./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3483040429
<...>
Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts.
execve("./syz-executor3483040429", ["./syz-executor3483040429"], 0x7ffdc3457370 /* 10 vars */) = 0
brk(NULL) = 0x5555873c1000
brk(0x5555873c1e00) = 0x5555873c1e00
arch_prctl(ARCH_SET_FS, 0x5555873c1480) = 0
set_tid_address(0x5555873c1750) = 5823
set_robust_list(0x5555873c1760, 24) = 0
rseq(0x5555873c1da0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3483040429", 4096) = 28
getrandom("\xfc\x0d\xdb\xfd\xf3\x5a\x9d\x34", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555873c1e00
brk(0x5555873e2e00) = 0x5555873e2e00
brk(0x5555873e3000) = 0x5555873e3000
mprotect(0x7fbaf85e5000, 16384, PROT_READ) = 0
mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000
mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000
mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7fbaf853df90, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fbaf8546000}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7fbaf853df90, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fbaf8546000}, NULL, 8) = 0
write(1, "executing program\n", 18executing program
) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbaf0000000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
munmap(0x7fbaf0000000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file1", 0777) = 0
mount("/dev/loop0", "./file1", "minix", MS_POSIXACL, "") = 0
openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
chdir("./file1") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
mkdir("./bus", 0777) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[ 71.699266][ T5823] loop0: detected capacity change from 0 to 64
[ 71.734379][ T5823] ------------[ cut here ]------------
[ 71.739974][ T5823] UBSAN: shift-out-of-bounds in fs/minix/inode.c:399:57
[ 71.747892][ T5823] shift exponent 768 is too large for 64-bit type 'unsigned long'
[ 71.757072][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor348 Not tainted 6.14.0-rc4-syzkaller #0
[ 71.757095][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 71.757109][ T5823] Call Trace:
[ 71.757118][ T5823]
[ 71.757124][ T5823] dump_stack_lvl+0x241/0x360
[ 71.757172][ T5823] ? __pfx_dump_stack_lvl+0x10/0x10
[ 71.757188][ T5823] ? __pfx__printk+0x10/0x10
[ 71.757221][ T5823] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 71.757259][ T5823] minix_statfs+0x36d/0x380
[ 71.757283][ T5823] vfs_statfs+0x13b/0x2c0
[ 71.757305][ T5823] ovl_fill_super+0x6a5/0x3640
[ 71.757352][ T5823] ? __pfx_ovl_fill_super+0x10/0x10
[ 71.757371][ T5823] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 71.757395][ T5823] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 71.757439][ T5823] ? sget_fc+0x960/0xa50
[ 71.757459][ T5823] ? __pfx_set_anon_super_fc+0x10/0x10
[ 71.757477][ T5823] ? __pfx_ovl_fill_super+0x10/0x10
[ 71.757497][ T5823] get_tree_nodev+0xb7/0x140
[ 71.757517][ T5823] vfs_get_tree+0x90/0x2b0
[ 71.757539][ T5823] do_new_mount+0x2be/0xb40
[ 71.757579][ T5823] ? __pfx_do_new_mount+0x10/0x10
[ 71.757609][ T5823] __se_sys_mount+0x2d6/0x3c0
[ 71.757630][ T5823] ? __pfx___se_sys_mount+0x10/0x10
[ 71.757646][ T5823] ? exc_page_fault+0x590/0x8b0
[ 71.757666][ T5823] ? __x64_sys_mount+0x20/0xc0
[ 71.757683][ T5823] do_syscall_64+0xf3/0x230
[ 71.757703][ T5823] ? clear_bhb_loop+0x35/0x90
