./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2134324148
<...>
DUID 00:04:d9:3a:76:1c:b4:63:be:bc:0b:c2:08:9c:83:36:98:31
forked to background, child pid 4659
[ 30.055052][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 30.065949][ T4660] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.10.58' (ECDSA) to the list of known hosts.
execve("./syz-executor2134324148", ["./syz-executor2134324148"], 0x7ffffa4cf7c0 /* 10 vars */) = 0
brk(NULL) = 0x555556a0c000
brk(0x555556a0cc40) = 0x555556a0cc40
arch_prctl(ARCH_SET_FS, 0x555556a0c300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2134324148", 4096) = 28
brk(0x555556a2dc40) = 0x555556a2dc40
brk(0x555556a2e000) = 0x555556a2e000
mprotect(0x7fee778c1000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee6f3e9000
write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x80\xff\xff\xff\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152
munmap(0x7fee6f3e9000, 2097152) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 54.761386][ T4990] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4990 'syz-executor213'
[ 54.798529][ T4990] loop0: detected capacity change from 0 to 4096
[ 54.809515][ T4990] ================================================================================
[ 54.819076][ T4990] UBSAN: shift-out-of-bounds in fs/ntfs3/super.c:780:29
[ 54.826091][ T4990] shift exponent 128 is too large for 32-bit type 'int'
[ 54.833013][ T4990] CPU: 0 PID: 4990 Comm: syz-executor213 Not tainted 6.4.0-rc4-syzkaller-00204-gc43a6ff9f93f #0
[ 54.843404][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 54.853461][ T4990] Call Trace:
[ 54.856738][ T4990]
[ 54.859659][ T4990] dump_stack_lvl+0x1e7/0x2d0
[ 54.864376][ T4990] ? nf_tcp_handle_invalid+0x650/0x650
[ 54.869822][ T4990] ? panic+0x770/0x770
[ 54.873870][ T4990] ? out_of_line_wait_on_bit+0x2fb/0x3a0
[ 54.879492][ T4990] ? bit_wait+0xc0/0xc0
[ 54.883661][ T4990] __ubsan_handle_shift_out_of_bounds+0x3c3/0x420
[ 54.890107][ T4990] ntfs_fill_super+0x2867/0x4530
[ 54.895077][ T4990] ? __mutex_unlock_slowpath+0x21c/0x750
[ 54.900727][ T4990] ? put_ntfs+0x2b0/0x2b0
[ 54.905061][ T4990] ? set_blocksize+0x1e2/0x390
[ 54.909826][ T4990] ? sb_set_blocksize+0x99/0x100
[ 54.914756][ T4990] get_tree_bdev+0x405/0x620
[ 54.919340][ T4990] ? put_ntfs+0x2b0/0x2b0
[ 54.923677][ T4990] vfs_get_tree+0x8c/0x270
[ 54.928083][ T4990] do_new_mount+0x28f/0xae0
[ 54.932587][ T4990] ? path_mount+0x5f2/0xf80
[ 54.937102][ T4990] ? do_move_mount_old+0x170/0x170
[ 54.942224][ T4990] ? user_path_at_empty+0x12f/0x180
[ 54.947446][ T4990] __se_sys_mount+0x2d9/0x3c0
[ 54.952312][ T4990] ? __x64_sys_mount+0xc0/0xc0
[ 54.957080][ T4990] ? syscall_enter_from_user_mode+0x32/0x230
[ 54.963064][ T4990] ? __x64_sys_mount+0x20/0xc0
[ 54.967832][ T4990] do_syscall_64+0x41/0xc0
[ 54.972334][ T4990] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 54.978226][ T4990] RIP: 0033:0x7fee77836afa
[ 54.982634][ T4990] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.002258][ T4990] RSP: 002b:00007ffd36dc13b8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 55.010681][ T4990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fee77836afa
