Extracting prog: 2m35.370667461s
Minimizing prog: 9m6.162517958s
Simplifying prog options: 0s
Extracting C: 28.218866338s
Simplifying C: 5m5.115162755s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f0000000440)=ANY=[], 0xfe, 0x1cf, &(0x7f00000005c0)="$eJzs20tu2kAcx/G/bQyUVup7020X7Qoo7aYrygF6gHaHwCBUt5XaVasskmNkmZtwk1wApGTHKo5sD8SQAQYTMI/vR0oYMf55xsIzzCBZABytZ9F/SyxxRb4VJu9//yoiuQw7BmDjArkJABwr5yrrHgDIxrDhROuAviVyeX3SGqg/13D9MGzYcaEoIol83jR/ZkWvb3Iig0S+oE65dP1yEeffyXT+0Yrtl2bypbmJuFfWJB9f//u30/nHIvIkcQlP1V7ruYi80LTfnmn/tWH/gXWEd1953fz9E5ya5u1w+un5XlVX6SzPh/NUp+d7H/TViSmkrz0gr/I1w/7Oy39MmS+ofLn1229r6u2U5wVM2JsZ/8YckVEQjf+73x7li3k+t3j8A1jg77//P5q+7/1ZoeBGBTVeR0EQmMbD42eqxqM+RTcOqlCXneiGKhQ1VW7Ku2VJoZjpDRB+fWmr6rIrn0WyMB6122jrfPuTEYCtqlhqq9772ex6Xe9X7dPn8bY7XFdXK515u3MAe256cQ4AAAAAAAAAAAAAAPbRSxF5lSZo+oAfAAAAgJ3xsM8MudoHubK+RgAAAAAAAAAAAAAAAAAAAOBQ3AYAAP//Pj84Eg==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x800003e, r0, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f0000000440)=ANY=[], 0xfe, 0x1cf, &(0x7f00000005c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x800003e, r0, 0x0)

program crashed: UBSAN: shift-out-of-bounds in minix_statfs
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f0000000440)=ANY=[], 0xfe, 0x1cf, &(0x7f00000005c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x200, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_mark
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f0000000440)=ANY=[], 0xfe, 0x1cf, &(0x7f00000005c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x800003e, r0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-fanotify_init-fanotify_mark
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f0000000440)=ANY=[], 0xfe, 0x1cf, &(0x7f00000005c0)="$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")
r0 = fanotify_init(0x200, 0x0)
fanotify_mark(r0, 0x1, 0x800003e, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$dir-fanotify_init-fanotify_mark
detailed listing:
executing program 0:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x800003e, r0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f0000000440)=ANY=[], 0xfe, 0x1cf, &(0x7f00000005c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x800003e, r0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
reproducing took 17m14.867240142s
repro crashed as (corrupted=false):
         and is ignored by this kernel. Remove the mand
         option from the mount to silence this warning.
=======================================================
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in fs/minix/inode.c:399:57
shift exponent 22784 is too large for 64-bit type 'unsigned long'
CPU: 0 UID: 0 PID: 5308 Comm: syz-executor857 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468
 minix_statfs+0x36d/0x380 fs/minix/inode.c:399
 statfs_by_dentry fs/statfs.c:66 [inline]
 vfs_get_fsid+0x19b/0x2a0 fs/statfs.c:77
 fanotify_test_fsid+0xb5/0x470 fs/notify/fanotify/fanotify_user.c:1649
 do_fanotify_mark+0x81b/0xea0 fs/notify/fanotify/fanotify_user.c:1929
 __do_sys_fanotify_mark fs/notify/fanotify/fanotify_user.c:2007 [inline]
 __se_sys_fanotify_mark fs/notify/fanotify/fanotify_user.c:2003 [inline]
 __x64_sys_fanotify_mark+0xb5/0xd0 fs/notify/fanotify/fanotify_user.c:2003
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0a56974b19
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff64c073a8 EFLAGS: 00000246 ORIG_RAX: 000000000000012d
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0a56974b19
RDX: 000000000800003e RSI: 0000000000000001 RDI: 0000000000000005
RBP: 00007f0a569e85f0 R08: 0000000000000000 R09: 00005555758c24c0
R10: 0000000000000004 R11: 0000000000000246 R12: 00007fff64c073d0
R13: 00007fff64c075f8 R14: 431bde82d7b634db R15: 00007f0a569bd03b
 </TASK>
---[ end trace ]---

final repro crashed as (corrupted=false):
         and is ignored by this kernel. Remove the mand
         option from the mount to silence this warning.
=======================================================
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in fs/minix/inode.c:399:57
shift exponent 22784 is too large for 64-bit type 'unsigned long'
CPU: 0 UID: 0 PID: 5308 Comm: syz-executor857 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468
 minix_statfs+0x36d/0x380 fs/minix/inode.c:399
 statfs_by_dentry fs/statfs.c:66 [inline]
 vfs_get_fsid+0x19b/0x2a0 fs/statfs.c:77
 fanotify_test_fsid+0xb5/0x470 fs/notify/fanotify/fanotify_user.c:1649
 do_fanotify_mark+0x81b/0xea0 fs/notify/fanotify/fanotify_user.c:1929
 __do_sys_fanotify_mark fs/notify/fanotify/fanotify_user.c:2007 [inline]
 __se_sys_fanotify_mark fs/notify/fanotify/fanotify_user.c:2003 [inline]
 __x64_sys_fanotify_mark+0xb5/0xd0 fs/notify/fanotify/fanotify_user.c:2003
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0a56974b19
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff64c073a8 EFLAGS: 00000246 ORIG_RAX: 000000000000012d
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0a56974b19
RDX: 000000000800003e RSI: 0000000000000001 RDI: 0000000000000005
RBP: 00007f0a569e85f0 R08: 0000000000000000 R09: 00005555758c24c0
R10: 0000000000000004 R11: 0000000000000246 R12: 00007fff64c073d0
R13: 00007fff64c075f8 R14: 431bde82d7b634db R15: 00007f0a569bd03b
 </TASK>
---[ end trace ]---