./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1820644518 <...> DUID 00:04:03:2c:e5:fc:a2:19:b8:8b:c5:bf:62:63:19:3a:75:c6 forked to background, child pid 4693 [ 31.541983][ T4694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.551996][ T4694] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts. execve("./syz-executor1820644518", ["./syz-executor1820644518"], 0x7fff0759bc20 /* 10 vars */) = 0 brk(NULL) = 0x555556edb000 brk(0x555556edbc40) = 0x555556edbc40 arch_prctl(ARCH_SET_FS, 0x555556edb300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1820644518", 4096) = 28 brk(0x555556efcc40) = 0x555556efcc40 brk(0x555556efd000) = 0x555556efd000 mprotect(0x7f0d2bb88000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0d236c5000 write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\x42\x46\x53\x31\xbe\x84\x31\x7b\x00\x00\x10\x00\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xdd\x12\x10\x31\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536 munmap(0x7f0d236c5000, 65536) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 56.687444][ T5024] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5024 'syz-executor182' [ 56.704175][ T5024] loop0: detected capacity change from 0 to 128 [ 56.716170][ T5024] ================================================================================ [ 56.725602][ T5024] UBSAN: shift-out-of-bounds in fs/befs/super.c:96:9 [ 56.732275][ T5024] shift exponent 3229888891 is too large for 32-bit type 'int' [ 56.740201][ T5024] CPU: 1 PID: 5024 Comm: syz-executor182 Not tainted 6.4.0-next-20230707-syzkaller #0 [ 56.749836][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 56.759995][ T5024] Call Trace: [ 56.763268][ T5024] [ 56.766193][ T5024] dump_stack_lvl+0x136/0x150 [ 56.770968][ T5024] __ubsan_handle_shift_out_of_bounds+0x221/0x5a0 [ 56.777556][ T5024] ? sched_dl_overflow+0x11/0x1120 [ 56.782662][ T5024] befs_check_sb.cold+0x19/0x6f [ 56.787504][ T5024] befs_fill_super+0x9b5/0x1110 [ 56.792359][ T5024] ? befs_symlink_read_folio+0x260/0x260 [ 56.797993][ T5024] ? vsprintf+0x30/0x30 [ 56.802167][ T5024] ? up_write+0x1b4/0x520 [ 56.806534][ T5024] ? set_blocksize+0x2d8/0x370 [ 56.811322][ T5024] mount_bdev+0x315/0x3e0 [ 56.815747][ T5024] ? befs_symlink_read_folio+0x260/0x260 [ 56.821389][ T5024] ? befs_bread_iaddr+0x430/0x430 [ 56.826425][ T5024] legacy_get_tree+0x109/0x220 [ 56.831467][ T5024] vfs_get_tree+0x8d/0x350 [ 56.835891][ T5024] path_mount+0x136e/0x1e70 [ 56.840401][ T5024] ? putname+0x102/0x140 [ 56.844655][ T5024] ? kmem_cache_free+0xf0/0x490 [ 56.849515][ T5024] ? finish_automount+0xa30/0xa30 [ 56.854552][ T5024] ? putname+0x102/0x140 [ 56.858803][ T5024] __x64_sys_mount+0x283/0x300 [ 56.863574][ T5024] ? copy_mnt_ns+0xb30/0xb30 [ 56.868168][ T5024] ? lockdep_hardirqs_on+0x7d/0x100 [ 56.873376][ T5024] ? _raw_spin_unlock_irq+0x2e/0x50 [ 56.878587][ T5024] ? ptrace_notify+0xfe/0x140 [ 56.883271][ T5024] do_syscall_64+0x39/0xb0 [ 56.887783][ T5024] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.893683][ T5024] RIP: 0033:0x7f0d2bb12aea [ 56.898101][ T5024] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.917723][ T5024] RSP: 