./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3226098411 <...> DUID 00:04:d9:45:fa:af:54:4f:86:ad:3e:10:3e:6c:cf:b7:e9:d2 forked to background, child pid 4687 [ 20.572339][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 20.581830][ T4688] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.70' (ECDSA) to the list of known hosts. execve("./syz-executor3226098411", ["./syz-executor3226098411"], 0x7ffc1562c0d0 /* 10 vars */) = 0 brk(NULL) = 0x55555562e000 brk(0x55555562ec40) = 0x55555562ec40 arch_prctl(ARCH_SET_FS, 0x55555562e300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3226098411", 4096) = 28 brk(0x55555564fc40) = 0x55555564fc40 brk(0x555555650000) = 0x555555650000 mprotect(0x7f6b1df3f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6b15a67000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7f6b15a67000, 2097152) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 41.043402][ T5019] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5019 'syz-executor322' [ 41.071507][ T5019] loop0: detected capacity change from 0 to 4096 [ 41.081240][ T5019] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 41.104719][ T5019] ================================================================================ [ 41.114150][ T5019] UBSAN: shift-out-of-bounds in fs/ntfs/inode.c:1080:43 [ 41.121130][ T5019] shift exponent 267 is too large for 32-bit type 'unsigned int' [ 41.128843][ T5019] CPU: 0 PID: 5019 Comm: syz-executor322 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 41.139258][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 41.149325][ T5019] Call Trace: [ 41.152599][ T5019] [ 41.155511][ T5019] dump_stack_lvl+0x136/0x150 [ 41.160205][ T5019] __ubsan_handle_shift_out_of_bounds+0x221/0x5a0 [ 41.166599][ T5019] ntfs_read_locked_inode.cold+0x1b/0x5c [ 41.172210][ T5019] ntfs_read_inode_mount+0xe55/0x2670 [ 41.177623][ T5019] ntfs_fill_super+0x189c/0x93f0 [ 41.182546][ T5019] ? lock_downgrade+0x690/0x690 [ 41.187374][ T5019] ? parse_options+0x1d70/0x1d70 [ 41.192282][ T5019] ? snprintf+0xbf/0x100 [ 41.196500][ T5019] ? vsprintf+0x30/0x30 [ 41.200646][ T5019] ? wait_for_completion_io_timeout+0x20/0x20 [ 41.206692][ T5019] ? up_write+0x1b4/0x520 [ 41.210995][ T5019] ? set_blocksize+0x2d8/0x370 [ 41.215732][ T5019] mount_bdev+0x315/0x3e0 [ 41.220031][ T5019] ? parse_options+0x1d70/0x1d70 [ 41.224940][ T5019] ? ntfs_rl_punch_nolock+0x15c0/0x15c0 [ 41.230455][ T5019] legacy_get_tree+0x109/0x220 [ 41.235193][ T5019] vfs_get_tree+0x8d/0x350 [ 41.239578][ T5019] path_mount+0x136e/0x1e70 [ 41.244058][ T5019] ? putname+0x102/0x140 [ 41.248273][ T5019] ? kmem_cache_free+0xf0/0x490 [ 41.253097][ T5019] ? finish_automount+0xa30/0xa30 [ 41.258095][ T5019] ? putname+0x102/0x140 [ 41.262314][ T5019] __x64_sys_mount+0x283/0x300 [ 41.267059][ T5019] ? copy_mnt_ns+0xb30/0xb30 [ 41.271621][ T5019] ? lockdep_hardirqs_on+0x7d/0x100 [ 41.276792][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 41.282062][ T5019] ? ptrace_notify+0xfe/0x140 [ 41.286717][ T5019] do_syscall_64+0x39/0xb0 [ 41.291117][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.296993][ T5019] RIP: 0033:0x7f6b1deb4f9a [ 41.301380][ T5019] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.320970][ T5019] RSP: 002b:00007ffd6b0d4088 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 