./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1820644518
<...>
DUID 00:04:03:2c:e5:fc:a2:19:b8:8b:c5:bf:62:63:19:3a:75:c6
forked to background, child pid 4693
[ 31.541983][ T4694] 8021q: adding VLAN 0 to HW filter on device bond0
[ 31.551996][ T4694] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts.
execve("./syz-executor1820644518", ["./syz-executor1820644518"], 0x7fff0759bc20 /* 10 vars */) = 0
brk(NULL) = 0x555556edb000
brk(0x555556edbc40) = 0x555556edbc40
arch_prctl(ARCH_SET_FS, 0x555556edb300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1820644518", 4096) = 28
brk(0x555556efcc40) = 0x555556efcc40
brk(0x555556efd000) = 0x555556efd000
mprotect(0x7f0d2bb88000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0d236c5000
write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\x42\x46\x53\x31\xbe\x84\x31\x7b\x00\x00\x10\x00\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xdd\x12\x10\x31\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536
munmap(0x7f0d236c5000, 65536) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 56.687444][ T5024] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5024 'syz-executor182'
[ 56.704175][ T5024] loop0: detected capacity change from 0 to 128
[ 56.716170][ T5024] ================================================================================
[ 56.725602][ T5024] UBSAN: shift-out-of-bounds in fs/befs/super.c:96:9
[ 56.732275][ T5024] shift exponent 3229888891 is too large for 32-bit type 'int'
[ 56.740201][ T5024] CPU: 1 PID: 5024 Comm: syz-executor182 Not tainted 6.4.0-next-20230707-syzkaller #0
[ 56.749836][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 56.759995][ T5024] Call Trace:
[ 56.763268][ T5024]
[ 56.766193][ T5024] dump_stack_lvl+0x136/0x150
[ 56.770968][ T5024] __ubsan_handle_shift_out_of_bounds+0x221/0x5a0
[ 56.777556][ T5024] ? sched_dl_overflow+0x11/0x1120
[ 56.782662][ T5024] befs_check_sb.cold+0x19/0x6f
[ 56.787504][ T5024] befs_fill_super+0x9b5/0x1110
[ 56.792359][ T5024] ? befs_symlink_read_folio+0x260/0x260
[ 56.797993][ T5024] ? vsprintf+0x30/0x30
[ 56.802167][ T5024] ? up_write+0x1b4/0x520
[ 56.806534][ T5024] ? set_blocksize+0x2d8/0x370
[ 56.811322][ T5024] mount_bdev+0x315/0x3e0
[ 56.815747][ T5024] ? befs_symlink_read_folio+0x260/0x260
[ 56.821389][ T5024] ? befs_bread_iaddr+0x430/0x430
[ 56.826425][ T5024] legacy_get_tree+0x109/0x220
[ 56.831467][ T5024] vfs_get_tree+0x8d/0x350
[ 56.835891][ T5024] path_mount+0x136e/0x1e70
[ 56.840401][ T5024] ? putname+0x102/0x140
[ 56.844655][ T5024] ? kmem_cache_free+0xf0/0x490
[ 56.849515][ T5024] ? finish_automount+0xa30/0xa30
[ 56.854552][ T5024] ? putname+0x102/0x140
[ 56.858803][ T5024] __x64_sys_mount+0x283/0x300
[ 56.863574][ T5024] ? copy_mnt_ns+0xb30/0xb30
[ 56.868168][ T5024] ? lockdep_hardirqs_on+0x7d/0x100
[ 56.873376][ T5024] ? _raw_spin_unlock_irq+0x2e/0x50
[ 56.878587][ T5024] ? ptrace_notify+0xfe/0x140
[ 56.883271][ T5024] do_syscall_64+0x39/0xb0
[ 56.887783][ T5024] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.893683][ T5024] RIP: 0033:0x7f0d2bb12aea
