./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1471251222 <...> Warning: Permanently added '10.128.1.43' (ECDSA) to the list of known hosts. execve("./syz-executor1471251222", ["./syz-executor1471251222"], 0x7ffc7a1174f0 /* 10 vars */) = 0 brk(NULL) = 0x5555571b9000 brk(0x5555571b9c40) = 0x5555571b9c40 arch_prctl(ARCH_SET_FS, 0x5555571b9300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1471251222", 4096) = 28 brk(0x5555571dac40) = 0x5555571dac40 brk(0x5555571db000) = 0x5555571db000 mprotect(0x7fa5a272f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa59a256000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\xff\x03\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xc8\x0f\x00\x00\x8f\x24\x2d\x5f\x49\x6d\x50\x0b\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7fa59a256000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 syzkaller login: [ 70.140920][ T4992] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4992 'syz-executor147' ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 [ 70.183881][ T4992] loop0: detected capacity change from 0 to 4096 [ 70.195928][ T4992] ================================================================================ [ 70.205381][ T4992] UBSAN: shift-out-of-bounds in fs/ntfs3/super.c:799:9 [ 70.212620][ T4992] shift exponent 56 is too large for 32-bit type 'unsigned int' [ 70.220441][ T4992] CPU: 0 PID: 4992 Comm: syz-executor147 Not tainted 6.3.0-syzkaller-13027-g1a5304fecee5 #0 [ 70.230545][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 70.240617][ T4992] Call Trace: [ 70.243916][ T4992] [ 70.246866][ T4992] dump_stack_lvl+0x1e7/0x2d0 [ 70.251612][ T4992] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.257096][ T4992] ? panic+0x770/0x770 [ 70.261395][ T4992] ? __bio_add_page+0x310/0x310 [ 70.266273][ T4992] __ubsan_handle_shift_out_of_bounds+0x3c3/0x420 [ 70.272987][ T4992] ntfs_fill_super+0x2baf/0x4530 [ 70.277992][ T4992] ? put_ntfs+0x2b0/0x2b0 [ 70.282503][ T4992] ? set_blocksize+0x1e2/0x390 [ 70.287397][ T4992] ? sb_set_blocksize+0x99/0x100 [ 70.292393][ T4992] get_tree_bdev+0x405/0x620 [ 70.297031][ T4992] ? put_ntfs+0x2b0/0x2b0 [ 70.301669][ T4992] vfs_get_tree+0x8c/0x270 [ 70.306139][ T4992] do_new_mount+0x28f/0xae0 [ 70.310986][ T4992] ? path_mount+0x5f2/0xf80 [ 70.315540][ T4992] ? do_move_mount_old+0x170/0x170 [ 70.320714][ T4992] ? user_path_at_empty+0x12f/0x180 [ 70.326043][ T4992] __se_sys_mount+0x2d9/0x3c0 [ 70.330881][ T4992] ? __x64_sys_mount+0xc0/0xc0 [ 70.335928][ T4992] ? syscall_enter_from_user_mode+0x32/0x230 [ 70.342397][ T4992] ? __x64_sys_mount+0x20/0xc0 [ 70.347312][ T4992] do_syscall_64+0x41/0xc0 [ 70.351773][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.357725][ T4992] RIP: 0033:0x7fa5a26a3afa [ 70.362151][ T4992] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.381867][ T4992] RSP: 002b:00007ffd75486158 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 70.390293][ T4992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa5a26a3afa [ 70.398359][ T4992] RDX: 000000002001f740 RSI: 0000000020000180 RDI: 00007ffd75486170 [ 70.406335][ T4992] RBP: 00007ffd75486170 R08: 00007ffd754861b0 R09: 000000000001f76a [ 70.414335][ T4992] R10: 0000000000004010 R11: 0000000000000286 R12: 0000000000000004 [ 70.422331][ T4992] R13: 00005555571b92c0 R14: 0000000000004010 R15: 00007ffd754861b0 [ 70.430328][ T4992] [ 70.433640][ T4992] ================================================================================ [ 70.443173][ T4992] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 70.450396][ T4992] CPU: 0 PID: 4992 Comm: syz-executor147 Not tainted 6.3.0-syzkaller-13027-g1a5304fecee5 #0 [ 70.460474][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 70.470543][ T4992] Call Trace: [ 70.473825][ T4992] [ 70.476765][ T4992] dump_stack_lvl+0x1e7/0x2d0 [ 70.481506][ T4992] ? nf_tcp_handle_invalid+0x650/0x650 [ 70.487000][ T4992] ? panic+0x770/0x770 [ 70.491085][ T4992] ? vscnprintf+0x5d/0x80 [ 70.495441][ T4992] panic+0x30f/0x770 [ 70.499346][ T4992] ? check_panic_on_warn+0x21/0xa0 [ 70.504468][ T4992] ? __memcpy_flushcache+0x2b0/0x2b0 [ 70.509761][ T4992] ? dump_stack_lvl+0x253/0x2d0 [ 70.514633][ T4992] check_panic_on_warn+0x82/0xa0 [ 70.519595][ T4992] __ubsan_handle_shift_out_of_bounds+0x3e2/0x420 [ 70.526056][ T4992] ntfs_fill_super+0x2baf/0x4530 [ 70.531033][ T4992] ? put_ntfs+0x2b0/0x2b0 [ 70.535381][ T4992] ? set_blocksize+0x1e2/0x390 [ 70.540165][ T4992] ? sb_set_blocksize+0x99/0x100 [ 70.545130][ T4992] get_tree_bdev+0x405/0x620 [ 70.549767][ T4992] ? put_ntfs+0x2b0/0x2b0 [ 70.554135][ T4992] vfs_get_tree+0x8c/0x270 [ 70.558602][ T4992] do_new_mount+0x28f/0xae0 [ 70.563138][ T4992] ? path_mount+0x5f2/0xf80 [ 70.567762][ T4992] ? do_move_mount_old+0x170/0x170 [ 70.572905][ T4992] ? user_path_at_empty+0x12f/0x180 [ 70.578146][ T4992] __se_sys_mount+0x2d9/0x3c0 [ 70.582854][ T4992] ? __x64_sys_mount+0xc0/0xc0 [ 70.587639][ T4992] ? syscall_enter_from_user_mode+0x32/0x230 [ 70.593639][ T4992] ? __x64_sys_mount+0x20/0xc0 [ 70.598421][ T4992] do_syscall_64+0x41/0xc0 [ 70.602862][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.608769][ T4992] RIP: 0033:0x7fa5a26a3afa [ 70.613198][ T4992] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.632824][ T4992] RSP: 002b:00007ffd75486158 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 70.641345][ T4992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa5a26a3afa [ 70.649330][ T4992] RDX: 000000002001f740 RSI: 0000000020000180 RDI: 00007ffd75486170 [ 70.657313][ T4992] RBP: 00007ffd75486170 R08: 00007ffd754861b0 R09: 000000000001f76a [ 70.665296][ T4992] R10: 0000000000004010 R11: 0000000000000286 R12: 0000000000000004 [ 70.673294][ T4992] R13: 00005555571b92c0 R14: 0000000000004010 R15: 00007ffd754861b0 [ 70.681299][ T4992] [ 70.684536][ T4992] Kernel Offset: disabled [ 70.688964][ T4992] Rebooting in 86400 seconds..