722048][ T5075] ? __pfx_bch2_mount+0x10/0x10
[ 57.726904][ T5075] ? vfs_parse_fs_string+0x190/0x230
[ 57.732223][ T5075] ? kfree+0x4e/0x3b0
[ 57.736209][ T5075] ? vfs_parse_fs_string+0x190/0x230
[ 57.741490][ T5075] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 57.747120][ T5075] ? cap_capable+0x1b4/0x250
[ 57.751708][ T5075] legacy_get_tree+0xee/0x190
[ 57.756404][ T5075] ? __pfx_bch2_mount+0x10/0x10
[ 57.761276][ T5075] vfs_get_tree+0x90/0x2a0
[ 57.765708][ T5075] do_new_mount+0x2be/0xb40
[ 57.770212][ T5075] ? ns_capable+0x8a/0xf0
[ 57.774553][ T5075] ? __pfx_do_new_mount+0x10/0x10
[ 57.779593][ T5075] __se_sys_mount+0x2d9/0x3c0
[ 57.784281][ T5075] ? __pfx___se_sys_mount+0x10/0x10
[ 57.789488][ T5075] ? exc_page_fault+0x577/0x8a0
[ 57.794344][ T5075] ? __x64_sys_mount+0x20/0xc0
[ 57.799106][ T5075] do_syscall_64+0xf5/0x240
[ 57.803628][ T5075] ? clear_bhb_loop+0x35/0x90
[ 57.808333][ T5075] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 57.814237][ T5075] RIP: 0033:0x7f16b990d8ba
[ 57.818758][ T5075] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 57.838373][ T5075] RSP: 002b:00007ffdd930ef68 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 57.846787][ T5075] RAX: ffffffffffffffda RBX: 00007ffdd930ef80 RCX: 00007f16b990d8ba
[ 57.854753][ T5075] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007ffdd930ef80
[ 57.862714][ T5075] RBP: 0000000000000004 R08: 00007ffdd930efc0 R09: 00000000000119f3
[ 57.870686][ T5075] R10: 0000000001200014 R11: 0000000000000282 R12: 0000000001200014
[ 57.878656][ T5075] R13: 00007ffdd930efc0 R14: 0000000000000003 R15: 0000000001000000
[ 57.886629][ T5075]
[ 57.890006][ T5075] ---[ end trace ]---
[ 57.894002][ T5075] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 57.901208][ T5075] CPU: 1 PID: 5075 Comm: syz-executor397 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0
[ 57.911622][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 57.921755][ T5075] Call Trace:
[ 57.925029][ T5075]
[ 57.928040][ T5075] dump_stack_lvl+0x241/0x360
[ 57.932720][ T5075] ? __pfx_dump_stack_lvl+0x10/0x10
[ 57.937911][ T5075] ? __pfx__printk+0x10/0x10
[ 57.942493][ T5075] ? vprintk_emit+0x631/0x770
[ 57.947168][ T5075] ? vscnprintf+0x5d/0x90
[ 57.951579][ T5075] panic+0x349/0x860
[ 57.955469][ T5075] ? check_panic_on_warn+0x21/0xb0
[ 57.960577][ T5075] ? __pfx_panic+0x10/0x10
[ 57.964986][ T5075] ? _printk+0xd5/0x120
[ 57.969135][ T5075] ? __pfx__printk+0x10/0x10
[ 57.973715][ T5075] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 57.979684][ T5075] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 57.986004][ T5075] check_panic_on_warn+0x86/0xb0