[ 56.898101][ T5024] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.917723][ T5024] RSP: 002b:00007ffe1a1df6e8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 56.926144][ T5024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0d2bb12aea
[ 56.934115][ T5024] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007ffe1a1df6f0
[ 56.942099][ T5024] RBP: 00007ffe1a1df6f0 R08: 00007ffe1a1df730 R09: 0000000000009e1f
[ 56.950248][ T5024] R10: 0000000003008001 R11: 0000000000000282 R12: 0000000000000004
[ 56.958222][ T5024] R13: 0000555556edb2c0 R14: 00007ffe1a1df730 R15: 0000000000000000
[ 56.966209][ T5024]
[ 56.969419][ T5024] ================================================================================
[ 56.978829][ T5024] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 56.986040][ T5024] CPU: 0 PID: 5024 Comm: syz-executor182 Not tainted 6.4.0-next-20230707-syzkaller #0
[ 56.995582][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 57.005646][ T5024] Call Trace:
[ 57.008921][ T5024]
[ 57.011841][ T5024] dump_stack_lvl+0xd9/0x150
[ 57.016431][ T5024] panic+0x686/0x730
[ 57.020322][ T5024] ? panic_smp_self_stop+0xa0/0xa0
[ 57.025455][ T5024] ? syslog_print_all+0x3a0/0x3a0
[ 57.030491][ T5024] check_panic_on_warn+0xb1/0xc0
[ 57.035483][ T5024] __ubsan_handle_shift_out_of_bounds+0x249/0x5a0
[ 57.041921][ T5024] ? sched_dl_overflow+0x11/0x1120
[ 57.047136][ T5024] befs_check_sb.cold+0x19/0x6f
[ 57.051984][ T5024] befs_fill_super+0x9b5/0x1110
[ 57.056834][ T5024] ? befs_symlink_read_folio+0x260/0x260
[ 57.062465][ T5024] ? vsprintf+0x30/0x30
[ 57.066622][ T5024] ? up_write+0x1b4/0x520
[ 57.070946][ T5024] ? set_blocksize+0x2d8/0x370
[ 57.075707][ T5024] mount_bdev+0x315/0x3e0
[ 57.080291][ T5024] ? befs_symlink_read_folio+0x260/0x260
[ 57.085914][ T5024] ? befs_bread_iaddr+0x430/0x430
[ 57.090930][ T5024] legacy_get_tree+0x109/0x220
[ 57.095702][ T5024] vfs_get_tree+0x8d/0x350
[ 57.100118][ T5024] path_mount+0x136e/0x1e70
[ 57.104622][ T5024] ? putname+0x102/0x140
[ 57.108868][ T5024] ? kmem_cache_free+0xf0/0x490
[ 57.113719][ T5024] ? finish_automount+0xa30/0xa30
[ 57.118737][ T5024] ? putname+0x102/0x140
[ 57.122971][ T5024] __x64_sys_mount+0x283/0x300
[ 57.127725][ T5024] ? copy_mnt_ns+0xb30/0xb30
[ 57.132303][ T5024] ? lockdep_hardirqs_on+0x7d/0x100
[ 57.137519][ T5024] ? _raw_spin_unlock_irq+0x2e/0x50
[ 57.142725][ T5024] ? ptrace_notify+0xfe/0x140
[ 57.147493][ T5024] do_syscall_64+0x39/0xb0
[ 57.151911][ T5024] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.157798][ T5024] RIP: 0033:0x7f0d2bb12aea
[ 57.162203][ T5024] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 57.181818][ T5024] RSP: 002b:00007ffe1a1df6e8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 57.190233][ T5024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0d2bb12aea
[ 57.198218][ T5024] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007ffe1a1df6f0
[ 57.206197][ T5024] RBP: 00007ffe1a1df6f0 R08: 00007ffe1a1df730 R09: 0000000000009e1f
[ 57.214172][ T5024] R10: 0000000003008001 R11: 0000000000000282 R12: 0000000000000004
[ 57.222248][ T5024] R13: 0000555556edb2c0 R14: 00007ffe1a1df730 R15: 0000000000000000
[ 57.230403][ T5024]
[ 57.233685][ T5024] Kernel Offset: disabled
[ 57.238091][ T5024] Rebooting in 86400 seconds..