055005800200020002000200020002000200020002019200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:43:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000240)=""/4096}, {&(0x7f0000000040)=""/106}], 0x2e, 0xd9f, 0x6) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3) [ 599.444613][T22530] loop4: detected capacity change from 0 to 16382 [ 599.496733][T22530] loop4: p1 p2 p3 p4 [ 599.498119][T22530] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 599.499803][T22530] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 599.501477][T22530] loop4: p4 size 32768 extends beyond EOD, truncated [ 599.586700][T22550] loop2: detected capacity change from 0 to 240 15:43:56 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:43:56 executing program 0 (fault-call:3 fault-nth:88): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:56 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000023d000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x3dc4, &(0x7f00000002c0), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)) r7 = syz_io_uring_setup(0x528e, &(0x7f0000000980), &(0x7f00005c6000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="cd763ad04a5a9f709f854d38ba9e51fc723ec5a14b0252ed3b23fee8d57feddbe7a3ccd428f9240fcfe10d1b4ff2d11f440584d53e2813843fa7a046d98a55e21e447c9dfcc10fefbc7e26b8cac15aae387093669ad4bebcba78d34bc6a3f09b3d448e75d6162b563d5797cf98e8212cd7cb40ea615d539892c76adb65314be538862ac3d2039bb95979e72365cfaca839e651a9609862d137fb689d9b4c23fdb22a85abb23476d2e6bb13f00e77470c0be2bf4d448e710f3c81058794563909fb1712bf341b59a2b3a89210e8f6fde6e77ae803555cef7f4351", 0xda, 0x40008c5, 0xb1f9d2519423d38b, {0x0, r8}}, 0x3ff) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct={0x9, 0x7ff}}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002240)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={r9, 0x200, 0xf4, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a00)={r9, 0x100000001, 0x1, [0x4, 0x3ff, 0xffff, 0x0, 0x4], [0xc8bc, 0x7ff, 0x67, 0x80000001, 0x9, 0x0, 0x9, 0x5, 0x9, 0x8001, 0x1f, 0x8, 0xb1c7463, 0x1ff, 0x2, 0x8, 0x6, 0x80000000, 0x8, 0x6c, 0x2, 0x0, 0x2, 0xa13, 0x80000001, 0x8, 0x7ff, 0x2, 0x4694, 0xffff, 0x7, 0xa, 0xfffffffffffffff8, 0x2, 0x0, 0x80000001, 0x1e5, 0x9, 0x400, 0xf63, 0x5, 0x8001, 0xffffffffffffff18, 0xb, 0x3, 0x16b9, 0x6, 0x100000000, 0x4, 0x1, 0x6, 0x9, 0x1f, 0x4, 0x6, 0x4, 0x9, 0x7fffffff, 0x298, 0x8, 0x6, 0x9, 0x4, 0x7fff, 0x3, 0x81, 0x5, 0x0, 0x0, 0x8001, 0x6, 0x9, 0x10000, 0x9, 0x0, 0x0, 0x2, 0x5, 0x3, 0x100000001, 0x10000, 0x200, 0x1, 0x8, 0xb3, 0x7, 0x1ff, 0x3, 0x2, 0x6, 0x6e83, 0x1, 0x4, 0x3, 0x0, 0x8, 0x2, 0x0, 0x7, 0x1, 0x3a0, 0x6, 0x9, 0x2, 0x297, 0x9, 0x6, 0x8, 0xca9, 0xffffffff, 0x94, 0x9, 0x4, 0x2, 0x4, 0x80000000, 0x0, 0x1, 0x2, 0x96e7, 0x3]}) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:56 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:43:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x4, 0x3f, 0xfc, 0x0, 0x6, 0x10010, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0xfffffffffffffffa, 0x6}, 0x400, 0x4, 0x9, 0x9, 0x6, 0x9, 0x401, 0x0, 0x8}, 0x0, 0x5, r0, 0x2) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:43:56 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002022200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:43:56 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002025200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 600.025343][T22577] FAULT_INJECTION: forcing a failure. [ 600.025343][T22577] name failslab, interval 1, probability 0, space 0, times 0 [ 600.027813][T22577] CPU: 0 PID: 22577 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 600.029631][T22577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.031845][T22577] Call Trace: [ 600.032391][T22577] dump_stack+0x137/0x19d [ 600.033597][T22577] should_fail+0x23c/0x250 [ 600.034781][T22577] __should_failslab+0x81/0x90 [ 600.035682][T22577] ? __io_cqring_fill_event+0xbc/0x350 [ 600.036639][T22577] should_failslab+0x5/0x20 [ 600.037448][T22577] kmem_cache_alloc_trace+0x49/0x310 [ 600.038773][T22577] ? __io_cqring_fill_event+0xbc/0x350 [ 600.039761][T22577] __io_cqring_fill_event+0xbc/0x350 [ 600.041251][T22577] io_req_complete_post+0x58/0x540 [ 600.042580][T22577] ? io_req_complete_post+0x33e/0x540 [ 600.043844][T22577] __io_queue_sqe+0x340/0x360 [ 600.045071][T22577] io_submit_sqe+0x1887/0x3360 [ 600.045958][T22577] io_submit_sqes+0x5bd/0xbd0 [ 600.046276][T22581] loop2: detected capacity change from 0 to 240 [ 600.046797][T22577] __se_sys_io_uring_enter+0x1e1/0xa80 [ 600.048636][T22577] ? fput+0x2d/0x130 [ 600.049535][T22577] __x64_sys_io_uring_enter+0x74/0x80 [ 600.050680][T22577] do_syscall_64+0x4a/0x90 [ 600.051628][T22577] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 600.052906][T22577] RIP: 0033:0x4665d9 [ 600.053501][T22577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.057112][T22577] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 600.059178][T22577] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 600.060531][T22577] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 600.061994][T22577] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.063175][T22577] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 600.064550][T22577] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 [ 600.072641][T22578] loop4: detected capacity change from 0 to 16382 15:43:56 executing program 0 (fault-call:3 fault-nth:89): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 600.101915][T22578] loop4: p1 p2 p3 p4 [ 600.104175][T22578] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 600.108437][T22578] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 600.110998][T22578] loop4: p4 size 32768 extends beyond EOD, truncated 15:43:56 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:43:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r2, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 600.163968][T22604] FAULT_INJECTION: forcing a failure. [ 600.163968][T22604] name failslab, interval 1, probability 0, space 0, times 0 [ 600.166406][T22604] CPU: 1 PID: 22604 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 600.168377][T22604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.171128][T22604] Call Trace: [ 600.172196][T22604] dump_stack+0x137/0x19d [ 600.173124][T22604] should_fail+0x23c/0x250 [ 600.173974][T22604] __should_failslab+0x81/0x90 [ 600.174739][T22604] ? __io_cqring_fill_event+0xbc/0x350 [ 600.175668][T22604] should_failslab+0x5/0x20 [ 600.176397][T22604] kmem_cache_alloc_trace+0x49/0x310 [ 600.177347][T22604] ? __io_cqring_fill_event+0xbc/0x350 [ 600.178562][T22604] __io_cqring_fill_event+0xbc/0x350 [ 600.179379][T22604] io_req_complete_post+0x58/0x540 [ 600.180348][T22604] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 600.181426][T22604] __io_queue_sqe+0x340/0x360 [ 600.182550][T22604] io_submit_sqe+0x1887/0x3360 [ 600.183622][T22604] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 600.184575][T22604] io_submit_sqes+0x5bd/0xbd0 [ 600.185435][T22604] __se_sys_io_uring_enter+0x1e1/0xa80 [ 600.186381][T22604] ? fput+0x2d/0x130 [ 600.186995][T22604] __x64_sys_io_uring_enter+0x74/0x80 [ 600.188260][T22604] do_syscall_64+0x4a/0x90 [ 600.189088][T22604] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 600.190322][T22604] RIP: 0033:0x4665d9 [ 600.191012][T22604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.194101][T22604] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 600.195585][T22604] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 600.196959][T22604] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 600.198758][T22604] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.200059][T22604] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 600.201455][T22604] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 [ 600.212937][T22613] loop2: detected capacity change from 0 to 240 15:43:56 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002048200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:43:56 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xffffff81, 0x3, &(0x7f0000000140)="fecd1376aec729e45429ae92fa0f631da9880a6d2eb59e550bf772c81bb2afda1df61483f48373436a3f47e3aba69bcede746865e7ab92a7e7d78bcb62fc808d1e61164950c98d63e96bd76f838af0656376c7ab2e449a3c184db8e31bd0db5ca3a741b3616a7be69ff923edd1ee6f154ce0d2ba4c1e06e1fd2a8e8b6141c46e883bb49209bdf0bf7b3a382cb0c6bff6c03b44a2bf2dcdc7a1e08888b3cfd0f0cb596ce227b9486afe105876913250ad892fa212c671373f4c0a65d9589f0a153f33f9a017", 0x8, 0x0, 0x1, {0x3}}, 0xffffffe0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8c80, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect(r4, &(0x7f0000001480)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @empty, 0xffffffff}}, 0x80) preadv(r3, &(0x7f0000001340)=[{&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f00000000c0)}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x4, 0x0, 0x33) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001500)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf25020000004400018014000300640101000000000000000000000000000700060064680000060004004e20000014000300fe88000000000000000000000000000108000500020000000800050006000000080005000300000011f4a1058042e3b0ff5cd4fffdf190a8f7bcf5a24bf081f3e82fc14cb6c64e317bbda8102ead3e940a5467d42ccd2cf19d81927a304cf96dbad72e674110931e87748f0ebda5a6556cbe30c44a41e0c3068140add3815e85269234738989e572bec2ef280cc71c4a"], 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 600.283446][T22631] loop4: detected capacity change from 0 to 16382 [ 600.316075][T22631] loop4: p1 p2 p3 p4 [ 600.317354][T22631] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 600.319406][T22631] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 600.321658][T22631] loop4: p4 size 32768 extends beyond EOD, truncated [ 600.332826][T22644] loop2: detected capacity change from 0 to 240 15:43:57 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:43:57 executing program 0 (fault-call:3 fault-nth:90): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:57 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000140)={r1, 0x5, 0x0, [0x7ff, 0x9, 0x8, 0x8000, 0x4c], [0x200, 0x7fffffff, 0x0, 0x10000, 0x3, 0xa00000, 0x400, 0xcb, 0x5, 0x20, 0x7fff, 0x7, 0x53c, 0x9, 0x1, 0xffffffffffffff6d, 0x3, 0x225a, 0x5, 0x6, 0x3f, 0x6, 0x4, 0x215, 0xffffffff, 0x2, 0x3, 0xfffffffffffff800, 0x800, 0xffffffffffff41d4, 0x1, 0x0, 0xfffffffffffffff8, 0x8001, 0x5, 0x9, 0x97ca, 0x2, 0x0, 0x800, 0x9, 0x80, 0x5, 0x13, 0x7, 0xe42, 0x80, 0xdbf, 0x6, 0x7, 0x7, 0x1, 0x100000000, 0x2, 0x6, 0x4, 0x6, 0x1, 0x0, 0x8, 0x8000, 0x0, 0xff, 0x4, 0x8000, 0x100000001, 0x7, 0x7, 0x4, 0x401, 0xa55, 0x3f, 0x1, 0x4, 0xfff, 0x6, 0x1ff, 0x1, 0x3, 0x1, 0x8, 0x4, 0x75, 0x5, 0x1, 0x0, 0x50, 0x6, 0x8000, 0x1, 0x5, 0x8, 0x7fff, 0x2146, 0x9, 0x4, 0x9, 0x6, 0x35b, 0x40, 0x5, 0x495, 0x100000000, 0x7, 0x3b, 0x5, 0x7ab3, 0x5000000, 0x0, 0x80000001, 0x2, 0x7f, 0x3, 0x6, 0xfffffffffffff001, 0x7, 0x8, 0x6, 0x8, 0x1, 0xe1a]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r3, 0xfffffffffffffff8, 0x1) 15:43:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000204c200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:43:57 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:43:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 