[ 57.990936][ T5075] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 57.997355][ T5075] bch2_sb_dev_has_data+0x22a/0x5f0
[ 58.002556][ T5075] member_to_text+0xcb/0x1030
[ 58.007248][ T5075] ? bch2_prt_printf+0x32a/0x610
[ 58.012180][ T5075] ? bch2_sb_validate+0x9b6/0xe10
[ 58.017195][ T5075] ? __bch2_read_super+0xc9a/0x1460
[ 58.022384][ T5075] ? bch2_fs_open+0x246/0xdf0
[ 58.027053][ T5075] ? bch2_mount+0x71d/0x1320
[ 58.031638][ T5075] ? put_dec_trunc8+0x1f1/0x330
[ 58.036481][ T5075] ? __pfx_member_to_text+0x10/0x10
[ 58.041683][ T5075] ? __pfx_format_decode+0x10/0x10
[ 58.046786][ T5075] ? vsnprintf+0x948/0x1da0
[ 58.051281][ T5075] ? __asan_memcpy+0x40/0x70
[ 58.055870][ T5075] ? vsnprintf+0x1ccd/0x1da0
[ 58.060452][ T5075] ? bch2_sb_members_v1_to_text+0x161/0x2f0
[ 58.066354][ T5075] bch2_sb_members_v1_to_text+0x1aa/0x2f0
[ 58.072082][ T5075] ? bch2_prt_printf+0x4eb/0x610
[ 58.077017][ T5075] ? __pfx_bch2_sb_members_v1_to_text+0x10/0x10
[ 58.083269][ T5075] ? bch2_printbuf_tabstop_push+0xc9/0x200
[ 58.089073][ T5075] ? bch2_sb_field_to_text+0x187/0x250
[ 58.094527][ T5075] bch2_sb_field_validate+0x1f7/0x2d0
[ 58.099899][ T5075] ? __pfx_bch2_sb_field_validate+0x10/0x10
[ 58.105785][ T5075] ? submit_bio+0x2a2/0x3c0
[ 58.110282][ T5075] ? bch2_sb_compatible+0x85c/0x3bd0
[ 58.115564][ T5075] ? blk_status_to_errno+0x22/0x80
[ 58.120666][ T5075] ? BCH_SB_BACKGROUND_COMPRESSION_TYPE+0x1b/0x80
[ 58.127590][ T5075] ? bch2_opt_validate+0x2ca/0x300
[ 58.132697][ T5075] bch2_sb_validate+0x9b6/0xe10
[ 58.137544][ T5075] ? __pfx_bch2_sb_validate+0x10/0x10
[ 58.142909][ T5075] ? read_one_super+0xe94/0x3400
[ 58.147835][ T5075] ? bch2_sb_realloc+0x3cd/0x660
[ 58.152767][ T5075] ? kfree+0x4e/0x3b0
[ 58.156744][ T5075] ? bio_init+0x11e/0x250
[ 58.161063][ T5075] ? __pfx_read_one_super+0x10/0x10
[ 58.166255][ T5075] ? bch2_sb_realloc+0x424/0x660
[ 58.171185][ T5075] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 58.176461][ T5075] ? bdev_file_open_by_path+0x37e/0x430
[ 58.181994][ T5075] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 58.187968][ T5075] ? __bch2_read_super+0x29f/0x1460
[ 58.193159][ T5075] ? __asan_memcpy+0x40/0x70
[ 58.197746][ T5075] __bch2_read_super+0xc9a/0x1460
[ 58.202771][ T5075] ? __pfx___bch2_read_super+0x10/0x10
[ 58.208219][ T5075] ? kvmalloc_node+0x72/0x190
[ 58.212925][ T5075] ? rcu_is_watching+0x15/0xb0
[ 58.217767][ T5075] ? trace_kmalloc+0x1f/0xd0
[ 58.222348][ T5075] ? __kmalloc_node+0x270/0x4f0
[ 58.227200][ T5075] ? rcu_is_watching+0x15/0xb0
[ 58.231952][ T5075] ? __bch2_darray_resize+0x13e/0x1e0
[ 58.237321][ T5075] ? __bch2_darray_resize+0x13e/0x1e0
[ 58.242686][ T5075] bch2_fs_open+0x246/0xdf0
[ 58.247186][ T5075] ? kasan_save_track+0x51/0x80
