Extracting prog: 1m6.472281951s
Minimizing prog: 6m56.104663967s
Simplifying prog options: 0s
Extracting C: 24.976705692s
Simplifying C: 3m27.709414272s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program crashed: UBSAN: shift-out-of-bounds in ext4_fill_super
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
program did not crash
testing program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
testing program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
testing program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
testing program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
testing program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
testing program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
testing program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
testing program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
testing program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=35.985698811s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: UBSAN: shift-out-of-bounds in ext4_fill_super
simplifying C reproducer
testing compiled C program (duration=35.985698811s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program did not crash
testing compiled C program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: UBSAN: shift-out-of-bounds in ext4_fill_super
testing compiled C program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: UBSAN: shift-out-of-bounds in ext4_fill_super
testing compiled C program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program crashed: UBSAN: shift-out-of-bounds in ext4_fill_super
testing compiled C program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program did not crash
testing compiled C program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
program did not crash
testing program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$eJzs28tvG8UfAPDv2nH76+uXUJVHH0CgICIeSZOW0gMHQCBxAAkJDuUYkrQKdRvUBIlWEQSEyhFV4o44IvEHIE5wQcAJqVe4o0oVyqWFk9Hau4nt2s6jTlzw5yNtMrM7zszXu2PP7GQD6FvD6Y8kYm9E/BYRg7VsY4Hh2q9by4tTfy0vTiVRqbz5Z1Itd3N5cSovmr9uT54ZiCh8msThFvXOX7p8brJcnrmY5ccWzr83Nn/p8jOz5yfPzpyduTBx6tSJ4+PPnZx4titxpnHdPPTh3JGDr7599fWp01ff+fmbJI+/KY4uGe508PFKpcvV9da+unQy0MOGsCHFWjeNUrX/D0YxVk/eYLzySU8bB2ypSqVSua/94aUK8B+WRK9bAPRG/kWfzn/zbZuGHneFGy/WJkBp3LeyrXZkIApZmVLT/LabhiPi9NLfX6ZbbM19CACABt+n45+nW43/ClF/X+j/2RrKUETcExH7I+JkRByIiHsjqmXvj4gHNlh/8yLJ7eOfwvVNBbZO6fjv+Wxtq3H8l4/+YqiY5fZV4y8lZ2bLM8ey92QkSjvT/HiHOn54+drn7Y7Vj//SLa0/Hwtm7bg+sLPxNdOTC5N3EnO9Gx9HHBpoFX+yshKQRMTBiDjU/s9c+7ZDHbNPfn2k3bG14++gC+tMla8inqid/6Voij+XdF6fHPtflGeOjeVXRbMX4pdfr7zRrv47ir8L0vO/u+X1vxL/UFK/Xju/8Tqu/P5Z2znNZq//HclbDfs+mFxYuDgesSN5rdbo+v0TTeUmVsun8Y8cbd3/98fqO3E4ItKL+MGIeCgiHs7a/khEPBoRRzvE/9NLj727ofhje8//9IbO/2piRzTvaZ0onvvxu4ZKh9aI/7bzf6KaGsn2rOfzbz3t2tzVDAAAAP8+hYjYG0lhdCVdKIyO1v6H/0DsLpTn5heeOjP3/oXp2jMCQ1Eq5He6Buvuh45n0/o8P9GUP57dN/6iuKuaH52aK0/3Onjoc3va9P/UH8Vetw7Ycp7Xgv6l/0P/0v+hf+n/0L9a9P9dvWgHsP1aff9/1IN2ANuvqf9b9oM+Yv4P/Uv/h/6l/0Nfmt8V2ZPwpVj7aXkJiTwRhbuiGRJblOj1JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB3/BMAAP//DqDnMg==") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
validation run: crashed=false
