Extracting prog: 2m36.990244336s
Minimizing prog: 9m6.837492028s
Simplifying prog options: 0s
Extracting C: 28.057223578s
Simplifying C: 7m48.811739575s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
detailed listing:
executing program 0:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000807, &(0x7f00000035c0)=ANY=[], 0xef, 0x1f6, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000a0000cc0622cbd11a7cb3"])

program crashed: WARNING in iomap_iter
single: successfully extracted reproducer
found reproducer with 3 syscalls
minimizing guilty program
testing program (duration=1m3.515372752s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat
detailed listing:
executing program 0:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000807, &(0x7f00000035c0)=ANY=[], 0xef, 0x1f6, &(0x7f00000003c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

program did not crash
testing program (duration=1m3.515372752s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-ioctl$FS_IOC_FIEMAP
detailed listing:
executing program 0:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000807, &(0x7f00000035c0)=ANY=[], 0xef, 0x1f6, &(0x7f00000003c0)="$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")
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000a0000cc0622cbd11a7cb3"])

program did not crash
testing program (duration=1m3.515372752s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-ioctl$FS_IOC_FIEMAP
detailed listing:
executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000a0000cc0622cbd11a7cb3"])

program did not crash
testing program (duration=1m3.515372752s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
detailed listing:
executing program 0:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000807, &(0x7f00000035c0)=ANY=[], 0xef, 0x1f6, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000a0000cc0622cbd11a7cb3"])

program did not crash
testing program (duration=1m3.515372752s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
detailed listing:
executing program 0:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000807, &(0x7f00000035c0)=ANY=[], 0xef, 0x1f6, &(0x7f00000003c0)="$eJzsmb+LE0EUx78zu5c9DxFsLGwsPPBEb39F5ZorThArQThFLYO3F4KbRJIVkoBIsLGxFBFs/QcsLFJZ2NnZaqGCYGFKwUIYmdlxM/mxYUMQAr4PZPJ9b368N4/kbbEgCOK/5euXn5+fXt65cR7AUWzC0f7v1mgNBzLr04sH557tXnn5+uOrd41jDweT560DEKJ4fHnw2z0LibKEEI/G5zfl8HzcdxMcZ7W+BQY3lb+FIjUiMNxRygYyDTSPaBFH7t1mfHBYiyNfDoEcQjmUzVhy97DPcJDdTQhmzLe7vXuVOI5ak2JN/I0zNbWomFc/ld8ex662ZX4cwO0nj/vS1rWBD57WEkAAjkDrMhj2td6BA9d1RyUx7n/SHp1vFbn/DOEsW4gigv1KfwbSc3z738YiYQjhrEQaBQSb9Mg/dOY5MRy8n971bVWSzxcMOR1HNS4AmeeqXvNhI46vLRG0pCNOT1lmf2I2cMboTzbsrH94Sf2+1+72tmv1SjWqRo0wLF/yL/j+xdA7rDnwPdWO5vS/ddWfNozz18wFxgOlxEroVJKkFXSApBVkdpiORsfdf9P8ofZw1f84tk6nZ8giq2s7s/Nh+sPVt1RbVm7yBEEQBEEQBEEQBEEQBEEQC3EKDOkrEPWiSuQQXler/wQAAP//3fVtcQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0)

program did not crash
testing program (duration=1m3.515372752s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
detailed listing:
executing program 0:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000807, &(0x7f00000035c0)=ANY=[], 0xef, 0x1f6, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB])

