Extracting prog: 1m25.517956972s
Minimizing prog: 9m11.407048071s
Simplifying prog options: 2m54.359573671s
Extracting C: 47.170745763s
Simplifying C: 0s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program crashed: UBSAN: shift-out-of-bounds in parse_options
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$eJzs3c9vI1cdAPDvTOJsdjfFKSBUKlEqWrRbwdqbhrYRQlAucKoElPsSEm8UrR1HsVM2UUVT8R8gJJA4ceKCxIUbEuqBPwBVqgQXxAEBAiHYwgHxo4NmPFZTx07SNrF3489HmvV78+v73ozyPDN++yaAqfV4RDwfETMR8VREVMv5aTndyjMHvfXevPfyWj4lkWUv/i2JpJzX31een42Iq71NYj4ivvbliG8mR+N29vbvrDabjZ0yX++2tuudvf0bm63VjcZGY2t5eenZledWnlm5mZXeVz0X+4kff+nzv/j0t35/6y/Xv50X63MfiUoM1OMs9apeKY5FX36Mds4j2ATMlPWpTLogAACcSn6N/8GI+ERx/V+NmeJqbsDMQP7SuEoHAAAAnIXsCwvx3yQiAwAAAC6sNCIWIklrZV+AhUjTufLZwIfjStpsd7qfut3e3VrPl0UsRiW9vdls3Cz7Ci9GJcnzS2Uf237+6YH8ckQ8HBHfq14u8rW1dnN9ws8+AAAAYFpcHbj//2c1LdInG/L/BAAAAID71+LIDAAAAHBRuOUHAACAi2/w/n9wvH8AAADggfaVF17Ip6z//uv1l/Z277RfurHe6NyptXbXamvtne3aRru9UYzZ1zppf812e/szsbV7t95tdLr1zt7+rVZ7d6t7a/Mdr8AGAAAAxujhj7/2myQiDj57uZiiHAcQ4B3+OOkCAGdJVz+YXkbxhulVmXQBgIlLTlje67yTHIylMAAAwLm49tGjv//33//v2QBcbPr6AMD0eS+//7svgIuhUvQAvDzpYgATMFs+A/hAL3tp1HojB+/41WkjZVnE69XDc1xHAADAeC0UU5LWyvuAhUjTWi3ioYh0MSrJ7c1m42Z5f/DrauVSnl8qtkxO7DMMAAAAAAAAAAAAAAAAAAAAAAAAAPRkWRIZAAAAcKFFpH9OitH8I65Vn1wYfD4wl/yrGn8qMz988ft3V7vdnaV8/t+Ld3nNRUT3B+X8p0e+PgwAAAA4a8nByEW9+/Tyc2mspQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgCrx57+W1/jTOuH/9YkQsDos/G/PF53xUIuLKP5KYPbRdEhEzZxD/4NWIeGRY/CTeyrJXoizFsPiXzzn+YnFohsdPI+LqGcSHafZa3v48P+zvL43Hi8/hf3+z5fR+jW7/0jLyI0U7N6z9eejI3lpDYzz6xk/rvVTlaPxXIx6dHd7+9NvfZET8J47s7T9Zlh2N/42v7++Pqn/2o4hrQ79/ksrhWPVua7ve2du/sdla3WhsNLaWl5eeXXlu5ZmVm/Xbm81G+e/QGN/92M/fGhU/r/+VIfF/99te+3tc/Z8ctdMB/3vj7r0P9ZJHTkAe//oTQ79/52NE/LT87vtkmc6XX+unD3rpwx77yeuPHVf/9eHH/8Tzf/2U9X/qq9/5wylXBQDGoLO3f2e12WzsHJOYP8U6D2Lil/P3RTHeZSJ7pXfm7pfyvNdEfrX69px+rQ6tMxdnHPRn/454d1tlYzkal4rr+dNuNTem0zTRZgkAADgHb1/0T7okAAAAAAAAAAAAAAAAAAAAML0GBv26eh7DiQ3GPJhMVQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjvX/AAAA///WVtuo") (async)
open(0x0, 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(0x0, 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
program did not crash
simplifying guilty program options
testing program (duration=37.832902599s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program crashed: UBSAN: shift-out-of-bounds in parse_options
extracting C reproducer
testing compiled C program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
program did not crash
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$eJzs3c9vI1cdAPDvTOJsdjfFKSBUKlEqWrRbwdqbhrYRQlAucKoElPsSEm8UrR1HsVM2UUVT8R8gJJA4ceKCxIUbEuqBPwBVqgQXxAEBAiHYwgHxo4NmPFZTx07SNrF3489HmvV78+v73ozyPDN++yaAqfV4RDwfETMR8VREVMv5aTndyjMHvfXevPfyWj4lkWUv/i2JpJzX31een42Iq71NYj4ivvbliG8mR+N29vbvrDabjZ0yX++2tuudvf0bm63VjcZGY2t5eenZledWnlm5mZXeVz0X+4kff+nzv/j0t35/6y/Xv50X63MfiUoM1OMs9apeKY5FX36Mds4j2ATMlPWpTLogAACcSn6N/8GI+ERx/V+NmeJqbsDMQP7SuEoHAAAAnIXsCwvx3yQiAwAAAC6sNCIWIklrZV+AhUjTufLZwIfjStpsd7qfut3e3VrPl0UsRiW9vdls3Cz7Ci9GJcnzS2Uf237+6YH8ckQ8HBHfq14u8rW1dnN9ws8+AAAAYFpcHbj//