program: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f00000002c0)="99", &(0x7f00000003c0)=""/152}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000640)={r4, 0xffffffffffffff16, 0x6, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x27, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008100000000000000546b000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001834000002000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000c20e00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000001a38f0ff0100000009140800fcffffff85100000ffffffffbf91000000000000b7020000020000008500000085000000b7002c244a0a0000950000417e7af3e6e902ec67"], &(0x7f00000004c0)='GPL\x00', 0x9478, 0x98, &(0x7f0000000500)=""/152, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r4, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x0, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r4, 0xa, &(0x7f0000000680)=[r4, r3, r3, r7, r4, r4, r3], &(0x7f00000006c0)=[{0x0, 0x5, 0x8, 0x5}, {0x4, 0x3, 0xf, 0x2}, {0x5, 0x2, 0xf, 0xb}, {0x3, 0x5, 0x2, 0xf}, {0x0, 0x2, 0x8, 0x4}, {0x5, 0x3, 0x4}, {0x2, 0x3, 0x4, 0x4}, {0x4, 0x2, 0x2, 0x3}, {0x2, 0x2, 0xd, 0x7}, {0x2, 0x4, 0x6, 0x2}], 0x10, 0x8}, 0x94) [ 85.095044][ T5322] Bluetooth: hci0: command tx timeout [ 85.149347][ T5347] loop0: detected capacity change from 0 to 64 [ 85.197264][ T5347] ------------[ cut here ]------------ [ 85.199764][ T5347] UBSAN: shift-out-of-bounds in fs/minix/inode.c:399:57 [ 85.202727][ T5347] shift exponent 768 is too large for 64-bit type 'unsigned long' [ 85.216805][ T5347] CPU: 0 UID: 0 PID: 5347 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 85.216827][ T5347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.216834][ T5347] Call Trace: [ 85.216840][ T5347] [ 85.216845][ T5347] dump_stack_lvl+0x189/0x250 [ 85.217009][ T5347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.217039][ T5347] ? __pfx__printk+0x10/0x10 [ 85.217058][ T5347] ? psi_task_change+0xe5/0x250 [ 85.217078][ T5347] ubsan_epilogue+0xa/0x40 [ 85.217094][ T5347] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 85.217340][ T5347] ? preempt_schedule_thunk+0x16/0x30 [ 85.217354][ T5347] minix_statfs+0x31c/0x340 [ 85.217378][ T5347] vfs_get_fsid+0x19c/0x270 [ 85.217393][ T5347] ? __lock_acquire+0xab9/0xd20 [ 85.217407][ T5347] ? __pfx_vfs_get_fsid+0x10/0x10 [ 85.217428][ T5347] ? do_raw_spin_lock+0x121/0x290 [ 85.217449][ T5347] fanotify_test_fsid+0x88/0x3c0 [ 85.217463][ T5347] ? __pfx_fanotify_test_fsid+0x10/0x10 [ 85.217475][ T5347] ? bpf_lsm_path_notify+0x9/0x20 [ 85.217490][ T5347] ? security_path_notify+0x7a/0x2b0 [ 85.217503][ T5347] ? fanotify_events_supported+0x372/0x400 [ 85.217518][ T5347] do_fanotify_mark+0x905/0xf80 [ 85.217537][ T5347] ? __pfx_do_fanotify_mark+0x10/0x10 [ 85.217553][ T5347] ? rcu_is_watching+0x15/0xb0 [ 85.217571][ T5347] __x64_sys_fanotify_mark+0xb5/0xd0 [ 85.217584][ T5347] do_syscall_64+0xfa/0x3b0 [ 85.217634][ T5347] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.217645][ T5347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.217657][ T5347] ? clear_bhb_loop+0x60/0xb0 [ 85.217672][ T5347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.217685][ T5347] RIP: 0033:0x7f1fe318e9a9 [ 85.217698][ T5347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.217708][ T5347] RSP: 