program did not crash
extracting C reproducer
testing compiled C program (duration=1m3.515372752s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
program crashed: WARNING in iomap_iter
simplifying C reproducer
testing compiled C program (duration=1m3.515372752s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
program crashed: WARNING in iomap_iter
testing compiled C program (duration=1m3.515372752s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
program crashed: WARNING in iomap_iter
testing compiled C program (duration=1m3.515372752s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
program crashed: WARNING in iomap_iter
testing compiled C program (duration=1m3.515372752s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
program crashed: WARNING in iomap_iter
testing compiled C program (duration=1m3.515372752s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
program crashed: WARNING in iomap_iter
testing compiled C program (duration=1m3.515372752s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
program crashed: WARNING in iomap_iter
testing compiled C program (duration=1m3.515372752s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$erofs-openat-ioctl$FS_IOC_FIEMAP
program crashed: WARNING in iomap_iter
reproducing took 20m0.696776437s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 16
erofs: (device loop0): mounted with root inode @ nid 36.
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4290 at fs/iomap/iter.c:51 iomap_iter_done fs/iomap/iter.c:51 [inline]
WARNING: CPU: 1 PID: 4290 at fs/iomap/iter.c:51 iomap_iter+0x998/0x120c fs/iomap/iter.c:95
Modules linked in:
CPU: 1 PID: 4290 Comm: syz-executor238 Not tainted 6.1.124-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : iomap_iter_done fs/iomap/iter.c:51 [inline]
pc : iomap_iter+0x998/0x120c fs/iomap/iter.c:95
lr : iomap_iter_done fs/iomap/iter.c:51 [inline]
lr : iomap_iter+0x998/0x120c fs/iomap/iter.c:95
sp : ffff8000212576b0
x29: ffff8000212576e0 x28: 1ffff0000424af05 x27: ffff800021257858
x26: ffff800021257848 x25: ffff800021257828 x24: 06cc00000a000000
x23: ffff800021257862 x22: dfff800000000000 x21: 000000000a001000
x20: 1ffff0000424af0c x19: ffff800021257820 x18: 0000000000000140
x17: 00000000c020660b x16: ffff80001232f264 x15: 0000000000000000
x14: 0000000000000003 x13: ffff0000d8910000 x12: 0000000000000001
x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800008c05bc0
x8 : ffff0000d8910000 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff80000a6d83e4
x2 : 0000000000000001 x1 : 06cc00000a000000 x0 : 000000000a001000
Call trace:
 iomap_iter_done fs/iomap/iter.c:51 [inline]
 iomap_iter+0x998/0x120c fs/iomap/iter.c:95
 iomap_fiemap+0x158/0x808 fs/iomap/fiemap.c:80
 erofs_fiemap+0x90/0xb0
 ioctl_fiemap fs/ioctl.c:219 [inline]
 do_vfs_ioctl+0x194c/0x26f8 fs/ioctl.c:810
 __do_sys_ioctl fs/ioctl.c:868 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __arm64_sys_ioctl+0xe4/0x1c8 fs/ioctl.c:856
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 1628
hardirqs last  enabled at (1627): [<ffff800012411124>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (1627): [<ffff800012411124>] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (1628): [<ffff80001232af44>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (410): [<ffff800008030408>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (408): [<ffff8000080303d4>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 16
erofs: (device loop0): mounted with root inode @ nid 36.
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4290 at fs/iomap/iter.c:51 iomap_iter_done fs/iomap/iter.c:51 [inline]
WARNING: CPU: 1 PID: 4290 at fs/iomap/iter.c:51 iomap_iter+0x998/0x120c fs/iomap/iter.c:95
Modules linked in:
CPU: 1 PID: 4290 Comm: syz-executor238 Not tainted 6.1.124-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : iomap_iter_done fs/iomap/iter.c:51 [inline]
pc : iomap_iter+0x998/0x120c fs/iomap/iter.c:95
lr : iomap_iter_done fs/iomap/iter.c:51 [inline]
lr : iomap_iter+0x998/0x120c fs/iomap/iter.c:95
sp : ffff8000212576b0
x29: ffff8000212576e0 x28: 1ffff0000424af05 x27: ffff800021257858
x26: ffff800021257848 x25: ffff800021257828 x24: 06cc00000a000000
x23: ffff800021257862 x22: dfff800000000000 x21: 000000000a001000
x20: 1ffff0000424af0c x19: ffff800021257820 x18: 0000000000000140
x17: 00000000c020660b x16: ffff80001232f264 x15: 0000000000000000
x14: 0000000000000003 x13: ffff0000d8910000 x12: 0000000000000001
x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800008c05bc0
x8 : ffff0000d8910000 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff80000a6d83e4
x2 : 0000000000000001 x1 : 06cc00000a000000 x0 : 000000000a001000
Call trace:
 iomap_iter_done fs/iomap/iter.c:51 [inline]
 iomap_iter+0x998/0x120c fs/iomap/iter.c:95
 iomap_fiemap+0x158/0x808 fs/iomap/fiemap.c:80
 erofs_fiemap+0x90/0xb0
 ioctl_fiemap fs/ioctl.c:219 [inline]
 do_vfs_ioctl+0x194c/0x26f8 fs/ioctl.c:810
 __do_sys_ioctl fs/ioctl.c:868 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __arm64_sys_ioctl+0xe4/0x1c8 fs/ioctl.c:856
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2bc arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x13c arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 1628
hardirqs last  enabled at (1627): [<ffff800012411124>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (1627): [<ffff800012411124>] _raw_spin_unlock_irqrestore+0x48/0xac kernel/locking/spinlock.c:194
hardirqs last disabled at (1628): [<ffff80001232af44>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (410): [<ffff800008030408>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (408): [<ffff8000080303d4>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---