./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3238442870 <...> Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. execve("./syz-executor3238442870", ["./syz-executor3238442870"], 0x7fff118524b0 /* 10 vars */) = 0 brk(NULL) = 0x55555716a000 brk(0x55555716ad00) = 0x55555716ad00 arch_prctl(ARCH_SET_FS, 0x55555716a380) = 0 set_tid_address(0x55555716a650) = 5054 set_robust_list(0x55555716a660, 24) = 0 rseq(0x55555716aca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3238442870", 4096) = 28 getrandom("\xb9\xba\x05\x9e\x8e\x66\x98\x30", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555716ad00 brk(0x55555718bd00) = 0x55555718bd00 brk(0x55555718c000) = 0x55555718c000 mprotect(0x7fd7a699b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd79e4eb000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768 munmap(0x7fd79e4eb000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "minix", MS_NODEV|MS_LAZYTIME, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 creat("./bus", 000) = 4 [ 54.091687][ T5054] loop0: detected capacity change from 0 to 64 [ 54.142353][ T5054] ================================================================================ [ 54.151722][ T5054] UBSAN: shift-out-of-bounds in fs/minix/inode.c:380:57 [ 54.158878][ T5054] shift exponent 13056 is too large for 64-bit type 'unsigned long' [ 54.166885][ T5054] CPU: 0 PID: 5054 Comm: syz-executor323 Not tainted 6.7.0-rc5-syzkaller-00270-g0e389834672c #0 [ 54.177324][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 54.187378][ T5054] Call Trace: [ 54.190644][ T5054] [ 54.193558][ T5054] dump_stack_lvl+0x1e7/0x2d0 [ 54.198243][ T5054] ? nf_tcp_handle_invalid+0x650/0x650 [ 54.203690][ T5054] ? panic+0x850/0x850 [ 54.207751][ T5054] __ubsan_handle_shift_out_of_bounds+0x3c3/0x420 [ 54.214155][ T5054] ? user_path_at_empty+0x4c/0x60 [ 54.219165][ T5054] minix_statfs+0x369/0x370 [ 54.223653][ T5054] user_statfs+0x212/0x460 [ 54.228057][ T5054] ? vfs_statfs+0x2c0/0x2c0 [ 54.232548][ T5054] __x64_sys_statfs+0xe8/0x1a0 [ 54.237300][ T5054] ? fd_statfs+0x380/0x380 [ 54.241700][ T5054] ? _raw_spin_unlock_irq+0x23/0x50 [ 54.246881][ T5054] ? lockdep_hardirqs_on+0x98/0x140 [ 54.252068][ T5054] ? _raw_spin_unlock_irq+0x2e/0x50 [ 54.257252][ T5054] ? ptrace_notify+0x278/0x380 [ 54.262006][ T5054] ? do_notify_parent+0x10c0/0x10c0 [ 54.267192][ T5054] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 54.273164][ T5054] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 54.279128][ T5054] ? syscall_enter_from_user_mode+0xf5/0x2d0 [ 54.285093][ T5054] do_syscall_64+0x45/0x110 [ 54.289585][ T5054] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 54.295466][ T5054] RIP: 0033:0x7fd7a69285f9 [ 54.299864][ T5054] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.319455][ T5054] RSP: 002b:00007ffd23ce7148 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 54.327855][ T5054] RAX: ffffffffffffffda RBX: 00007ffd23ce7328 RCX: 00007fd7a69285f9 [ 54.335812][ T5054] RDX: 0000000000000073 RSI: 0000000000000000 RDI: 00000000200000c0 [ 54.343765][ T5054] RBP: 00007fd7a699b610 R08: 0000000000000000 R09: 0000000000000000 [ 54.351722][ T5054] R10: 0000000000000185 R11: 0000000000000246 R12: 0000000000000001 [ 54.359677][ T5054] R13: 00007ffd23ce7318 R14: 0000000000000001 R15: 0000000000000001 [ 54.367641][ T5054] [ 54.371363][ T5054] ================================================================================ [ 54.380693][ T5054] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 54.387884][ T5054] CPU: 0 PID: 5054 Comm: syz-executor323 Not tainted 6.7.0-rc5-syzkaller-00270-g0e389834672c #0 [ 54.398287][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 54.408334][ T5054] Call Trace: [ 54.411605][ T5054] [ 54.414527][ T5054] dump_stack_lvl+0x1e7/0x2d0 [ 54.419226][ T5054] ? nf_tcp_handle_invalid+0x650/0x650 [ 54.424682][ T5054] ? panic+0x850/0x850 [ 54.428742][ T5054] ? vprintk_emit+0x607/0x720 [ 54.433417][ T5054] ? vscnprintf+0x5d/0x80 [ 54.437739][ T5054] panic+0x349/0x850 [ 54.441628][ T5054] ? check_panic_on_warn+0x21/0xa0 [ 54.446731][ T5054] ? __memcpy_flushcache+0x2b0/0x2b0 [ 54.452012][ T5054] ? _printk+0xd5/0x120 [ 54.456161][ T5054] ? panic+0x850/0x850 [ 54.460228][ T5054] check_panic_on_warn+0x82/0xa0 [ 54.465159][ T5054] __ubsan_handle_shift_out_of_bounds+0x3e2/0x420 [ 54.471575][ T5054] ? user_path_at_empty+0x4c/0x60 [ 54.476593][ T5054] minix_statfs+0x369/0x370 [ 54.481089][ T5054] user_statfs+0x212/0x460 [ 54.485503][ T5054] ? vfs_statfs+0x2c0/0x2c0 [ 54.490002][ T5054] __x64_sys_statfs+0xe8/0x1a0 [ 54.494758][ T5054] ? fd_statfs+0x380/0x380 [ 54.499205][ T5054] ? _raw_spin_unlock_irq+0x23/0x50 [ 54.504394][ T5054] ? lockdep_hardirqs_on+0x98/0x140 [ 54.509582][ T5054] ? _raw_spin_unlock_irq+0x2e/0x50 [ 54.514769][ T5054] ? ptrace_notify+0x278/0x380 [ 54.519534][ T5054] ? do_notify_parent+0x10c0/0x10c0 [ 54.524728][ T5054] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 54.530707][ T5054] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 54.536681][ T5054] ? syscall_enter_from_user_mode+0xf5/0x2d0 [ 54.542654][ T5054] do_syscall_64+0x45/0x110 [ 54.547154][ T5054] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 54.553043][ T5054] RIP: 0033:0x7fd7a69285f9 [ 54.557450][ T5054] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.577049][ T5054] RSP: 002b:00007ffd23ce7148 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 54.585461][ T5054] RAX: ffffffffffffffda RBX: 00007ffd23ce7328 RCX: 00007fd7a69285f9 [ 54.593426][ T5054] RDX: 0000000000000073 RSI: 0000000000000000 RDI: 00000000200000c0 [ 54.601389][ T5054] RBP: 00007fd7a699b610 R08: 0000000000000000 R09: 0000000000000000 [ 54.609363][ T5054] R10: 0000000000000185 R11: 0000000000000246 R12: 0000000000000001 [ 54.617333][ T5054] R13: 00007ffd23ce7318 R14: 0000000000000001 R15: 0000000000000001 [ 54.625308][ T5054] [ 54.628496][ T5054] Kernel Offset: disabled [ 54.632871][ T5054] Rebooting in 86400 seconds..