./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3251287228
<...>
forked to background, child pid 3186
[ 24.756903][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0
[ 24.767086][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 25.051300][ T3273] sshd (3273) used greatest stack depth: 19312 bytes left
OK
syzkaller
Warning: Permanently added '10.128.0.182' (ECDSA) to the list of known hosts.
execve("./syz-executor3251287228", ["./syz-executor3251287228"], 0x7ffe155834a0 /* 10 vars */) = 0
brk(NULL) = 0x5555560ff000
brk(0x5555560ffc40) = 0x5555560ffc40
arch_prctl(ARCH_SET_FS, 0x5555560ff300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3251287228", 4096) = 28
brk(0x555556120c40) = 0x555556120c40
brk(0x555556121000) = 0x555556121000
mprotect(0x7f71e58d1000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
ftruncate(3, 32768) = 0
pwrite64(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\xff\xfe\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01", 65, 0) = 65
pwrite64(3, NULL, 0, 16384) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 41.364245][ T3607] loop0: detected capacity change from 0 to 64
[ 41.375472][ T3607] ================================================================================
[ 41.385082][ T3607] UBSAN: shift-out-of-bounds in fs/ntfs3/super.c:675:13
[ 41.392008][ T3607] shift exponent -255 is negative
[ 41.397117][ T3607] CPU: 0 PID: 3607 Comm: syz-executor325 Not tainted 6.0.0-rc6-syzkaller-00210-gbf682942cd26 #0
[ 41.407567][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 41.417641][ T3607] Call Trace:
[ 41.420920][ T3607]
[ 41.423849][ T3607] dump_stack_lvl+0x1b1/0x28e
[ 41.428648][ T3607] ? fortify_panic+0x13/0x13
[ 41.433251][ T3607] ? vsnprintf+0x1af/0x1ce0
[ 41.437758][ T3607] ? panic+0x715/0x715
[ 41.441834][ T3607] ? out_of_line_wait_on_bit+0x1c3/0x240
[ 41.447477][ T3607] __ubsan_handle_shift_out_of_bounds+0x33d/0x3b0
[ 41.453912][ T3607] ? submit_bh_wbc+0x41b/0x4c0
[ 41.458711][ T3607] ntfs_fill_super+0xa0e/0x42a0
[ 41.463576][ T3607] ? snprintf+0xc0/0x110
[ 41.467822][ T3607] ? put_ntfs+0x2a0/0x2a0
[ 41.472151][ T3607] ? vscnprintf+0x80/0x80
[ 41.476489][ T3607] ? set_blocksize+0x1d5/0x360
[ 41.481309][ T3607] get_tree_bdev+0x400/0x620
[ 41.485900][ T3607] ? put_ntfs+0x2a0/0x2a0
[ 41.490235][ T3607] vfs_get_tree+0x88/0x270
[ 41.494651][ T3607] do_new_mount+0x289/0xad0
[ 41.499163][ T3607] ? do_move_mount_old+0x150/0x150
[ 41.504274][ T3607] ? user_path_at_empty+0x149/0x1a0
[ 41.509472][ T3607] __se_sys_mount+0x2d3/0x3c0
[ 41.514150][ T3607] ? __x64_sys_mount+0xc0/0xc0
[ 41.518910][ T3607] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 41.524891][ T3607] ? __x64_sys_mount+0x1c/0xc0
[ 41.529650][ T3607] do_syscall_64+0x3d/0xb0
[ 41.534067][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.539959][ T3607] RIP: 0033:0x7f71e586614a
[ 41.544396][ T3607] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.563997][ T3607] RSP: 002b:00007ffcd0c2b338 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 41.572408][ T3607] RAX: ffffffffffffffda RBX: 00007ffcd0c2b390 RCX: 00007f71e586614a
[ 41.580373][ T3607] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffcd0c2b350
[ 41.588338][ T3607] RBP: 00007ffcd0c2b350 R08: 00007ffcd0c2b390 R09: 0000000000000000
[ 41.596302][ T3607] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000230
[ 41.604267][ T3607] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000002
[ 41.612245][ T3607]
[ 41.615915][ T3607] ================================================================================
[ 41.625312][ T3607] Kernel panic - not syncing: panic_on_warn set ...
[ 41.631898][ T3607] CPU: 0 PID: 3607 Comm: syz-executor325 Not tainted 6.0.0-rc6-syzkaller-00210-gbf682942cd26 #0
[ 41.642290][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 41.652335][ T3607] Call Trace:
[ 41.655608][ T3607]
[ 41.658532][ T3607] dump_stack_lvl+0x1b1/0x28e
[ 41.663206][ T3607] ? fortify_panic+0x13/0x13
[ 41.667802][ T3607] ? panic+0x715/0x715
[ 41.671868][ T3607] ? __irq_work_queue_local+0x121/0x180
[ 41.677411][ T3607] ? vscnprintf+0x59/0x80
[ 41.681734][ T3607] panic+0x2d6/0x715
[ 41.685630][ T3607] ? __ubsan_handle_shift_out_of_bounds+0x360/0x3b0
[ 41.692214][ T3607] ? fb_is_primary_device+0xcc/0xcc
[ 41.697406][ T3607] ? panic+0x715/0x715
[ 41.701467][ T3607] ? out_of_line_wait_on_bit+0x1c3/0x240
[ 41.707155][ T3607] __ubsan_handle_shift_out_of_bounds+0x3af/0x3b0
[ 41.713641][ T3607] ? submit_bh_wbc+0x41b/0x4c0
[ 41.718411][ T3607] ntfs_fill_super+0xa0e/0x42a0
[ 41.723262][ T3607] ? snprintf+0xc0/0x110
[ 41.727507][ T3607] ? put_ntfs+0x2a0/0x2a0
[ 41.731824][ T3607] ? vscnprintf+0x80/0x80
[ 41.736152][ T3607] ? set_blocksize+0x1d5/0x360
[ 41.740926][ T3607] get_tree_bdev+0x400/0x620
[ 41.745517][ T3607] ? put_ntfs+0x2a0/0x2a0
[ 41.749869][ T3607] vfs_get_tree+0x88/0x270
[ 41.754285][ T3607] do_new_mount+0x289/0xad0
[ 41.758793][ T3607] ? do_move_mount_old+0x150/0x150
[ 41.763903][ T3607] ? user_path_at_empty+0x149/0x1a0
[ 41.769098][ T3607] __se_sys_mount+0x2d3/0x3c0
[ 41.773794][ T3607] ? __x64_sys_mount+0xc0/0xc0
[ 41.778577][ T3607] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 41.784570][ T3607] ? __x64_sys_mount+0x1c/0xc0
[ 41.789342][ T3607] do_syscall_64+0x3d/0xb0
[ 41.793760][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.799653][ T3607] RIP: 0033:0x7f71e586614a
[ 41.804070][ T3607] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.823704][ T3607] RSP: 002b:00007ffcd0c2b338 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 41.832171][ T3607] RAX: ffffffffffffffda RBX: 00007ffcd0c2b390 RCX: 00007f71e586614a
[ 41.840148][ T3607] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffcd0c2b350
[ 41.848120][ T3607] RBP: 00007ffcd0c2b350 R08: 00007ffcd0c2b390 R09: 0000000000000000
[ 41.856113][ T3607] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000230
[ 41.864085][ T3607] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000002
[ 41.872079][ T3607]
[ 41.875576][ T3607] Kernel Offset: disabled
[ 41.879984][ T3607] Rebooting in 86400 seconds..