./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3083249443 <...> DUID 00:04:2f:bc:f2:2f:e4:1d:55:f7:99:3b:0f:15:66:5c:e9:07 forked to background, child pid 3176 [ 24.723621][ T3177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.735917][ T3177] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.177' (ECDSA) to the list of known hosts. execve("./syz-executor3083249443", ["./syz-executor3083249443"], 0x7ffea9007900 /* 10 vars */) = 0 brk(NULL) = 0x5555569cc000 brk(0x5555569ccc40) = 0x5555569ccc40 arch_prctl(ARCH_SET_FS, 0x5555569cc300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3083249443", 4096) = 28 brk(0x5555569edc40) = 0x5555569edc40 brk(0x5555569ee000) = 0x5555569ee000 mprotect(0x7f8710c9d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 139264) = 0 pwrite64(3, "\x00\x04\x00\x00\x00\x00\x01\x00\x01\x00\x44\x00\xe6\xff\x00\x00\xff\xff\xff\x7f\x80\x00\x00\x00\x5a\x4d", 26, 1024) = 26 pwrite64(3, "\xfe\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"..., 1923, 2176) = 1923 pwrite64(3, NULL, 0, 69632) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "minix", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 close(3) = 0 syzkaller login: [ 43.005805][ T3597] loop0: detected capacity change from 0 to 272 [ 43.028364][ T3597] ================================================================================ [ 43.037848][ T3597] UBSAN: shift-out-of-bounds in fs/minix/inode.c:380:57 [ 43.045028][ T3597] shift exponent 65510 is too large for 64-bit type 'unsigned long' [ 43.053154][ T3597] CPU: 1 PID: 3597 Comm: syz-executor308 Not tainted 5.18.0-rc6-syzkaller-00153-g2fe1020d73ca #0 [ 43.063680][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.073737][ T3597] Call Trace: [ 43.077018][ T3597] [ 43.080003][ T3597] dump_stack_lvl+0x1e3/0x2cb [ 43.084731][ T3597] ? bfq_pos_tree_add_move+0x436/0x436 [ 43.090461][ T3597] ? panic+0x76e/0x76e [ 43.094542][ T3597] __ubsan_handle_shift_out_of_bounds+0x3a6/0x420 [ 43.100977][ T3597] minix_statfs+0x363/0x370 [ 43.105469][ T3597] vfs_statfs+0x136/0x310 [ 43.109779][ T3597] ? __fdget_raw+0xca/0x1b0 [ 43.114262][ T3597] __x64_sys_fstatfs+0x107/0x200 [ 43.119182][ T3597] ? __ia32_sys_statfs64+0x80/0x80 [ 43.124270][ T3597] ? _raw_spin_unlock_irq+0x1f/0x40 [ 43.129463][ T3597] ? lockdep_hardirqs_on+0x95/0x140 [ 43.134650][ T3597] ? _raw_spin_unlock_irq+0x2a/0x40 [ 43.139822][ T3597] ? ptrace_notify+0x24a/0x350 [ 43.144566][ T3597] ? do_notify_parent+0xe60/0xe60 [ 43.149570][ T3597] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 43.155535][ T3597] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 43.161490][ T3597] ? syscall_enter_from_user_mode+0x86/0x1a0 [ 43.167449][ T3597] do_syscall_64+0x2b/0x70 [ 43.171841][ T3597] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.177709][ T3597] RIP: 0033:0x7f8710c30df9 [ 43.182103][ T3597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.201694][ T3597] RSP: 002b:00007ffd58a37748 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 43.210097][ T3597] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8710c30df9 [ 43.218063][ T3597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 43.226022][ T3597] RBP: 00007f8710bf05f0 R08: 0000000000000000 R09: 0000000000000000 [ 43.233977][ T3597] R10: 00007ffd58a37600 R11: 0000000000000246 R12: 00007f8710bf0680 [ 43.241939][ T3597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.249916][ T3597] [ 43.254064][ T3597] ================================================================================ [ 43.263397][ T3597] Kernel panic - not syncing: panic_on_warn set ... [ 43.269979][ T3597] CPU: 1 PID: 3597 Comm: syz-executor308 Not tainted 5.18.0-rc6-syzkaller-00153-g2fe1020d73ca #0 [ 43.280476][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.290522][ T3597] Call Trace: [ 43.293789][ T3597] [ 43.296707][ T3597] dump_stack_lvl+0x1e3/0x2cb [ 43.301370][ T3597] ? bfq_pos_tree_add_move+0x436/0x436 [ 43.306811][ T3597] ? panic+0x76e/0x76e [ 43.310861][ T3597] ? vscnprintf+0x59/0x80 [ 43.315174][ T3597] panic+0x312/0x76e [ 43.319048][ T3597] ? __ubsan_handle_shift_out_of_bounds+0x3c9/0x420 [ 43.325615][ T3597] ? fb_is_primary_device+0xcc/0xcc [ 43.330797][ T3597] ? panic+0x76e/0x76e [ 43.334848][ T3597] __ubsan_handle_shift_out_of_bounds+0x418/0x420 [ 43.341252][ T3597] minix_statfs+0x363/0x370 [ 43.345736][ T3597] vfs_statfs+0x136/0x310 [ 43.350041][ T3597] ? __fdget_raw+0xca/0x1b0 [ 43.354520][ T3597] __x64_sys_fstatfs+0x107/0x200 [ 43.359435][ T3597] ? __ia32_sys_statfs64+0x80/0x80 [ 43.364524][ T3597] ? _raw_spin_unlock_irq+0x1f/0x40 [ 43.369695][ T3597] ? lockdep_hardirqs_on+0x95/0x140 [ 43.374875][ T3597] ? _raw_spin_unlock_irq+0x2a/0x40 [ 43.380052][ T3597] ? ptrace_notify+0x24a/0x350 [ 43.384795][ T3597] ? do_notify_parent+0xe60/0xe60 [ 43.389804][ T3597] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 43.395767][ T3597] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 43.401723][ T3597] ? syscall_enter_from_user_mode+0x86/0x1a0 [ 43.407681][ T3597] do_syscall_64+0x2b/0x70 [ 43.412073][ T3597] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 43.417943][ T3597] RIP: 0033:0x7f8710c30df9 [ 43.422336][ T3597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.441937][ T3597] RSP: 002b:00007ffd58a37748 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 43.450328][ T3597] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8710c30df9 [ 43.458277][ T3597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 43.466224][ T3597] RBP: 00007f8710bf05f0 R08: 0000000000000000 R09: 0000000000000000 [ 43.474171][ T3597] R10: 00007ffd58a37600 R11: 0000000000000246 R12: 00007f8710bf0680 [ 43.482120][ T3597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.490076][ T3597] [ 43.493332][ T3597] Kernel Offset: disabled [ 43.497692][ T3597] Rebooting in 86400 seconds..