./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor590897073 <...> Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. execve("./syz-executor590897073", ["./syz-executor590897073"], 0x7ffd25a40a70 /* 10 vars */) = 0 brk(NULL) = 0x555556bef000 brk(0x555556befd00) = 0x555556befd00 arch_prctl(ARCH_SET_FS, 0x555556bef380) = 0 set_tid_address(0x555556bef650) = 5019 set_robust_list(0x555556bef660, 24) = 0 rseq(0x555556befca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor590897073", 4096) = 27 getrandom("\x99\xce\xc4\x8b\xdb\x15\x01\x28", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556befd00 brk(0x555556c10d00) = 0x555556c10d00 brk(0x555556c11000) = 0x555556c11000 mprotect(0x7fe1b850c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe1b0052000 write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\x42\x46\x53\x31\xbe\x84\x31\x7b\x00\x00\x10\x00\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xdd\x12\x10\x31\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536 munmap(0x7fe1b0052000, 65536) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 38.457268][ T5019] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5019 'syz-executor590' [ 38.471902][ T5019] loop0: detected capacity change from 0 to 128 [ 38.482905][ T5019] ================================================================================ [ 38.492422][ T5019] UBSAN: shift-out-of-bounds in fs/befs/super.c:96:9 [ 38.499220][ T5019] shift exponent 3229888891 is too large for 32-bit type 'int' [ 38.506847][ T5019] CPU: 0 PID: 5019 Comm: syz-executor590 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 38.517257][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 38.527290][ T5019] Call Trace: [ 38.530551][ T5019] [ 38.533460][ T5019] dump_stack_lvl+0x136/0x150 [ 38.538143][ T5019] __ubsan_handle_shift_out_of_bounds+0x221/0x5a0 [ 38.544542][ T5019] ? sched_dl_overflow+0x4e1/0x1120 [ 38.549744][ T5019] befs_check_sb.cold+0x19/0x6f [ 38.554603][ T5019] befs_fill_super+0x9b5/0x1110 [ 38.559440][ T5019] ? befs_symlink_read_folio+0x260/0x260 [ 38.565050][ T5019] ? vsprintf+0x30/0x30 [ 38.569194][ T5019] ? up_write+0x1b4/0x520 [ 38.573511][ T5019] ? set_blocksize+0x2d8/0x370 [ 38.578267][ T5019] mount_bdev+0x315/0x3e0 [ 38.582601][ T5019] ? befs_symlink_read_folio+0x260/0x260 [ 38.588236][ T5019] ? befs_bread_iaddr+0x430/0x430 [ 38.593244][ T5019] legacy_get_tree+0x109/0x220 [ 38.598002][ T5019] vfs_get_tree+0x8d/0x350 [ 38.602409][ T5019] path_mount+0x136e/0x1e70 [ 38.606899][ T5019] ? putname+0x102/0x140 [ 38.611124][ T5019] ? kmem_cache_free+0xf0/0x490 [ 38.615962][ T5019] ? finish_automount+0xa30/0xa30 [ 38.620993][ T5019] ? putname+0x102/0x140 [ 38.625237][ T5019] __x64_sys_mount+0x283/0x300 [ 38.629986][ T5019] ? copy_mnt_ns+0xb30/0xb30 [ 38.634564][ T5019] ? lockdep_hardirqs_on+0x7d/0x100 [ 38.639748][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 38.644933][ T5019] ? ptrace_notify+0xfe/0x140 [ 38.649626][ T5019] do_syscall_64+0x39/0xb0 [ 38.654036][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 38.659923][ T5019] RIP: 0033:0x7fe1b84908ba [ 38.664323][ T5019] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 38.683923][ T5019] RSP: 