./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor485930964
<...>
Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts.
execve("./syz-executor485930964", ["./syz-executor485930964"], 0x7fff0abbd340 /* 10 vars */) = 0
brk(NULL) = 0x555555984000
brk(0x555555984d00) = 0x555555984d00
arch_prctl(ARCH_SET_FS, 0x555555984380) = 0
set_tid_address(0x555555984650) = 5061
set_robust_list(0x555555984660, 24) = 0
rseq(0x555555984ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor485930964", 4096) = 27
getrandom("\xd2\x18\xc9\xc0\x7b\xbe\x3e\x72", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555555984d00
brk(0x5555559a5d00) = 0x5555559a5d00
brk(0x5555559a6000) = 0x5555559a6000
mprotect(0x7fde70999000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
[ 105.722567][ T28] audit: type=1400 audit(1709455151.679:86): avc: denied { execmem } for pid=5061 comm="syz-executor485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 105.742524][ T28] audit: type=1400 audit(1709455151.689:87): avc: denied { read write } for pid=5061 comm="syz-executor485" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555984650) = 5062
./strace-static-x86_64: Process 5062 attached
[pid 5062] set_robust_list(0x555555984660, 24) = 0
[pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5062] setpgid(0, 0) = 0
[pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5062] write(3, "1000", 4) = 4
[pid 5062] close(3) = 0
[ 105.767424][ T28] audit: type=1400 audit(1709455151.689:88): avc: denied { open } for pid=5061 comm="syz-executor485" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 105.792486][ T28] audit: type=1400 audit(1709455151.699:89): avc: denied { ioctl } for pid=5061 comm="syz-executor485" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid 5062] memfd_create("syzkaller", 0) = 3
[pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fde68400000
[pid 5062] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\x42\x46\x53\x31\xbe\x84\x31\x7b\x00\x00\x10\x00\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xdd\x12\x10\x31\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536
[pid 5062] munmap(0x7fde68400000, 138412032) = 0
[pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5062] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5062] close(3) = 0
[pid 5062] close(4) = 0
[pid 5062] mkdir("./file0", 0777) = 0
[ 105.883998][ T5062] loop0: detected capacity change from 0 to 128
[ 105.919101][ T28] audit: type=1400 audit(1709455151.869:90): avc: denied { mounton } for pid=5062 comm="syz-executor485" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 105.935508][ T5062] ------------[ cut here ]------------
[ 105.947946][ T5062] UBSAN: shift-out-of-bounds in fs/befs/super.c:96:9
[ 105.954803][ T5062] shift exponent 3229888891 is too large for 32-bit type 'int'
[ 105.962695][ T5062] CPU: 1 PID: 5062 Comm: syz-executor485 Not tainted 6.8.0-rc6-syzkaller-00250-g04b8076df253 #0
[ 105.973331][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[ 105.983409][ T5062] Call Trace:
[ 105.986708][ T5062]
[ 105.989692][ T5062] dump_stack_lvl+0x125/0x1b0
[ 105.994430][ T5062] __ubsan_handle_shift_out_of_bounds+0x2a6/0x480
[ 106.000970][ T5062] befs_check_sb.cold+0x19/0x6f
[ 106.005845][ T5062] befs_fill_super+0x9ea/0x1140
[ 106.010739][ T5062] ? __pfx_befs_fill_super+0x10/0x10
[ 106.016062][ T5062] ? do_raw_spin_lock+0x12e/0x2c0
[ 106.021391][ T5062] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 106.026802][ T5062] ? disk_unblock_events+0xd/0x60
[ 106.031862][ T5062] ? set_blocksize+0x2b1/0x350
[ 106.036747][ T5062] ? sb_set_blocksize+0xf6/0x120
[ 106.041716][ T5062] ? setup_bdev_super+0x3a6/0x770
[ 106.046787][ T5062] ? __pfx_befs_fill_super+0x10/0x10
[ 106.052211][ T5062] mount_bdev+0x1e3/0x2d0
[ 106.056588][ T5062] ? __pfx_mount_bdev+0x10/0x10
[ 106.061566][ T5062] ? selinux_sb_eat_lsm_opts+0x594/0x700
[ 106.067229][ T5062] ? cap_capable+0x1cf/0x240
[ 106.071864][ T5062] ? __pfx_befs_mount+0x10/0x10
[ 106.076762][ T5062] legacy_get_tree+0x109/0x220
[ 106.081562][ T5062] vfs_get_tree+0x8f/0x380
[ 106.086026][ T5062] path_mount+0x14ea/0x1f20
[ 106.090574][ T5062] ? kmem_cache_free+0x129/0x360