testing program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$eJzs28tvG8UfAPDv2nH76+uXUJVHH0CgICIeSZOW0gMHQCBxAAkJDuUYkrQKdRvUBIlWEQSEyhFV4o44IvEHIE5wQcAJqVe4o0oVyqWFk9Hau4nt2s6jTlzw5yNtMrM7zszXu2PP7GQD6FvD6Y8kYm9E/BYRg7VsY4Hh2q9by4tTfy0vTiVRqbz5Z1Itd3N5cSovmr9uT54ZiCh8msThFvXOX7p8brJcnrmY5ccWzr83Nn/p8jOz5yfPzpyduTBx6tSJ4+PPnZx4titxpnHdPPTh3JGDr7599fWp01ff+fmbJI+/KY4uGe508PFKpcvV9da+unQy0MOGsCHFWjeNUrX/D0YxVk/eYLzySU8bB2ypSqVSua/94aUK8B+WRK9bAPRG/kWfzn/zbZuGHneFGy/WJkBp3LeyrXZkIApZmVLT/LabhiPi9NLfX6ZbbM19CACABt+n45+nW43/ClF/X+j/2RrKUETcExH7I+JkRByIiHsjqmXvj4gHNlh/8yLJ7eOfwvVNBbZO6fjv+Wxtq3H8l4/+YqiY5fZV4y8lZ2bLM8ey92QkSjvT/HiHOn54+drn7Y7Vj//SLa0/Hwtm7bg+sLPxNdOTC5N3EnO9Gx9HHBpoFX+yshKQRMTBiDjU/s9c+7ZDHbNPfn2k3bG14++gC+tMla8inqid/6Voij+XdF6fHPtflGeOjeVXRbMX4pdfr7zRrv47ir8L0vO/u+X1vxL/UFK/Xju/8Tqu/P5Z2znNZq//HclbDfs+mFxYuDgesSN5rdbo+v0TTeUmVsun8Y8cbd3/98fqO3E4ItKL+MGIeCgiHs7a/khEPBoRRzvE/9NLj727ofhje8//9IbO/2piRzTvaZ0onvvxu4ZKh9aI/7bzf6KaGsn2rOfzbz3t2tzVDAAAAP8+hYjYG0lhdCVdKIyO1v6H/0DsLpTn5heeOjP3/oXp2jMCQ1Eq5He6Buvuh45n0/o8P9GUP57dN/6iuKuaH52aK0/3Onjoc3va9P/UH8Vetw7Ycp7Xgv6l/0P/0v+hf+n/0L9a9P9dvWgHsP1aff9/1IN2ANuvqf9b9oM+Yv4P/Uv/h/6l/0Nfmt8V2ZPwpVj7aXkJiTwRhbuiGRJblOj1JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB3/BMAAP//DqDnMg==") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
validation run: crashed=false
testing program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program crashed: UBSAN: shift-out-of-bounds in ext4_fill_super
validation run: crashed=true
testing program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
validation run: crashed=false
testing program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
validation run: crashed=false
testing program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$eJzs28tvG8UfAPDv2nH76+uXUJVHH0CgICIeSZOW0gMHQCBxAAkJDuUYkrQKdRvUBIlWEQSEyhFV4o44IvEHIE5wQcAJqVe4o0oVyqWFk9Hau4nt2s6jTlzw5yNtMrM7zszXu2PP7GQD6FvD6Y8kYm9E/BYRg7VsY4Hh2q9by4tTfy0vTiVRqbz5Z1Itd3N5cSovmr9uT54ZiCh8msThFvXOX7p8brJcnrmY5ccWzr83Nn/p8jOz5yfPzpyduTBx6tSJ4+PPnZx4titxpnHdPPTh3JGDr7599fWp01ff+fmbJI+/KY4uGe508PFKpcvV9da+unQy0MOGsCHFWjeNUrX/D0YxVk/eYLzySU8bB2ypSqVSua/94aUK8B+WRK9bAPRG/kWfzn/zbZuGHneFGy/WJkBp3LeyrXZkIApZmVLT/LabhiPi9NLfX6ZbbM19CACABt+n45+nW43/ClF/X+j/2RrKUETcExH7I+JkRByIiHsjqmXvj4gHNlh/8yLJ7eOfwvVNBbZO6fjv+Wxtq3H8l4/+YqiY5fZV4y8lZ2bLM8ey92QkSjvT/HiHOn54+drn7Y7Vj//SLa0/Hwtm7bg+sLPxNdOTC5N3EnO9Gx9HHBpoFX+yshKQRMTBiDjU/s9c+7ZDHbNPfn2k3bG14++gC+tMla8inqid/6Voij+XdF6fHPtflGeOjeVXRbMX4pdfr7zRrv47ir8L0vO/u+X1vxL/UFK/Xju/8Tqu/P5Z2znNZq//HclbDfs+mFxYuDgesSN5rdbo+v0TTeUmVsun8Y8cbd3/98fqO3E4ItKL+MGIeCgiHs7a/khEPBoRRzvE/9NLj727ofhje8//9IbO/2piRzTvaZ0onvvxu4ZKh9aI/7bzf6KaGsn2rOfzbz3t2tzVDAAAAP8+hYjYG0lhdCVdKIyO1v6H/0DsLpTn5heeOjP3/oXp2jMCQ1Eq5He6Buvuh45n0/o8P9GUP57dN/6iuKuaH52aK0/3Onjoc3va9P/UH8Vetw7Ycp7Xgv6l/0P/0v+hf+n/0L9a9P9dvWgHsP1aff9/1IN2ANuvqf9b9oM+Yv4P/Uv/h/6l/0Nfmt8V2ZPwpVj7aXkJiTwRhbuiGRJblOj1JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB3/BMAAP//DqDnMg==") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
validation run: crashed=false
testing program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program crashed: UBSAN: shift-out-of-bounds in ext4_fill_super
validation run: crashed=true
testing program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
validation run: crashed=false
testing program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
validation run: crashed=false
testing program (duration=35.985698811s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-quotactl$Q_QUOTAON-mprotect-openat$cgroup_ro-mmap-ioctl$KVM_SET_USER_MEMORY_REGION
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") (async)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
program did not crash
validation run: crashed=false
reproducing took 17m17.071195475s