002b:00007f1fe4032038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 85.217721][ T5347] RAX: ffffffffffffffda RBX: 00007f1fe33b5fa0 RCX: 00007f1fe318e9a9 [ 85.217730][ T5347] RDX: 000000000800003f RSI: 0000000000000001 RDI: 0000000000000005 [ 85.217737][ T5347] RBP: 00007f1fe3210d69 R08: 0000000000000000 R09: 0000000000000000 [ 85.217745][ T5347] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 85.217752][ T5347] R13: 0000000000000000 R14: 00007f1fe33b5fa0 R15: 00007ffc5df22518 [ 85.217770][ T5347] [ 85.217774][ T5347] ---[ end trace ]--- [ 85.336123][ T25] audit: type=1800 audit(1753135027.856:2): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=9 res=0 errno=0 [ 85.346920][ T5347] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 85.350134][ T5347] CPU: 0 UID: 0 PID: 5347 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 85.354495][ T5347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.359396][ T5347] Call Trace: [ 85.360856][ T5347] [ 85.361968][ T5347] dump_stack_lvl+0x99/0x250 [ 85.363819][ T5347] ? __asan_memcpy+0x40/0x70 [ 85.365586][ T5347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.367735][ T5347] ? __pfx__printk+0x10/0x10 [ 85.369761][ T5347] panic+0x2db/0x790 [ 85.371474][ T5347] ? __pfx_panic+0x10/0x10 [ 85.373405][ T5347] ? _printk+0xcf/0x120 [ 85.374989][ T5347] ? __pfx__printk+0x10/0x10 [ 85.376842][ T5347] ? psi_task_change+0xe5/0x250 [ 85.378946][ T5347] check_panic_on_warn+0x89/0xb0 [ 85.380910][ T5347] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 85.383579][ T5347] ? preempt_schedule_thunk+0x16/0x30 [ 85.385907][ T5347] minix_statfs+0x31c/0x340 [ 85.387856][ T5347] vfs_get_fsid+0x19c/0x270 [ 85.389960][ T5347] ? __lock_acquire+0xab9/0xd20 [ 85.392259][ T5347] ? __pfx_vfs_get_fsid+0x10/0x10 [ 85.394637][ T5347] ? do_raw_spin_lock+0x121/0x290 [ 85.397075][ T5347] fanotify_test_fsid+0x88/0x3c0 [ 85.399426][ T5347] ? __pfx_fanotify_test_fsid+0x10/0x10 [ 85.401874][ T5347] ? bpf_lsm_path_notify+0x9/0x20 [ 85.404144][ T5347] ? security_path_notify+0x7a/0x2b0 [ 85.406774][ T5347] ? fanotify_events_supported+0x372/0x400 [ 85.409334][ T5347] do_fanotify_mark+0x905/0xf80 [ 85.411372][ T5347] ? __pfx_do_fanotify_mark+0x10/0x10 [ 85.413586][ T5347] ? rcu_is_watching+0x15/0xb0 [ 85.415614][ T5347] __x64_sys_fanotify_mark+0xb5/0xd0 [ 85.417860][ T5347] do_syscall_64+0xfa/0x3b0 [ 85.419915][ T5347] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.422279][ T5347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.425036][ T5347] ? clear_bhb_loop+0x60/0xb0 [ 85.427164][ T5347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.429835][ T5347] RIP: 0033:0x7f1fe318e9a9 [ 85.431785][ T5347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.440235][ T5347] RSP: 002b:00007f1fe4032038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 85.443791][ T5347] RAX: ffffffffffffffda RBX: 00007f1fe33b5fa0 RCX: 00007f1fe318e9a9 [ 85.447034][ T5347] RDX: 000000000800003f RSI: 0000000000000001 RDI: 0000000000000005 [ 85.450305][ T5347] RBP: 00007f1fe3210d69 R08: 0000000000000000 R09: 0000000000000000 [ 85.453611][ T5347] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 85.457234][ T5347] R13: 0000000000000000 R14: 00007f1fe33b5fa0 R15: 00007ffc5df22518 [ 85.460731][ T5347] [ 85.462480][ T5347] Kernel Offset: disabled [ 85.464344][ T5347] Rebooting in 86400 seconds..