[ 55.018817][ T4990] RDX: 000000002001f180 RSI: 000000002001f1c0 RDI: 00007ffd36dc13d0
[ 55.026780][ T4990] RBP: 00007ffd36dc13d0 R08: 00007ffd36dc1410 R09: 000000000001f191
[ 55.034741][ T4990] R10: 000000000000000e R11: 0000000000000286 R12: 0000000000000004
[ 55.042789][ T4990] R13: 0000555556a0c2c0 R14: 000000000000000e R15: 00007ffd36dc1410
[ 55.050765][ T4990]
[ 55.054135][ T4990] ================================================================================
[ 55.063540][ T4990] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 55.070731][ T4990] CPU: 0 PID: 4990 Comm: syz-executor213 Not tainted 6.4.0-rc4-syzkaller-00204-gc43a6ff9f93f #0
[ 55.081329][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 55.091399][ T4990] Call Trace:
[ 55.094678][ T4990]
[ 55.097605][ T4990] dump_stack_lvl+0x1e7/0x2d0
[ 55.102286][ T4990] ? nf_tcp_handle_invalid+0x650/0x650
[ 55.107741][ T4990] ? panic+0x770/0x770
[ 55.111808][ T4990] ? vscnprintf+0x5d/0x80
[ 55.116132][ T4990] panic+0x30f/0x770
[ 55.120106][ T4990] ? check_panic_on_warn+0x21/0xa0
[ 55.125212][ T4990] ? __memcpy_flushcache+0x2b0/0x2b0
[ 55.130491][ T4990] ? dump_stack_lvl+0x253/0x2d0
[ 55.135858][ T4990] ? out_of_line_wait_on_bit+0x2fb/0x3a0
[ 55.141499][ T4990] check_panic_on_warn+0x82/0xa0
[ 55.146433][ T4990] __ubsan_handle_shift_out_of_bounds+0x3e2/0x420
[ 55.152853][ T4990] ntfs_fill_super+0x2867/0x4530
[ 55.157791][ T4990] ? __mutex_unlock_slowpath+0x21c/0x750
[ 55.163434][ T4990] ? put_ntfs+0x2b0/0x2b0
[ 55.167767][ T4990] ? set_blocksize+0x1e2/0x390
[ 55.172551][ T4990] ? sb_set_blocksize+0x99/0x100
[ 55.177482][ T4990] get_tree_bdev+0x405/0x620
[ 55.182064][ T4990] ? put_ntfs+0x2b0/0x2b0
[ 55.186383][ T4990] vfs_get_tree+0x8c/0x270
[ 55.190791][ T4990] do_new_mount+0x28f/0xae0
[ 55.195287][ T4990] ? path_mount+0x5f2/0xf80
[ 55.199784][ T4990] ? do_move_mount_old+0x170/0x170
[ 55.204890][ T4990] ? user_path_at_empty+0x12f/0x180
[ 55.210082][ T4990] __se_sys_mount+0x2d9/0x3c0
[ 55.214754][ T4990] ? __x64_sys_mount+0xc0/0xc0
[ 55.219511][ T4990] ? syscall_enter_from_user_mode+0x32/0x230
[ 55.225484][ T4990] ? __x64_sys_mount+0x20/0xc0
[ 55.230241][ T4990] do_syscall_64+0x41/0xc0
[ 55.234653][ T4990] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.240538][ T4990] RIP: 0033:0x7fee77836afa
[ 55.244949][ T4990] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.264633][ T4990] RSP: 002b:00007ffd36dc13b8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 55.273045][ T4990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fee77836afa
[ 55.281098][ T4990] RDX: 000000002001f180 RSI: 000000002001f1c0 RDI: 00007ffd36dc13d0
[ 55.289060][ T4990] RBP: 00007ffd36dc13d0 R08: 00007ffd36dc1410 R09: 000000000001f191
[ 55.297021][ T4990] R10: 000000000000000e R11: 0000000000000286 R12: 0000000000000004
[ 55.305154][ T4990] R13: 0000555556a0c2c0 R14: 000000000000000e R15: 00007ffd36dc1410
[ 55.313127][ T4990]
[ 55.316313][ T4990] Kernel Offset: disabled
[ 55.320691][ T4990] Rebooting in 86400 seconds..