[ 71.757730][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 71.757749][ T5823] RIP: 0033:0x7fbaf8571ff9
[ 71.757768][ T5823] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 71.757780][ T5823] RSP: 002b:00007ffc8f5242e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 71.757798][ T5823] RAX: ffffffffffffffda RBX: 00007ffc8f5242f0 RCX: 00007fbaf8571ff9
[ 71.757809][ T5823] RDX: 0000400000000000 RSI: 0000400000000080 RDI: 0000000000000000
[ 71.757820][ T5823] RBP: 00007ffc8f5242f8 R08: 00004000000002c0 R09: 00007fbaf853df90
[ 71.757830][ T5823] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000
[ 71.757840][ T5823] R13: 00007ffc8f524558 R14: 0000000000000001 R15: 0000000000000001
[ 71.757863][ T5823]
[ 71.757870][ T5823] ---[ end trace ]---
[ 71.988692][ T5823] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 71.995878][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor348 Not tainted 6.14.0-rc4-syzkaller #0
[ 72.005323][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 72.015669][ T5823] Call Trace:
[ 72.018939][ T5823]
[ 72.021860][ T5823] dump_stack_lvl+0x241/0x360
[ 72.026556][ T5823] ? __pfx_dump_stack_lvl+0x10/0x10
[ 72.031794][ T5823] ? __pfx__printk+0x10/0x10
[ 72.036417][ T5823] ? vscnprintf+0x5d/0x90
[ 72.040774][ T5823] panic+0x349/0x880
[ 72.044673][ T5823] ? check_panic_on_warn+0x21/0xb0
[ 72.049804][ T5823] ? __pfx_panic+0x10/0x10
[ 72.054222][ T5823] ? _printk+0xd5/0x120
[ 72.058378][ T5823] ? __pfx__printk+0x10/0x10
[ 72.062958][ T5823] check_panic_on_warn+0x86/0xb0
[ 72.067893][ T5823] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 72.074343][ T5823] minix_statfs+0x36d/0x380
[ 72.078923][ T5823] vfs_statfs+0x13b/0x2c0
[ 72.083263][ T5823] ovl_fill_super+0x6a5/0x3640
[ 72.088034][ T5823] ? __pfx_ovl_fill_super+0x10/0x10
[ 72.093231][ T5823] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 72.099037][ T5823] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 72.105073][ T5823] ? sget_fc+0x960/0xa50
[ 72.109310][ T5823] ? __pfx_set_anon_super_fc+0x10/0x10
[ 72.114756][ T5823] ? __pfx_ovl_fill_super+0x10/0x10
[ 72.119945][ T5823] get_tree_nodev+0xb7/0x140
[ 72.124625][ T5823] vfs_get_tree+0x90/0x2b0
[ 72.129124][ T5823] do_new_mount+0x2be/0xb40
[ 72.133663][ T5823] ? __pfx_do_new_mount+0x10/0x10
[ 72.138693][ T5823] __se_sys_mount+0x2d6/0x3c0
[ 72.143366][ T5823] ? __pfx___se_sys_mount+0x10/0x10
[ 72.148553][ T5823] ? exc_page_fault+0x590/0x8b0
[ 72.153393][ T5823] ? __x64_sys_mount+0x20/0xc0
[ 72.158142][ T5823] do_syscall_64+0xf3/0x230
[ 72.162648][ T5823] ? clear_bhb_loop+0x35/0x90
[ 72.167318][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.173281][ T5823] RIP: 0033:0x7fbaf8571ff9
[ 72.177716][ T5823] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 72.197414][ T5823] RSP: 002b:00007ffc8f5242e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 72.205923][ T5823] RAX: ffffffffffffffda RBX: 00007ffc8f5242f0 RCX: 00007fbaf8571ff9
[ 72.213906][ T5823] RDX: 0000400000000000 RSI: 0000400000000080 RDI: 0000000000000000
[ 72.221875][ T5823] RBP: 00007ffc8f5242f8 R08: 00004000000002c0 R09: 00007fbaf853df90
[ 72.229841][ T5823] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000
[ 72.237812][ T5823] R13: 00007ffc8f524558 R14: 0000000000000001 R15: 0000000000000001
[ 72.245800][ T5823]
[ 72.249101][ T5823] Kernel Offset: disabled
[ 72.253457][ T5823] Rebooting in 86400 seconds..