./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2525309152 <...> forked to background, child pid 3181 no interfaces have a carrier [ 22.815275][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.826982][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.113' (ECDSA) to the list of known hosts. execve("./syz-executor2525309152", ["./syz-executor2525309152"], 0x7ffcebcd9280 /* 10 vars */) = 0 brk(NULL) = 0x555556002000 brk(0x555556002c40) = 0x555556002c40 arch_prctl(ARCH_SET_FS, 0x555556002300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2525309152", 4096) = 28 brk(0x555556023c40) = 0x555556023c40 brk(0x555556024000) = 0x555556024000 mprotect(0x7f1b086e7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 32768) = 0 pwrite64(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x04\xf7", 14, 0) = 14 pwrite64(3, NULL, 0, 16384) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 42.430862][ T3610] loop0: detected capacity change from 0 to 64 [ 42.442824][ T3610] ================================================================================ [ 42.452692][ T3610] UBSAN: shift-out-of-bounds in fs/ntfs3/super.c:675:13 [ 42.460011][ T3610] shift exponent -247 is negative [ 42.465224][ T3610] CPU: 0 PID: 3610 Comm: syz-executor252 Not tainted 6.0.0-rc2-syzkaller-00191-g3e5c673f0d75 #0 [ 42.476018][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 42.486071][ T3610] Call Trace: [ 42.489342][ T3610] [ 42.492265][ T3610] dump_stack_lvl+0xcd/0x134 [ 42.496889][ T3610] ubsan_epilogue+0xb/0x50 [ 42.501309][ T3610] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 42.508098][ T3610] ntfs_fill_super.cold+0x147/0x56c [ 42.513299][ T3610] ? snprintf+0xbb/0xf0 [ 42.517529][ T3610] ? put_ntfs+0x330/0x330 [ 42.522217][ T3610] ? set_blocksize+0x2e5/0x370 [ 42.527071][ T3610] get_tree_bdev+0x440/0x760 [ 42.531660][ T3610] ? put_ntfs+0x330/0x330 [ 42.535981][ T3610] vfs_get_tree+0x89/0x2f0 [ 42.540387][ T3610] path_mount+0x1326/0x1e20 [ 42.544904][ T3610] ? kmem_cache_free+0xeb/0x5b0 [ 42.549743][ T3610] ? finish_automount+0x960/0x960 [ 42.555711][ T3610] ? putname+0xfe/0x140 [ 42.560051][ T3610] __x64_sys_mount+0x27f/0x300 [ 42.564892][ T3610] ? copy_mnt_ns+0xae0/0xae0 [ 42.569469][ T3610] ? lockdep_hardirqs_on+0x79/0x100 [ 42.574849][ T3610] ? _raw_spin_unlock_irq+0x2a/0x40 [ 42.580203][ T3610] ? ptrace_notify+0xfa/0x140 [ 42.584977][ T3610] do_syscall_64+0x35/0xb0 [ 42.589467][ T3610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.595348][ T3610] RIP: 0033:0x7f1b0867c10a [ 42.599749][ T3610] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.619433][ T3610] RSP: 002b:00007ffe209f3db8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 42.627854][ T3610] RAX: ffffffffffffffda RBX: 00007ffe209f3e10 RCX: 00007f1b0867c10a [ 42.635910][ T3610] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe209f3dd0 [ 42.643889][ T3610] RBP: 00007ffe209f3dd0 R08: 00007ffe209f3e10 R09: 0000000000000000 [ 42.651849][ T3610] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000230 [ 42.659891][ T3610] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000002 [ 42.667963][ T3610] [ 42.671482][ T3610] ================================================================================ [ 42.680797][ T3610] Kernel panic - not syncing: panic_on_warn set ... [ 42.687733][ T3610] CPU: 0 PID: 3610 Comm: syz-executor252 Not tainted 6.0.0-rc2-syzkaller-00191-g3e5c673f0d75 #0 [ 42.698425][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 42.708504][ T3610] Call Trace: [ 42.711778][ T3610] [ 42.714702][ T3610] dump_stack_lvl+0xcd/0x134 [ 42.719294][ T3610] panic+0x2c8/0x627 [ 42.723655][ T3610] ? panic_print_sys_info.part.0+0x10b/0x10b [ 42.730170][ T3610] ? ubsan_epilogue+0x3e/0x50 [ 42.736333][ T3610] ubsan_epilogue+0x4a/0x50 [ 42.740839][ T3610] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 42.747619][ T3610] ntfs_fill_super.cold+0x147/0x56c [ 42.752839][ T3610] ? snprintf+0xbb/0xf0 [ 42.757169][ T3610] ? put_ntfs+0x330/0x330 [ 42.761501][ T3610] ? set_blocksize+0x2e5/0x370 [ 42.766376][ T3610] get_tree_bdev+0x440/0x760 [ 42.770976][ T3610] ? put_ntfs+0x330/0x330 [ 42.775308][ T3610] vfs_get_tree+0x89/0x2f0 [ 42.779722][ T3610] path_mount+0x1326/0x1e20 [ 42.784227][ T3610] ? kmem_cache_free+0xeb/0x5b0 [ 42.789163][ T3610] ? finish_automount+0x960/0x960 [ 42.794186][ T3610] ? putname+0xfe/0x140 [ 42.798344][ T3610] __x64_sys_mount+0x27f/0x300 [ 42.803195][ T3610] ? copy_mnt_ns+0xae0/0xae0 [ 42.808130][ T3610] ? lockdep_hardirqs_on+0x79/0x100 [ 42.813436][ T3610] ? _raw_spin_unlock_irq+0x2a/0x40 [ 42.818634][ T3610] ? ptrace_notify+0xfa/0x140 [ 42.823317][ T3610] do_syscall_64+0x35/0xb0 [ 42.827751][ T3610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.833653][ T3610] RIP: 0033:0x7f1b0867c10a [ 42.838090][ T3610] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.857792][ T3610] RSP: 002b:00007ffe209f3db8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 42.866210][ T3610] RAX: ffffffffffffffda RBX: 00007ffe209f3e10 RCX: 00007f1b0867c10a [ 42.874179][ T3610] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe209f3dd0 [ 42.882323][ T3610] RBP: 00007ffe209f3dd0 R08: 00007ffe209f3e10 R09: 0000000000000000 [ 42.890467][ T3610] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000230 [ 42.898441][ T3610] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000002 [ 42.906446][ T3610] [ 42.910237][ T3610] Kernel Offset: disabled [ 42.914645][ T3610] Rebooting in 86400 seconds..