002b:00007ffe1a1df6e8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 56.926144][ T5024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0d2bb12aea [ 56.934115][ T5024] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007ffe1a1df6f0 [ 56.942099][ T5024] RBP: 00007ffe1a1df6f0 R08: 00007ffe1a1df730 R09: 0000000000009e1f [ 56.950248][ T5024] R10: 0000000003008001 R11: 0000000000000282 R12: 0000000000000004 [ 56.958222][ T5024] R13: 0000555556edb2c0 R14: 00007ffe1a1df730 R15: 0000000000000000 [ 56.966209][ T5024] [ 56.969419][ T5024] ================================================================================ [ 56.978829][ T5024] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 56.986040][ T5024] CPU: 0 PID: 5024 Comm: syz-executor182 Not tainted 6.4.0-next-20230707-syzkaller #0 [ 56.995582][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 57.005646][ T5024] Call Trace: [ 57.008921][ T5024] [ 57.011841][ T5024] dump_stack_lvl+0xd9/0x150 [ 57.016431][ T5024] panic+0x686/0x730 [ 57.020322][ T5024] ? panic_smp_self_stop+0xa0/0xa0 [ 57.025455][ T5024] ? syslog_print_all+0x3a0/0x3a0 [ 57.030491][ T5024] check_panic_on_warn+0xb1/0xc0 [ 57.035483][ T5024] __ubsan_handle_shift_out_of_bounds+0x249/0x5a0 [ 57.041921][ T5024] ? sched_dl_overflow+0x11/0x1120 [ 57.047136][ T5024] befs_check_sb.cold+0x19/0x6f [ 57.051984][ T5024] befs_fill_super+0x9b5/0x1110 [ 57.056834][ T5024] ? befs_symlink_read_folio+0x260/0x260 [ 57.062465][ T5024] ? vsprintf+0x30/0x30 [ 57.066622][ T5024] ? up_write+0x1b4/0x520 [ 57.070946][ T5024] ? set_blocksize+0x2d8/0x370 [ 57.075707][ T5024] mount_bdev+0x315/0x3e0 [ 57.080291][ T5024] ? befs_symlink_read_folio+0x260/0x260 [ 57.085914][ T5024] ? befs_bread_iaddr+0x430/0x430 [ 57.090930][ T5024] legacy_get_tree+0x109/0x220 [ 57.095702][ T5024] vfs_get_tree+0x8d/0x350 [ 57.100118][ T5024] path_mount+0x136e/0x1e70 [ 57.104622][ T5024] ? putname+0x102/0x140 [ 57.108868][ T5024] ? kmem_cache_free+0xf0/0x490 [ 57.113719][ T5024] ? finish_automount+0xa30/0xa30 [ 57.118737][ T5024] ? putname+0x102/0x140 [ 57.122971][ T5024] __x64_sys_mount+0x283/0x300 [ 57.127725][ T5024] ? copy_mnt_ns+0xb30/0xb30 [ 57.132303][ T5024] ? lockdep_hardirqs_on+0x7d/0x100 [ 57.137519][ T5024] ? _raw_spin_unlock_irq+0x2e/0x50 [ 57.142725][ T5024] ? ptrace_notify+0xfe/0x140 [ 57.147493][ T5024] do_syscall_64+0x39/0xb0 [ 57.151911][ T5024] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.157798][ T5024] RIP: 0033:0x7f0d2bb12aea [ 57.162203][ T5024] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.181818][ T5024] RSP: 002b:00007ffe1a1df6e8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 57.190233][ T5024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0d2bb12aea [ 57.198218][ T5024] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007ffe1a1df6f0 [ 57.206197][ T5024] RBP: 00007ffe1a1df6f0 R08: 00007ffe1a1df730 R09: 0000000000009e1f [ 57.214172][ T5024] R10: 0000000003008001 R11: 0000000000000282 R12: 0000000000000004 [ 57.222248][ T5024] R13: 0000555556edb2c0 R14: 00007ffe1a1df730 R15: 0000000000000000 [ 57.230403][ T5024] [ 57.233685][ T5024] Kernel Offset: disabled [ 57.238091][ T5024] Rebooting in 86400 seconds..