600.917840][T22676] loop2: detected capacity change from 0 to 240 [ 600.935835][T22678] loop4: detected capacity change from 0 to 16382 [ 600.938596][T22684] FAULT_INJECTION: forcing a failure. [ 600.938596][T22684] name failslab, interval 1, probability 0, space 0, times 0 [ 600.941434][T22684] CPU: 0 PID: 22684 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 600.943176][T22684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.945053][T22684] Call Trace: [ 600.945636][T22684] dump_stack+0x137/0x19d [ 600.946522][T22684] should_fail+0x23c/0x250 [ 600.947874][T22684] __should_failslab+0x81/0x90 [ 600.948881][T22684] ? __io_cqring_fill_event+0xbc/0x350 [ 600.950169][T22684] should_failslab+0x5/0x20 [ 600.951030][T22684] kmem_cache_alloc_trace+0x49/0x310 [ 600.952049][T22684] ? __io_cqring_fill_event+0xbc/0x350 [ 600.953255][T22684] __io_cqring_fill_event+0xbc/0x350 [ 600.954347][T22684] io_req_complete_post+0x58/0x540 [ 600.955358][T22684] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 600.956465][T22684] __io_queue_sqe+0x340/0x360 [ 600.957459][T22684] io_submit_sqe+0x1887/0x3360 [ 600.958451][T22684] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 600.959621][T22684] io_submit_sqes+0x5bd/0xbd0 [ 600.960607][T22684] __se_sys_io_uring_enter+0x1e1/0xa80 [ 600.961834][T22684] ? fput+0x2d/0x130 [ 600.963069][T22684] __x64_sys_io_uring_enter+0x74/0x80 [ 600.964123][T22684] do_syscall_64+0x4a/0x90 [ 600.965105][T22684] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 600.966152][T22684] RIP: 0033:0x4665d9 15:43:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002068200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:43:57 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:57 executing program 0 (fault-call:3 fault-nth:91): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 600.966833][T22684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.970740][T22684] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 600.972393][T22684] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 600.974022][T22684] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 600.975793][T22684] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.977664][T22684] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 600.979339][T22684] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 [ 601.022806][T22678] loop4: p1 p2 p3 p4 [ 601.024863][T22678] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:43:57 executing program 5: r0 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x8a, 0x19}, 0x18) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000003, 0x1010, r1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r1}, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x8000000000000000]}}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x1081, 0x186) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x3, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000040)) 15:43:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CHAR_RAW_RAGET(r1, 0x1263, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) openat$cgroup_ro(r3, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:43:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000206c200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 601.044115][T22678] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 601.049335][T22678] loop4: p4 size 32768 extends beyond EOD, truncated [ 601.057006][T22701] loop2: detected capacity change from 0 to 240 [ 601.106143][T22689] print_req_error: 62 callbacks suppressed [ 601.106153][T22689] blk_update_request: I/O error, dev loop4, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 601.108413][T22713] FAULT_INJECTION: forcing a failure. [ 601.108413][T22713] name failslab, interval 1, probability 0, space 0, times 0 [ 601.112184][T22713] CPU: 1 PID: 22713 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 601.112586][T22682] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 601.113565][T22713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.115923][ T853] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 601.117511][T22713] Call Trace: [ 601.117520][T22713] dump_stack+0x137/0x19d [ 601.119782][ T853] buffer_io_error: 50 callbacks suppressed [ 601.119793][ T853] Buffer I/O error on dev loop4p2, logical block 8064, async page read [ 601.120374][T22713] should_fail+0x23c/0x250 [ 601.121438][T22678] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 601.122214][T22713] __should_failslab+0x81/0x90 [ 601.126215][ T853] blk_update_request: I/O error, dev loop4, sector 16130 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 601.126662][T22713] ? __io_cqring_fill_event+0xbc/0x350 [ 601.126736][T22713] should_failslab+0x5/0x20 [ 601.128773][ T853] Buffer I/O error on dev loop4p2, logical block 8065, async page read [ 601.129881][T22713] kmem_cache_alloc_trace+0x49/0x310 [ 601.129907][T22713] ? __io_cqring_fill_event+0xbc/0x350 [ 601.132256][ T853] blk_update_request: I/O error, dev loop4, sector 16132 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 601.132342][T22713] __io_cqring_fill_event+0xbc/0x350 [ 601.133271][ T853] Buffer I/O error on dev loop4p2, logical block 8066, async page read [ 601.134126][T22713] io_req_complete_post+0x58/0x540 [ 601.135918][ T853] blk_update_request: I/O error, dev loop4, sector 16134 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 601.136842][T22713] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 601.138422][ T853] Buffer I/O error on dev loop4p2, logical block 8067, async page read [ 601.144089][T22713] __io_queue_sqe+0x340/0x360 [ 601.144858][T22713] io_submit_sqe+0x1887/0x3360 [ 601.146081][T22713] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 601.147171][T22713] io_submit_sqes+0x5bd/0xbd0 [ 601.148077][T22713] __se_sys_io_uring_enter+0x1e1/0xa80 [ 601.149247][T22713] ? fput+0x2d/0x130 [ 601.150154][T22713] __x64_sys_io_uring_enter+0x74/0x80 [ 601.151461][T22713] do_syscall_64+0x4a/0x90 [ 601.152475][T22713] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 601.153791][T22713] RIP: 0033:0x4665d9 [ 601.154464][T22713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 601.157854][T22713] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 601.159576][T22713] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 601.160954][T22713] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 601.162750][T22713] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 601.164322][T22713] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 601.165888][T22713] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 [ 601.181398][ T616] blk_update_request: I/O error, dev loop4, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 601.183277][ T616] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 601.185210][ T616] blk_update_request: I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 601.187729][ T616] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 601.189421][ T616] blk_update_request: I/O error, dev loop4, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 601.190541][T22718] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 601.191639][ T616] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 601.191817][ T616] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 601.197487][ T616] Buffer I/O error on dev loop4p4, logical block 8064, async page read [ 601.199099][ T616] Buffer I/O error on dev loop4p3, logical block 8064, async page read [ 601.210188][T22723] loop2: detected capacity change from 0 to 240 15:43:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002074200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:43:58 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:43:58 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:43:58 executing program 0 (fault-call:3 fault-nth:92): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:58 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000023d000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x3dc4, &(0x7f00000002c0), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)) r4 = syz_io_uring_setup(0x528e, &(0x7f0000000980), &(0x7f00005c6000/0x4000)=nil, &(0x7f00006ef000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r5) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:58 executing program 1: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x1) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r3, &(0x7f0000000200)=0x88000800000, 0x12) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000040)=""/106, 0x6a}, {&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000600)=""/193, 0xc1}], 0x6, 0x3ff, 0xef51) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 601.805535][T22747] FAULT_INJECTION: forcing a failure. [ 601.805535][T22747] name failslab, interval 1, probability 0, space 0, times 0 [ 601.805546][T22748] loop2: detected capacity change from 0 to 240 [ 601.809157][T22747] CPU: 0 PID: 22747 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 601.810806][T22747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.813031][T22747] Call Trace: [ 601.813588][T22747] dump_stack+0x137/0x19d [ 601.814468][T22747] should_fail+0x23c/0x250 [ 601.815400][T22747] __should_failslab+0x81/0x90 [ 601.816379][T22747] ? __io_cqring_fill_event+0xbc/0x350 [ 601.817662][T22747] should_failslab+0x5/0x20 [ 601.818296][T22747] kmem_cache_alloc_trace+0x49/0x310 [ 601.819665][T22747] ? __io_cqring_fill_event+0xbc/0x350 [ 601.821276][T22747] __io_cqring_fill_event+0xbc/0x350 [ 601.822234][T22747] io_req_complete_post+0x58/0x540 [ 601.823309][T22747] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 601.824748][T22747] __io_queue_sqe+0x340/0x360 [ 601.825775][T22747] io_submit_sqe+0x1887/0x3360 [ 601.827059][T22747] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 601.828091][T22747] io_submit_sqes+0x5bd/0xbd0 [ 601.829111][T22747] __se_sys_io_uring_enter+0x1e1/0xa80 [ 601.830456][T22747] ? fput+0x2d/0x130 [ 601.831230][T22747] __x64_sys_io_uring_enter+0x74/0x80 [ 601.832549][T22747] do_syscall_64+0x4a/0x90 [ 601.833484][T22747] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 601.834946][T22747] RIP: 0033:0x4665d9 [ 601.835656][T22747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 601.839839][T22747] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 601.842027][T22747] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 601.843565][T22747] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 601.844747][T22747] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 601.846263][T22747] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 601.847732][T22747] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 15:43:58 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 601.858291][T22751] loop4: detected capacity change from 0 to 16382 15:43:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000207a200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:43:58 executing program 0 (fault-call:3 fault-nth:93): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:58 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:43:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000040)={0x2, 0x0, 