syzkaller login: [ 86.628842][ T8] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:19497' (ED25519) to the list of known hosts. executing program [ 87.955083][ T5093] loop0: detected capacity change from 0 to 32768 [ 87.984199][ T5093] ------------[ cut here ]------------ [ 87.989884][ T5093] UBSAN: shift-out-of-bounds in fs/ocfs2/super.c:2360:4 [ 87.992647][ T5093] shift exponent 1548 is too large for 32-bit type 'int' [ 87.996169][ T5093] CPU: 0 UID: 0 PID: 5093 Comm: syz-executor251 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 88.000074][ T5093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.003761][ T5093] Call Trace: [ 88.004957][ T5093] [ 88.006045][ T5093] dump_stack_lvl+0x241/0x360 [ 88.008646][ T5093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.010515][ T5093] ? __pfx__printk+0x10/0x10 [ 88.012135][ T5093] ? __asan_memset+0x23/0x50 [ 88.013796][ T5093] ? lockdep_init_map_type+0xa1/0x910 [ 88.015563][ T5093] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 88.017666][ T5093] ? lockdep_unlock+0x16a/0x300 [ 88.019273][ T5093] ocfs2_fill_super+0x106e/0x5880 [ 88.021024][ T5093] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 88.022778][ T5093] ? __pfx_validate_chain+0x10/0x10 [ 88.024545][ T5093] ? __pfx_validate_chain+0x10/0x10 [ 88.026334][ T5093] ? validate_chain+0x11e/0x5900 [ 88.028120][ T5093] ? __lock_acquire+0x137a/0x2040 [ 88.029875][ T5093] ? __pfx_validate_chain+0x10/0x10 [ 88.031625][ T5093] ? string+0x26a/0x2b0 [ 88.033093][ T5093] ? widen_string+0x3a/0x310 [ 88.034794][ T5093] ? string+0x26a/0x2b0 [ 88.036343][ T5093] ? bdev_name+0x2b1/0x3c0 [ 88.038301][ T5093] ? pointer+0x703/0x1210 [ 88.039935][ T5093] ? __pfx_pointer+0x10/0x10 [ 88.041658][ T5093] ? __pfx_format_decode+0x10/0x10 [ 88.043441][ T5093] ? __lock_acquire+0x137a/0x2040 [ 88.045230][ T5093] ? vsnprintf+0x1ccd/0x1da0 [ 88.047003][ T5093] ? snprintf+0xda/0x120 [ 88.048571][ T5093] ? __pfx_lock_release+0x10/0x10 [ 88.050239][ T5093] ? do_raw_spin_lock+0x14f/0x370 [ 88.052069][ T5093] ? __pfx_snprintf+0x10/0x10 [ 88.053849][ T5093] ? set_blocksize+0x1ff/0x360 [ 88.055672][ T5093] ? sb_set_blocksize+0x98/0xf0 [ 88.057477][ T5093] ? setup_bdev_super+0x4e6/0x5d0 [ 88.059176][ T5093] mount_bdev+0x20a/0x2d0 [ 88.060720][ T5093] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 88.062473][ T5093] ? __pfx_mount_bdev+0x10/0x10 [ 88.064183][ T5093] ? vfs_parse_fs_string+0x190/0x230 [ 88.065960][ T5093] legacy_get_tree+0xee/0x190 [ 88.067463][ T5093] ? __pfx_ocfs2_mount+0x10/0x10 [ 88.068940][ T5093] vfs_get_tree+0x90/0x2a0 [ 88.070404][ T5093] do_new_mount+0x2be/0xb40 [ 88.071865][ T5093] ? __pfx_do_new_mount+0x10/0x10 [ 88.073636][ T5093] __se_sys_mount+0x2d6/0x3c0 [ 88.075411][ T5093] ? __pfx___se_sys_mount+0x10/0x10 [ 88.077472][ T5093] ? do_syscall_64+0x100/0x230 [ 88.079250][ T5093] ? __x64_sys_mount+0x20/0xc0 [ 88.081011][ T5093] do_syscall_64+0xf3/0x230 [ 88.082604][ T5093] ? clear_bhb_loop+0x35/0x90 [ 88.084244][ T5093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.086341][ T5093] RIP: 0033:0x7f76bb986dea [ 88.087934][ T5093] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.094604][ T5093] RSP: 002b:00007ffe83d62948 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 88.097450][ T5093] RAX: ffffffffffffffda RBX: 00007ffe83d62960 RCX: 00007f76bb986dea [ 88.100036][ T5093] RDX: 0000000020004480 RSI: 00000000200044c0 RDI: 00007ffe83d62960 [ 88.102486][ T5093] RBP: 0000000000000004 R08: 00007ffe83d629a0 R09: 000000000000446c [ 88.105230][ T5093] R10: 0000000002800400 R11: 0000000000000282 R12: 0000000002800400 [ 88.108105][ T5093] R13: 00007ffe83d629a0 R14: 0000000000000003 R15: 0000000001000000 [ 88.110744][ T5093] [ 88.250806][ T5093] ---[ end trace ]--- [ 88.252558][ T5093] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 88.255430][ T5093] CPU: 0 UID: 0 PID: 5093 Comm: syz-executor251 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 [ 88.259767][ T5093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.263733][ T5093] Call Trace: [ 88.265047][ T5093] [ 88.266194][ T5093] dump_stack_lvl+0x241/0x360 [ 88.268024][ T5093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.269926][ T5093] ? __pfx__printk+0x10/0x10 [ 88.271634][ T5093] ? vprintk_emit+0x631/0x770 [ 88.273434][ T5093] ? vscnprintf+0x5d/0x90 [ 88.275097][ T5093] panic+0x349/0x860 [ 88.276613][ T5093] ? check_panic_on_warn+0x21/0xb0 [ 88.278609][ T5093] ? __pfx_panic+0x10/0x10 [ 88.280260][ T5093] ? _printk+0xd5/0x120 [ 88.281827][ T5093] ? __pfx__printk+0x10/0x10 [ 88.283597][ T5093] ? __asan_memset+0x23/0x50 [ 88.285376][ T5093] check_panic_on_warn+0x86/0xb0 [ 88.287402][ T5093] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 88.289784][ T5093] ? lockdep_unlock+0x16a/0x300 [ 88.291733][ T5093] ocfs2_fill_super+0x106e/0x5880 [ 88.293672][ T5093] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 88.295729][ T5093] ? __pfx_validate_chain+0x10/0x10 [ 88.297674][ T5093] ? __pfx_validate_chain+0x10/0x10 [ 88.299706][ T5093] ? validate_chain+0x11e/0x5900 [ 88.301668][ T5093] ? __lock_acquire+0x137a/0x2040 [ 88.303580][ T5093] ? __pfx_validate_chain+0x10/0x10 [ 88.305385][ T5093] ? string+0x26a/0x2b0 [ 88.306895][ T5093] ? widen_string+0x3a/0x310 [ 88.308642][ T5093] ? string+0x26a/0x2b0 [ 88.310147][ T5093] ? bdev_name+0x2b1/0x3c0 [ 88.311758][ T5093] ? pointer+0x703/0x1210 [ 88.313011][ T5093] ? __pfx_pointer+0x10/0x10 [ 88.314643][ T5093] ? __pfx_format_decode+0x10/0x10 [ 88.316462][ T5093] ? __lock_acquire+0x137a/0x2040 [ 88.318266][ T5093] ? vsnprintf+0x1ccd/0x1da0 [ 88.319903][ T5093] ? snprintf+0xda/0x120 [ 88.321358][ T5093] ? __pfx_lock_release+0x10/0x10 [ 88.323094][ T5093] ? do_raw_spin_lock+0x14f/0x370 [ 88.324923][ T5093] ? __pfx_snprintf+0x10/0x10 [ 88.326602][ T5093] ? set_blocksize+0x1ff/0x360 [ 88.328343][ T5093] ? sb_set_blocksize+0x98/0xf0 [ 88.330071][ T5093] ? setup_bdev_super+0x4e6/0x5d0 [ 88.331961][ T5093] mount_bdev+0x20a/0x2d0 [ 88.333646][ T5093] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 88.335659][ T5093] ? __pfx_mount_bdev+0x10/0x10 [ 88.337480][ T5093] ? vfs_parse_fs_string+0x190/0x230 [ 88.339447][ T5093] legacy_get_tree+0xee/0x190 [ 88.341192][ T5093] ? __pfx_ocfs2_mount+0x10/0x10 [ 88.342856][ T5093] vfs_get_tree+0x90/0x2a0 [ 88.344487][ T5093] do_new_mount+0x2be/0xb40 [ 88.346261][ T5093] ? __pfx_do_new_mount+0x10/0x10 [ 88.348006][ T5093] __se_sys_mount+0x2d6/0x3c0 [ 88.349594][ T5093] ? __pfx___se_sys_mount+0x10/0x10 [ 88.351392][ T5093] ? do_syscall_64+0x100/0x230 [ 88.353166][ T5093] ? __x64_sys_mount+0x20/0xc0 [ 88.354882][ T5093] do_syscall_64+0xf3/0x230 [ 88.356553][ T5093] ? clear_bhb_loop+0x35/0x90 [ 88.358312][ T5093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.360570][ T5093] RIP: 0033:0x7f76bb986dea [ 88.362313][ T5093] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.369703][ T5093] RSP: 002b:00007ffe83d62948 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 88.372906][ T5093] RAX: ffffffffffffffda RBX: 00007ffe83d62960 RCX: 00007f76bb986dea [ 88.375937][ T5093] RDX: 0000000020004480 RSI: 00000000200044c0 RDI: 00007ffe83d62960 [ 88.378801][ T5093] RBP: 0000000000000004 R08: 00007ffe83d629a0 R09: 000000000000446c [ 88.381663][ T5093] R10: 0000000002800400 R11: 0000000000000282 R12: 0000000002800400 [ 88.384504][ T5093] R13: 00007ffe83d629a0 R14: 0000000000000003 R15: 0000000001000000 [ 88.387325][ T5093] [ 88.388706][ T5093] Kernel Offset: disabled [ 88.390334][ T5093] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:24:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=ffffffff95254f80 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000afcebf0 R8 =ffffffff853ef2ab R9 =1ffff110031ab046 R10=dffffc0000000000 R11=ffffffff853ef260 R12=dffffc0000000000 R13=0000000000000020 R14=0000000000000020 R15=00000000000003f8 RIP=ffffffff853ef2de RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555fa7b380 ffffffff 00c00000 GS =0000 ffff888020800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a6b924c8f8 CR3=000000003abec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000003ff40000 Opmask01=00000000000003ff Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7a655120 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 2e6366636f206e61 0000000000690000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05424b4c41444057 004b4f0511134a43 4b4c5f554a4a4905 424b4c4144405700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d639d481b73b3cb2 000055a3e3497d14 00000000000000c1 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004d554e514553 0000000000000021 0000000000007374 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3a3a263e3d3a3a 26383d3a3a263a3d 3a3a264c3c3a3a26 323c3a3a264e393a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000550033286630 000050203a284e50 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004d203a244550 0000000000000021 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000