repro crashed as (corrupted=false):
EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
================================================================================
UBSAN: shift-out-of-bounds in fs/ext4/super.c:4447:27
shift exponent 8192 is too large for 32-bit type 'int'
CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:88
dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
dump_stack+0x15/0x20 lib/dump_stack.c:113
ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
__ubsan_handle_shift_out_of_bounds+0x37c/0x400 lib/ubsan.c:321
ext4_fill_super+0x6a42/0x8bd0 fs/ext4/super.c:4447
mount_bdev+0x2ae/0x3e0 fs/super.c:1400
ext4_mount+0x34/0x40 fs/ext4/super.c:6648
legacy_get_tree+0xed/0x190 fs/fs_context.c:611
vfs_get_tree+0x89/0x260 fs/super.c:1530
do_new_mount+0x25a/0xa20 fs/namespace.c:3034
path_mount+0x659/0xff0 fs/namespace.c:3364
do_mount fs/namespace.c:3377 [inline]
__do_sys_mount fs/namespace.c:3585 [inline]
__se_sys_mount+0x320/0x390 fs/namespace.c:3562
__x64_sys_mount+0xbf/0xd0 fs/namespace.c:3562
x64_sys_call+0x6bf/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:166
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f22183a004a
Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2218200e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f2218200ee0 RCX: 00007f22183a004a
RDX: 0000200000000040 RSI: 00002000000001c0 RDI: 00007f2218200ea0
RBP: 0000200000000040 R08: 00007f2218200ee0 R09: 0000000000010404
R10: 0000000000010404 R11: 0000000000000246 R12: 00002000000001c0
R13: 00007f2218200ea0 R14: 000000000000043c R15: 000000000000002c
================================================================================
EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0)
final repro crashed as (corrupted=false):
EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
================================================================================
UBSAN: shift-out-of-bounds in fs/ext4/super.c:4447:27
shift exponent 8192 is too large for 32-bit type 'int'
CPU: 1 PID: 373 Comm: syz.2.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:88
dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
dump_stack+0x15/0x20 lib/dump_stack.c:113
ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
__ubsan_handle_shift_out_of_bounds+0x37c/0x400 lib/ubsan.c:321
ext4_fill_super+0x6a42/0x8bd0 fs/ext4/super.c:4447
mount_bdev+0x2ae/0x3e0 fs/super.c:1400
ext4_mount+0x34/0x40 fs/ext4/super.c:6648
legacy_get_tree+0xed/0x190 fs/fs_context.c:611
vfs_get_tree+0x89/0x260 fs/super.c:1530
do_new_mount+0x25a/0xa20 fs/namespace.c:3034
path_mount+0x659/0xff0 fs/namespace.c:3364
do_mount fs/namespace.c:3377 [inline]
__do_sys_mount fs/namespace.c:3585 [inline]
__se_sys_mount+0x320/0x390 fs/namespace.c:3562
__x64_sys_mount+0xbf/0xd0 fs/namespace.c:3562
x64_sys_call+0x6bf/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:166
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f22183a004a
Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2218200e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f2218200ee0 RCX: 00007f22183a004a
RDX: 0000200000000040 RSI: 00002000000001c0 RDI: 00007f2218200ea0
RBP: 0000200000000040 R08: 00007f2218200ee0 R09: 0000000000010404
R10: 0000000000010404 R11: 0000000000000246 R12: 00002000000001c0
R13: 00007f2218200ea0 R14: 000000000000043c R15: 000000000000002c
================================================================================
EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0)