0x5}) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x80000000}) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:43:58 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 601.909302][T22751] loop4: p1 p2 p3 p4 [ 601.910859][T22751] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 601.913454][T22751] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 601.916469][T22751] loop4: p4 size 32768 extends beyond EOD, truncated 15:43:58 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000040)=0xfffffffa, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$FITHAW(r2, 0xc0045878) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:58 executing program 3: r0 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:43:58 executing program 3: r0 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 602.002307][T22782] FAULT_INJECTION: forcing a failure. [ 602.002307][T22782] name failslab, interval 1, probability 0, space 0, times 0 [ 602.005078][T22782] CPU: 1 PID: 22782 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 602.006616][T22782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.008449][T22782] Call Trace: [ 602.009055][T22782] dump_stack+0x137/0x19d [ 602.009951][T22782] should_fail+0x23c/0x250 [ 602.010697][T22782] __should_failslab+0x81/0x90 [ 602.011669][T22782] ? __io_cqring_fill_event+0xbc/0x350 [ 602.013015][T22782] should_failslab+0x5/0x20 [ 602.014028][T22782] kmem_cache_alloc_trace+0x49/0x310 [ 602.015375][T22782] ? __io_cqring_fill_event+0xbc/0x350 [ 602.016129][T22782] __io_cqring_fill_event+0xbc/0x350 [ 602.017393][T22782] io_req_complete_post+0x58/0x540 [ 602.018202][T22782] __io_queue_sqe+0x340/0x360 [ 602.019123][T22782] io_submit_sqe+0x1887/0x3360 [ 602.020283][T22782] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 602.021481][T22782] io_submit_sqes+0x5bd/0xbd0 [ 602.022229][T22782] __se_sys_io_uring_enter+0x1e1/0xa80 [ 602.023128][T22782] ? fput+0x2d/0x130 [ 602.024018][T22782] __x64_sys_io_uring_enter+0x74/0x80 [ 602.024895][T22782] do_syscall_64+0x4a/0x90 [ 602.025716][T22782] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 602.027061][T22782] RIP: 0033:0x4665d9 [ 602.028108][T22782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 602.032074][T22782] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 602.033641][T22782] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 602.034998][T22782] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 602.036922][T22782] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 602.038810][T22782] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 602.040372][T22782] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 [ 602.047122][T22783] loop2: detected capacity change from 0 to 240 15:43:58 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000040)={0x86b, 0x3d, 0x1, 'queue0\x00', 0x8}) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xcf3]}, {0x0, 0x0, 0x6}}) pwrite64(r0, &(0x7f0000000140)="25167ed62f52e2bfd485a824bc27c7bf33224fb3bdef10c528fe7ecaf8339c843380970eb2238eb735ba6f31c75ae0d5cbd91ae2392a40932b486e7e20bbd67dc3bb7a04932e2a873f8d92ba", 0x4c, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r3 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000700), 0x2, 0x0) sendfile(r2, r3, &(0x7f0000000740)=0x75d, 0x5) 15:43:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020fe200020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 602.065716][T22798] loop4: detected capacity change from 0 to 16382 15:43:58 executing program 0 (fault-call:3 fault-nth:94): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 602.099606][T22798] loop4: p1 p2 p3 p4 [ 602.101270][T22798] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 602.107501][T22798] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 602.112465][T22798] loop4: p4 size 32768 extends beyond EOD, truncated [ 602.129162][ T1033] loop4: p1 p2 p3 p4 [ 602.130511][ T1033] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 602.132385][ T1033] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 602.137097][ T1033] loop4: p4 size 32768 extends beyond EOD, truncated 15:43:58 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0/file0\x00', 0x28401, 0x108) 15:43:58 executing program 3: r0 = socket$inet6(0x10, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:43:58 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 602.167174][T22832] FAULT_INJECTION: forcing a failure. [ 602.167174][T22832] name failslab, interval 1, probability 0, space 0, times 0 [ 602.169665][T22832] CPU: 0 PID: 22832 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 602.171273][T22832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.173132][T22832] Call Trace: [ 602.173654][T22832] dump_stack+0x137/0x19d [ 602.174763][T22832] should_fail+0x23c/0x250 [ 602.175693][T22832] __should_failslab+0x81/0x90 [ 602.176593][T22832] ? __io_cqring_fill_event+0xbc/0x350 [ 602.177377][T22832] should_failslab+0x5/0x20 [ 602.178253][T22832] kmem_cache_alloc_trace+0x49/0x310 [ 602.179160][T22832] ? __io_cqring_fill_event+0xbc/0x350 [ 602.180069][T22832] __io_cqring_fill_event+0xbc/0x350 [ 602.181045][T22831] loop2: detected capacity change from 0 to 240 [ 602.181228][T22832] io_req_complete_post+0x58/0x540 [ 602.183670][T22832] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 602.185016][T22832] __io_queue_sqe+0x340/0x360 [ 602.185956][T22832] io_submit_sqe+0x1887/0x3360 [ 602.186734][T22832] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 602.187703][T22832] io_submit_sqes+0x5bd/0xbd0 [ 602.188849][T22832] __se_sys_io_uring_enter+0x1e1/0xa80 [ 602.190008][T22832] ? fput+0x2d/0x130 [ 602.190686][T22832] __x64_sys_io_uring_enter+0x74/0x80 [ 602.191620][T22832] do_syscall_64+0x4a/0x90 [ 602.192530][T22832] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 602.193501][T22832] RIP: 0033:0x4665d9 [ 602.194325][T22832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 602.197693][T22832] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 602.199080][T22832] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 602.200691][T22832] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 602.202336][T22832] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 602.203443][T22832] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 602.204802][T22832] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 15:43:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000220020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:43:58 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, {0x1, @struct={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:58 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:43:58 executing program 0 (fault-call:3 fault-nth:95): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0xfffffffffffffffe}, 0x0, 0x6, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000240)={0x1, 0x80, 0x2, 0xbc, 0x0, 0xab, 0x0, 0x8, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x4}, 0x10420, 0x0, 0xfffffffc, 0x0, 0x6, 0x7f, 0x80, 0x0, 0x80000000, 0x0, 0xfffffffffffffff8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x80, 0x5, 0x9, 0x1, 0x0, 0x7, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x880, 0x762, 0xffff, 0x2, 0x9, 0x80, 0x2, 0x0, 0x8, 0x0, 0x8000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x81, 0x9, 0x7f, 0x2, 0x0, 0x2000000000000, 0x30040, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x340, 0x2511, 0x0, 0x5, 0x7, 0x401, 0x0, 0x0, 0x2, 0x0, 0x319}, 0xffffffffffffffff, 0xe, r3, 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 602.325519][T22853] loop4: detected capacity change from 0 to 16382 [ 602.371834][T22853] loop4: p1 p2 p3 p4 [ 602.375426][T22853] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 602.376261][T22870] loop2: detected capacity change from 0 to 240 [ 602.380364][T22853] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 602.383043][T22853] loop4: p4 size 32768 extends beyond EOD, truncated [ 602.395434][T22869] FAULT_INJECTION: forcing a failure. [ 602.395434][T22869] name failslab, interval 1, probability 0, space 0, times 0 [ 602.398551][T22869] CPU: 1 PID: 22869 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 602.400066][T22869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.402279][T22869] Call Trace: [ 602.402773][T22869] dump_stack+0x137/0x19d [ 602.403587][T22869] should_fail+0x23c/0x250 [ 602.404384][T22869] __should_failslab+0x81/0x90 [ 602.405221][T22869] ? __io_cqring_fill_event+0xbc/0x350 [ 602.406341][T22869] should_failslab+0x5/0x20 [ 602.407424][T22869] kmem_cache_alloc_trace+0x49/0x310 [ 602.408298][T22869] ? __io_cqring_fill_event+0xbc/0x350 [ 602.409491][T22869] __io_cqring_fill_event+0xbc/0x350 [ 602.410615][T22869] io_req_complete_post+0x58/0x540 [ 602.411551][T22869] __io_queue_sqe+0x340/0x360 [ 602.412314][T22869] io_submit_sqe+0x1887/0x3360 [ 602.413220][T22869] io_submit_sqes+0x5bd/0xbd0 [ 602.413962][T22869] __se_sys_io_uring_enter+0x1e1/0xa80 [ 602.414797][T22869] ? fput+0x2d/0x130 [ 602.415430][T22869] __x64_sys_io_uring_enter+0x74/0x80 [ 602.416308][T22869] do_syscall_64+0x4a/0x90 [ 602.417137][T22869] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 602.418115][T22869] RIP: 0033:0x4665d9 [ 602.418842][T22869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:43:58 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x46c9, &(0x7f0000000040)={0x0, 0xd891, 0x9, 0x1, 0x342}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000250020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 602.421928][T22869] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 602.423213][T22869] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 602.424714][T22869] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 602.426106][T22869] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 602.427714][T22869] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 602.429043][T22869] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 15:43:58 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:43:58 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)) io_uring_enter(r0, 0x19d2, 0x9426, 0x1, &(0x7f0000000040)={[0x76]}, 0x8) 15:43:58 executing program 0 (fault-call:3 fault-nth:96): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:59 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0xa66bc000) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfff}, 0x0, 0x3, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000100)=0x7ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40aa00, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000240)='\xb8\xecE4%\x8a\x8a\xf2\xb5\xad\b\x9c(\x804\xc9f<3*\x97\xd4q\x14-\x01\x19\x9f`\xe8\"\xb3\x96B\xe5)m\xcb\xea\a\a\xdbO\xca\xd6\x01\x16T\x16\xbf\x1f\xf3D\'t\x91%\xbb\x82\x1b\xe4G\x15\xc7\xa4\x7f\b\x97\xcd\xef\xb7B\x8a\xee\x1dt\xf3\xaa\xe5\x06\xb0\xa6\x00\xdc\xb1\x95F\x10\x11~x\xe4K\x97c{\r \xb3\x99\x15u\xf3-\xe2\x90)x\xb4\x9e\x9d\xad\xe1\xd1^\xab\xc8\xe7#w4\xdb\xe0\x11\xbe\xd1\x17\xad\xd4[M\xcb') preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:43:59 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="f925ae9d9b5c3af41c71dff8c508f5d406177dfcfb3de0d7025a83e8f4a0e1d7c5a90b553b885c4ac3958b4f3b5f8e75c293601c7e612c38bfc95a6bc65d99506acf1d1b3c9dd01c48a02f79bc51eff427d9", 