./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1544012042
<...>
DUID 00:04:b0:cd:33:f9:4f:8a:55:45:4d:7b:3b:ee:3a:71:f0:8b
forked to background, child pid 3210
[ 29.894958][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0
[ 29.910426][ T3211] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.221' (ECDSA) to the list of known hosts.
execve("./syz-executor1544012042", ["./syz-executor1544012042"], 0x7ffea6f55a60 /* 10 vars */) = 0
brk(NULL) = 0x555556b03000
brk(0x555556b03c40) = 0x555556b03c40
arch_prctl(ARCH_SET_FS, 0x555556b03300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1544012042", 4096) = 28
brk(0x555556b24c40) = 0x555556b24c40
brk(0x555556b25000) = 0x555556b25000
mprotect(0x7fa5c59f9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa5bd400000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 131072) = 131072
munmap(0x7fa5bd400000, 131072) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "minix", MS_SYNCHRONOUS|MS_NOATIME|MS_I_VERSION, "minix") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
mkdir("./bus", 000) = 0
syzkaller login: [ 51.931686][ T3631] loop0: detected capacity change from 0 to 256
[ 51.952752][ T3631] ================================================================================
[ 51.962406][ T3631] UBSAN: shift-out-of-bounds in fs/minix/inode.c:380:57
[ 51.969988][ T3631] shift exponent 1792 is too large for 64-bit type 'unsigned long'
[ 51.978031][ T3631] CPU: 0 PID: 3631 Comm: syz-executor154 Not tainted 6.1.0-rc7-syzkaller-00200-gc2bf05db6c78 #0
[ 51.988480][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 51.998539][ T3631] Call Trace:
[ 52.001826][ T3631]
[ 52.004745][ T3631] dump_stack_lvl+0x1b1/0x28e
[ 52.009427][ T3631] ? nf_tcp_handle_invalid+0x62e/0x62e
[ 52.015044][ T3631] ? vsnprintf+0x1af/0x1ce0
[ 52.019537][ T3631] ? panic+0x710/0x710
[ 52.023597][ T3631] ? lockdep_hardirqs_on_prepare+0x428/0x790
[ 52.029574][ T3631] ? print_irqtrace_events+0x220/0x220
[ 52.035036][ T3631] __ubsan_handle_shift_out_of_bounds+0x33d/0x3b0
[ 52.041463][ T3631] ? slab_free_freelist_hook+0x12e/0x1a0
[ 52.047105][ T3631] minix_statfs+0x363/0x370
[ 52.051616][ T3631] vfs_statfs+0x136/0x310
[ 52.055942][ T3631] ? ovl_mount_dir+0x1ee/0x2b0
[ 52.060709][ T3631] ovl_get_upper+0x13a/0x5d0
[ 52.065304][ T3631] ? ovl_fill_super+0x2790/0x2790
[ 52.070336][ T3631] ? ovl_fill_super+0x1299/0x2790
[ 52.075359][ T3631] ? trace_kmalloc+0x30/0xf0
[ 52.079951][ T3631] ? __kmalloc+0xcc/0x1a0
[ 52.084311][ T3631] ovl_fill_super+0x1522/0x2790
[ 52.089208][ T3631] ? ovl_mount+0x30/0x30
[ 52.093484][ T3631] ? sget+0x523/0x560
[ 52.097482][ T3631] ? free_anon_bdev+0x20/0x20
[ 52.102157][ T3631] ? ovl_mount+0x30/0x30
[ 52.106403][ T3631] mount_nodev+0x52/0xe0
[ 52.110905][ T3631] legacy_get_tree+0xea/0x180
[ 52.115606][ T3631] ? virtio_fs_zero_page_range+0x150/0x150
[ 52.121519][ T3631] vfs_get_tree+0x88/0x270
[ 52.125938][ T3631] do_new_mount+0x289/0xad0
[ 52.130452][ T3631] ? do_move_mount_old+0x150/0x150
[ 52.135573][ T3631] ? user_path_at_empty+0x149/0x1a0
[ 52.140768][ T3631] __se_sys_mount+0x2d3/0x3c0
[ 52.145447][ T3631] ? __x64_sys_mount+0xc0/0xc0
[ 52.150236][ T3631] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 52.156343][ T3631] ? __x64_sys_mount+0x1c/0xc0
[ 52.161116][ T3631] do_syscall_64+0x3d/0xb0
[ 52.165550][ T3631] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.171456][ T3631] RIP: 0033:0x7fa5c598c7e9
[ 52.175873][ T3631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 52.195501][ T3631] RSP: 002b:00007ffe7c70f338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 52.203926][ T3631] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa5c598c7e9
[ 52.211915][ T3631] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000
[ 52.219883][ T3631] RBP: 00007fa5c594c080 R08: 0000000020000340 R09: 0000000000000000
[ 52.227872][ T3631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa5c594c110
[ 52.235842][ T3631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 52.243823][ T3631]
[ 52.247829][ T3631] ================================================================================
[ 52.257138][ T3631] Kernel panic - not syncing: panic_on_warn set ...
