./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1564706745 <...> Warning: Permanently added '10.128.0.69' (ECDSA) to the list of known hosts. execve("./syz-executor1564706745", ["./syz-executor1564706745"], 0x7ffc7214eb70 /* 10 vars */) = 0 brk(NULL) = 0x555555864000 brk(0x555555864c40) = 0x555555864c40 arch_prctl(ARCH_SET_FS, 0x555555864300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1564706745", 4096) = 28 brk(0x555555885c40) = 0x555555885c40 brk(0x555555886000) = 0x555555886000 mprotect(0x7f3f6f1a6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 139264) = 0 pwrite64(3, "\x00\x04\x00\x00\x00\x00\x01\x00\x01\x00\x44\x00\xe6\xff\x00\x00\xff\xff\xff\x7f\x80\x00\x00\x00\x5a\x4d", 26, 1024) = 26 pwrite64(3, "\xfe\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"..., 1923, 2176) = 1923 pwrite64(3, NULL, 0, 69632) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "minix", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 ioctl(4, LOOP_CLR_FD) = 0 syzkaller login: [ 50.654416][ T3611] loop0: detected capacity change from 0 to 272 [ 50.662471][ T3611] ================================================================================ [ 50.662471][ T3611] ================================================================================ [ 50.662482][ T3611] UBSAN: shift-out-of-bounds in fs/minix/inode.c:380:57 [ 50.662501][ T3611] shift exponent 65510 is too large for 64-bit type 'long unsigned int' [ 50.662516][ T3611] CPU: 0 PID: 3611 Comm: syz-executor156 Not tainted 5.18.0-rc6-next-20220513-syzkaller #0 [ 50.662539][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.662550][ T3611] Call Trace: [ 50.662556][ T3611] [ 50.662564][ T3611] dump_stack_lvl+0xcd/0x134 [ 50.662612][ T3611] ubsan_epilogue+0xb/0x50 [ 50.662637][ T3611] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 50.662671][ T3611] ? do_raw_spin_lock+0x120/0x2a0 [ 50.662693][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 50.662714][ T3611] ? _raw_spin_lock_irq+0x41/0x50 [ 50.662750][ T3611] minix_statfs.cold+0x17/0x1c [ 50.662787][ T3611] statfs_by_dentry+0x133/0x210 [ 50.662826][ T3611] fd_statfs+0x66/0x100 [ 50.662847][ T3611] __do_sys_fstatfs+0x7a/0xf0 [ 50.662868][ T3611] ? fd_statfs+0x100/0x100 [ 50.662900][ T3611] ? _raw_spin_unlock_irq+0x2a/0x40 [ 50.662924][ T3611] ? ptrace_notify+0xfa/0x140 [ 50.662947][ T3611] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 50.662988][ T3611] do_syscall_64+0x35/0xb0 [ 50.663019][ T3611] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.663046][ T3611] RIP: 0033:0x7f3f6f139df9 [ 50.663064][ T3611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.663085][ T3611] RSP: 002b:00007ffe70dca7c8 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 50.663107][ T3611] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3f6f139df9 [ 50.663122][ T3611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 50.663135][ T3611] RBP: 00007f3f6f0f95f0 R08: 0000000000000000 R09: 0000000000000000 [ 50.663149][ T3611] R10: 00007ffe70dca680 R11: 0000000000000246 R12: 00007f3f6f0f9680 [ 50.663164][ T3611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.663192][ T3611] [ 50.679295][ T3611] ================================================================================ [ 50.679309][ T3611] Kernel panic - not syncing: panic_on_warn set ... [ 50.679322][ T3611] CPU: 0 PID: 3611 Comm: syz-executor156 Not tainted 5.18.0-rc6-next-20220513-syzkaller #0 [ 50.679349][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.679364][ T3611] Call Trace: [ 50.679372][ T3611] [ 50.679382][ T3611] dump_stack_lvl+0xcd/0x134 [ 50.679419][ T3611] panic+0x2d7/0x636 [ 50.679448][ T3611] ? panic_print_sys_info.part.0+0x10b/0x10b [ 50.679485][ T3611] ? dump_stack_lvl+0x120/0x134 [ 50.679520][ T3611] ? ubsan_epilogue+0x3e/0x50 [ 50.679556][ T3611] ubsan_epilogue+0x4a/0x50 [ 50.679585][ T3611] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 50.679622][ T3611] ? do_raw_spin_lock+0x120/0x2a0 [ 50.679649][ T3611] ? rwlock_bug.part.0+0x90/0x90 [ 50.679671][ T3611] ? _raw_spin_lock_irq+0x41/0x50 [ 50.679701][ T3611] minix_statfs.cold+0x17/0x1c [ 50.679744][ T3611] statfs_by_dentry+0x133/0x210 [ 50.679788][ T3611] fd_statfs+0x66/0x100 [ 50.679811][ T3611] __do_sys_fstatfs+0x7a/0xf0 [ 50.679836][ T3611] ? fd_statfs+0x100/0x100 [ 50.679869][ T3611] ? _raw_spin_unlock_irq+0x2a/0x40 [ 50.679897][ T3611] ? ptrace_notify+0xfa/0x140 [ 50.679924][ T3611] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 50.679969][ T3611] do_syscall_64+0x35/0xb0 [ 50.680002][ T3611] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.680033][ T3611] RIP: 0033:0x7f3f6f139df9 [ 50.680053][ T3611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.680077][ T3611] RSP: 002b:00007ffe70dca7c8 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 50.680103][ T3611] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3f6f139df9 [ 50.680121][ T3611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 50.680136][ T3611] RBP: 00007f3f6f0f95f0 R08: 0000000000000000 R09: 0000000000000000 [ 50.680152][ T3611] R10: 00007ffe70dca680 R11: 0000000000000246 R12: 00007f3f6f0f9680 [ 50.680169][ T3611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.680202][ T3611] [ 50.680388][ T3611] Kernel Offset: disabled