Extracting prog: 39.585895223s
Minimizing prog: 176.721µs
Simplifying prog options: 0s
Extracting C: 3m14.835242818s
Simplifying C: 10m25.916162274s
extracting reproducer from 18 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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")
program crashed: WARNING in ext4_xattr_block_set
single: successfully extracted reproducer
found reproducer with 1 syscalls
minimizing guilty program
extracting C reproducer
testing compiled C program (duration=46.175049946s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=46.175049946s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
simplifying C reproducer
testing compiled C program (duration=46.175049946s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=46.175049946s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=46.175049946s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=46.175049946s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=46.175049946s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=46.175049946s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing compiled C program (duration=46.175049946s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
program crashed: WARNING in ext4_xattr_block_set
testing program (duration=46.175049946s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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")
program crashed: WARNING in ext4_xattr_block_set
validation run: crashed=true
testing program (duration=46.175049946s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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")
program crashed: WARNING in ext4_xattr_block_set
validation run: crashed=true
testing program (duration=46.175049946s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIKIo6KEeY7ItodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJttNrFmk4nd3w8m8747b3aeJ/P17vtuAuhaQ9mPJGJHRPwWEQON6tIGQ43VtSvnJq9fOTeZxMLC638meburV85Nlk3L39teVIbTiPSjpNjJUrNnzp6YqNdrp4v66NzJt0dnz5x94t2TE8drx2unxo8cOXxo7Omnxp/sSJ5ZXlf3fTCzf++Lb158ZfLoxbd++iaLd0exvTmPThnKEv9rIde67dFO76xiO5vKSW+FgXBLeiIiO1x9+fU/ED1x4+ANxAsfVhocsK6yZ9OW9pvnF4DbWBJVRwBUo3zQZ59/y2WDuh6bwuVnGx+AsryvFUtjS2+kRZu+ls+3nTQUEUfn//4iW2KdxiEAAJp9Mvn5y9n6/etfv5T1PQYWt6RxT77+Pf+5q5hDGYyIOyNid0TcFRF7IuLuiLztvRFx3xrjubn/k15a41uuKOv/PVPMbS3t/5W9vxjsKWo78/z7kmPT9drB4m8yHH1bsvrYCvv47vlfP223rbn/ly3Z/su+YBHHpd6WAbqpibmJvFPaAZcvROzrXS7/ZHEmIImIvRGx79beeldZmH7sq/3tGq2e/wo6MM+08GWW3nyW/3y05F9Kmucnp2+anxzdGvXawdHyrLjZz798/Fq7/a8p/w64XGusm45/a5PBpHm+draz+/+P53/an7zRmGcuvDcxN3d6LKI/yW9n0d/8+nhLu/Eb7bPzf/jA8tf/7uJ3svzvj4jsJH4gIh6MiIeK2B+OiEci4sAKOf743Or5R1rR8b8QMbXs/W/x/G85/rde6Dnxw7ft9v/vjv/hvDRcvJLf/1axXDjZ7aI1wLX87QAAAOD/Is2/A5+kI4vlNB0ZaXyHf0/ckdZnZucePzbzzqmpxnflB6MvLUe6Borx0Pp0vTaWzBfv2BgfHS/Gisvx0kPFuPFnPdvy+sjkTH2q4tyh221vc/1n/uipOjpgnW1b9tXx/g0PBKhA6zx6urR6/tVwM4Dblf/Xhu61yvWfblQcwMbz/Ifutdz1f76lbi4Abk+e/9C9XP/QpdLvq44AqJDnP3Sltfxf/zoWtm6OMKopbNaDkhciykK6KeJRWKdC1XcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgnAAD//6oz5nU=")
program crashed: WARNING in ext4_xattr_block_set
validation run: crashed=true
reproducing took 19m48.980568906s
repro crashed as (corrupted=false):
syz.0.17[5949]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
loop0: detected capacity change from 0 to 512
EXT4-fs (loop0): orphan cleanup on readonly fs
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5949 at fs/ext4/xattr.c:1923 ext4_xattr_block_set+0x2a7a/0x32a0 fs/ext4/xattr.c:1923
Modules linked in:
CPU: 1 PID: 5949 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:ext4_xattr_block_set+0x2a7a/0x32a0 fs/ext4/xattr.c:1923
Code: ff 48 8b 5c 24 18 48 8d 7b 28 be 08 00 00 00 e8 bc c6 9a ff f0 80 63 28 fd eb 1b e8 b0 79 43 ff e9 2f f1 ff ff e8 a6 79 43 ff <0f> 0b e9 72 d7 ff ff e8 9a 79 43 ff 48 b8 00 00 00 00 00 fc ff df
RSP: 0018:ffffc900046bf2a0 EFLAGS: 00010293
RAX: ffffffff8242169a RBX: ffffc900046bf5a8 RCX: ffff888029225a00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900046bf490 R08: ffff88806eeb1020 R09: ffff88806eeb1020
R10: ffff88806eeb1400 R11: ffff88806eeb1000 R12: 0000000000000000
