syzkaller login: [ 86.553415][ T1370] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:48987' (ED25519) to the list of known hosts. executing program [ 87.434973][ T5105] loop0: detected capacity change from 0 to 32768 [ 87.464261][ T5105] ------------[ cut here ]------------ [ 87.466580][ T5105] UBSAN: shift-out-of-bounds in fs/ocfs2/super.c:2360:4 [ 87.479530][ T5105] shift exponent 1548 is too large for 32-bit type 'int' [ 87.481998][ T5105] CPU: 0 UID: 0 PID: 5105 Comm: syz-executor384 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 87.485856][ T5105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.489823][ T5105] Call Trace: [ 87.491143][ T5105] [ 87.492344][ T5105] dump_stack_lvl+0x241/0x360 [ 87.495016][ T5105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.497092][ T5105] ? __pfx__printk+0x10/0x10 [ 87.498925][ T5105] ? __asan_memset+0x23/0x50 [ 87.500807][ T5105] ? lockdep_init_map_type+0xa1/0x910 [ 87.502913][ T5105] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 87.505485][ T5105] ? lockdep_unlock+0x16a/0x300 [ 87.507414][ T5105] ocfs2_fill_super+0x106e/0x5880 [ 87.509441][ T5105] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 87.511539][ T5105] ? __pfx_validate_chain+0x10/0x10 [ 87.513585][ T5105] ? __pfx_validate_chain+0x10/0x10 [ 87.515651][ T5105] ? validate_chain+0x11e/0x5900 [ 87.517585][ T5105] ? __lock_acquire+0x137a/0x2040 [ 87.519610][ T5105] ? __pfx_validate_chain+0x10/0x10 [ 87.521712][ T5105] ? string+0x26a/0x2b0 [ 87.523380][ T5105] ? widen_string+0x3a/0x310 [ 87.525284][ T5105] ? string+0x26a/0x2b0 [ 87.526959][ T5105] ? bdev_name+0x2b1/0x3c0 [ 87.528767][ T5105] ? pointer+0x703/0x1210 [ 87.530532][ T5105] ? __pfx_pointer+0x10/0x10 [ 87.532382][ T5105] ? __pfx_format_decode+0x10/0x10 [ 87.534428][ T5105] ? __lock_acquire+0x137a/0x2040 [ 87.536475][ T5105] ? vsnprintf+0x1ccd/0x1da0 [ 87.538323][ T5105] ? snprintf+0xda/0x120 [ 87.539976][ T5105] ? __pfx_lock_release+0x10/0x10 [ 87.541968][ T5105] ? do_raw_spin_lock+0x14f/0x370 [ 87.543931][ T5105] ? __pfx_snprintf+0x10/0x10 [ 87.545820][ T5105] ? set_blocksize+0x1ff/0x360 [ 87.547708][ T5105] ? sb_set_blocksize+0x98/0xf0 [ 87.549639][ T5105] ? setup_bdev_super+0x4e6/0x5d0 [ 87.551606][ T5105] mount_bdev+0x20a/0x2d0 [ 87.553287][ T5105] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 87.555340][ T5105] ? __pfx_mount_bdev+0x10/0x10 [ 87.557271][ T5105] ? vfs_parse_fs_string+0x190/0x230 [ 87.559329][ T5105] legacy_get_tree+0xee/0x190 [ 87.561199][ T5105] ? __pfx_ocfs2_mount+0x10/0x10 [ 87.563321][ T5105] vfs_get_tree+0x90/0x2a0 [ 87.565159][ T5105] do_new_mount+0x2be/0xb40 [ 87.566991][ T5105] ? __pfx_do_new_mount+0x10/0x10 [ 87.569012][ T5105] __se_sys_mount+0x2d6/0x3c0 [ 87.570930][ T5105] ? __pfx___se_sys_mount+0x10/0x10 [ 87.573067][ T5105] ? do_syscall_64+0x100/0x230 [ 87.575033][ T5105] ? __x64_sys_mount+0x20/0xc0 [ 87.577006][ T5105] do_syscall_64+0xf3/0x230 [ 87.578876][ T5105] ? clear_bhb_loop+0x35/0x90 [ 87.580842][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.583246][ T5105] RIP: 0033:0x7f3399ca6dea [ 87.585128][ T5105] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.592046][ T5105] RSP: 002b:00007ffc0d97c208 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 87.594996][ T5105] RAX: ffffffffffffffda RBX: 00007ffc0d97c220 RCX: 00007f3399ca6dea [ 87.597819][ T5105] RDX: 0000000020004480 RSI: 00000000200044c0 RDI: 00007ffc0d97c220 [ 87.600615][ T5105] RBP: 0000000000000004 R08: 00007ffc0d97c260 R09: 000000000000446c [ 87.603552][ T5105] R10: 0000000002800400 R11: 0000000000000282 R12: 0000000002800400 [ 87.606854][ T5105] R13: 00007ffc0d97c260 R14: 0000000000000003 R15: 0000000001000000 [ 87.610046][ T5105] [ 87.764622][ T5105] ---[ end trace ]--- [ 87.766111][ T5105] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 87.768635][ T5105] CPU: 0 UID: 0 PID: 5105 Comm: syz-executor384 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 87.772792][ T5105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.777031][ T5105] Call Trace: [ 87.778371][ T5105] [ 87.779564][ T5105] dump_stack_lvl+0x241/0x360 [ 87.781458][ T5105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.783519][ T5105] ? __pfx__printk+0x10/0x10 [ 87.785372][ T5105] ? vprintk_emit+0x631/0x770 [ 87.787224][ T5105] ? vscnprintf+0x5d/0x90 [ 87.788941][ T5105] panic+0x349/0x860 [ 87.790478][ T5105] ? check_panic_on_warn+0x21/0xb0 [ 87.792471][ T5105] ? __pfx_panic+0x10/0x10 [ 87.794195][ T5105] ? _printk+0xd5/0x120 [ 87.795823][ T5105] ? __pfx__printk+0x10/0x10 [ 87.797649][ T5105] ? __asan_memset+0x23/0x50 [ 87.799459][ T5105] check_panic_on_warn+0x86/0xb0 [ 87.801398][ T5105] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 87.803881][ T5105] ? lockdep_unlock+0x16a/0x300 [ 87.805756][ T5105] ocfs2_fill_super+0x106e/0x5880 [ 87.807639][ T5105] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 87.809747][ T5105] ? __pfx_validate_chain+0x10/0x10 [ 87.811775][ T5105] ? __pfx_validate_chain+0x10/0x10 [ 87.813867][ T5105] ? validate_chain+0x11e/0x5900 [ 87.815732][ T5105] ? __lock_acquire+0x137a/0x2040 [ 87.817772][ T5105] ? __pfx_validate_chain+0x10/0x10 [ 87.819823][ T5105] ? string+0x26a/0x2b0 [ 87.821471][ T5105] ? widen_string+0x3a/0x310 [ 87.823305][ T5105] ? string+0x26a/0x2b0 [ 87.824982][ T5105] ? bdev_name+0x2b1/0x3c0 [ 87.826745][ T5105] ? pointer+0x703/0x1210 [ 87.828471][ T5105] ? __pfx_pointer+0x10/0x10 [ 87.830278][ T5105] ? __pfx_format_decode+0x10/0x10 [ 87.832265][ T5105] ? __lock_acquire+0x137a/0x2040 [ 87.834220][ T5105] ? vsnprintf+0x1ccd/0x1da0 [ 87.836033][ T5105] ? snprintf+0xda/0x120 [ 87.837664][ T5105] ? __pfx_lock_release+0x10/0x10 [ 87.839432][ T5105] ? do_raw_spin_lock+0x14f/0x370 [ 87.841225][ T5105] ? __pfx_snprintf+0x10/0x10 [ 87.842891][ T5105] ? set_blocksize+0x1ff/0x360 [ 87.844646][ T5105] ? sb_set_blocksize+0x98/0xf0 [ 87.846454][ T5105] ? setup_bdev_super+0x4e6/0x5d0 [ 87.848247][ T5105] mount_bdev+0x20a/0x2d0 [ 87.849779][ T5105] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 87.851635][ T5105] ? __pfx_mount_bdev+0x10/0x10 [ 87.853502][ T5105] ? vfs_parse_fs_string+0x190/0x230 [ 87.855496][ T5105] legacy_get_tree+0xee/0x190 [ 87.857411][ T5105] ? __pfx_ocfs2_mount+0x10/0x10 [ 87.859334][ T5105] vfs_get_tree+0x90/0x2a0 [ 87.861098][ T5105] do_new_mount+0x2be/0xb40 [ 87.862917][ T5105] ? __pfx_do_new_mount+0x10/0x10 [ 87.864953][ T5105] __se_sys_mount+0x2d6/0x3c0 [ 87.866793][ T5105] ? __pfx___se_sys_mount+0x10/0x10 [ 87.868847][ T5105] ? do_syscall_64+0x100/0x230 [ 87.870739][ T5105] ? __x64_sys_mount+0x20/0xc0 [ 87.872581][ T5105] do_syscall_64+0xf3/0x230 [ 87.874312][ T5105] ? clear_bhb_loop+0x35/0x90 [ 87.876168][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.878383][ T5105] RIP: 0033:0x7f3399ca6dea [ 87.880108][ T5105] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.887341][ T5105] RSP: 002b:00007ffc0d97c208 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 87.890280][ T5105] RAX: ffffffffffffffda RBX: 00007ffc0d97c220 RCX: 00007f3399ca6dea [ 87.892880][ T5105] RDX: 0000000020004480 RSI: 00000000200044c0 RDI: 00007ffc0d97c220 [ 87.895454][ T5105] RBP: 0000000000000004 R08: 00007ffc0d97c260 R09: 000000000000446c [ 87.898149][ T5105] R10: 0000000002800400 R11: 0000000000000282 R12: 0000000002800400 [ 87.900942][ T5105] R13: 00007ffc0d97c260 R14: 0000000000000003 R15: 0000000001000000 [ 87.903964][ T5105] [ 87.905456][ T5105] Kernel Offset: disabled [ 87.907213][ T5105] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:56:44 Registers: info registers vcpu 0 CPU#0 RAX=000000000000000c RBX=0000000000000008 RCX=00007fe8861169a4 RDX=0000000000080000 RSI=00007ffddb3d2d58 RDI=00000000ffffff9c RBP=000055a797ece5f0 RSP=00007ffddb3d2c90 R8 =0000000000000008 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000246 R12=0000000000080000 R13=000055a77585db42 R14=0000000000000001 R15=0000000000000000 RIP=00007fe886116a11 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe88655e280 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffddb3d2d48 CR3=000000001bc0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000fffffdff Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddb3dab80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddb3dafc0 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265706f204d4554 5359534255532064 696c61766e69004d 4554535953425553 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f002f73 75622f7379732f00 2f6d657473797362 75732f7379732f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006b636f6c622f73 73616c632f2e2e2f 2e2e2f2e2e2f2e2e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 30706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000123e1 0000000000000000 0000000000000062 642e79726f74616c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 59647a305f474f5b 647c79303a243a78 68303e3b3a38253b 3a253e3a6e68303b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000