Extracting prog: 2m27.45237781s Minimizing prog: 21m14.410519131s Simplifying prog options: 0s Extracting C: 32.497110518s Simplifying C: 6m3.667800139s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark-fsopen-openat$cgroup_ro-openat-pipe-mount$fuse-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-ioctl$F2FS_IOC_MOVE_RANGE-bpf$PROG_LOAD detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f00000002c0)="99", &(0x7f00000003c0)=""/152}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000640)={r4, 0xffffffffffffff16, 0x6, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x27, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008100000000000000546b000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001834000002000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000c20e00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000001a38f0ff0100000009140800fcffffff85100000ffffffffbf91000000000000b7020000020000008500000085000000b7002c244a0a0000950000417e7af3e6e902ec67"], &(0x7f00000004c0)='GPL\x00', 0x9478, 0x98, &(0x7f0000000500)=""/152, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r4, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x0, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r4, 0xa, &(0x7f0000000680)=[r4, r3, r3, r7, r4, r4, r3], &(0x7f00000006c0)=[{0x0, 0x5, 0x8, 0x5}, {0x4, 0x3, 0xf, 0x2}, {0x5, 0x2, 0xf, 0xb}, {0x3, 0x5, 0x2, 0xf}, {0x0, 0x2, 0x8, 0x4}, {0x5, 0x3, 0x4}, {0x2, 0x3, 0x4, 0x4}, {0x4, 0x2, 0x2, 0x3}, {0x2, 0x2, 0xd, 0x7}, {0x2, 0x4, 0x6, 0x2}], 0x10, 0x8}, 0x94) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark-fsopen-openat$cgroup_ro-openat-pipe-mount$fuse-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-ioctl$F2FS_IOC_MOVE_RANGE-bpf$PROG_LOAD detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f00000002c0)="99", &(0x7f00000003c0)=""/152}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000640)={r4, 0xffffffffffffff16, 0x6, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x27, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008100000000000000546b000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001834000002000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000c20e00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000001a38f0ff0100000009140800fcffffff85100000ffffffffbf91000000000000b7020000020000008500000085000000b7002c244a0a0000950000417e7af3e6e902ec67"], &(0x7f00000004c0)='GPL\x00', 0x9478, 0x98, &(0x7f0000000500)=""/152, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r4, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x0, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r4, 0xa, &(0x7f0000000680)=[r4, r3, r3, r7, r4, r4, r3], &(0x7f00000006c0)=[{0x0, 0x5, 0x8, 0x5}, {0x4, 0x3, 0xf, 0x2}, {0x5, 0x2, 0xf, 0xb}, {0x3, 0x5, 0x2, 0xf}, {0x0, 0x2, 0x8, 0x4}, {0x5, 0x3, 0x4}, {0x2, 0x3, 0x4, 0x4}, {0x4, 0x2, 0x2, 0x3}, {0x2, 0x2, 0xd, 0x7}, {0x2, 0x4, 0x6, 0x2}], 0x10, 0x8}, 0x94) program crashed: UBSAN: shift-out-of-bounds in minix_statfs single: successfully extracted reproducer found reproducer with 13 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark-fsopen-openat$cgroup_ro-openat-pipe-mount$fuse-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY-ioctl$F2FS_IOC_MOVE_RANGE detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pipe(&(0x7f0000000100)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f00000002c0)="99", &(0x7f00000003c0)=""/152}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000640)={r3, 0xffffffffffffff16, 0x6, 0xf}) program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark-fsopen-openat$cgroup_ro-openat-pipe-mount$fuse-bpf$MAP_CREATE-bpf$MAP_GET_NEXT_KEY detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pipe(&(0x7f0000000100)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f00000002c0)="99", &(0x7f00000003c0)=""/152}, 0x20) program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark-fsopen-openat$cgroup_ro-openat-pipe-mount$fuse-bpf$MAP_CREATE detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$eJzs209u00AcxfE3cerEUKD8XSCkILGADUmaikqsWs7BKmrTqqoLCLNJhIS5AJyBc3AZDgALdqwwsuM0IbabdBq3lHw/G0/8/JuMG7kzsmwBWFrbeigjI1dy9KC+9vm2mavOLX1kAMoWpdvfkQ3PqgrAv8L5NfnJUxSlK4Dw4sYE4Dz8eCF9k/T95/sdOdlVfZyHo7xSy+YfpfvVNDd1edPriy/S41G9uZKtrw63w/xqbv9PHo2+f1XXdF03tKabumVCmSTfPa6/Z7UGAgBg2Rg1Z+VNySlI48nbUXZVMLaiva/ZWX3M1d6B3+vMyDcK81qSN3de+7snfAuAPJW5rv9iTnL9tQvzapKvp5/qdoMEUIqgP6jJ93tvg348ySeNwWHXP1XDs6qap2FK6zm/4U7tiT5IOt6zbdtzpL/2eJN/50bQsBzz6G7N4LBrhndpNH2MN7OfSlyWF720ONOtbLQi6Ww/igmtylc/5Z/X2RpbmuvgRs5vYd2oneJgd2FneqH/lgCcg9a7ozetoD94enDU3e/t91512u3nm8821jc7rWRl3zp5fQ/g8hpP+pp4GggAAAAAAAAAAAAAAFwmd3Q33ky/tgsAAADgPxQYKVzEO0PVgtfI0ieLAQAAAAAAAAAAAAAAAADA4vwJAAD//7DJ/ew=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pipe(&(0x7f0000000100)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2]) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark-fsopen-openat$cgroup_ro-openat-pipe-mount$fuse detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pipe(&(0x7f0000000100)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2]) program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark-fsopen-openat$cgroup_ro-openat-pipe detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) pipe(&(0x7f0000000100)) program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark-fsopen-openat$cgroup_ro-openat detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark-fsopen-openat$cgroup_ro detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark-fsopen detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x202, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_mark detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x800003f, r0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-fanotify_init-fanotify_mark detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = fanotify_init(0x202, 0x0) fanotify_mark(r0, 0x1, 0x800003f, 0xffffffffffffffff, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$dir-fanotify_init-fanotify_mark detailed listing: executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$eJzs209u00AcxfE3cerEUKD8XSCkILGADUmaikqsWs7BKmrTqqoLCLNJhIS5AJyBc3AZDgALdqwwsuM0IbabdBq3lHw/G0/8/JuMG7kzsmwBWFrbeigjI1dy9KC+9vm2mavOLX1kAMoWpdvfkQ3PqgrAv8L5NfnJUxSlK4Dw4sYE4Dz8eCF9k/T95/sdOdlVfZyHo7xSy+YfpfvVNDd1edPriy/S41G9uZKtrw63w/xqbv9PHo2+f1XXdF03tKabumVCmSTfPa6/Z7UGAgBg2Rg1Z+VNySlI48nbUXZVMLaiva/ZWX3M1d6B3+vMyDcK81qSN3de+7snfAuAPJW5rv9iTnL9tQvzapKvp5/qdoMEUIqgP6jJ93tvg348ySeNwWHXP1XDs6qap2FK6zm/4U7tiT5IOt6zbdtzpL/2eJN/50bQsBzz6G7N4LBrhndpNH2MN7OfSlyWF720ONOtbLQi6Ww/igmtylc/5Z/X2RpbmuvgRs5vYd2oneJgd2FneqH/lgCcg9a7ozetoD94enDU3e/t91512u3nm8821jc7rWRl3zp5fQ/g8hpP+pp4GggAAAAAAAAAAAAAAFwmd3Q33ky/tgsAAADgPxQYKVzEO0PVgtfI0ieLAQAAAAAAAAAAAAAAAADA4vwJAAD//7DJ/ew=") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark program crashed: UBSAN: shift-out-of-bounds in minix_statfs simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark program crashed: UBSAN: shift-out-of-bounds in minix_statfs testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$eJzs209u00AcxfE3cerEUKD8XSCkILGADUmaikqsWs7BKmrTqqoLCLNJhIS5AJyBc3AZDgALdqwwsuM0IbabdBq3lHw/G0/8/JuMG7kzsmwBWFrbeigjI1dy9KC+9vm2mavOLX1kAMoWpdvfkQ3PqgrAv8L5NfnJUxSlK4Dw4sYE4Dz8eCF9k/T95/sdOdlVfZyHo7xSy+YfpfvVNDd1edPriy/S41G9uZKtrw63w/xqbv9PHo2+f1XXdF03tKabumVCmSTfPa6/Z7UGAgBg2Rg1Z+VNySlI48nbUXZVMLaiva/ZWX3M1d6B3+vMyDcK81qSN3de+7snfAuAPJW5rv9iTnL9tQvzapKvp5/qdoMEUIqgP6jJ93tvg348ySeNwWHXP1XDs6qap2FK6zm/4U7tiT5IOt6zbdtzpL/2eJN/50bQsBzz6G7N4LBrhndpNH2MN7OfSlyWF720ONOtbLQi6Ww/igmtylc/5Z/X2RpbmuvgRs5vYd2oneJgd2FneqH/lgCcg9a7ozetoD94enDU3e/t91512u3nm8821jc7rWRl3zp5fQ/g8hpP+pp4GggAAAAAAAAAAAAAAFwmd3Q33ky/tgsAAADgPxQYKVzEO0PVgtfI0ieLAQAAAAAAAAAAAAAAAADA4vwJAAD//7DJ/ew=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) program crashed: UBSAN: shift-out-of-bounds in minix_statfs validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) program