R13: 1ffff920008d7eb6 R14: 1ffff920008d7eb5 R15: ffffc900046bf5b0
FS: 000055558b03b500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558b57fb4008 CR3: 0000000077a82000 CR4: 00000000003506e0
Call Trace:
ext4_xattr_move_to_block fs/ext4/xattr.c:2674 [inline]
ext4_xattr_make_inode_space fs/ext4/xattr.c:2749 [inline]
ext4_expand_extra_isize_ea+0x10ea/0x19e0 fs/ext4/xattr.c:2841
__ext4_expand_extra_isize+0x306/0x400 fs/ext4/inode.c:5953
ext4_try_to_expand_extra_isize fs/ext4/inode.c:5996 [inline]
__ext4_mark_inode_dirty+0x45d/0x6e0 fs/ext4/inode.c:6074
ext4_evict_inode+0x7ed/0xea0 fs/ext4/inode.c:252
evict+0x486/0x870 fs/inode.c:705
ext4_orphan_cleanup+0xbd4/0x1400 fs/ext4/orphan.c:474
__ext4_fill_super fs/ext4/super.c:5608 [inline]
ext4_fill_super+0x5de7/0x66c0 fs/ext4/super.c:5731
get_tree_bdev+0x3e4/0x510 fs/super.c:1591
vfs_get_tree+0x8c/0x280 fs/super.c:1764
do_new_mount+0x24b/0xa40 fs/namespace.c:3377
do_mount fs/namespace.c:3717 [inline]
__do_sys_mount fs/namespace.c:3926 [inline]
__se_sys_mount+0x2da/0x3c0 fs/namespace.c:3903
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f0f9279034a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc23fd9278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffc23fd9300 RCX: 00007f0f9279034a
RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffc23fd92c0
RBP: 0000200000000180 R08: 00007ffc23fd9300 R09: 000000000080078b
R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0
R13: 00007ffc23fd92c0 R14: 0000000000000473 R15: 0000200000000680
final repro crashed as (corrupted=false):
syz.0.17[5949]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
loop0: detected capacity change from 0 to 512
EXT4-fs (loop0): orphan cleanup on readonly fs
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5949 at fs/ext4/xattr.c:1923 ext4_xattr_block_set+0x2a7a/0x32a0 fs/ext4/xattr.c:1923
Modules linked in:
CPU: 1 PID: 5949 Comm: syz.0.17 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:ext4_xattr_block_set+0x2a7a/0x32a0 fs/ext4/xattr.c:1923
Code: ff 48 8b 5c 24 18 48 8d 7b 28 be 08 00 00 00 e8 bc c6 9a ff f0 80 63 28 fd eb 1b e8 b0 79 43 ff e9 2f f1 ff ff e8 a6 79 43 ff <0f> 0b e9 72 d7 ff ff e8 9a 79 43 ff 48 b8 00 00 00 00 00 fc ff df
RSP: 0018:ffffc900046bf2a0 EFLAGS: 00010293
RAX: ffffffff8242169a RBX: ffffc900046bf5a8 RCX: ffff888029225a00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900046bf490 R08: ffff88806eeb1020 R09: ffff88806eeb1020
R10: ffff88806eeb1400 R11: ffff88806eeb1000 R12: 0000000000000000
R13: 1ffff920008d7eb6 R14: 1ffff920008d7eb5 R15: ffffc900046bf5b0
FS: 000055558b03b500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000558b57fb4008 CR3: 0000000077a82000 CR4: 00000000003506e0
Call Trace:
ext4_xattr_move_to_block fs/ext4/xattr.c:2674 [inline]
ext4_xattr_make_inode_space fs/ext4/xattr.c:2749 [inline]
ext4_expand_extra_isize_ea+0x10ea/0x19e0 fs/ext4/xattr.c:2841
__ext4_expand_extra_isize+0x306/0x400 fs/ext4/inode.c:5953
ext4_try_to_expand_extra_isize fs/ext4/inode.c:5996 [inline]
__ext4_mark_inode_dirty+0x45d/0x6e0 fs/ext4/inode.c:6074
ext4_evict_inode+0x7ed/0xea0 fs/ext4/inode.c:252
evict+0x486/0x870 fs/inode.c:705
ext4_orphan_cleanup+0xbd4/0x1400 fs/ext4/orphan.c:474
__ext4_fill_super fs/ext4/super.c:5608 [inline]
ext4_fill_super+0x5de7/0x66c0 fs/ext4/super.c:5731
get_tree_bdev+0x3e4/0x510 fs/super.c:1591
vfs_get_tree+0x8c/0x280 fs/super.c:1764
do_new_mount+0x24b/0xa40 fs/namespace.c:3377
do_mount fs/namespace.c:3717 [inline]
__do_sys_mount fs/namespace.c:3926 [inline]
__se_sys_mount+0x2da/0x3c0 fs/namespace.c:3903
do_syscall_x64 arch/x86/entry/common.c:51 [inline]
do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:81
entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f0f9279034a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc23fd9278 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007ffc23fd9300 RCX: 00007f0f9279034a
RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ffc23fd92c0
RBP: 0000200000000180 R08: 00007ffc23fd9300 R09: 000000000080078b
R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0
R13: 00007ffc23fd92c0 R14: 0000000000000473 R15: 0000200000000680