2c1LdInG/L/BAAAAID71+LIDAAAAHBRuOUHAACAi2/w/n9wvH8AAADggfaVF17Ip6z//uv1l/Z277RfurHe6NyptXbXamvtne3aRru9UYzZ1zppf812e/szsbV7t95tdLr1zt7+rVZ7d6t7a/Mdr8AGAAAAxujhj7/2myQiDj57uZiiHAcQ4B3+OOkCAGdJVz+YXkbxhulVmXQBgIlLTlje67yTHIylMAAAwLm49tGjv//33//v2QBcbPr6AMD0eS+//7svgIuhUvQAvDzpYgATMFs+A/hAL3tp1HojB+/41WkjZVnE69XDc1xHAADAeC0UU5LWyvuAhUjTWi3ioYh0MSrJ7c1m42Z5f/DrauVSnl8qtkxO7DMMAAAAAAAAAAAAAAAAAAAAAAAAAPRkWRIZAAAAcKFFpH9OitH8I65Vn1wYfD4wl/yrGn8qMz988ft3V7vdnaV8/t+Ld3nNRUT3B+X8p0e+PgwAAAA4a8nByEW9+/Tyc2mspQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgCrx57+W1/jTOuH/9YkQsDos/G/PF53xUIuLKP5KYPbRdEhEzZxD/4NWIeGRY/CTeyrJXoizFsPiXzzn+YnFohsdPI+LqGcSHafZa3v48P+zvL43Hi8/hf3+z5fR+jW7/0jLyI0U7N6z9eejI3lpDYzz6xk/rvVTlaPxXIx6dHd7+9NvfZET8J47s7T9Zlh2N/42v7++Pqn/2o4hrQ79/ksrhWPVua7ve2du/sdla3WhsNLaWl5eeXXlu5ZmVm/Xbm81G+e/QGN/92M/fGhU/r/+VIfF/99te+3tc/Z8ctdMB/3vj7r0P9ZJHTkAe//oTQ79/52NE/LT87vtkmc6XX+unD3rpwx77yeuPHVf/9eHH/8Tzf/2U9X/qq9/5wylXBQDGoLO3f2e12WzsHJOYP8U6D2Lil/P3RTHeZSJ7pXfm7pfyvNdEfrX69px+rQ6tMxdnHPRn/454d1tlYzkal4rr+dNuNTem0zTRZgkAADgHb1/0T7okAAAAAAAAAAAAAAAAAAAAML0GBv26eh7DiQ3GPJhMVQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjvX/AAAA///WVtuo") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program crashed: UBSAN: shift-out-of-bounds in parse_options
validation run: crashed=true
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program crashed: UBSAN: shift-out-of-bounds in parse_options
validation run: crashed=true
testing program (duration=37.832902599s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-mount-open-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0xa00000, &(0x7f0000000ac0)={[{@inlinecrypt}, {@errors_remount}, {@resuid}]}, 0x41, 0x53d, &(0x7f0000000080)="$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") (async)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
program crashed: UBSAN: shift-out-of-bounds in parse_options
validation run: crashed=true
reproducing took 16m14.100621451s
repro crashed as (corrupted=false):
EXT4-fs (loop2): Unrecognized mount option "uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu" or missing value
EXT4-fs (loop2): failed to parse options in superblock: uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu
================================================================================
UBSAN: shift-out-of-bounds in fs/ext4/super.c:2492:15
shift exponent 3551861919 is too large for 32-bit type 'int'
CPU: 0 PID: 385 Comm: syz.2.21 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:88
dump_stack_lvl+0xee/0x150 lib/dump_stack.c:106
dump_stack+0x15/0x20 lib/dump_stack.c:113
ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
__ubsan_handle_shift_out_of_bounds+0x37c/0x400 lib/ubsan.c:321
parse_options+0x22db/0x2360 fs/ext4/super.c:2492
ext4_fill_super+0x1d26/0x9030 fs/ext4/super.c:4166
mount_bdev+0x2ae/0x3e0 fs/super.c:1400
ext4_mount+0x34/0x40 fs/ext4/super.c:6621
legacy_get_tree+0xed/0x190 fs/fs_context.c:611
vfs_get_tree+0x89/0x260 fs/super.c:1530
do_new_mount+0x25a/0xa20 fs/namespace.c:3014
path_mount+0x675/0x1020 fs/namespace.c:3344