002b:00007ffd994dbc28 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 38.692321][ T5019] RAX: ffffffffffffffda RBX: 00007ffd994dbc30 RCX: 00007fe1b84908ba [ 38.700279][ T5019] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007ffd994dbc30 [ 38.708255][ T5019] RBP: 0000000000000004 R08: 00007ffd994dbc70 R09: 0000000000009e1f [ 38.716234][ T5019] R10: 0000000003008001 R11: 0000000000000282 R12: 00007ffd994dbc70 [ 38.724201][ T5019] R13: 0000000000000003 R14: 0000000000010000 R15: 0000000000000001 [ 38.732171][ T5019] [ 38.736348][ T5019] ================================================================================ [ 38.745627][ T5019] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 38.752795][ T5019] CPU: 1 PID: 5019 Comm: syz-executor590 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 38.763205][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 38.773237][ T5019] Call Trace: [ 38.776502][ T5019] [ 38.779426][ T5019] dump_stack_lvl+0xd9/0x150 [ 38.784005][ T5019] panic+0x686/0x730 [ 38.787888][ T5019] ? panic_smp_self_stop+0xa0/0xa0 [ 38.792982][ T5019] ? syslog_print_all+0x3a0/0x3a0 [ 38.797991][ T5019] check_panic_on_warn+0xb1/0xc0 [ 38.802932][ T5019] __ubsan_handle_shift_out_of_bounds+0x249/0x5a0 [ 38.809335][ T5019] ? sched_dl_overflow+0x4e1/0x1120 [ 38.814512][ T5019] befs_check_sb.cold+0x19/0x6f [ 38.819350][ T5019] befs_fill_super+0x9b5/0x1110 [ 38.824196][ T5019] ? befs_symlink_read_folio+0x260/0x260 [ 38.829807][ T5019] ? vsprintf+0x30/0x30 [ 38.833942][ T5019] ? up_write+0x1b4/0x520 [ 38.838249][ T5019] ? set_blocksize+0x2d8/0x370 [ 38.842994][ T5019] mount_bdev+0x315/0x3e0 [ 38.847303][ T5019] ? befs_symlink_read_folio+0x260/0x260 [ 38.852920][ T5019] ? befs_bread_iaddr+0x430/0x430 [ 38.857922][ T5019] legacy_get_tree+0x109/0x220 [ 38.862695][ T5019] vfs_get_tree+0x8d/0x350 [ 38.867098][ T5019] path_mount+0x136e/0x1e70 [ 38.871598][ T5019] ? putname+0x102/0x140 [ 38.875825][ T5019] ? kmem_cache_free+0xf0/0x490 [ 38.880663][ T5019] ? finish_automount+0xa30/0xa30 [ 38.885698][ T5019] ? putname+0x102/0x140 [ 38.889950][ T5019] __x64_sys_mount+0x283/0x300 [ 38.894797][ T5019] ? copy_mnt_ns+0xb30/0xb30 [ 38.899371][ T5019] ? lockdep_hardirqs_on+0x7d/0x100 [ 38.904557][ T5019] ? _raw_spin_unlock_irq+0x2e/0x50 [ 38.909749][ T5019] ? ptrace_notify+0xfe/0x140 [ 38.914582][ T5019] do_syscall_64+0x39/0xb0 [ 38.918982][ T5019] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 38.924862][ T5019] RIP: 0033:0x7fe1b84908ba [ 38.929269][ T5019] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 38.948948][ T5019] RSP: 002b:00007ffd994dbc28 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 38.957339][ T5019] RAX: ffffffffffffffda RBX: 00007ffd994dbc30 RCX: 00007fe1b84908ba [ 38.965292][ T5019] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007ffd994dbc30 [ 38.973269][ T5019] RBP: 0000000000000004 R08: 00007ffd994dbc70 R09: 0000000000009e1f [ 38.981227][ T5019] R10: 0000000003008001 R11: 0000000000000282 R12: 00007ffd994dbc70 [ 38.989194][ T5019] R13: 0000000000000003 R14: 0000000000010000 R15: 0000000000000001 [ 38.997161][ T5019] [ 39.000934][ T5019] Kernel Offset: disabled [ 39.005343][ T5019] Rebooting in 86400 seconds..