./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2409439499 <...> Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. execve("./syz-executor2409439499", ["./syz-executor2409439499"], 0x7ffcbac512f0 /* 10 vars */) = 0 brk(NULL) = 0x5555572a7000 brk(0x5555572a7d00) = 0x5555572a7d00 arch_prctl(ARCH_SET_FS, 0x5555572a7380) = 0 set_tid_address(0x5555572a7650) = 5027 set_robust_list(0x5555572a7660, 24) = 0 rseq(0x5555572a7ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2409439499", 4096) = 28 getrandom("\x76\xc4\x3a\xfa\xc3\xfe\xc1\x1c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555572a7d00 brk(0x5555572c8d00) = 0x5555572c8d00 brk(0x5555572c9000) = 0x5555572c9000 mprotect(0x7fca7aa66000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fca72597000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7fca72597000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 60.272353][ T5027] syz-executor240[5027]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 60.311235][ T5027] loop0: detected capacity change from 0 to 4096 [ 60.323467][ T5027] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 60.331947][ T5027] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 60.341345][ T5027] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 60.354325][ T5027] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 60.367316][ T5027] ================================================================================ [ 60.376635][ T5027] UBSAN: shift-out-of-bounds in fs/ntfs/inode.c:1080:43 [ 60.383735][ T5027] shift exponent 44 is too large for 32-bit type 'unsigned int' [ 60.391403][ T5027] CPU: 0 PID: 5027 Comm: syz-executor240 Not tainted 6.6.0-rc5-syzkaller-00267-g9a3dad63edbe #0 [ 60.401823][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 60.411865][ T5027] Call Trace: [ 60.415133][ T5027] [ 60.418052][ T5027] dump_stack_lvl+0x1e7/0x2d0 [ 60.422839][ T5027] ? nf_tcp_handle_invalid+0x650/0x650 [ 60.428285][ T5027] ? panic+0x770/0x770 [ 60.432345][ T5027] ? __kasan_slab_alloc+0x66/0x70 [ 60.437363][ T5027] __ubsan_handle_shift_out_of_bounds+0x3c3/0x420 [ 60.443796][ T5027] ntfs_read_locked_inode+0x4627/0x4980 [ 60.449334][ T5027] ? inode_insert5+0x3f4/0x500 [ 60.454115][ T5027] ? ntfs_iget+0x190/0x190 [ 60.460629][ T5027] ? iget5_locked+0x137/0x270 [ 60.465397][ T5027] ? ntfs_iget+0x190/0x190 [ 60.469803][ T5027] ntfs_iget+0x113/0x190 [ 60.474059][ T5027] ? ntfs_test_inode+0x2e0/0x2e0 [ 60.479019][ T5027] ? evict+0x56e/0x620 [ 60.483093][ T5027] load_system_files+0x151c/0x4840 [ 60.488196][ T5027] ? __mutex_unlock_slowpath+0x21c/0x750 [ 60.493848][ T5027] ? ntfs_setup_allocators+0x2d0/0x2d0 [ 60.499316][ T5027] ? mutex_unlock+0x10/0x10 [ 60.503868][ T5027] ? __asan_memset+0x23/0x40 [ 60.508460][ T5027] ? generate_default_upcase+0x8ed/0x940 [ 60.514088][ T5027] ntfs_fill_super+0x19b3/0x2bd0 [ 60.519028][ T5027] mount_bdev+0x237/0x300 [ 60.523346][ T5027] ? ntfs_mount+0x40/0x40 [ 60.527681][ T5027] ? get_tree_bdev+0x5b0/0x5b0 [ 60.532432][ T5027] ? vfs_parse_fs_string+0x190/0x230 [ 60.537711][ T5027] ? vfs_parse_fs_param+0x410/0x410 [ 60.542901][ T5027] ? cap_capable+0x1b4/0x240 [ 60.547485][ T5027] legacy_get_tree+0xef/0x190 [ 60.552241][ T5027] ? ntfs_rl_punch_nolock+0x15b0/0x15b0 [ 60.557974][ T5027] vfs_get_tree+0x8c/0x280 [ 60.562584][ T5027] do_new_mount+0x28f/0xae0 [ 60.567091][ T5027] ? do_move_mount_old+0x170/0x170 [ 60.572197][ T5027] ? user_path_at_empty+0x12f/0x180 [ 60.577387][ T5027] __se_sys_mount+0x2d9/0x3c0 [ 60.582061][ T5027] ? __x64_sys_mount+0xc0/0xc0 [ 60.586828][ T5027] ? syscall_enter_from_user_mode+0x32/0x230 [ 60.592809][ T5027] ? __x64_sys_mount+0x20/0xc0 [ 60.597563][ T5027] do_syscall_64+0x41/0xc0 [ 60.601972][ T5027] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.607851][ T5027] RIP: 0033:0x7fca7a9d58ba [ 60.612256][ T5027] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.632025][ T5027] RSP: 002b:00007fff6924fb98 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 60.640428][ T5027] RAX: ffffffffffffffda RBX: 00007fff6924fbb0 RCX: 00007fca7a9d58ba [ 60.648387][ T5027] RDX: 0000000020000000 RSI: 000000002001ee80 RDI: 00007fff6924fbb0 [ 60.656432][ T5027] RBP: 0000000000000004 R08: 00007fff6924fbf0 R09: 000000000001ee62 [ 60.664529][ T5027] R10: 0000000000000010 R11: 0000000000000286 R12: 0000000000000010 [ 60.672527][ T5027] R13: 00007fff6924fbf0 R14: 0000000000000003 R15: 0000000000200000 [ 60.680596][ T5027] [ 60.683804][ T5027] ================================================================================ [ 60.693245][ T5027] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 60.700560][ T5027] CPU: 0 PID: 5027 Comm: syz-executor240 Not tainted 6.6.0-rc5-syzkaller-00267-g9a3dad63edbe #0 [ 60.710962][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 60.721024][ T5027] Call Trace: [ 60.724303][ T5027] [ 60.727228][ T5027] dump_stack_lvl+0x1e7/0x2d0 [ 60.731907][ T5027] ? nf_tcp_handle_invalid+0x650/0x650 [ 60.737359][ T5027] ? panic+0x770/0x770 [ 60.741542][ T5027] ? vscnprintf+0x5d/0x80 [ 60.745947][ T5027] panic+0x30f/0x770 [ 60.749928][ T5027] ? check_panic_on_warn+0x21/0xa0 [ 60.755052][ T5027] ? __memcpy_flushcache+0x2b0/0x2b0 [ 60.760640][ T5027] ? dump_stack_lvl+0x253/0x2d0 [ 60.765483][ T5027] check_panic_on_warn+0x82/0xa0 [ 60.770409][ T5027] __ubsan_handle_shift_out_of_bounds+0x3e2/0x420 [ 60.777774][ T5027] ntfs_read_locked_inode+0x4627/0x4980 [ 60.783320][ T5027] ? inode_insert5+0x3f4/0x500 [ 60.788076][ T5027] ? ntfs_iget+0x190/0x190 [ 60.792480][ T5027] ? iget5_locked+0x137/0x270 [ 60.797156][ T5027] ? ntfs_iget+0x190/0x190 [ 60.801647][ T5027] ntfs_iget+0x113/0x190 [ 60.805899][ T5027] ? ntfs_test_inode+0x2e0/0x2e0 [ 60.810831][ T5027] ? evict+0x56e/0x620 [ 60.814899][ T5027] load_system_files+0x151c/0x4840 [ 60.820013][ T5027] ? __mutex_unlock_slowpath+0x21c/0x750 [ 60.825691][ T5027] ? ntfs_setup_allocators+0x2d0/0x2d0 [ 60.831168][ T5027] ? mutex_unlock+0x10/0x10 [ 60.835672][ T5027] ? __asan_memset+0x23/0x40 [ 60.840352][ T5027] ? generate_default_upcase+0x8ed/0x940 [ 60.845988][ T5027] ntfs_fill_super+0x19b3/0x2bd0 [ 60.850925][ T5027] mount_bdev+0x237/0x300 [ 60.855247][ T5027] ? ntfs_mount+0x40/0x40 [ 60.859562][ T5027] ? get_tree_bdev+0x5b0/0x5b0 [ 60.864316][ T5027] ? vfs_parse_fs_string+0x190/0x230 [ 60.869680][ T5027] ? vfs_parse_fs_param+0x410/0x410 [ 60.874874][ T5027] ? cap_capable+0x1b4/0x240 [ 60.879457][ T5027] legacy_get_tree+0xef/0x190 [ 60.884126][ T5027] ? ntfs_rl_punch_nolock+0x15b0/0x15b0 [ 60.889667][ T5027] vfs_get_tree+0x8c/0x280 [ 60.894077][ T5027] do_new_mount+0x28f/0xae0 [ 60.898571][ T5027] ? do_move_mount_old+0x170/0x170 [ 60.903681][ T5027] ? user_path_at_empty+0x12f/0x180 [ 60.908871][ T5027] __se_sys_mount+0x2d9/0x3c0 [ 60.913540][ T5027] ? __x64_sys_mount+0xc0/0xc0 [ 60.918295][ T5027] ? syscall_enter_from_user_mode+0x32/0x230 [ 60.924268][ T5027] ? __x64_sys_mount+0x20/0xc0 [ 60.929022][ T5027] do_syscall_64+0x41/0xc0 [ 60.933425][ T5027] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 60.939309][ T5027] RIP: 0033:0x7fca7a9d58ba [ 60.943712][ T5027] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.963332][ T5027] RSP: 002b:00007fff6924fb98 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 60.971735][ T5027] RAX: ffffffffffffffda RBX: 00007fff6924fbb0 RCX: 00007fca7a9d58ba [ 60.979694][ T5027] RDX: 0000000020000000 RSI: 000000002001ee80 RDI: 00007fff6924fbb0 [ 60.987917][ T5027] RBP: 0000000000000004 R08: 00007fff6924fbf0 R09: 000000000001ee62 [ 60.995874][ T5027] R10: 0000000000000010 R11: 0000000000000286 R12: 0000000000000010 [ 61.003830][ T5027] R13: 00007fff6924fbf0 R14: 0000000000000003 R15: 0000000000200000 [ 61.011798][ T5027] [ 61.015010][ T5027] Kernel Offset: disabled [ 61.019324][ T5027] Rebooting in 86400 seconds..