crashed: UBSAN: shift-out-of-bounds in minix_statfs validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$minix-openat$dir-fanotify_init-fanotify_mark detailed listing: executing program 0: syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1008800, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x1, 0x1f4, &(0x7f0000000180)="$eJzs209u00AcxfE3cerEUKD8XSCkILGADUmaikqsWs7BKmrTqqoLCLNJhIS5AJyBc3AZDgALdqwwsuM0IbabdBq3lHw/G0/8/JuMG7kzsmwBWFrbeigjI1dy9KC+9vm2mavOLX1kAMoWpdvfkQ3PqgrAv8L5NfnJUxSlK4Dw4sYE4Dz8eCF9k/T95/sdOdlVfZyHo7xSy+YfpfvVNDd1edPriy/S41G9uZKtrw63w/xqbv9PHo2+f1XXdF03tKabumVCmSTfPa6/Z7UGAgBg2Rg1Z+VNySlI48nbUXZVMLaiva/ZWX3M1d6B3+vMyDcK81qSN3de+7snfAuAPJW5rv9iTnL9tQvzapKvp5/qdoMEUIqgP6jJ93tvg348ySeNwWHXP1XDs6qap2FK6zm/4U7tiT5IOt6zbdtzpL/2eJN/50bQsBzz6G7N4LBrhndpNH2MN7OfSlyWF720ONOtbLQi6Ww/igmtylc/5Z/X2RpbmuvgRs5vYd2oneJgd2FneqH/lgCcg9a7ozetoD94enDU3e/t91512u3nm8821jc7rWRl3zp5fQ/g8hpP+pp4GggAAAAAAAAAAAAAAFwmd3Q33ky/tgsAAADgPxQYKVzEO0PVgtfI0ieLAQAAAAAAAAAAAAAAAADA4vwJAAD//7DJ/ew=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x800003f, r0, 0x0) program crashed: UBSAN: shift-out-of-bounds in minix_statfs validation run: crashed=true reproducing took 33m11.12766223s repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 64 ------------[ cut here ]------------ UBSAN: shift-out-of-bounds in fs/minix/inode.c:399:57 shift exponent 768 is too large for 64-bit type 'unsigned long' CPU: 0 UID: 0 PID: 5481 Comm: syz.0.16 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 ubsan_epilogue+0xa/0x40 lib/ubsan.c:233 __ubsan_handle_shift_out_of_bounds+0x386/0x410 lib/ubsan.c:494 minix_statfs+0x31c/0x340 fs/minix/inode.c:399 statfs_by_dentry fs/statfs.c:66 [inline] vfs_get_fsid+0x19c/0x270 fs/statfs.c:77 fanotify_test_fsid+0x88/0x3c0 fs/notify/fanotify/fanotify_user.c:1685 do_fanotify_mark+0x905/0xf80 fs/notify/fanotify/fanotify_user.c:1975 __do_sys_fanotify_mark fs/notify/fanotify/fanotify_user.c:2070 [inline] __se_sys_fanotify_mark fs/notify/fanotify/fanotify_user.c:2066 [inline] __x64_sys_fanotify_mark+0xb5/0xd0 fs/notify/fanotify/fanotify_user.c:2066 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc12238e9a9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd824aacd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012d RAX: ffffffffffffffda RBX: 00007fc1225b5fa0 RCX: 00007fc12238e9a9 RDX: 000000000800003f RSI: 0000000000000001 RDI: 0000000000000005 RBP: 00007fc122410d69 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fc1225b5fa0 R14: 00007fc1225b5fa0 R15: 0000000000000005 ---[ end trace ]--- final repro crashed as (corrupted=false): loop0: detected capacity change from 0 to 64 ------------[ cut here ]------------ UBSAN: shift-out-of-bounds in fs/minix/inode.c:399:57 shift exponent 768 is too large for 64-bit type 'unsigned long' CPU: 0 UID: 0 PID: 5481 Comm: syz.0.16 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 ubsan_epilogue+0xa/0x40 lib/ubsan.c:233 __ubsan_handle_shift_out_of_bounds+0x386/0x410 lib/ubsan.c:494 minix_statfs+0x31c/0x340 fs/minix/inode.c:399 statfs_by_dentry fs/statfs.c:66 [inline] vfs_get_fsid+0x19c/0x270 fs/statfs.c:77 fanotify_test_fsid+0x88/0x3c0 fs/notify/fanotify/fanotify_user.c:1685 do_fanotify_mark+0x905/0xf80 fs/notify/fanotify/fanotify_user.c:1975 __do_sys_fanotify_mark fs/notify/fanotify/fanotify_user.c:2070 [inline] __se_sys_fanotify_mark fs/notify/fanotify/fanotify_user.c:2066 [inline] __x64_sys_fanotify_mark+0xb5/0xd0 fs/notify/fanotify/fanotify_user.c:2066 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fc12238e9a9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd824aacd8 EFLAGS: 00000246 ORIG_RAX: 000000000000012d RAX: ffffffffffffffda RBX: 00007fc1225b5fa0 RCX: 00007fc12238e9a9 RDX: 000000000800003f RSI: 0000000000000001 RDI: 0000000000000005 RBP: 00007fc122410d69 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fc1225b5fa0 R14: 00007fc1225b5fa0 R15: 0000000000000005 ---[ end trace ]---