0x52}, {&(0x7f0000000140)="96d2ddbdfea64ffe93b55261af2291939e0d3b7c16e52d34ea84542798a88519e3fe01afa31a0f7e636f82ce98fa2958cb8bcf2810875efcae5edc9f9a32169a8f1e15c58a73fbcbd714511e51c483335af283", 0x53}, {&(0x7f00000001c0)="ca30ce2bbfae9ba086ba47d387be6d8b6e8c5fcf25bda4cd0e09aa4e637f24feadde9a945125a4a7adb7f853cacacea64bc2fdd1e2779bbfed5753fd0a6d8647fc87ad19e306ad23bd98a77c9f656b36dcb60102e11882ba505389810f51f73851906b1422146d2741422c02a1b1d5352a52ce2890532c264c50837c6010889d8873f3d2f8cb82341da7a146", 0x8c}, {&(0x7f0000000280)="47cf5633f5bd3c363c93d6ece9627477bffc7f6a7d370a3e0e7468bf8298dd684a1769935fa65520cd834368425e195363e3518a6d3abd1db858f7ae13d0965a7145d1aedb88d1bdbe0639a17cc5733bf9be51c9d08c3b716574a9618666b767ae9e2ca4ab2090b3331c72f642ed2668ead254f24e3da65ab00d4ef2a6084c7c27d8a214ac3c457ff29d4ab36b0d5341e5bf5f37ae38c1ba85779916925020e9bbc2af9cd3690ce04ac28335cb7d01b3f1a01a72e30495a4f83e682d90eee7f75a8f58d72f8043bf273bc2ac8f98e13fbc1694", 0xd3}, {&(0x7f0000000380)="3786f9bb035cc7084478b16fca77dd4ae5a4ba1f823d07096a0350190baf58f40f76cd0c623b3bdc82fe03ad331dd41582487efe5a75dc43bcf9dc0bc1e4ed8a6172a2361d0748c48ecf06deab10bc765db9dca9d1a2b39e0abc60101f5f6765bdd21dc8c1244044b99d3c5883336232e3c873f3e053f8d76521a9aca55f249e1b32d93d6766d93c8fcea6c01bea193b5b598da111797ecf07e7e16bf01b99d2fa60a086b345d300ebcdb8e8660944b0edc8ec44ac5c2d221e32a95cc32768d3d4ed040b8048b41ab06d516422", 0xcd}], 0x5, 0xf) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 602.564493][T22905] FAULT_INJECTION: forcing a failure. [ 602.564493][T22905] name failslab, interval 1, probability 0, space 0, times 0 [ 602.567171][T22905] CPU: 0 PID: 22905 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 602.568556][T22905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.569935][T22904] loop4: detected capacity change from 0 to 16382 [ 602.570085][T22905] Call Trace: [ 602.570094][T22905] dump_stack+0x137/0x19d [ 602.573162][T22905] should_fail+0x23c/0x250 [ 602.573835][T22905] __should_failslab+0x81/0x90 [ 602.574811][T22905] ? __io_cqring_fill_event+0xbc/0x350 [ 602.575277][T22902] loop2: detected capacity change from 0 to 240 [ 602.575835][T22905] should_failslab+0x5/0x20 [ 602.577503][T22905] kmem_cache_alloc_trace+0x49/0x310 [ 602.579040][T22905] ? __io_cqring_fill_event+0xbc/0x350 [ 602.579983][T22905] __io_cqring_fill_event+0xbc/0x350 [ 602.581071][T22905] io_req_complete_post+0x58/0x540 [ 602.581856][T22905] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 602.582954][T22905] __io_queue_sqe+0x340/0x360 [ 602.584209][T22905] io_submit_sqe+0x1887/0x3360 [ 602.585361][T22905] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 602.586897][T22905] io_submit_sqes+0x5bd/0xbd0 [ 602.588037][T22905] __se_sys_io_uring_enter+0x1e1/0xa80 [ 602.589381][T22905] ? fput+0x2d/0x130 [ 602.590413][T22905] __x64_sys_io_uring_enter+0x74/0x80 [ 602.591629][T22905] do_syscall_64+0x4a/0x90 [ 602.592672][T22905] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 602.594691][T22905] RIP: 0033:0x4665d9 [ 602.595841][T22905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 602.599157][T22905] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 602.600664][T22905] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 602.602271][T22905] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 602.604115][T22905] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 602.605784][T22905] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 602.608174][T22905] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 15:43:59 executing program 0 (fault-call:3 fault-nth:97): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000400020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 602.652181][T22904] loop4: p1 p2 p3 p4 [ 602.654509][T22904] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 602.657222][T22904] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 602.660441][T22904] loop4: p4 size 32768 extends beyond EOD, truncated [ 602.758892][T22928] FAULT_INJECTION: forcing a failure. [ 602.758892][T22928] name failslab, interval 1, probability 0, space 0, times 0 [ 602.760999][T22928] CPU: 0 PID: 22928 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 602.762860][T22928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.764673][T22928] Call Trace: [ 602.765333][T22928] dump_stack+0x137/0x19d [ 602.766309][T22928] should_fail+0x23c/0x250 [ 602.767170][T22928] __should_failslab+0x81/0x90 [ 602.768313][T22928] ? __io_cqring_fill_event+0xbc/0x350 [ 602.769266][T22928] should_failslab+0x5/0x20 [ 602.770069][T22928] kmem_cache_alloc_trace+0x49/0x310 [ 602.770951][T22928] ? __io_cqring_fill_event+0xbc/0x350 [ 602.771980][T22928] __io_cqring_fill_event+0xbc/0x350 [ 602.772959][T22928] io_req_complete_post+0x58/0x540 [ 602.774017][T22928] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 602.775154][T22928] __io_queue_sqe+0x340/0x360 [ 602.776261][T22928] io_submit_sqe+0x1887/0x3360 [ 602.777485][T22928] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 602.778763][T22928] io_submit_sqes+0x5bd/0xbd0 [ 602.779780][T22928] __se_sys_io_uring_enter+0x1e1/0xa80 [ 602.780699][T22928] ? fput+0x2d/0x130 [ 602.780725][T22935] loop2: detected capacity change from 0 to 240 [ 602.781500][T22928] __x64_sys_io_uring_enter+0x74/0x80 [ 602.784181][T22928] do_syscall_64+0x4a/0x90 [ 602.785122][T22928] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 602.786565][T22928] RIP: 0033:0x4665d9 [ 602.787546][T22928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 602.792085][T22928] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 602.793569][T22928] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 602.795452][T22928] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 602.796966][T22928] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 602.798358][T22928] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 602.800250][T22928] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 15:43:59 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:43:59 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:43:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000240)=""/65, 0x41}, {&(0x7f00000002c0)=""/123, 0x7b}, {0xfffffffffffffffc}], 0x4, 0x9, 0x80000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:43:59 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000140)="025659272c995ab07f3074c28a5d8497dd1be346e28296334e056cae4875634ce9710595026652bf462c42268f0a5fc903ef8c517218d607d2d8104e1217dd92d090cf6425605f46a863c9fa8a5b4d00dac3a60617a5d61441aff3d6930cc3c6050c1bc3f6c09e169abbc7219649bf32d1e385fa1fd6d34465743fe7b3de48efba92e31e6e4c3d8451cd5625b04b562b2eb517e61a952645f4aaadf0ffe09a1c61d458c6af2951c84eb44eca252a982224796acdf56094125b3751fe4afe50c2eef3c7e4", 0xc4}, {&(0x7f0000000240)="a3ec534fb00a73d44402cda621e3f2bf2cc37c90787a0a9faf3a9193f43dadfd0e2856a92ca32df25bf4ee35308d40c88b9c230f46745d1c2e0926375b69db948f72faf24802afc76c6a5c0766761f3f62fcfc584c659e09c0dd5c0e809095eea4878fea2c0d80239c0da3f77c2e19f9a2e030e804d52cddc8d5e33a4fd5a8e3530985c9b16884fae12774890dcc52f04e2ea0bd5852628acd449aeae1c9c3356ff6816b096aba3791fd8c06d7c65287a65b136c37eb0e260a17759da57c5cdeddae68c459f263373cff3160f081a98719074fd00458ce1f6bae763315418f726a01ee87b8b2e4cd247dd4778fe3b67215571eba2c", 0xf5}, {&(0x7f0000000340)="0f80dd56149e9814331c1897611ea966b580c11190a5092f3a5d8990a7333dd50727ca409a0136eb9692e5263d1dda2e3dcb6c6ad05ca387399df6fd69488e472db64d7bd74106be979283047b3790f6ee2969c6bd0eaeae947b3fb2daae0cf3775933484b13d34c62812ea5b4108d07dd95ca601a01d94a0954f5e14e4edc3a9f6cc987d6be53ffb5038878a076e3a550cc14d91fa077f3755b7f3386299748fd38809cb5a627036f7fa26347b6d6f967e928e1cc645ff783746330b47fce0621020221093e1812ced39d39fb414bd729f9a4c70fbd5364b0b6bfb7d771cff507cdce958550e1", 0xe7}, {&(0x7f0000000040)="d04a5b60a5cefa2e547d4abb18a4b31af4c51ac476aad33199976d4f82cd0dd01e3f50763568b8f205d775ea72dd79a75cff4b406699214864e07fdce28e8007b3af40f38a6803bc3fb15b2f287bdf403fd6251db8f6901224331afaad6cd5eeecc12394e1b16ba7211b7137d61919cfe4824f798753e5e2f14dabac", 0x7c}, {&(0x7f0000000440)="e8caefbc4e8250f545ff542c3ed30010de11a720bfaf3d426e29bf9ec7fee77360fe21847c40372e8da2f9151687de9bd813cfedfe9212ae76037043fa3506656f4dc73536f004b3593fe713d4e68a006bd7efc8e6c097d6c3f7a8716253047e135f8f3d34a36a14c4f97f4f2237bbf2ffbca20e271e14ad0c33f39cb7a1a76e368071205c6cb11d7c56dc62d8412f1ed039299cbdea7313951936", 0x9b}, {&(0x7f0000000500)="879a3586fe30d5fc07a85f38715ebfd72928203c552b5f9c3f7f2e90aa54d1c84f8ce26cb5f2ae78a39952a854612964fb95cfd8b8070e13f5177aef55f2eaa1937dcec8f8880aeadc746489b316d06cc2c3f3a81837597bf03149fd35b90a4c0935326745a0f9e03dd3a6f381f2b4dc3eaf25787223f9248977c085995563296a92f5054fc4fbeeec08afd9fa1b424e3884695d686a13c46dee7c097a3b1cd41f701fdd8e067ef4813b173dc17ff1a9c981a42128754129675ee6a28bfbe621480b2f118cff56ee9d2da12411aa4bad5c5973f4aedd1a6e42d7dd4ccf3da221ecbf7b775c18f2cd6ee0c2e6539413ab", 0xf0}, {&(0x7f0000000600)="69079ab7a469ea9e190c8289dbb0afc03381df73b6525c3b76e69ba60574fbfe653a7dfedb1d09ab8141af77d2a5fcc65938977637c63924f5a067a83679064c994327c2a3807067e82ea54319947866193318addd0d246cf839100a8f55ad7194e2bdfeb4be0e0efcf602999e7992e233f98f6cc134e33721721f2be7c6b09131b286079201863786725ed5425c4663d4b966ae622845b772e0c97edf08abd2cb2b6c7cf17eff2ce2f3f4c8ae2426702b81fd4bc430140f987ab11135eeee55a22c088ed1d9632c65e86e844344b24c94de77f8921fad5e3acec9cee632271dd6324bae93300c5760c3d8a832", 0xed}], 0x7, 0x4) 15:43:59 executing program 0 (fault-call:3 fault-nth:98): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000780020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:43:59 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r4, 0x0, 0x0}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x10900, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r5, 0x3, {0x0, r6}, 0x0, 0x0, 0x0, {0x0, 0x0, r7}}, 0x48a) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 603.300081][T22952] loop4: detected capacity change from 0 to 16382 [ 603.306326][T22956] FAULT_INJECTION: forcing a failure. [ 603.306326][T22956] name failslab, interval 1, probability 0, space 0, times 0 [ 603.308715][T22956] CPU: 0 PID: 22956 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 603.310648][T22956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.312399][T22956] Call Trace: [ 603.312910][T22956] dump_stack+0x137/0x19d [ 603.313707][T22956] should_fail+0x23c/0x250 [ 603.314556][T22956] __should_failslab+0x81/0x90 [ 603.315540][T22956] ? __io_cqring_fill_event+0xbc/0x350 [ 603.316612][T22956] should_failslab+0x5/0x20 [ 603.317449][T22956] kmem_cache_alloc_trace+0x49/0x310 [ 603.318266][T22956] ? __io_cqring_fill_event+0xbc/0x350 [ 603.319576][T22956] __io_cqring_fill_event+0xbc/0x350 [ 603.320470][T22956] io_req_complete_post+0x58/0x540 [ 603.321295][T22956] __io_queue_sqe+0x340/0x360 [ 603.322176][T22956] io_submit_sqe+0x1887/0x3360 [ 603.323342][T22956] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 603.324906][T22956] io_submit_sqes+0x5bd/0xbd0 [ 603.325692][T22956] __se_sys_io_uring_enter+0x1e1/0xa80 [ 603.326637][T22956] ? fput+0x2d/0x130 [ 603.327284][T22956] __x64_sys_io_uring_enter+0x74/0x80 [ 603.328123][T22956] do_syscall_64+0x4a/0x90 [ 603.328921][T22956] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 603.330045][T22956] RIP: 0033:0x4665d9 [ 603.330735][T22956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 603.334336][T22956] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 603.335940][T22956] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 603.337665][T22956] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 603.338970][T22956] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 603.340460][T22956] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 603.341750][T22956] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 [ 603.343109][T22962] loop2: detected capacity change from 0 to 240 15:43:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020fffe0020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 603.369082][T22952] loop4: p1 p2 p3 p4 [ 603.370623][T22952] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 603.372888][T22952] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 603.374660][T22952] loop4: p4 size 32768 extends beyond EOD, truncated [ 603.390114][T22971] __nla_validate_parse: 54 callbacks suppressed [ 603.390128][T22971] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. 