Extracting prog: 1m13.68024929s
Minimizing prog: 4m26.818522348s
Simplifying prog options: 2m31.804904311s
Extracting C: 26.19327478s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000040)={[{@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8000000000000000}}]}, 0xfc, 0x499, &(0x7f0000000c40)="$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")
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0)

program crashed: kernel panic: EXT4-fs (device loop1): panic forced after error
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=38.097581239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000040)={[{@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8000000000000000}}]}, 0xfc, 0x499, &(0x7f0000000c40)="$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")

program did not crash
testing program (duration=38.097581239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mount
detailed listing:
executing program 0:
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0)

program did not crash
testing program (duration=38.097581239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000040)={[{@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8000000000000000}}]}, 0xfc, 0x499, &(0x7f0000000c40)="$eJzs3E1oHFUcAPD/Tr7bpo0fVfuhxi8sfjRN+mEPXhQFDwqCHqq3mKalNrXSRLAlmCpSj1LwLh4Fj5486UXUk+BV71IokkurFhyZ2Zlkm2STbLLJtt3fDzZ5b+btvvefN2/z5s1mA2hbg9mPSsS2iPg9Syd5dk5aFMrKXZ+dHvt7dnqsEmn6xl+V6IiIa7PTY2XZ8nnbisy+JCL5tBJ7lqh38vyF06MTE+Pnijpj6sz7Q5PnLzx76szoyfGT4++NHD166ODwc0dGDjclzv6srbs/Ort31ytvXX5t7Njld37+prNs64I4mmUwBm86lrWeaHZlLdZf87vS2eLGsGrZGM66qysf/zuiI+Y7b0e8/ElLGwdsqDRN0+31d19MgTtYJdbyrKg0vyXA5ir/0F+b7YveRq6De5sy/Wi5qy9UL4CyuK/PTo8lc/F35ssSUVwb9W9Q/b3Fusmxi/98Gfnx72n6OgQAQK3vs/nPM9X5T/mo7hmI+2rKbc/Xg7OtEXdFxN0RcU9E3BsROyPysvdHxAMN1j+4IL94/plcWVNgq5TN/54v7m2Vj6Le6q//0oGOItcffTEQXZUTpybGDxTHZF909WT54WXq+OGl3z6vt2+wmPuVj6z+ci5YtONKZ8/Nzzk+OjW6vqjnXf04XwOcWRz//J2rLLUrInav4fWzefOpp77eW2//yvEvown3mdKvIp6s9v/FWCb+oQX3J/uKfUdGDg/1xsT4gaHyrFjsl18vvV6v/nXF3wRZ/29Z8vyfi3+gUnu/drLxOi798Vnda5oGzv+3yy3Z+d9deTNPdxfbPhydmjo3HNFdeXXx9pH5VyvzZfmr23ZGPLb0+M/e47JzLIt/T0RkJ/GDEfFQRDxctP2RiHg08pdYysz1iPjpxcffXUv8yUoHtgmy/j9+U//HCv3feKLj9I/frSX+qqz/D+WpfcWWFd//yvfLVTRwHYcOAAAAbhtJ/hn4SrJ/Lp0k+/dHbM3XdrckE2cnp54+cfaDf49XPys/EF1JudJVXQ+urocOF2vDZX5kQf5gsW78RUdfnt9y53yEAG5bW2vGYZJUf2bjP/NnRwsbBmwO/68F7cv4h/Zl/EP7anz8921IO4DNt9rxn25wO4DNt9T4n2lBO4DN5/of2pfxD+3L+Ic21Wn8Q5taz//1S6yQmGn48PbGcmW6b5G48kQkeSKdaWEzbhT3oeuX+bZn7msgbmxce8pvy1i6TF/Nlq5i3N0KPbh8onXvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM30fwAAAP//kSrUlw==")
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0)

program did not crash
testing program (duration=38.097581239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000040)={[{@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8000000000000000}}]}, 0xfc, 0x499, &(0x7f0000000c40)="$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")
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000001c0)='ext4\x00', 0x0, 0x0)

program did not crash
testing program (duration=38.097581239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000040)={[{@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8000000000000000}}]}, 0xfc, 0x499, &(0x7f0000000c40)="$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")
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=38.097581239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount
program crashed: kernel panic: EXT4-fs (device loop3): panic forced after error
a never seen crash title: kernel panic: EXT4-fs (device loop3): panic forced after error, ignore
simplifying guilty program options
testing program (duration=38.097581239s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000040)={[{@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8000000000000000}}]}, 0xfc, 0x499, &(0x7f0000000c40)="$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")
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0)

program crashed: kernel panic: EXT4-fs (device loop5): panic forced after error
a never seen crash title: kernel panic: EXT4-fs (device loop5): panic forced after error, ignore
testing program (duration=38.097581239s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000040)={[{@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8000000000000000}}]}, 0xfc, 0x499, &(0x7f0000000c40)="$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")
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0)