[ 58.252027][ T5075] ? kasan_save_track+0x3f/0x80
[ 58.256875][ T5075] ? kasan_save_free_info+0x40/0x50
[ 58.262068][ T5075] ? poison_slab_object+0xa6/0xe0
[ 58.267082][ T5075] ? __kasan_slab_free+0x37/0x60
[ 58.272012][ T5075] ? kfree+0x153/0x3b0
[ 58.276085][ T5075] ? sget+0x2b8/0x620
[ 58.280056][ T5075] ? bch2_mount+0x652/0x1320
[ 58.284634][ T5075] ? legacy_get_tree+0xee/0x190
[ 58.289476][ T5075] ? vfs_get_tree+0x90/0x2a0
[ 58.294054][ T5075] ? do_new_mount+0x2be/0xb40
[ 58.298721][ T5075] ? __se_sys_mount+0x2d9/0x3c0
[ 58.303568][ T5075] ? do_syscall_64+0xf5/0x240
[ 58.308239][ T5075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.314306][ T5075] ? __pfx_bch2_fs_open+0x10/0x10
[ 58.319336][ T5075] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 58.325671][ T5075] ? __pfx_bch2_test_super+0x10/0x10
[ 58.330947][ T5075] ? sget+0x2b8/0x620
[ 58.334920][ T5075] ? __pfx_bch2_noset_super+0x10/0x10
[ 58.340287][ T5075] bch2_mount+0x71d/0x1320
[ 58.344719][ T5075] ? __pfx_bch2_mount+0x10/0x10
[ 58.349569][ T5075] ? vfs_parse_fs_string+0x190/0x230
[ 58.354844][ T5075] ? kfree+0x4e/0x3b0
[ 58.358822][ T5075] ? vfs_parse_fs_string+0x190/0x230
[ 58.364097][ T5075] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 58.369724][ T5075] ? cap_capable+0x1b4/0x250
[ 58.374307][ T5075] legacy_get_tree+0xee/0x190
[ 58.378971][ T5075] ? __pfx_bch2_mount+0x10/0x10
[ 58.383813][ T5075] vfs_get_tree+0x90/0x2a0
[ 58.388221][ T5075] do_new_mount+0x2be/0xb40
[ 58.392800][ T5075] ? ns_capable+0x8a/0xf0
[ 58.397121][ T5075] ? __pfx_do_new_mount+0x10/0x10
[ 58.402141][ T5075] __se_sys_mount+0x2d9/0x3c0
[ 58.406811][ T5075] ? __pfx___se_sys_mount+0x10/0x10
[ 58.411997][ T5075] ? exc_page_fault+0x577/0x8a0
[ 58.416843][ T5075] ? __x64_sys_mount+0x20/0xc0
[ 58.421596][ T5075] do_syscall_64+0xf5/0x240
[ 58.426094][ T5075] ? clear_bhb_loop+0x35/0x90
[ 58.430765][ T5075] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.436646][ T5075] RIP: 0033:0x7f16b990d8ba
[ 58.441050][ T5075] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 58.461085][ T5075] RSP: 002b:00007ffdd930ef68 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 58.469491][ T5075] RAX: ffffffffffffffda RBX: 00007ffdd930ef80 RCX: 00007f16b990d8ba
[ 58.477460][ T5075] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007ffdd930ef80
[ 58.485423][ T5075] RBP: 0000000000000004 R08: 00007ffdd930efc0 R09: 00000000000119f3
[ 58.493405][ T5075] R10: 0000000001200014 R11: 0000000000000282 R12: 0000000001200014
[ 58.501367][ T5075] R13: 00007ffdd930efc0 R14: 0000000000000003 R15: 0000000001000000
[ 58.509340][ T5075]
[ 58.512439][ T5075] Kernel Offset: disabled
[ 58.516776][ T5075] Rebooting in 86400 seconds..