15:43:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="9272207f00a78553e6e970e320ffa18ed89c15859483a0610ed2fb6f53f08db6f3ba64dc99763a", @ANYBLOB="e6f7935271ed5390d9a0e5498c67ce0df7f6f2a34b4a94533deb57516d75f921f400e5146a211968c01b2ed7d9e3123c659ac95a89909b894666af5307e00d9c", @ANYRES16=r2], 0xda00) write$cgroup_int(r1, &(0x7f0000000040), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:43:59 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:43:59 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:43:59 executing program 0 (fault-call:3 fault-nth:99): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 603.504724][T22995] loop2: detected capacity change from 0 to 240 [ 603.511061][T23001] FAULT_INJECTION: forcing a failure. [ 603.511061][T23001] name failslab, interval 1, probability 0, space 0, times 0 [ 603.513585][T23001] CPU: 1 PID: 23001 Comm: syz-executor.0 Not tainted 5.13.0-rc7-syzkaller #0 [ 603.515202][T23001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.517131][T23001] Call Trace: [ 603.517649][T23001] dump_stack+0x137/0x19d [ 603.518389][T23001] should_fail+0x23c/0x250 [ 603.519150][T23001] __should_failslab+0x81/0x90 [ 603.519966][T23001] ? __io_cqring_fill_event+0xbc/0x350 [ 603.520749][T23001] should_failslab+0x5/0x20 [ 603.522153][T23001] kmem_cache_alloc_trace+0x49/0x310 [ 603.523347][T23001] ? __io_cqring_fill_event+0xbc/0x350 [ 603.524550][T23001] __io_cqring_fill_event+0xbc/0x350 [ 603.525803][T23001] io_req_complete_post+0x58/0x540 [ 603.526708][T23001] __io_queue_sqe+0x340/0x360 [ 603.527720][T23001] io_submit_sqe+0x1887/0x3360 [ 603.528472][T23001] ? kmem_cache_alloc_bulk+0x28c/0x340 [ 603.529767][T23001] io_submit_sqes+0x5bd/0xbd0 [ 603.531040][T23001] __se_sys_io_uring_enter+0x1e1/0xa80 [ 603.532013][T23001] ? fput+0x2d/0x130 [ 603.532646][T23001] __x64_sys_io_uring_enter+0x74/0x80 [ 603.533631][T23001] do_syscall_64+0x4a/0x90 [ 603.534334][T23001] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 603.535329][T23001] RIP: 0033:0x4665d9 [ 603.535960][T23001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 603.539487][T23001] RSP: 002b:00007f549e383188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 603.540739][T23001] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 603.542261][T23001] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000003 [ 603.543799][T23001] RBP: 00007f549e3831d0 R08: 0000000000000000 R09: 0000000000000000 [ 603.545460][T23001] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000003 [ 603.546828][T23001] R13: 00007ffc95c5e94f R14: 00007f549e383300 R15: 0000000000022000 [ 603.576457][T22997] loop4: detected capacity change from 0 to 16382 [ 603.611475][T22997] loop4: p1 p2 p3 p4 [ 603.612851][T22997] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 603.614869][T22997] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 603.616832][T22997] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:00 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:00 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x8e01) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r2, 0x1) 15:44:00 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020000d0020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x56, 0x2, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108a9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f00000004c0)='cpu.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountstats\x00') openat$cgroup_ro(r2, &(0x7f0000000480)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0xeb99, 0x0, &(0x7f0000000180), 0xa0, &(0x7f00000002c0)=ANY=[@ANYBLOB='memory.events\x00,uid=', @ANYRESDEC=r5, @ANYBLOB="2c66736d61676863393078303030303030303030303001000000392c386c3c6a181c7375626a5f726f6c653d2d2a252c666f776e65723c", @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC=0x0, @ANYBLOB=',dont_appraise,fsname=memory.events\x00,permit_directio,\x00']) unlinkat(r6, &(0x7f0000000400)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:00 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:00 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:00 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x3, 0x0, 0x0) [ 604.222627][T23033] loop2: detected capacity change from 0 to 240 15:44:00 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020000e0020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:00 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r2) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={r0, r2, 0xffffffffffffffff}, 0xc) r3 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r3, 0x302, 0x0, 0x3, 0x0, 0x0) [ 604.249544][T23034] loop4: detected capacity change from 0 to 16382 [ 604.262111][T23045] loop1: detected capacity change from 0 to 117 [ 604.280812][T23034] loop4: p1 p2 p3 p4 [ 604.284498][T23034] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 604.287252][T23034] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 604.290972][T23034] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:00 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x312a, &(0x7f0000000200)={0x0, 0xb2e6, 0x20, 0x100000, 0x3ca}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r2, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 604.305305][T23062] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 604.318885][T23029] loop1: detected capacity change from 0 to 117 [ 604.324433][T23069] loop2: detected capacity change from 0 to 240 15:44:00 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000220020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:00 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 604.424862][T23090] loop4: detected capacity change from 0 to 16382 [ 604.428704][T23094] loop2: detected capacity change from 0 to 240 [ 604.476546][T23090] loop4: p1 p2 p3 p4 [ 604.477909][T23090] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 604.479841][T23090] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 604.482178][T23090] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:01 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:01 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x3, 0x0, 0x3, 0x0, 0x0) 15:44:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000250020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:01 executing program 5: mmap(&(0x7f0000550000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x899ab000) fdatasync(0xffffffffffffffff) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) preadv(r0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000001140)=""/172, 0xac}, {&(0x7f0000001200)=""/160, 0xa0}, {&(0x7f00000012c0)=""/110, 0x6e}, {&(0x7f0000001340)=""/19, 0x13}, {&(0x7f0000001380)=""/187, 0xbb}], 0x7, 0x9, 0x1f) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r1, &(0x7f0000000040)='./file0/file0\x00', 0x21a1c2, 0x20) io_uring_enter(r0, 0x302, 0x10000000, 0x3, 0x0, 0x0) 15:44:01 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000780020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 605.103924][T23120] loop2: detected capacity change from 0 to 240 [ 605.119104][T23121] loop4: detected capacity change from 0 to 16382 15:44:01 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x4, 0x0, 0x3, 0x0, 0x0) 15:44:01 executing program 5: r0 = syz_io_uring_setup(0x5904, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000140)={0x0, 0x1, 0x8}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0xfffffffffffffffc, 0x2, 0x0, [0x0, 0x0, 0x400000000, 0x1]}, {0x0, @struct, r1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40]}, {0x0, @struct={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x5]}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0x7, 0x62f, 0xf14, 0x6, 0xe8cb}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:01 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x5, 0x0, 0x3, 0x0, 0x0) 15:44:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) r5 = openat$incfs(r4, &(0x7f0000000040)='.pending_reads\x00', 0x88801, 0x192) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'io'}, {0x2d, 'rdma'}, {0x2d, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'io'}, {0x2b, 'pids'}]}, 0x21) 15:44:01 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 605.171742][T23121] loop4: p1 p2 p3 p4 [ 605.174548][T23121] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 605.180062][T23121] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 605.192282][T23121] loop4: p4 size 32768 extends beyond EOD, truncated [ 605.205842][T23148] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 605.247808][T23153] loop2: detected capacity change from 0 to 240 [ 605.363255][T23172] loop4: detected capacity change from 0 to 16382 [ 605.423865][T23172] loop4: p1 p2 p3 p4 [ 605.428413][T23172] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 605.444129][T23172] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 605.463903][T23172] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:02 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:02 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000fe0020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:02 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage=0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @struct={0x5, 0x2}, 0x0, 0xfffffffc, [0x0, 0x4]}, {0x0, @struct={0x0, 0xfffffffc}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @usage, 0x401, 0x10}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0xfffffffe, [0x1, 0x0, 0x0, 0x0, 0x2, 0x1000000]}}) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r3, 0x0, 0x0}, 0x0) r4 = openat2(r3, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)={0x2000, 0x10, 0x4}, 0x18) io_uring_enter(r4, 0x67cd, 0x5719, 0x0, &(0x7f0000000340)={[0x8]}, 0x8) syz_io_uring_setup(0x105, &(0x7f0000000040)={0x0, 0x68c4, 0x10, 0x0, 0x133, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x50c0}, 0x1}, 0x5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write(r6, &(0x7f00000001c0)="91b7954ae535a597bf3e53b8f191f4c792d72c7c77d3929847dab9c20cb7bfb4b656758d47671ad7f638752e6d564d98f80f9e17e32ff312c2bf95418a47dfbc03189394c73381fe187da44b89c1916c609a893ea51046e4b7c7e82714bd9ec2a4b7e2c4f1b66ef4376237f1e7fb4c08cc3b49e6df4ae42bfb1a96275a02286f6ebe3f1511ed8fca0ff79e", 