./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2134324148 <...> DUID 00:04:d9:3a:76:1c:b4:63:be:bc:0b:c2:08:9c:83:36:98:31 forked to background, child pid 4659 [ 30.055052][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.065949][ T4660] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.58' (ECDSA) to the list of known hosts. execve("./syz-executor2134324148", ["./syz-executor2134324148"], 0x7ffffa4cf7c0 /* 10 vars */) = 0 brk(NULL) = 0x555556a0c000 brk(0x555556a0cc40) = 0x555556a0cc40 arch_prctl(ARCH_SET_FS, 0x555556a0c300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2134324148", 4096) = 28 brk(0x555556a2dc40) = 0x555556a2dc40 brk(0x555556a2e000) = 0x555556a2e000 mprotect(0x7fee778c1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee6f3e9000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x80\xff\xff\xff\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7fee6f3e9000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 54.761386][ T4990] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4990 'syz-executor213' [ 54.798529][ T4990] loop0: detected capacity change from 0 to 4096 [ 54.809515][ T4990] ================================================================================ [ 54.819076][ T4990] UBSAN: shift-out-of-bounds in fs/ntfs3/super.c:780:29 [ 54.826091][ T4990] shift exponent 128 is too large for 32-bit type 'int' [ 54.833013][ T4990] CPU: 0 PID: 4990 Comm: syz-executor213 Not tainted 6.4.0-rc4-syzkaller-00204-gc43a6ff9f93f #0 [ 54.843404][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 54.853461][ T4990] Call Trace: [ 54.856738][ T4990] [ 54.859659][ T4990] dump_stack_lvl+0x1e7/0x2d0 [ 54.864376][ T4990] ? nf_tcp_handle_invalid+0x650/0x650 [ 54.869822][ T4990] ? panic+0x770/0x770 [ 54.873870][ T4990] ? out_of_line_wait_on_bit+0x2fb/0x3a0 [ 54.879492][ T4990] ? bit_wait+0xc0/0xc0 [ 54.883661][ T4990] __ubsan_handle_shift_out_of_bounds+0x3c3/0x420 [ 54.890107][ T4990] ntfs_fill_super+0x2867/0x4530 [ 54.895077][ T4990] ? __mutex_unlock_slowpath+0x21c/0x750 [ 54.900727][ T4990] ? put_ntfs+0x2b0/0x2b0 [ 54.905061][ T4990] ? set_blocksize+0x1e2/0x390 [ 54.909826][ T4990] ? sb_set_blocksize+0x99/0x100 [ 54.914756][ T4990] get_tree_bdev+0x405/0x620 [ 54.919340][ T4990] ? put_ntfs+0x2b0/0x2b0 [ 54.923677][ T4990] vfs_get_tree+0x8c/0x270 [ 54.928083][ T4990] do_new_mount+0x28f/0xae0 [ 54.932587][ T4990] ? path_mount+0x5f2/0xf80 [ 54.937102][ T4990] ? do_move_mount_old+0x170/0x170 [ 54.942224][ T4990] ? user_path_at_empty+0x12f/0x180 [ 54.947446][ T4990] __se_sys_mount+0x2d9/0x3c0 [ 54.952312][ T4990] ? __x64_sys_mount+0xc0/0xc0 [ 54.957080][ T4990] ? syscall_enter_from_user_mode+0x32/0x230 [ 54.963064][ T4990] ? __x64_sys_mount+0x20/0xc0 [ 54.967832][ T4990] do_syscall_64+0x41/0xc0 [ 54.972334][ T4990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.978226][ T4990] RIP: 0033:0x7fee77836afa [ 54.982634][ T4990] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 55.002258][ T4990] RSP: 002b:00007ffd36dc13b8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 55.010681][ T4990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fee77836afa [ 55.018817][ T4990] RDX: 000000002001f180 RSI: 000000002001f1c0 RDI: 00007ffd36dc13d0 [ 55.026780][ T4990] RBP: 00007ffd36dc13d0 R08: 00007ffd36dc1410 R09: 000000000001f191 [ 55.034741][ T4990] R10: 000000000000000e R11: 0000000000000286 R12: 0000000000000004 [ 55.042789][ T4990] R13: 0000555556a0c2c0 R14: 000000000000000e R15: 00007ffd36dc1410 [ 55.050765][ T4990] [ 55.054135][ T4990] ================================================================================ [ 55.063540][ T4990] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 55.070731][ T4990] CPU: 0 PID: 4990 Comm: syz-executor213 Not tainted 6.4.0-rc4-syzkaller-00204-gc43a6ff9f93f #0 [ 55.081329][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 55.091399][ T4990] Call Trace: [ 55.094678][ T4990] [ 55.097605][ T4990] dump_stack_lvl+0x1e7/0x2d0 [ 55.102286][ T4990] ? nf_tcp_handle_invalid+0x650/0x650 [ 55.107741][ T4990] ? panic+0x770/0x770 [ 55.111808][ T4990] ? vscnprintf+0x5d/0x80 [ 55.116132][ T4990] panic+0x30f/0x770 [ 55.120106][ T4990] ? check_panic_on_warn+0x21/0xa0 [ 55.125212][ T4990] ? __memcpy_flushcache+0x2b0/0x2b0 [ 55.130491][ T4990] ? dump_stack_lvl+0x253/0x2d0 [ 55.135858][ T4990] ? out_of_line_wait_on_bit+0x2fb/0x3a0 [ 55.141499][ T4990] check_panic_on_warn+0x82/0xa0 [ 55.146433][ T4990] __ubsan_handle_shift_out_of_bounds+0x3e2/0x420 [ 55.152853][ T4990] ntfs_fill_super+0x2867/0x4530 [ 55.157791][ T4990] ? __mutex_unlock_slowpath+0x21c/0x750 [ 55.163434][ T4990] ? put_ntfs+0x2b0/0x2b0 [ 55.167767][ T4990] ? set_blocksize+0x1e2/0x390 [ 55.172551][ T4990] ? sb_set_blocksize+0x99/0x100 [ 55.177482][ T4990] get_tree_bdev+0x405/0x620 [ 55.182064][ T4990] ? put_ntfs+0x2b0/0x2b0 [ 55.186383][ T4990] vfs_get_tree+0x8c/0x270 [ 55.190791][ T4990] do_new_mount+0x28f/0xae0 [ 55.195287][ T4990] ? path_mount+0x5f2/0xf80 [ 55.199784][ T4990] ? do_move_mount_old+0x170/0x170 [ 55.204890][ T4990] ? user_path_at_empty+0x12f/0x180 [ 55.210082][ T4990] __se_sys_mount+0x2d9/0x3c0 [ 55.214754][ T4990] ? __x64_sys_mount+0xc0/0xc0 [ 55.219511][ T4990] ? syscall_enter_from_user_mode+0x32/0x230 [ 55.225484][ T4990] ? __x64_sys_mount+0x20/0xc0 [ 55.230241][ T4990] do_syscall_64+0x41/0xc0 [ 55.234653][ T4990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.240538][ T4990] RIP: 0033:0x7fee77836afa [ 55.244949][ T4990] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 55.264633][ T4990] RSP: 002b:00007ffd36dc13b8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 55.273045][ T4990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fee77836afa [ 55.281098][ T4990] RDX: 000000002001f180 RSI: 000000002001f1c0 RDI: 00007ffd36dc13d0 [ 55.289060][ T4990] RBP: 00007ffd36dc13d0 R08: 00007ffd36dc1410 R09: 000000000001f191 [ 55.297021][ T4990] R10: 000000000000000e R11: 0000000000000286 R12: 0000000000000004 [ 55.305154][ T4990] R13: 0000555556a0c2c0 R14: 000000000000000e R15: 00007ffd36dc1410 [ 55.313127][ T4990] [ 55.316313][ T4990] Kernel Offset: disabled [ 55.320691][ T4990] Rebooting in 86400 seconds..