./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3219767632 <...> forked to background, child pid 3183 no interfaces have a carrier [ 22.395362][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.407486][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.10' (ECDSA) to the list of known hosts. execve("./syz-executor3219767632", ["./syz-executor3219767632"], 0x7fffcb3f68d0 /* 10 vars */) = 0 brk(NULL) = 0x555555d41000 brk(0x555555d41c40) = 0x555555d41c40 arch_prctl(ARCH_SET_FS, 0x555555d41300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3219767632", 4096) = 28 brk(0x555555d62c40) = 0x555555d62c40 brk(0x555555d63000) = 0x555555d63000 mprotect(0x7f92505d1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 32768) = 0 pwrite64(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\xff\xfe\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\xff\x01\x00\x00\x00\x00\x00\x00\x01", 65, 0) = 65 pwrite64(3, NULL, 0, 16384) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 44.104229][ T3612] loop0: detected capacity change from 0 to 64 [ 44.114366][ T3612] ================================================================================ [ 44.123744][ T3612] UBSAN: shift-out-of-bounds in fs/ntfs3/super.c:675:13 [ 44.130811][ T3612] shift exponent -255 is negative [ 44.135924][ T3612] CPU: 1 PID: 3612 Comm: syz-executor321 Not tainted 6.0.0-rc6-syzkaller-00286-ga63f2e7cb110 #0 [ 44.146331][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 44.156368][ T3612] Call Trace: [ 44.159630][ T3612] [ 44.162543][ T3612] dump_stack_lvl+0xcd/0x134 [ 44.167133][ T3612] ubsan_epilogue+0xb/0x50 [ 44.171533][ T3612] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 44.178286][ T3612] ntfs_fill_super.cold+0x147/0x56c [ 44.183482][ T3612] ? snprintf+0xbb/0xf0 [ 44.187620][ T3612] ? put_ntfs+0x330/0x330 [ 44.191943][ T3612] ? set_blocksize+0x2e5/0x370 [ 44.196708][ T3612] get_tree_bdev+0x440/0x760 [ 44.201296][ T3612] ? put_ntfs+0x330/0x330 [ 44.205620][ T3612] vfs_get_tree+0x89/0x2f0 [ 44.210119][ T3612] path_mount+0x1326/0x1e20 [ 44.214621][ T3612] ? kmem_cache_free+0xeb/0x5b0 [ 44.219469][ T3612] ? finish_automount+0x960/0x960 [ 44.224493][ T3612] ? putname+0xfe/0x140 [ 44.228649][ T3612] __x64_sys_mount+0x27f/0x300 [ 44.233419][ T3612] ? copy_mnt_ns+0xae0/0xae0 [ 44.238006][ T3612] ? lockdep_hardirqs_on+0x79/0x100 [ 44.243206][ T3612] ? _raw_spin_unlock_irq+0x2a/0x40 [ 44.248398][ T3612] ? ptrace_notify+0xfa/0x140 [ 44.253077][ T3612] do_syscall_64+0x35/0xb0 [ 44.257488][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.263374][ T3612] RIP: 0033:0x7f925056614a [ 44.267783][ T3612] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.287385][ T3612] RSP: 002b:00007ffd350dd2d8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 44.295800][ T3612] RAX: ffffffffffffffda RBX: 00007ffd350dd330 RCX: 00007f925056614a [ 44.303763][ T3612] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffd350dd2f0 [ 44.311726][ T3612] RBP: 00007ffd350dd2f0 R08: 00007ffd350dd330 R09: 0000000000000000 [ 44.319688][ T3612] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000230 [ 44.327650][ T3612] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000002 [ 44.335625][ T3612] [ 44.338820][ T3612] ================================================================================ [ 44.348161][ T3612] Kernel panic - not syncing: panic_on_warn set ... [ 44.354923][ T3612] CPU: 0 PID: 3612 Comm: syz-executor321 Not tainted 6.0.0-rc6-syzkaller-00286-ga63f2e7cb110 #0 [ 44.365337][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 44.375380][ T3612] Call Trace: [ 44.378646][ T3612] [ 44.381567][ T3612] dump_stack_lvl+0xcd/0x134 [ 44.386154][ T3612] panic+0x2c8/0x627 [ 44.390049][ T3612] ? panic_print_sys_info.part.0+0x10b/0x10b [ 44.396034][ T3612] ? ubsan_epilogue+0x3e/0x50 [ 44.400711][ T3612] ubsan_epilogue+0x4a/0x50 [ 44.405208][ T3612] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 44.412064][ T3612] ntfs_fill_super.cold+0x147/0x56c [ 44.417266][ T3612] ? snprintf+0xbb/0xf0 [ 44.421419][ T3612] ? put_ntfs+0x330/0x330 [ 44.425744][ T3612] ? set_blocksize+0x2e5/0x370 [ 44.430509][ T3612] get_tree_bdev+0x440/0x760 [ 44.435093][ T3612] ? put_ntfs+0x330/0x330 [ 44.439593][ T3612] vfs_get_tree+0x89/0x2f0 [ 44.444003][ T3612] path_mount+0x1326/0x1e20 [ 44.448505][ T3612] ? kmem_cache_free+0xeb/0x5b0 [ 44.453352][ T3612] ? finish_automount+0x960/0x960 [ 44.458374][ T3612] ? putname+0xfe/0x140 [ 44.462528][ T3612] __x64_sys_mount+0x27f/0x300 [ 44.467288][ T3612] ? copy_mnt_ns+0xae0/0xae0 [ 44.471871][ T3612] ? lockdep_hardirqs_on+0x79/0x100 [ 44.477069][ T3612] ? _raw_spin_unlock_irq+0x2a/0x40 [ 44.482258][ T3612] ? ptrace_notify+0xfa/0x140 [ 44.487105][ T3612] do_syscall_64+0x35/0xb0 [ 44.491513][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.497400][ T3612] RIP: 0033:0x7f925056614a [ 44.501806][ T3612] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.521407][ T3612] RSP: 002b:00007ffd350dd2d8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 44.529810][ T3612] RAX: ffffffffffffffda RBX: 00007ffd350dd330 RCX: 00007f925056614a [ 44.537770][ T3612] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffd350dd2f0 [ 44.545731][ T3612] RBP: 00007ffd350dd2f0 R08: 00007ffd350dd330 R09: 0000000000000000 [ 44.553786][ T3612] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000020000230 [ 44.561746][ T3612] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000002 [ 44.569721][ T3612] [ 44.573327][ T3612] Kernel Offset: disabled [ 44.577696][ T3612] Rebooting in 86400 seconds..