0x8b) 15:44:02 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x6, 0x0, 0x3, 0x0, 0x0) 15:44:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb58}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1, 0x4, 0x7bcc) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:02 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 606.025050][T23200] loop4: detected capacity change from 0 to 16382 [ 606.031777][T23199] loop2: detected capacity change from 0 to 240 15:44:02 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000feff20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:02 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x7, 0x0, 0x3, 0x0, 0x0) 15:44:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @empty}, {0x6, @multicast}, 0x28, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team_slave_1\x00'}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x27, @usage, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x6, [0x3ff, 0x3, 0x0, 0x0, 0xffffffffffffffff]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, @usage, 0xfffffffc, 0x0, [0xfffffffffffffffe]}, {0x1, @struct, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x400]}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 15:44:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'memory.events\x00'}, {0x20, 'memory.events\x00'}], 0xa, "c465597a5c1531905dc9b614cd410de1cdae39250066d697f5265397b2de8f9937"}, 0x4a) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 606.075787][T23215] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 606.091760][T23200] loop4: p1 p2 p3 p4 [ 606.097582][T23200] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:02 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x8, 0x0, 0x3, 0x0, 0x0) 15:44:02 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x6) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 606.151077][T23200] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 606.167750][T23200] loop4: p4 size 32768 extends beyond EOD, truncated [ 606.174664][T23230] loop2: detected capacity change from 0 to 240 15:44:03 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:03 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x9, 0x0, 0x3, 0x0, 0x0) 15:44:03 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020000d004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = gettid() r6 = openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x105000, 0x20) r7 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x3, 0x81, 0xff, 0x81, 0x0, 0x6, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3ff, 0x4eb6}, 0x44001, 0x2, 0x400, 0x2, 0x6, 0x4724, 0xfffd, 0x0, 0x5, 0x0, 0x2}, r6, 0x2, r3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xff, 0x20, 0x3f, 0x7f, 0x0, 0x80000001, 0x2480f, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1c1c, 0x4, @perf_bp={&(0x7f0000000180)}, 0x55221, 0x3ff, 0x2, 0x4, 0x19, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x3}, r5, 0xc, r7, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$getown(r2, 0x9) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:03 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r7, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) syz_io_uring_setup(0x5ad0, &(0x7f00000003c0)={0x0, 0x408b, 0x10, 0x3, 0x35a}, &(0x7f0000002000/0x1000)=nil, &(0x7f00006c8000/0x12000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r10 = syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0/file0\x00', 0xe57, 0x2, &(0x7f0000000680)=[{&(0x7f0000000540)="cc6110f9a1754030bcf6379b7d381ae3504eecc4662a979a77b0265cb45c6190d71939ef6133c836d81c00c5a3104fe77b933612c8f26434ce083ae86eda3bb6564f8c76aeb519288bf75c5f94118933e4c2e6ead7fd726e3f89ab0b9d40ebd759abd3eacbf430bdd520ad5824fde015988cce204044abfe0f2583b1c8dc1dfc88def5", 0x83, 0x5}, {&(0x7f0000000600)="24eb6dbe88e124166119e44209478846d55e7674baef5f64e7765f0f1f9d7b0d6e3036bac5955dabe1fe5f3c728dee88c358abce83e1fb18e27f70a15254a75d9a68df4c6cd814331d22e856ab02c887863bb14a920f1833d0677265ea449c210d046a28f132a51164c2e0f0745e47dfb6cb4568a474a3", 0x77, 0x80}], 0x10000, &(0x7f00000006c0)={[{@numtail}, {@shortname_win95}], [{@hash}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f0000000700)=0x3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futimesat(r7, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)={{r8, r9/1000+10000}, {r11, r12/1000+60000}}) ftruncate(r3, 0x2) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x8010, r3, 0x8000000) syz_io_uring_submit(r13, r1, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7fffffff) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r6, 0x0, 0x0}, 0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r14}}, 0x10001) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:03 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) 15:44:03 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa, 0x0, 0x3, 0x0, 0x0) [ 606.892203][T23262] loop4: detected capacity change from 0 to 16382 [ 606.927537][T23272] loop2: detected capacity change from 0 to 240 15:44:03 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb, 0x0, 0x3, 0x0, 0x0) 15:44:03 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020000e004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 606.950008][T23275] loop5: detected capacity change from 0 to 7 [ 606.959582][T23262] loop4: p1 p2 p3 p4 [ 606.971063][T23262] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 606.979311][T23262] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 606.987196][T23287] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000592000/0x4000)=nil, 0x4000, 0x180000b, 0x4000010, r3, 0xae72c000) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) syncfs(r4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 606.998368][T23262] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:03 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) 15:44:03 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xc, 0x0, 0x3, 0x0, 0x0) [ 607.092331][T23311] loop2: detected capacity change from 0 to 240 [ 607.137445][T23310] loop4: detected capacity change from 0 to 16382 [ 607.179900][T23310] loop4: p1 p2 p3 p4 [ 607.186006][T23310] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 607.196442][T23310] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 607.204043][T23310] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:04 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:04 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) flistxattr(r0, &(0x7f0000000140)=""/255, 0xff) 15:44:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200220004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:04 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xd, 0x0, 0x3, 0x0, 0x0) 15:44:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x20000000ff, 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:04 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) 15:44:04 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xe, 0x0, 0x3, 0x0, 0x0) 15:44:04 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1e, 0xbb00, 0x53) io_uring_enter(r1, 0x808, 0xbec2, 0x3, &(0x7f0000000040)={[0x8]}, 0x8) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 607.824675][T23362] loop4: detected capacity change from 0 to 16382 [ 607.824857][T23366] loop2: detected capacity change from 0 to 240 [ 607.867553][T23362] loop4: p1 p2 p3 p4 [ 607.872440][T23362] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 607.902517][T23362] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0x2000003, 0x100010, r1, 0x90adf000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xffffffff00000002, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:04 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200320004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:04 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xf, 0x0, 0x3, 0x0, 0x0) [ 607.914352][T23388] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 607.918201][T23362] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:04 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct={0x3, 0x1}}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct={0x8001, 0xfffffffc}}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r2 = syz_open_dev$rtc(&(0x7f00000000c0), 0x8000, 0x80400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000180)=@srh={0x2c, 0xc, 0x4, 0x6, 0x2, 0x40, 0x8, [@local, @remote, @rand_addr=' \x01\x00', @loopback, @rand_addr=' \x01\x00', @empty]}, 0x68) r4 = memfd_create(&(0x7f0000000140)='\x00', 0x0) dup3(r2, r4, 0x80000) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 608.056625][T23414] loop2: detected capacity change from 0 to 240 15:44:05 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:05 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x10, 0x0, 0x3, 0x0, 0x0) 15:44:05 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) 15:44:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000fc0)='cpuacct.usage_sys\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000a40)={r4, 0x7f, 0x7}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000e40)="dbe2160e64148e4c6ea49220dd3ecf36948d71fc917cfb7b5043c1d977c707fdb7fec65c555731bae412afa5c0ea3ec473f9f102457d4ee5c81e8e7366f7e731d470209676424c685fba830f60d904ee281c6a65fcd7173a5fc8b066b2066c329b6f75b6bf4705335352b7828246dedc2610d54a47123de277d38768", 0x7c}, {&(0x7f0000000ec0)="426f5016811ce54a4baa93cda8483d6f806c553117daae600765478c070b00f8ffffffffffffba925b85e95633c62239a8264b3c4bc71c7f74444088857b47aec5af35c44670c97802ad917d35d70147380c2b8d4bd5ce7d57f4e629a942051dc04d42bebd3666d528f903715b4c820205ca52e9dcdac920f618d5b6a255e69d1f4555f6c4b4b004178f1bff4a389152bb7cb2e722353f6aa96f662c8bdb91eb0292eda4a1f1ade4ace5aac7e1e6569a806f9d3240608f87f9ea5e4a62120cc8717370a37ef6882eb20ad4667149a47c0c50059a68d30bd4feeaaaec00"/236, 0xec}, {&(0x7f0000001040)="85fd9bcea5457430c1e8375f99be8f719f17147d05eab7f7520b0560f26a51fdaa09396b97f05590aa51dda0b07b86cee995c617eb4de011ac6f017ea0872897383fafadaf22863a6f1a618cf2dbc3cd10ea189bdf9558ac2f69baf73ccbad31b30f66997e443d587eb045b05be6752ee0dd9d0480beffcf8d636d831a294bcc26706702ed1c3da87168a990be516c5d073fc951b2f2cf43e8e2fa59e604b97751a62460849d90b77e951d6760d8ff501a9475b2a6ac43945115aa81b66d47ccb596c6a34bd945e07965eda3c289a454897f079384d49c579cf444af18da1099c2022be4ce871341ab8464e2527d3dfb612bfb9ca5eaa6fbe6045aa8cd351310067f4b6706dd1a2a93d45961382e7eda5a010d32a2f8090b61af10558abd12b2317ce725f74b0b38b2e5538d94cad3ae24636e698c6ec26d180e7422a1aa36fbeee527a7968ea73d4260d2669974235f7c1aa429441259a323e4af4d33ce1c5b6d60d7f2abfa8a25071e6e64fc79032cc23844208a282d1be6098f94cbc4ec8c2f82616be1216820d0cc25831aba6de1317bf0c9cf26a740aad7f75e9896347457c1c5d1ada32d02ca910220e1059c7cf6dd1e3bc75127d722852126410fd7cbdb88cfa54705ac622d84bc379ab6917090c342f11b961cbbd340e1cef94a4e33b7979c64b856e72cd501d457c381e5386a4e78f6796e3760f6ce55102a9f021da88052d051c3c8ead7434e", 0x20b}], 0x3, 0x80000002, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000004c0)={0x4, 0x10001}) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f0000000080)=""/41, 0x29}, {&(0x7f00000005c0)=""/68, 0x44}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000180)=""/16, 