loop6: detected capacity change from 0 to 64
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in fs/minix/inode.c:399:57
shift exponent 2048 is too large for 64-bit type 'unsigned long'
CPU: 0 UID: 0 PID: 8798 Comm: syz.6.400 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:466 (C)
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_shift_out_of_bounds+0x2f4/0x36c lib/ubsan.c:468
 minix_statfs+0x2f0/0x2f4 fs/minix/inode.c:399
 statfs_by_dentry fs/statfs.c:66 [inline]
 vfs_statfs+0x140/0x2bc fs/statfs.c:90
 ovl_check_namelen fs/overlayfs/super.c:387 [inline]
 ovl_lower_dir fs/overlayfs/super.c:403 [inline]
 ovl_get_lowerstack fs/overlayfs/super.c:1144 [inline]
 ovl_fill_super+0x78c/0x2e88 fs/overlayfs/super.c:1404
 vfs_get_super fs/super.c:1280 [inline]
 get_tree_nodev+0xb4/0x144 fs/super.c:1299
 ovl_get_tree+0x28/0x38 fs/overlayfs/params.c:676
 vfs_get_tree+0x90/0x28c fs/super.c:1814
 do_new_mount+0x278/0x900 fs/namespace.c:3560
 path_mount+0x590/0xe04 fs/namespace.c:3887
 do_mount fs/namespace.c:3900 [inline]
 __do_sys_mount fs/namespace.c:4111 [inline]
 __se_sys_mount fs/namespace.c:4088 [inline]
 __arm64_sys_mount+0x4f4/0x5d0 fs/namespace.c:4088
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744
 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600
---[ end trace ]---
------------[ cut here ]------------
UBSAN: shift-out-of-bounds in fs/minix/bitmap.c:103:3
shift exponent 2048 is too large for 32-bit type '__u32' (aka 'unsigned int')
CPU: 0 UID: 0 PID: 8798 Comm: syz.6.400 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:466 (C)
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_shift_out_of_bounds+0x2f4/0x36c lib/ubsan.c:468
 minix_count_free_blocks+0x228/0x22c fs/minix/bitmap.c:103
 minix_statfs+0x19c/0x2f4 fs/minix/inode.c:400
 statfs_by_dentry fs/statfs.c:66 [inline]
 vfs_statfs+0x140/0x2bc fs/statfs.c:90
 ovl_check_namelen fs/overlayfs/super.c:387 [inline]
 ovl_lower_dir fs/overlayfs/super.c:403 [inline]
 ovl_get_lowerstack fs/overlayfs/super.c:1144 [inline]
 ovl_fill_super+0x78c/0x2e88 fs/overlayfs/super.c:1404
 vfs_get_super fs/super.c:1280 [inline]
 get_tree_nodev+0xb4/0x144 fs/super.c:1299
 ovl_get_tree+0x28/0x38 fs/overlayfs/params.c:676
 vfs_get_tree+0x90/0x28c fs/super.c:1814
 do_new_mount+0x278/0x900 fs/namespace.c:3560
 path_mount+0x590/0xe04 fs/namespace.c:3887
 do_mount fs/namespace.c:3900 [inline]
 __do_sys_mount fs/namespace.c:4111 [inline]
 __se_sys_mount fs/namespace.c:4088 [inline]
 __arm64_sys_mount+0x4f4/0x5d0 fs/namespace.c:4088
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744
 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600
---[ end trace ]---