Extracting prog: 2m21.117045771s
Minimizing prog: 7m33.388488008s
Simplifying prog options: 0s
Extracting C: 45.842173417s
Simplifying C: 9m41.076391116s


1 programs, timeouts [30s 1m40s 6m0s]
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', 0x808440, &(0x7f00000000c0)=ANY=[], 0xfe, 0x236, &(0x7f0000000540)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

program crashed: UBSAN: shift-out-of-bounds in minix_statfs
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=1m8.577385377s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', 0x808440, &(0x7f00000000c0)=ANY=[], 0xfe, 0x236, &(0x7f0000000540)="$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")

program did not crash
testing program (duration=1m8.577385377s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount$overlay
detailed listing:
executing program 0:
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

program did not crash
testing program (duration=1m8.577385377s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', 0x808440, &(0x7f00000000c0)=ANY=[], 0xfe, 0x236, &(0x7f0000000540)="$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")
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

program did not crash
testing program (duration=1m8.577385377s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', 0x808440, &(0x7f00000000c0)=ANY=[], 0xfe, 0x236, &(0x7f0000000540)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

program did not crash
testing program (duration=1m8.577385377s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
detailed listing:
executing program 0:
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', 0x808440, &(0x7f00000000c0)=ANY=[], 0xfe, 0x236, &(0x7f0000000540)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m8.577385377s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
simplifying C reproducer
testing compiled C program (duration=1m8.577385377s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m8.577385377s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m8.577385377s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m8.577385377s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m8.577385377s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m8.577385377s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
testing compiled C program (duration=1m8.577385377s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-mount$overlay
program crashed: UBSAN: shift-out-of-bounds in minix_statfs
reproducing took 20m21.424124261s
repro crashed as (corrupted=false):
=======================================================
WARNING: The mand mount option has been deprecated and
         and is ignored by this kernel. Remove the mand
         option from the mount to silence this warning.
=======================================================
MINIX-fs: mounting file system with errors, running fsck is recommended
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in fs/minix/inode.c:399:57
shift exponent 65535 is too large for 64-bit type 'unsigned long'
CPU: 0 UID: 0 PID: 5218 Comm: syz-executor227 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468
 minix_statfs+0x36d/0x380 fs/minix/inode.c:399
 statfs_by_dentry fs/statfs.c:66 [inline]
 vfs_statfs+0x13b/0x2c0 fs/statfs.c:90
 ovl_check_namelen fs/overlayfs/super.c:369 [inline]
 ovl_lower_dir fs/overlayfs/super.c:385 [inline]
 ovl_get_lowerstack fs/overlayfs/super.c:1126 [inline]
 ovl_fill_super+0x8ed/0x3560 fs/overlayfs/super.c:1386
 vfs_get_super fs/super.c:1280 [inline]
 get_tree_nodev+0xb7/0x140 fs/super.c:1299
 vfs_get_tree+0x90/0x2b0 fs/super.c:1800
 do_new_mount+0x2be/0xb40 fs/namespace.c:3507
 do_mount fs/namespace.c:3847 [inline]
 __do_sys_mount fs/namespace.c:4055 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4032
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd5aab98ad9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc35410548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fd5aab98ad9
RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000
RBP: 00007fd5aac0c5f0 R08: 0000000020000000 R09: 00005555684994c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc35410570
R13: 00007ffc35410798 R14: 431bde82d7b634db R15: 00007fd5aabe103b
 </TASK>
---[ end trace ]---

final repro crashed as (corrupted=false):
=======================================================
WARNING: The mand mount option has been deprecated and
         and is ignored by this kernel. Remove the mand
         option from the mount to silence this warning.
=======================================================
MINIX-fs: mounting file system with errors, running fsck is recommended
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in fs/minix/inode.c:399:57
shift exponent 65535 is too large for 64-bit type 'unsigned long'
CPU: 0 UID: 0 PID: 5218 Comm: syz-executor227 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468
 minix_statfs+0x36d/0x380 fs/minix/inode.c:399
 statfs_by_dentry fs/statfs.c:66 [inline]
 vfs_statfs+0x13b/0x2c0 fs/statfs.c:90
 ovl_check_namelen fs/overlayfs/super.c:369 [inline]
 ovl_lower_dir fs/overlayfs/super.c:385 [inline]
 ovl_get_lowerstack fs/overlayfs/super.c:1126 [inline]
 ovl_fill_super+0x8ed/0x3560 fs/overlayfs/super.c:1386
 vfs_get_super fs/super.c:1280 [inline]
 get_tree_nodev+0xb7/0x140 fs/super.c:1299
 vfs_get_tree+0x90/0x2b0 fs/super.c:1800
 do_new_mount+0x2be/0xb40 fs/namespace.c:3507
 do_mount fs/namespace.c:3847 [inline]
 __do_sys_mount fs/namespace.c:4055 [inline]
 __se_sys_mount+0x2d6/0x3c0 fs/namespace.c:4032
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd5aab98ad9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc35410548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fd5aab98ad9
RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000
RBP: 00007fd5aac0c5f0 R08: 0000000020000000 R09: 00005555684994c0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc35410570
R13: 00007ffc35410798 R14: 431bde82d7b634db R15: 00007fd5aabe103b
 </TASK>
---[ end trace ]---