0x10}], 0x8, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:05 executing program 5: r0 = syz_io_uring_setup(0x68e7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x1, 0x1ac, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001dc0)={'wg2\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000001e00)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000180)="e13c2301220a558d9df824173939fe427881ac90403ae74c633153470fc940848a111cc6e2bcdd46dd241c8d345a0f11907f0104d60cae53b309c9c63758f3e923ae51b6f9fbae7632c9b37dcfa7ec95f166012e705ddbf72bbef0f30561b9d5383fefc54ea6fa32470509652ba796cd4e6ce6cc53b2dfbbf164967e2db512e969d0835ba83b7b", 0x87}, {&(0x7f0000000240)="4455e59950601fb40f2c3c62680d3315d3ebdf4175296b900f0c6c0acf29e93cf31f4571d4778208f75354f7ed19a2975de6e670a40217e865fe1e3b08144645c8596b188b90e1c7b28d82e8241660172140b74c3c208e95be4e20ad1bb88756d5231c435c448431dc5e763782954a01c273f69191d93cf258adb129914c4c94a617a9d4d93346bc2cdbcf0bfa4ce6ebdd04897b067906ac30adf999e8bb8968695a14177f6408fddf110d7f7941c9c88630f9a4b2544ee1e6a0069ea70d98283d13f6900395d9486eb7e18a25bf6b80e02ad163f16b26bdf70d9dc7a3af5321bce5bffc4815f9effb65acc7d0ce1de32442bba9c70b83e3f28abb9a79de975ddd9bd046a5cd8cdcb6d4d7675eeb14d892728d543e3606b7ea4964602e0c71140ff15fdbd5838f13ecca74076405550bc554d0d6d4562e39e6f509c222c905d00ebfeaa198c22cb6fdfff14328b2395055ad240ffa2cc54ce6e2f968066506fc79fdf27cfbf868dad3440071170e5a0f516bfb30615d39f8debd80fd0b43b91db5b96066593af4ff9fe131737dddff85a370ed2be13fa6d8f8161a1705f405912da26f5536b1efe9f3a00840c9a23596ae30dd3834f222598e1b4d252c5f79ef9aef3b1f47de8320c7a8f47d429733f505085d9d18e4d2fd4991c23618c2b890981964cfa56aedd34e3748851306e1a768cbaf0080d22616b6de21890dadf33a70599dcaba588a85e7c8966aee2ce8612314f3c430c87bde92b0d085dd91b5c85662197ae92f9c08e65aa640575aca6207145218b10ec27fd93b716e3aab0a5f70f1fc67a323c3140539a8e87d132e9c4f3c74fc8b0293b011a63a6c6f281f7ea53b4674701ae0d57822456275397ad9e7583e68a6678978e7404ecf9b004a4e2f97dcd0a8e365304c32b56d17aeda17039c29046971225afdbe1c3a87c422c8de0f8879bbc20658657afe3f2e650c27d1e4efac76c447ad38144e24f951f80bbaca733a7cb924feb80553d0ba76613c629080cdf983d0dccd78d286c98f2bda0daedd36d05ea0fed9199cbc82feae959421956b49ab161d8047d030409d6f4a017de22e6489d00628c45d9acad775796b6afd4f1f09397026ee663e77865426741aa4f7590a11ea96743bf545481195f227c50be610ec9415842249efaa7b8648c7119b2dabfebee48502413c578f2fa12c9bc4722707b59ec1d421c715710b371f831ac917de4985e80d99588400b2f0338f84aa76d2cb1edd83746ee74e8aca463413eb367a76425b47b3d5f00c10a3006db126d61d4c2656f5d7371d7ee9d6ee3ec2c796272059ee0244ecc1147775031f83a5810fec3b5fe204a434618524c461eba5de9f1af13885653254604976b5fbd597b6b202bb38025e13749417f5c3f7d907ee8270bdffeb4f63c914cf4afad9be7577369814f330a2b1888fdb380377cb1c38940abd88889ad376331d7bdfb5172186e35e2176e98afa44c71069a789452da22901181b6ba9d6ab7c5a2ed2b7bcdb2b075b7c58aa53b8fdd8aaaf57f66a75d3e33bcb5e093650d151e452f7c8916e54c1b49d050e0fef3092ff893ef7561cfcadef7e352bc24eaf76941f2be4b3e245f570fa556eea2a0d4d56140aae79b4477fb826c41ddace394a559f1c5ee522aeb553b1b3c9815fe0507d02a06711d5e9eb2385ce3e72eb66bacd264beac9c45a4639c6945b716c0c3fbab2bb778f9e8656880f81c1583e1f0d48de622c07522e56875b400821667da390e15385a3b8fde6fe3570a61a0cee8b98b41fc7604a2a48802eda3973148692f3ded37495817cd09b1312335f07bdaf61c028b0ed9064e5cd1e0bad82eccb81eee8ef1932d046849c637446a4005b8129a1e97483c8fe7ff679eaa13539028589090c08881b7c2ae07418142d5166936ccc44c23f168cf064839c8f4ad3bf1c536135262c1b3e5aea78fba0d9e765a9fd69868d165f566dd3dde574a349a3d5ebaec4233dbdf4308be4354bb3333ca33f7eda169489a0db953c480e0d854ac0921db0b78c91206d99d9b4f406d9ee10f1a99d64da39dc9f8ae45af006885c71f2edaa65b4e0a3a4cb21d32db3f66dbf30ed424022067052746593f530408caad88f1276183ecca598e2a2f3dd12738d46904e05ab7ad6490d552a48de388ad86286f2e28ff7724aa26e301f253528fe07f6fd561a1690690bfaf617d8946942d426211355cc2f7fd706a471dfd64d15f8a3e3c4b1e8824840d566d35a19957276ed98c37c714b6e3df5653a05ff4dd1d084e3cb7eff51153fd4a5bac5b5e142cb704410df78ab96aeed0b3762c007dd9733174c47b3fe9c7c6062859a1eae7512a5f3ccbbb9885786ee488f4b4ec5fd04be6681fe68c54face38f8804b10ce6529674448b676ddca6f3467e5eded72e128ae54226e053d50b9fe7c4e4366bee9930a1f381d7e6cb1dc0101c3fb6fff1911ed15e48fad6139e2190be58c043c4d33a9cbbf46985297838836dc4698ae249f5edf898c7f320564cac2453bd62f08fe6f760da9566f9cfdb949d3345f257fead71bba7e93dab1036caa28c3274e3b1c36d8df5a06c19798dbc4f55f8a1b121365329658422b6da170ec5d85c7addf64c28877daecf817eb17c80df48a42d2696b5f90ea6bacb9d172ed94e8c9140b0a4f8784cfacfed28520704c282654302f32032a0435e78b5b99a8d232d42f5c5864c4a1c8d389bfff1a60686f69fd816fc197794b9387ed170907ec84dd44e0710c6ee9c7a93a5c3c5f8bdda6a4479b29759b45b1758d15f438390521dfa2b8f47b0125d643b3d4e0640c1ab49e0695720bdb753d744baa80334b366e28beb9f55410e1b3c2b62f8d36d43f194638342ad50304495451b66c14691f30e291dfff9ad7a8ab9348dfa0b41b2fd41cd539a2d4bd299b734f0dd29cc9a2690b6e545a812259c4a8e09cde4647d99faf1a5d0f304909466f2e07f0c83ec8fe1a27a4133ad6b673229bb997d0bebd84beac06d4551d40253f7ddd6a9f95ab96a2007b3197844f080f05c3ace37540e778a9936adfb138fdd63dbe81e69df982bc53969240676fecfc2357e5a2b7a6471423a98a94afe339ed6787066c4011f1b6916c5aebf95e9df28757437ab967e161ea5d2eadb44eeed90d27a6980bd73bbad0fe9f6a7382c06ae06be6b7ae5505afb925ea793f8c55c00b89db08bdbdf59bef30e4bec7971db2fcaa8f19280022be090a906d73f77e18cd746885c71f4fd7ab61ab7f2dc98b172ec0eac3fa56fca3c3ca7e53cd35bdd8e3f2ce2cf25e9692f66833b21cca9808352b0ed460b502581480316065b20735d2c2b5da2bc3edcbec4e06daef9fa1a8f6b19027a47561ac3eb6f2e2c46325b53800845a15ea93a3c7aa765a62c6a684cc7b96a472da0abc21fb424d41f2e2e2b01930471c386835a3b5ca43bf0b3fbf6dc68a46dbed73adde670bc4e6bfa21869d4d8d1f03d6de4f3986c131c7ac021f5529ece7a449c4498fac7aa8cd3ca3abc58da310fa221057ce49cb62283fbddab824826d4240d8feb0020a28477b8a7f64c058f99e13934fc118abf1af86fdf800aa44b711d17e31d4ef28c28032a95a003b39705acdd67ae7a16ff573ba0a87509d3e4536dc38772d4d736b4ef4f083d12f913d92c26af6cc8357f79a37971add456ca37b6ec9d3878641f374a3ed3a2c55e5a1aceedc10219e442522974bd5560098a19450a25f0072319df38e3f35f62c60936d558038c3e51ca9b60067e84d8b49f89fa0778ed6a7f3373fe39e592af085046dbe569007c7c74a7169bc37f9e6f7820abd77292b2e6135cf56a6dc75e8eb91fda07ab41e1a1e28b69e23dd1f1a5879f74fc19fbc7ed896331ba4dff5ff2347a00f69ccfca924be994e2dffe594c4f71f71ada98d7c44def105a299c3d78d62066e051268d5098027173ec0febeebd25d1055cde86a63a9244d5d7668666e45d72d3a95f783aebdab605b1fcf37e7d0ee70ec7b4dd17cb4e3614adc01b91dfcb8f189486023f5ab9855a3f7413caa778eecbefd54741750bdf6384fb88dd14783d42cbde2d372ba6450d2b8e31de865a3d7ce6cba2875849c0423231bde5c099692cb5979b8650d35a4002b44a36c05033892bddfa821ef04948ea7152f5b6ee109cfde1212c9bfe0c066f10918379155933f9f941dce226ae4c7e9625689b3c0e67c3c0998dd5a2fe9e611f6786333e8186365244d47645b11f1a4e564bcb722328b3b47222404009c676b985f4650e74cd18880217d44ecc77a2e92e905887ea3cce80632b73492edfb7f0167454b3a404cec832523757b489ddc0d8bdeefa93c5f8f54aa9c2b56276db2a0544e138f9c76ca41712c7cfa4f0b21ac7248e1f2fec7bac51834a5f4a03c03008326603c91f03a4b6b4c3d2723d407b79a35488a213b7f16ff65c6d6bbee39f9fd45e319020601ac0a96f3ed0daad3f41c8e43337951b50e291de83fa78b73c05a2492e5cf09f8a7ed23b3022628d25ad5e0fec86e2e5f4037a0bb279bae6ced81d3d6ddabdd576453053d63cefa9247efb9e37f32a4613dd842f1bab6ba1eeafaf71d0363467dae3a36d0e86f1edc3e570cd0886950274b40f6fe64c3fa3e302f5c5c5799c061e33a5964e79ff5925c1e64b40e3eddd950486cefada9ff73148a6c1046f6ccf8176768868a39ca7168edf943ebb4f56a06a14dd9139e25bdf66604d63e6bdc1b0d2d40d046fa0763b1c39cee22f96873736630c5ca274ff0b5716a68539fa8553709f726aa9739ffda8ee62cce42a3580f54ec735465e3d2c6a36d9359e0ef24ea79a98a14333157a068431d105397fd855bc84154482d7a0bdbec7db41ff59e878bde004989838d2cde56dc846f176a1c9c98bc08a51d690e054d6fea866b83d357875db25feb67fabec956ab0a68bf2ad70e698e3687ddb02f555cbb4d9e5e89b35ddff5ded9d5fc46048eb0cebcc03514486b75e99a627faa5c0f091b2630d06d30fb92f36a0f6e8b9d3e662777d273acfa3a244e90ffaa94afba474edd71f71f6bd7d4759262c99d3d2cf7c232d690f4c19770714bc0e9cb20e15b4f1a19b84d06a8eb05430b21b31d2708c9a6233e3231406cae66a0c2f814833af482e994f1aa1c8d4555e2dabbf9e80b2088ae88ef3e8a13a6163b661fd9206d1a2e277d33ca67bcf241f15ea49217cfb86f44ce86a5ffb181e6d2acee7bd2ba861ed86fb1d8c2915f69d9ec53bddf7b7cdabbb7bb30d2a1858d8411533e936d75a962d668d9bfdfddadd404444ed79026068182391e5e18a199e4643fa2e258b20c15c9c0cbfb77390a7bfa3e7289d60d03ad88a79b9c8681519a2f21d9e95dbac763ad59c74a919dbcf53860a8257e377b676770295796405f589041627bea437fdc2679ea5d091fe1d7ee63772eecebb01b4a3a11258d8e937c5dc1bb41903d40e110c6c4aa068e4d8917f59ca94aab776559af4b6b6be543733a7e1074c1c92b8a5e979719e06240c3be27ac23c118cdd33201e158c68cb86a6c46cb3fded8189f15f075c9c3de187f285f62c5d4628535c9cb0cdd06e2af3857637ad082acd47d710f57ebfab8e4989548dc9ecb23f9923e9f77a2e9e0501f4b56bc107f24d111c5afe2da69db846712f7800dd511cdb9b7c2dc2e25c3b0737871d7a7b87f4bf0fb2bc333914af9394da75db236efb0917092021f44a4b31557e7bb26a8cbac8b3866a7e5260a0e7e7885fd5e587424e3ff4515d0efaf07cafa85cf93aceaba4fbeefcedcb782a759175a970e855302aab434", 0x1000}, {&(0x7f0000001240)="90fd910744c0337c8b4a3acea7190603676390c3614f6b104cfd75f558323993a1f1cd337405a5c570dc47d38aaade5fd6f4b1ffd8bd769c399b9e3659d2bb677061eb576ee1f4719f89c4f29dd8b5ce59ee8208aa73c20211aea993d688e63a0e9f024a4941be15ef7c3e83cf73f8e349edd0ec748b839929cf12b0a250c49a6159a790aacb17924d0d8e84e9bc04e83fc22bda", 0x94}, {&(0x7f0000001300)="3007d25a000339f5818017eb87ec17ed2704384bec8129992067b50e170a88a75f27c31977a02b75b5781ca528c979173855c81f434854947fae7ea06914c737a2838764466839496bb38f20d2b6196ad302d7fb4bd905f5ad9c830b0f485d60bab26c3d88dd4de77d50660c99b93cf0c09168cc6a803059b29e0cf7d07acd96418038d2e16a44a088550193b19d4aad25d7b0abcebda2c4d74f96292ddc9984dd40d843b8fce1411ebf2e85f36253a8ba1b16c21720b7dbdb4948504ecf9dcee022bbd4fe03c266", 0xc8}, {&(0x7f0000001400)="4b43c4eb030042f2bf7058808f748897b7f8e6f28b6a8c55d6edcf3bdfdd26bd284ffce94c4cc4b32ea947bb3026db2517cf3dcd8d2f60203f8f65418291a0aa2f72a6841ea149a7e74b76cdfcd499ff3f4beab2ec50ad3a0116f95f307bcf9f0c7292da0b5333a53529ce8c252d9910b2ed0567453a32e707bebaeb3e74cfcdc9f72525465b74944c132943a324f01ba21752c3ef7ba1bb8fbd28072bb95d10fc7ce6ef16df05a267694c10df31778ab4b3f76b72e07123d95e6d9f74fe65b364df8ca17662ed0b703988506bab96d47919affba321", 0xd6}, {&(0x7f0000001500)="f1e48d9273de1a90affd70466e988f973387d898c3c61946df8a70d9fbbdc5caf6fa994b6cd8da50950f0319592a5c897c180ac6cda7f299ad9330fc50feb8e817a29214306555cb2bfe8cb7fc46d4286098ad9bb5d2d8bc000d738686e863ea877c0323a188c67c86b1323f2db92413dc681a0fdb8022b3d9e569872f4ff23bbed45d080b739b4a898ca8c7dbcdebbdd18af1427969a08c81fd157435234555d7799326878641a05cb91cfa9348c0", 0xaf}, {&(0x7f0000001680)="bfd37d37faa80d36ee564e2ecf954f4c1ec4243bdca38f2f40ebf4b4eda711e7c127926e6b2706058e4f3ea31f1a0894c1c5574d1cb27d2d0ea4c8a8906622b3011e227c051d78a6c444f9e95252d873d1bc1f3bb6a630321acfa6f9450689f6d93a2ff7e929d90d5d2af8dbd51874816e56e92ad3b3ff1c7a31", 0x7a}, {&(0x7f0000001700)="304a26544bea79cfabca62a5449991fd3df4c0b9921bcf3aa437f84056d400a986a5ba666964c68f83a7c58269f8d48a8d2542d9cc5be457cc1f54b52da19caa7b0a3e57de6cead9154c237f1261e88d23179fcf5e71b1cc6677c5e969ca220f62933f63d190a22a93317b18135430a3d98d0d6ace693691ef886b496239e851ef9d93a9ba02ac9e11", 0x89}, {&(0x7f00000017c0)="4c5ab48750d132fd517428666c4e92558f9ff5161b0c1d49f35e247b278d411b91982eb503a071173cf7327bdeb9e111e182e3d848e994baef5f670009b7e47349d6afb04f21", 