program did not crash
testing program (duration=38.097581239s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000040)={[{@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8000000000000000}}]}, 0xfc, 0x499, &(0x7f0000000c40)="$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")
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0)

program crashed: kernel panic: EXT4-fs (device loop2): panic forced after error
a never seen crash title: kernel panic: EXT4-fs (device loop2): panic forced after error, ignore
reproducing took 8m38.496961689s
repro crashed as (corrupted=false):
EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.17: invalid indirect mapped block 10 (level 1)
Kernel panic - not syncing: EXT4-fs (device loop1): panic forced after error
CPU: 0 PID: 386 Comm: syz.1.17 Not tainted 5.10.236-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 panic+0x2cf/0x812 kernel/panic.c:308
 ext4_handle_error+0x30e/0x310 fs/ext4/super.c:673
 __ext4_error_inode+0x2d8/0x5b0 fs/ext4/super.c:735
 ext4_free_branches+0x5ea/0x640 fs/ext4/indirect.c:1023
 ext4_ind_truncate+0x7da/0x1020 fs/ext4/indirect.c:1176
 ext4_truncate+0xaee/0x1220 fs/ext4/inode.c:4368
 ext4_orphan_cleanup+0x8e4/0xd50 fs/ext4/super.c:3100
 ext4_fill_super+0x888c/0x9150 fs/ext4/super.c:5075
 mount_bdev+0x262/0x370 fs/super.c:1442
 ext4_mount+0x34/0x40 fs/ext4/super.c:6645
 legacy_get_tree+0xf1/0x190 fs/fs_context.c:593
 vfs_get_tree+0x88/0x290 fs/super.c:1572
 do_new_mount+0x2ba/0xb30 fs/namespace.c:2917
 path_mount+0x56f/0xcb0 fs/namespace.c:3247
 do_mount fs/namespace.c:3260 [inline]
 __do_sys_mount fs/namespace.c:3468 [inline]
 __se_sys_mount+0x2c4/0x3b0 fs/namespace.c:3445
 __x64_sys_mount+0xbf/0xd0 fs/namespace.c:3445
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7fe00fed8169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe00f949038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fe0100fffa0 RCX: 00007fe00fed8169
RDX: 00002000000001c0 RSI: 0000200000000240 RDI: 0000200000000000
RBP: 00007fe00ff5aa68 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fe0100fffa0 R15: 00007ffc8240d3d8
Kernel Offset: disabled
Rebooting in 86400 seconds..

final repro crashed as (corrupted=false):
EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.17: invalid indirect mapped block 10 (level 1)
Kernel panic - not syncing: EXT4-fs (device loop1): panic forced after error
CPU: 0 PID: 386 Comm: syz.1.17 Not tainted 5.10.236-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack_lvl+0x1e2/0x24b lib/dump_stack.c:118
 dump_stack+0x15/0x17 lib/dump_stack.c:135
 panic+0x2cf/0x812 kernel/panic.c:308
 ext4_handle_error+0x30e/0x310 fs/ext4/super.c:673
 __ext4_error_inode+0x2d8/0x5b0 fs/ext4/super.c:735
 ext4_free_branches+0x5ea/0x640 fs/ext4/indirect.c:1023
 ext4_ind_truncate+0x7da/0x1020 fs/ext4/indirect.c:1176
 ext4_truncate+0xaee/0x1220 fs/ext4/inode.c:4368
 ext4_orphan_cleanup+0x8e4/0xd50 fs/ext4/super.c:3100
 ext4_fill_super+0x888c/0x9150 fs/ext4/super.c:5075
 mount_bdev+0x262/0x370 fs/super.c:1442
 ext4_mount+0x34/0x40 fs/ext4/super.c:6645
 legacy_get_tree+0xf1/0x190 fs/fs_context.c:593
 vfs_get_tree+0x88/0x290 fs/super.c:1572
 do_new_mount+0x2ba/0xb30 fs/namespace.c:2917
 path_mount+0x56f/0xcb0 fs/namespace.c:3247
 do_mount fs/namespace.c:3260 [inline]
 __do_sys_mount fs/namespace.c:3468 [inline]
 __se_sys_mount+0x2c4/0x3b0 fs/namespace.c:3445
 __x64_sys_mount+0xbf/0xd0 fs/namespace.c:3445
 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7fe00fed8169
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe00f949038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fe0100fffa0 RCX: 00007fe00fed8169
RDX: 00002000000001c0 RSI: 0000200000000240 RDI: 0000200000000000
RBP: 00007fe00ff5aa68 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007fe0100fffa0 R15: 00007ffc8240d3d8
Kernel Offset: disabled
Rebooting in 86400 seconds..