[ 106.095719][ T5062] ? __pfx_path_mount+0x10/0x10
[ 106.100617][ T5062] ? putname+0x12e/0x170
[ 106.104979][ T5062] __x64_sys_mount+0x297/0x320
[ 106.109794][ T5062] ? __pfx___x64_sys_mount+0x10/0x10
[ 106.115131][ T5062] ? lockdep_hardirqs_on+0x7d/0x110
[ 106.120458][ T5062] ? _raw_spin_unlock_irq+0x2e/0x50
[ 106.125701][ T5062] ? ptrace_notify+0xf4/0x140
[ 106.130455][ T5062] do_syscall_64+0xd5/0x270
[ 106.134992][ T5062] entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 106.141114][ T5062] RIP: 0033:0x7fde7091ddaa
[ 106.145641][ T5062] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 106.165279][ T5062] RSP: 002b:00007fff16284938 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 106.173735][ T5062] RAX: ffffffffffffffda RBX: 00007fff16284940 RCX: 00007fde7091ddaa
[ 106.181817][ T5062] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007fff16284940
[ 106.189822][ T5062] RBP: 0000000000000004 R08: 00007fff16284980 R09: 0000000000009e1f
[ 106.197902][ T5062] R10: 0000000003008001 R11: 0000000000000282 R12: 00007fff16284980
[ 106.205900][ T5062] R13: 0000000000000003 R14: 0000000000010000 R15: 00007fde7096503b
[ 106.213898][ T5062]
[ 106.217129][ T5062] ---[ end trace ]---
[ 106.221217][ T5062] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 106.228543][ T5062] CPU: 0 PID: 5062 Comm: syz-executor485 Not tainted 6.8.0-rc6-syzkaller-00250-g04b8076df253 #0
[ 106.239049][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
[ 106.249208][ T5062] Call Trace:
[ 106.252501][ T5062]
[ 106.255445][ T5062] dump_stack_lvl+0xd9/0x1b0
[ 106.260065][ T5062] panic+0x6ee/0x7a0
[ 106.263990][ T5062] ? mark_held_locks+0x9f/0xe0
[ 106.269052][ T5062] ? __pfx_panic+0x10/0x10
[ 106.273501][ T5062] ? __pfx__printk+0x10/0x10
[ 106.278115][ T5062] ? check_panic_on_warn+0x1f/0xb0
[ 106.283255][ T5062] check_panic_on_warn+0xab/0xb0
[ 106.288221][ T5062] __ubsan_handle_shift_out_of_bounds+0x2ce/0x480
[ 106.294668][ T5062] befs_check_sb.cold+0x19/0x6f
[ 106.299545][ T5062] befs_fill_super+0x9ea/0x1140
[ 106.304445][ T5062] ? __pfx_befs_fill_super+0x10/0x10
[ 106.309858][ T5062] ? do_raw_spin_lock+0x12e/0x2c0
[ 106.314915][ T5062] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 106.320323][ T5062] ? disk_unblock_events+0xd/0x60
[ 106.325380][ T5062] ? set_blocksize+0x2b1/0x350
[ 106.330187][ T5062] ? sb_set_blocksize+0xf6/0x120
[ 106.335144][ T5062] ? setup_bdev_super+0x3a6/0x770
[ 106.340194][ T5062] ? __pfx_befs_fill_super+0x10/0x10
[ 106.345506][ T5062] mount_bdev+0x1e3/0x2d0
[ 106.350396][ T5062] ? __pfx_mount_bdev+0x10/0x10
[ 106.355284][ T5062] ? selinux_sb_eat_lsm_opts+0x594/0x700
[ 106.360947][ T5062] ? cap_capable+0x1cf/0x240
[ 106.365580][ T5062] ? __pfx_befs_mount+0x10/0x10
[ 106.370466][ T5062] legacy_get_tree+0x109/0x220
[ 106.375295][ T5062] vfs_get_tree+0x8f/0x380
[ 106.379749][ T5062] path_mount+0x14ea/0x1f20
[ 106.384389][ T5062] ? kmem_cache_free+0x129/0x360
[ 106.389357][ T5062] ? __pfx_path_mount+0x10/0x10
[ 106.394239][ T5062] ? putname+0x12e/0x170
[ 106.398506][ T5062] __x64_sys_mount+0x297/0x320
[ 106.403404][ T5062] ? __pfx___x64_sys_mount+0x10/0x10
[ 106.408723][ T5062] ? lockdep_hardirqs_on+0x7d/0x110
[ 106.413978][ T5062] ? _raw_spin_unlock_irq+0x2e/0x50
[ 106.419205][ T5062] ? ptrace_notify+0xf4/0x140
[ 106.423907][ T5062] do_syscall_64+0xd5/0x270
[ 106.428434][ T5062] entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 106.434367][ T5062] RIP: 0033:0x7fde7091ddaa
[ 106.438797][ T5062] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 106.458605][ T5062] RSP: 002b:00007fff16284938 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 106.467306][ T5062] RAX: ffffffffffffffda RBX: 00007fff16284940 RCX: 00007fde7091ddaa
[ 106.475499][ T5062] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007fff16284940
[ 106.483504][ T5062] RBP: 0000000000000004 R08: 00007fff16284980 R09: 0000000000009e1f
[ 106.491582][ T5062] R10: 0000000003008001 R11: 0000000000000282 R12: 00007fff16284980
[ 106.499568][ T5062] R13: 0000000000000003 R14: 0000000000010000 R15: 00007fde7096503b
[ 106.507649][ T5062]
[ 106.510926][ T5062] Kernel Offset: disabled
[ 106.515365][ T5062] Rebooting in 86400 seconds..