program:
r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0)
ftruncate(r0, 0x10000)
pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008)
pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024)
pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068)
pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098)
pwrite64(r0, &(0x7f00000010e0)="541901005419010054190100", 0xc, 0x2554)
pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0)
pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00)
pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08)
pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28)
pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40302002e2e0000", 0x18, 0x3000)
r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff)
write(r2, &(0x7f0000007000)='A', 0x1)
[ 76.682662][ T5281] Bluetooth: hci0: command tx timeout
[ 76.687263][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.691087][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 76.754302][ T5318] loop0: detected capacity change from 0 to 128
[ 76.795883][ T5318] ufs: ufs_fill_super(): fs needs fsck
[ 76.810490][ T5318] ------------[ cut here ]------------
[ 76.820512][ T5318] UBSAN: shift-out-of-bounds in fs/ufs/super.c:1177:18
[ 76.836246][ T5318] shift exponent 4294967294 is too large for 32-bit type 'int'
[ 76.842877][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 76.842889][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 76.842894][ T5318] Call Trace:
[ 76.842897][ T5318]
[ 76.842901][ T5318] dump_stack_lvl+0xe8/0x150
[ 76.842985][ T5318] ubsan_epilogue+0xa/0x30
[ 76.842999][ T5318] __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[ 76.843048][ T5318] ufs_fill_super+0x5f8d/0x67e0
[ 76.843069][ T5318] ? setup_bdev_super+0x4c1/0x5b0
[ 76.843083][ T5318] get_tree_bdev_flags+0x430/0x4f0
[ 76.843095][ T5318] ? __pfx_ufs_fill_super+0x10/0x10
[ 76.843102][ T5318] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 76.843117][ T5318] vfs_get_tree+0x92/0x2a0
[ 76.843129][ T5318] do_new_mount+0x319/0xdc0
[ 76.843140][ T5318] ? __pfx_do_new_mount+0x10/0x10
[ 76.843153][ T5318] ? ns_capable+0x89/0xe0
[ 76.843163][ T5318] ? path_mount+0x647/0x1040
[ 76.843173][ T5318] ? user_path_at+0xd4/0x160
[ 76.843183][ T5318] __se_sys_mount+0x31d/0x420
[ 76.843194][ T5318] ? __pfx___se_sys_mount+0x10/0x10
[ 76.843205][ T5318] ? __x64_sys_mount+0x20/0xc0
[ 76.843213][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.843221][ T5318] do_syscall_64+0x174/0x580
[ 76.843258][ T5318] ? trace_irq_disable+0x3b/0x140
[ 76.843269][ T5318] ? clear_bhb_loop+0x40/0x90
[ 76.843278][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.843286][ T5318] RIP: 0033:0x7f1fc259e019
[ 76.843294][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 76.843301][ T5318] RSP: 002b:00007f1fc34f7fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 76.843314][ T5318] RAX: ffffffffffffffda RBX: 00007f1fc2825fa0 RCX: 00007f1fc259e019
[ 76.843322][ T5318] RDX: 0000200000004000 RSI: 0000200000003000 RDI: 0000200000000040
[ 76.843330][ T5318] RBP: 00007f1fc263500c R08: 0000200000005000 R09: 0000000000000000
[ 76.843337][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.843343][ T5318] R13: 00007f1fc2826038 R14: 00007f1fc2825fa0 R15: 00007ffd31304678
[ 76.843360][ T5318]
[ 76.843400][ T5318] ---[ end trace ]---
[ 76.991623][ T5318] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 76.994046][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 76.996952][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.000112][ T5318] Call Trace:
[ 77.001240][ T5318]
[ 77.002257][ T5318] vpanic+0x56c/0xa60
[ 77.003581][ T5318] ? __pfx_vpanic+0x10/0x10
[ 77.005237][ T5318] ? irqentry_exit+0x218/0x8f0
[ 77.007216][ T5318] panic+0xc5/0xd0
[ 77.008789][ T5318] ? __pfx_panic+0x10/0x10
[ 77.010635][ T5318] ? __pfx__printk+0x10/0x10
[ 77.012571][ T5318] check_panic_on_warn+0x89/0xb0
[ 77.014601][ T5318] __ubsan_handle_shift_out_of_bounds+0x36d/0x400
[ 77.017190][ T5318] ufs_fill_super+0x5f8d/0x67e0
[ 77.019183][ T5318] ? setup_bdev_super+0x4c1/0x5b0
[ 77.021257][ T5318] get_tree_bdev_flags+0x430/0x4f0
[ 77.023457][ T5318] ? __pfx_ufs_fill_super+0x10/0x10
[ 77.025586][ T5318] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 77.027904][ T5318] vfs_get_tree+0x92/0x2a0
[ 77.029745][ T5318] do_new_mount+0x319/0xdc0
[ 77.031619][ T5318] ? __pfx_do_new_mount+0x10/0x10
[ 77.033364][ T5318] ? ns_capable+0x89/0xe0
[ 77.034760][ T5318] ? path_mount+0x647/0x1040
[ 77.036310][ T5318] ? user_path_at+0xd4/0x160
[ 77.037915][ T5318] __se_sys_mount+0x31d/0x420
[ 77.039538][ T5318] ? __pfx___se_sys_mount+0x10/0x10
[ 77.041317][ T5318] ? __x64_sys_mount+0x20/0xc0
[ 77.042933][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.044904][ T5318] do_syscall_64+0x174/0x580
[ 77.046509][ T5318] ? trace_irq_disable+0x3b/0x140
[ 77.048192][ T5318] ? clear_bhb_loop+0x40/0x90
[ 77.049770][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.051745][ T5318] RIP: 0033:0x7f1fc259e019
[ 77.053282][ T5318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 77.059954][ T5318] RSP: 002b:00007f1fc34f7fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 77.062897][ T5318] RAX: ffffffffffffffda RBX: 00007f1fc2825fa0 RCX: 00007f1fc259e019
[ 77.065772][ T5318] RDX: 0000200000004000 RSI: 0000200000003000 RDI: 0000200000000040
[ 77.068610][ T5318] RBP: 00007f1fc263500c R08: 0000200000005000 R09: 0000000000000000
[ 77.071399][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 77.074245][ T5318] R13: 00007f1fc2826038 R14: 00007f1fc2825fa0 R15: 00007ffd31304678
[ 77.077016][ T5318]
[ 77.078529][ T5318] Kernel Offset: disabled
[ 77.080121][ T5318] Rebooting in 86400 seconds..