[ 52.263713][ T3631] CPU: 1 PID: 3631 Comm: syz-executor154 Not tainted 6.1.0-rc7-syzkaller-00200-gc2bf05db6c78 #0
[ 52.274105][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 52.284157][ T3631] Call Trace:
[ 52.287429][ T3631]
[ 52.290346][ T3631] dump_stack_lvl+0x1b1/0x28e
[ 52.295012][ T3631] ? nf_tcp_handle_invalid+0x62e/0x62e
[ 52.300456][ T3631] ? panic+0x710/0x710
[ 52.304509][ T3631] ? __irq_work_queue_local+0x121/0x180
[ 52.310045][ T3631] ? vscnprintf+0x59/0x80
[ 52.314361][ T3631] panic+0x2d6/0x710
[ 52.318243][ T3631] ? __ubsan_handle_shift_out_of_bounds+0x360/0x3b0
[ 52.324821][ T3631] ? memcpy_page_flushcache+0xfc/0xfc
[ 52.330179][ T3631] ? panic+0x710/0x710
[ 52.334234][ T3631] ? lockdep_hardirqs_on_prepare+0x428/0x790
[ 52.340200][ T3631] ? print_irqtrace_events+0x220/0x220
[ 52.345649][ T3631] __ubsan_handle_shift_out_of_bounds+0x3af/0x3b0
[ 52.352057][ T3631] ? slab_free_freelist_hook+0x12e/0x1a0
[ 52.357680][ T3631] minix_statfs+0x363/0x370
[ 52.362187][ T3631] vfs_statfs+0x136/0x310
[ 52.366503][ T3631] ? ovl_mount_dir+0x1ee/0x2b0
[ 52.371257][ T3631] ovl_get_upper+0x13a/0x5d0
[ 52.375835][ T3631] ? ovl_fill_super+0x2790/0x2790
[ 52.380850][ T3631] ? ovl_fill_super+0x1299/0x2790
[ 52.385860][ T3631] ? trace_kmalloc+0x30/0xf0
[ 52.390440][ T3631] ? __kmalloc+0xcc/0x1a0
[ 52.394758][ T3631] ovl_fill_super+0x1522/0x2790
[ 52.399610][ T3631] ? ovl_mount+0x30/0x30
[ 52.403848][ T3631] ? sget+0x523/0x560
[ 52.407815][ T3631] ? free_anon_bdev+0x20/0x20
[ 52.412480][ T3631] ? ovl_mount+0x30/0x30
[ 52.416796][ T3631] mount_nodev+0x52/0xe0
[ 52.421022][ T3631] legacy_get_tree+0xea/0x180
[ 52.425683][ T3631] ? virtio_fs_zero_page_range+0x150/0x150
[ 52.431477][ T3631] vfs_get_tree+0x88/0x270
[ 52.435880][ T3631] do_new_mount+0x289/0xad0
[ 52.440376][ T3631] ? do_move_mount_old+0x150/0x150
[ 52.445475][ T3631] ? user_path_at_empty+0x149/0x1a0
[ 52.450658][ T3631] __se_sys_mount+0x2d3/0x3c0
[ 52.455322][ T3631] ? __x64_sys_mount+0xc0/0xc0
[ 52.460069][ T3631] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 52.466038][ T3631] ? __x64_sys_mount+0x1c/0xc0
[ 52.470791][ T3631] do_syscall_64+0x3d/0xb0
[ 52.475195][ T3631] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.481073][ T3631] RIP: 0033:0x7fa5c598c7e9
[ 52.485472][ T3631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 52.505076][ T3631] RSP: 002b:00007ffe7c70f338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 52.513496][ T3631] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa5c598c7e9
[ 52.521464][ T3631] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000
[ 52.529439][ T3631] RBP: 00007fa5c594c080 R08: 0000000020000340 R09: 0000000000000000
[ 52.537510][ T3631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa5c594c110
[ 52.545479][ T3631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 52.553549][ T3631]
[ 52.556801][ T3631] Kernel Offset: disabled
[ 52.561188][ T3631] Rebooting in 86400 seconds..