do_mount fs/namespace.c:3357 [inline]
__do_sys_mount fs/namespace.c:3565 [inline]
__se_sys_mount+0x318/0x380 fs/namespace.c:3542
__x64_sys_mount+0xbf/0xd0 fs/namespace.c:3542
x64_sys_call+0x6bf/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:166
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f2df91bd14a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2df8c2be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f2df8c2bef0 RCX: 00007f2df91bd14a
RDX: 0000200000000040 RSI: 0000200000000640 RDI: 00007f2df8c2beb0
RBP: 0000200000000040 R08: 00007f2df8c2bef0 R09: 0000000000a00000
R10: 0000000000a00000 R11: 0000000000000246 R12: 0000200000000640
R13: 00007f2df8c2beb0 R14: 000000000000053d R15: 000000000000002c
================================================================================
EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
EXT4-fs (loop2): Encoding requested by superblock is unknown
final repro crashed as (corrupted=false):
EXT4-fs (loop2): Unrecognized mount option "uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu" or missing value
EXT4-fs (loop2): failed to parse options in superblock: uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu
================================================================================
UBSAN: shift-out-of-bounds in fs/ext4/super.c:2492:15
shift exponent 3551861919 is too large for 32-bit type 'int'
CPU: 0 PID: 385 Comm: syz.2.21 Not tainted 5.15.189-syzkaller-00091-gf32b52534f1d #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
__dump_stack+0x21/0x30 lib/dump_stack.c:88
dump_stack_lvl+0xee/0x150 lib/dump_stack.c:106
dump_stack+0x15/0x20 lib/dump_stack.c:113
ubsan_epilogue+0xe/0x40 lib/ubsan.c:151
__ubsan_handle_shift_out_of_bounds+0x37c/0x400 lib/ubsan.c:321
parse_options+0x22db/0x2360 fs/ext4/super.c:2492
ext4_fill_super+0x1d26/0x9030 fs/ext4/super.c:4166
mount_bdev+0x2ae/0x3e0 fs/super.c:1400
ext4_mount+0x34/0x40 fs/ext4/super.c:6621
legacy_get_tree+0xed/0x190 fs/fs_context.c:611
vfs_get_tree+0x89/0x260 fs/super.c:1530
do_new_mount+0x25a/0xa20 fs/namespace.c:3014
path_mount+0x675/0x1020 fs/namespace.c:3344
do_mount fs/namespace.c:3357 [inline]
__do_sys_mount fs/namespace.c:3565 [inline]
__se_sys_mount+0x318/0x380 fs/namespace.c:3542
__x64_sys_mount+0xbf/0xd0 fs/namespace.c:3542
x64_sys_call+0x6bf/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:166
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f2df91bd14a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2df8c2be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f2df8c2bef0 RCX: 00007f2df91bd14a
RDX: 0000200000000040 RSI: 0000200000000640 RDI: 00007f2df8c2beb0
RBP: 0000200000000040 R08: 00007f2df8c2bef0 R09: 0000000000a00000
R10: 0000000000a00000 R11: 0000000000000246 R12: 0000200000000640
R13: 00007f2df8c2beb0 R14: 000000000000053d R15: 000000000000002c
================================================================================
EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
EXT4-fs (loop2): Encoding requested by superblock is unknown