41.329354][ T5019] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6b1deb4f9a [ 41.337301][ T5019] RDX: 0000000020000000 RSI: 000000002001ee80 RDI: 00007ffd6b0d40a0 [ 41.345260][ T5019] RBP: 00007ffd6b0d40a0 R08: 00007ffd6b0d40e0 R09: 00007ffd6b0d40f0 [ 41.353208][ T5019] R10: 0000000000800804 R11: 0000000000000286 R12: 0000000000000004 [ 41.361239][ T5019] R13: 000055555562e2c0 R14: 0000000000800804 R15: 00007ffd6b0d40e0 [ 41.369276][ T5019] [ 41.372657][ T5019] ================================================================================ [ 41.381963][ T5019] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 41.389141][ T5019] CPU: 0 PID: 5019 Comm: syz-executor322 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 41.399537][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 41.409604][ T5019] Call Trace: [ 41.412872][ T5019] [ 41.415788][ T5019] dump_stack_lvl+0xd9/0x150 [ 41.420375][ T5019] panic+0x686/0x730 [ 41.424260][ T5019] ? panic_smp_self_stop+0xa0/0xa0 [ 41.429379][ T5019] ? syslog_print_all+0x3a0/0x3a0 [ 41.434391][ T5019] check_panic_on_warn+0xb1/0xc0 [ 41.439313][ T5019] __ubsan_handle_shift_out_of_bounds+0x249/0x5a0 [ 41.445718][ T5019] ntfs_read_locked_inode.cold+0x1b/0x5c [ 41.451341][ T5019] ntfs_read_inode_mount+0xe55/0x2670 [ 41.456707][ T5019] ntfs_fill_super+0x189c/0x93f0 [ 41.461645][ T5019] ? lock_downgrade+0x690/0x690 [ 41.466490][ T5019] ? parse_options+0x1d70/0x1d70 [ 41.471450][ T5019] ? snprintf+0xbf/0x100 [ 41.475680][ T5019] ? vsprintf+0x30/0x30 [ 41.479824][ T5019] ? wait_for_completion_io_timeout+0x20/0x20 [ 41.485879][ T5019] ? up_write+0x1b4/0x520 [ 41.490193][ T5019] ? set_blocksize+0x2d8/0x370 [ 41.494963][ T5019] mount_bdev+0x315/0x3e0 [ 41.499295][ T5019] ? parse_options+0x1d70/0x1d70 [ 41.504227][ T5019] ? ntfs_rl_punch_nolock+0x15c0/0x15c0 [ 41.509761][ T5019] legacy_get_tree+0x109/0x220 [ 41.514517][ T5019] vfs_get_tree+0x8d/0x350 [ 41.518916][ T5019] path_mount+0x136e/0x1e70 [ 41.523405][ T5019] ? putname+0x102/0x140 [ 41.527627][ T5019] ? kmem_cache_free+0xf0/0x490 [ 41.532460][ T5019] ? finish_automount+0xa30/0xa30 [ 41.537474][ T5019] ? putname+0x102/0x140 [ 41.541705][ T5019] __x64_sys_mount+0x283/0x300 [ 41.546454][ T5019] ? copy_mnt_ns+0xb30/0xb30 [ 41.551027][ T5019] ? lockdep_hardirqs_on+0x7d/0x100 [ 41.556210][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 41.561482][ T5019] ? ptrace_notify+0xfe/0x140 [ 41.566144][ T5019] do_syscall_64+0x39/0xb0 [ 41.570552][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.576436][ T5019] RIP: 0033:0x7f6b1deb4f9a [ 41.580830][ T5019] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.600422][ T5019] RSP: 002b:00007ffd6b0d4088 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 41.608816][ T5019] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6b1deb4f9a [ 41.616768][ T5019] RDX: 0000000020000000 RSI: 000000002001ee80 RDI: 00007ffd6b0d40a0 [ 41.624721][ T5019] RBP: 00007ffd6b0d40a0 R08: 00007ffd6b0d40e0 R09: 00007ffd6b0d40f0 [ 41.632677][ T5019] R10: 0000000000800804 R11: 0000000000000286 R12: 0000000000000004 [ 41.640648][ T5019] R13: 000055555562e2c0 R14: 0000000000800804 R15: 00007ffd6b0d40e0 [ 41.648607][ T5019] [ 41.652628][ T5019] Kernel Offset: disabled [ 41.656936][ T5019] Rebooting in 86400 seconds..