program:
r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0)
ftruncate(r0, 0x10000)
pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008)
pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024)
pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068)
pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098)
pwrite64(r0, &(0x7f00000010e0)="541901005419010054190100", 0xc, 0x2554)
pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0)
pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00)
pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08)
pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28)
pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40302002e2e0000", 0x18, 0x3000)
r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000007000)='A', 0x1)
[ 106.695458][ T5322] loop0: detected capacity change from 0 to 128
[ 106.770152][ T5322] ufs: ufs_fill_super(): fs needs fsck
[ 106.788346][ T5322] ------------[ cut here ]------------
[ 106.800564][ T5322] UBSAN: shift-out-of-bounds in fs/ufs/super.c:1177:18
[ 106.812184][ T5322] shift exponent 4294967294 is too large for 32-bit type 'int'
[ 106.822150][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 106.822163][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 106.822168][ T5322] Call Trace:
[ 106.822172][ T5322]
[ 106.822175][ T5322] dump_stack_lvl+0xe8/0x150
[ 106.822246][ T5322] ubsan_epilogue+0xa/0x30
[ 106.822256][ T5322] __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[ 106.822300][ T5322] ufs_fill_super+0x5f8d/0x67e0
[ 106.822322][ T5322] ? setup_bdev_super+0x4c1/0x5b0
[ 106.822336][ T5322] get_tree_bdev_flags+0x430/0x4f0
[ 106.822347][ T5322] ? __pfx_ufs_fill_super+0x10/0x10
[ 106.822355][ T5322] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 106.822370][ T5322] vfs_get_tree+0x92/0x2a0
[ 106.822382][ T5322] do_new_mount+0x319/0xdc0
[ 106.822394][ T5322] ? __pfx_do_new_mount+0x10/0x10
[ 106.822405][ T5322] ? ns_capable+0x89/0xe0
[ 106.822416][ T5322] ? path_mount+0x647/0x1040
[ 106.822426][ T5322] ? user_path_at+0xd4/0x160
[ 106.822437][ T5322] __se_sys_mount+0x31d/0x420
[ 106.822450][ T5322] ? __pfx___se_sys_mount+0x10/0x10
[ 106.822461][ T5322] ? __x64_sys_mount+0x20/0xc0
[ 106.822470][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.822478][ T5322] do_syscall_64+0x174/0x580
[ 106.822514][ T5322] ? trace_irq_disable+0x3b/0x140
[ 106.822525][ T5322] ? clear_bhb_loop+0x40/0x90
[ 106.822535][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.822542][ T5322] RIP: 0033:0x7f9c5f39e019
[ 106.822550][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 106.822556][ T5322] RSP: 002b:00007f9c6018bfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 106.822566][ T5322] RAX: ffffffffffffffda RBX: 00007f9c5f625fa0 RCX: 00007f9c5f39e019
[ 106.822573][ T5322] RDX: 0000200000004000 RSI: 0000200000003000 RDI: 0000200000000040
[ 106.822577][ T5322] RBP: 00007f9c5f43500c R08: 0000200000005000 R09: 0000000000000000
[ 106.822582][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.822586][ T5322] R13: 00007f9c5f626038 R14: 00007f9c5f625fa0 R15: 00007ffda7cbc7d8
[ 106.822598][ T5322]
[ 106.822679][ T5322] ---[ end trace ]---
[ 106.931060][ T5322] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 106.933963][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 106.937069][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 106.940508][ T5322] Call Trace:
[ 106.941761][ T5322]
[ 106.942750][ T5322] vpanic+0x56c/0xa60
[ 106.944047][ T5322] ? __pfx_vpanic+0x10/0x10
[ 106.945658][ T5322] ? irqentry_exit+0x218/0x8f0
[ 106.947433][ T5322] panic+0xc5/0xd0
[ 106.948877][ T5322] ? __pfx_panic+0x10/0x10
[ 106.950580][ T5322] ? __pfx__printk+0x10/0x10
[ 106.952381][ T5322] check_panic_on_warn+0x89/0xb0
[ 106.954459][ T5322] __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[ 106.957252][ T5322] ufs_fill_super+0x5f8d/0x67e0
[ 106.959211][ T5322] ? setup_bdev_super+0x4c1/0x5b0
[ 106.961301][ T5322] get_tree_bdev_flags+0x430/0x4f0
[ 106.963186][ T5322] ? __pfx_ufs_fill_super+0x10/0x10
[ 106.964982][ T5322] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 106.967040][ T5322] vfs_get_tree+0x92/0x2a0
[ 106.968882][ T5322] do_new_mount+0x319/0xdc0
[ 106.970883][ T5322] ? __pfx_do_new_mount+0x10/0x10
[ 106.972982][ T5322] ? ns_capable+0x89/0xe0
[ 106.974767][ T5322] ? path_mount+0x647/0x1040
[ 106.976696][ T5322] ? user_path_at+0xd4/0x160
[ 106.978674][ T5322] __se_sys_mount+0x31d/0x420
[ 106.980701][ T5322] ? __pfx___se_sys_mount+0x10/0x10
[ 106.982839][ T5322] ? __x64_sys_mount+0x20/0xc0
[ 106.985379][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.988095][ T5322] do_syscall_64+0x174/0x580
[ 106.990114][ T5322] ? trace_irq_disable+0x3b/0x140
[ 106.992204][ T5322] ? clear_bhb_loop+0x40/0x90
[ 106.994135][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.996036][ T5322] RIP: 0033:0x7f9c5f39e019
[ 106.997723][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.005475][ T5322] RSP: 002b:00007f9c6018bfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 107.008876][ T5322] RAX: ffffffffffffffda RBX: 00007f9c5f625fa0 RCX: 00007f9c5f39e019
[ 107.012104][ T5322] RDX: 0000200000004000 RSI: 0000200000003000 RDI: 0000200000000040
[ 107.015361][ T5322] RBP: 00007f9c5f43500c R08: 0000200000005000 R09: 0000000000000000
[ 107.018624][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.021866][ T5322] R13: 00007f9c5f626038 R14: 00007f9c5f625fa0 R15: 00007ffda7cbc7d8
[ 107.025019][ T5322]
[ 107.026811][ T5322] Kernel Offset: disabled
[ 107.028859][ T5322] Rebooting in 86400 seconds..