0x46}, {&(0x7f0000001840)="eef045fd439dec20b98e35657b1b16f6ac3addcef9f32196706188032f912292983ff36610c9233d309b423f6585609fcd73df86aa6a8f5aa38f3de89eea9b52b19eddae386cd80732a50236c6442c6429ef485353329b62a08fb09a6b324cd9487f573e80170bf101876bbd14feda9d92742a375690", 0x76}], 0xa, &(0x7f00000015c0)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fff}}], 0x30}}, {{&(0x7f0000001980)={0xa, 0x4e20, 0x4, @loopback, 0x2}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000019c0)="b7f25bf977bcf653b12c14434b0d9f7f8a8c57f057dec83e8bc25fbf2027b85e2f6316a5045a18b247b7b767a63b8020866f737e2cb1964a051a6674d33b26fcbe5974b5d3104f079f58622a3a1fcfaf25eca22e68756d244bebe187e1aab13a47bffdfdba10d13fed85701fdf8e66a96d5091f31265a954f1f32ccb40820b859e59d3259472e26591b3161c05f8a7bac36607fee6cac45bd0076f6f1b58c1e1845bb9311c9619b7966d1739c48027c0752061777c4e643bcbebd8a94c9e4d8e871b7792c512899aa39cfd61acbcb88b0b6f3c824c0e3db44ecc2d22a55d665451f0eb265828d86c3f29a66db599b9a3", 0xf0}], 0x2, &(0x7f0000001b00)=[@hopopts={{0x30, 0x29, 0x36, {0x67, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @pad1, @pad1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x87, 0x0, '\x00', [@jumbo]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x8, 0x8, 0x0, 0x3, 0x0, [@private2, @local, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2]}}}], 0xa8}}, {{&(0x7f0000001bc0)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x10001}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000001c00)="734f1f2453df3930ab55fdbaf77175c678bc09b32fff178b22419ebb8e4db188e0cbef97586ee901a06b04208d85a3b27af04b7512e8c4dd3bd0", 0x3a}, {&(0x7f0000001c40)="83344fa3b20508ddb26b4a26797edb921e0990e5d7e60557b3d703c7aaa11e12e49b49cc2bf8fa73a410f385051fe92fee53b7592096ea8aff6f7f774ba1d52d0952d16b1000ab8869873b25048d138c85d19add0c9cae951908f1cc274df35e1a15ea15f2dd62403cb654b7a8fb2d267ca1509a502de8b4d99e2ab3310dae7a63d76b2854b225bf24d4254bfb0ebf654b4c8a8aa47c639348503c8dfb99d5baa114da326384f102d03213d82bfd71d204ed9fac2b51abde", 0xb8}, {&(0x7f0000001d00)="8a54c3d3a243238c35905321616a00262312fc6ca43c428cf76aa3d1516723843d4bd587474f61cda541fb95758fbe37b2daa0ce1ea4f2b5e3f97d364f0fd58f3c208b8a8f0004", 0x47}], 0x3, &(0x7f00000034c0)=[@dstopts={{0x1050, 0x29, 0x37, {0x0, 0x206, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x1000, "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"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @jumbo={0xc2, 0x4, 0x8ae}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x33, 0x14, 0x0, 0xac, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @local, @dev={0xfe, 0x80, '\x00', 0x33}, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x21}, @private2, @mcast2, @loopback, @remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r4}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6876}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x5e, 0xc, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xc}}, @calipso={0x7, 0x28, {0x2, 0x8, 0x81, 0x7, [0x2, 0x8, 0x0, 0x9]}}, @ra={0x5, 0x2, 0x8001}, @enc_lim, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x1000}]}}}], 0x11d8}}], 0x3, 0x40800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000006, 0x11, r2, 0x3f0ff000) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:05 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200420004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:05 executing program 5: syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) 15:44:05 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x11, 0x0, 0x3, 0x0, 0x0) 15:44:05 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200520004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 608.739258][T23432] loop2: detected capacity change from 0 to 240 [ 608.769297][T23439] loop4: detected capacity change from 0 to 16382 15:44:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:05 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x12, 0x0, 0x3, 0x0, 0x0) [ 608.799832][T23451] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:05 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x23b0, &(0x7f0000000140)={0x0, 0x96c5, 0xffe1401b4b913327, 0x3, 0x238}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r3, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r3, &(0x7f0000000200)={0x10}, r4, 0x1, 0x0, 0x1, {0x0, r5}}, 0x800) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write(r6, &(0x7f0000000040)="95d4c728fbc634d24de50bd4fac7b95387bd4fcda7bdc9727763d7205bf8995fa095bc6ad8aa8dbe27c264199a1ea2143761eab736784034caa7", 0x3a) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 608.848885][T23439] loop4: p1 p2 p3 p4 [ 608.857888][T23439] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 608.865670][T23439] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 608.873395][T23439] loop4: p4 size 32768 extends beyond EOD, truncated [ 608.926504][T23472] loop2: detected capacity change from 0 to 240 15:44:05 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0), 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:05 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) 15:44:05 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x2010, r1, 0x0) acct(&(0x7f0000000080)='./file0/file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000040)=0x80000001, 0x0, 0x4) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:05 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200620004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:05 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x13, 0x0, 0x3, 0x0, 0x0) 15:44:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r2 = openat$cgroup_ro(r1, 0x0, 0x7a05, 0x1700) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@mcast1}, 0x14) 15:44:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = mq_open(&(0x7f0000001380)='pids.current\x00', 0x40, 0x20, &(0x7f00000013c0)={0xc105, 0x3, 0x1, 0xffffffffffff8000}) vmsplice(r2, &(0x7f0000001780)=[{&(0x7f0000001400)}, {&(0x7f0000001440)="e4c4b68145a328f83590d5240fcd327b000994d46994fe2f3d3b15c13c7002640d5128cce5a143167569db5462a445f0cedd06e126a473a0ed1828dd5dc22098dd2042f7674d4bc17b4835b8c111070df95bdcca9b74c9ac2a04c2f45c19536c83974d4055b9241bd5484eadc81d65183a53d7aba5b8369b7c65c30f3f55bc7bbea57eb7534100233ca21b38945e310c0484aa7a7209d6ef2b44ddf14ced5f5b", 0xa0}, {&(0x7f0000001500)="8ba3c359eebdf03c70bce19aa6a7dd3565765d5f2f603c53cc72bfff5a4c0e6cbf637546a24ab6dcb954ec4e472127c9184f4357a30af3ff9abb2da0402c92b40fc5c090bacb25b69f0df4aa11b87e658218ed0ddfb842a4298ce70a5b819ddd30836039cd0f2b5859d773aad4b70e541b3bfc0dac1715245977af9d4bb84cdcb2192f9c701641abb47cfc6c6423822fe4ef5230c717c48dc60470ccc29cf11c52609933385521ff51d73051834ab6055ed8cd336ca0a70bf081bc4c2f6ca0a3dbb4d3023f4a793ccf245fab91e4137e50971bbee3560e8af0c28041d57f5ac43cb0ce6ddabf317b23e676319c7743c1cbe849d8", 0xf4}, {&(0x7f0000001600)="aa60b62e47102289dc06d6c76ae51e04b1563324eb16cae4ae5d851f5b0910ed7da1", 0x22}, {&(0x7f0000001640)="0d1b31a3ff60fc2c70842e19e7ce1aecdafeb1cfaccff669143ef18d780f63070b26d4e6e21c78bbc0610125e12ee579698915cb2e8f49b086b3c828dccdff05ffe7b7f3ff351ae5970a5e63e17a3534a67a36ef8be49fd19beb80cde5cfcd42768c31644cd0224a5e184824da4361440cb542828a218b44424bbf7606defef563a3dc8de625319d5b8d5d4b0bc2dd1e1164b37b1afad68d34af0f2e97879cd13547", 0xa2}, {&(0x7f0000001700)="0200c668fc76cb1bbdb4374c3800740d6fb2033f7a5f3b794027c3b9e30ddf64f1db31344c3163ec9508700fb2853ceae1236e5bf3e80fd8e5060e0ebcba3b2819340b549837da6c71bd3c", 0x4b}], 0x6, 0x8) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x40e080, 0x124) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 609.631047][T23503] loop4: detected capacity change from 0 to 16382 [ 609.634489][T23506] loop2: detected capacity change from 0 to 240 [ 609.667190][T23503] loop4: p1 p2 p3 p4 [ 609.672079][T23503] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:06 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendfile(r3, r4, &(0x7f00000001c0)=0x8, 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r7 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r9 = io_uring_setup(0x135e, &(0x7f0000000080)={0x0, 0x445f, 0x20, 0x0, 0x26c, 0x0, r5}) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r6, 0xffffffffffffffff, r7, r8, r9, r5], 0x6, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:06 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x14, 0x0, 0x3, 0x0, 0x0) 15:44:06 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200720004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:06 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) 15:44:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYBLOB="01000000000000000900000000000000ffffffff000000000e91000000000000f9ffffffffffffff000000000000000007000000070000002000000007000006ff48d30000000000070000000000000008000000000000000500000000000000180000000000000000000000000100"/128]) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/46, 0x2e) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x3, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="38bbf2789bdb1248acf53fc1a4a05705445b40894c5c425babb26807f99e5e6a011fe10c0cdd42265488caafa65b1694bb64354091189434734fbc34d5032b7b4d3b582d1d25586231948e18eb60c82543bf9bf5479cef065e90759c2563d3c82e2445b5c3899c787ce6d01d2b19e79c1d398a2142ebc7150cb0319fe7d70b0c19b1b459a73563ff6ba1ad853279fcfc20aba79d7b53788253acd5b8ede58f89dcd2cd59d62df3503c84acd36de93b8d4d6ff6ed638bb3526151e9a96885e1c186276743", 0xc4}, {&(0x7f0000000240)="8cf6ea832b16a76198d08508fbeac01311f0e1dcc6a9e0a694d0e4c8acd941f9dc3f3db7608fb17a56b180ee564c783167563d6fad50b10922e985456bdccd05231647b47735dc5065c66d792afc9c9436fad728ecb1c795f65fb2eff8fe81ef7392c507d70911b0760bea6e3060101a1968b179c0392b03a46b8a0163", 0x7d}, {&(0x7f00000002c0)="5211421e2521761053ae248abb63e318999fc80fceae24907b6d5837b730406502b26d6715a0a6db1e77f38f24d48ee7cafc54fac237f17a886248bde89fc0c7ad0c4ff4a84faf1efdbc0a3fa7d1b67ba80efb409be08b1b35dcab17060566822b5ab0707a708ee679f9e6a24d8f273e668cfa7cc4e3ffead32fc4ad5419a4f153f017f57df76a94494c9b1db0d36df3fc01d8599f1f25c942ca7546041aed2732abf4bda336e30c76d3e2441a280c4c42c4", 0xb2}], 0x3) [ 609.680053][T23503] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 609.687814][T23503] loop4: p4 size 32768 extends beyond EOD, truncated [ 609.721255][T23522] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 609.822557][T23555] loop2: detected capacity change from 0 to 240 [ 609.859594][T23559] loop4: detected capacity change from 0 to 16382 [ 609.909079][T23559] loop4: p1 p2 p3 p4 [ 609.913676][T23559] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 609.921723][T23559] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 609.929601][T23559] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:06 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:06 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x15, 0x0, 0x3, 0x0, 0x0) 15:44:06 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x20, 0x0, 0x136, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd=r0, 0xcc3, &(0x7f0000000b80)=[{&(0x7f0000000040)="a36a15f511fbfb89eda5fe5a16774843", 0x10}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000000140)="730a1f07d0f925e4d87f3b975d12c02fe4fad8adf40cbbb224b648add5002ad2b731b81a657b372c2844c650ad5d59aa90178e1ea24584f6964dba9218e356c0bf859f8b8b547d3cd8a49d39a4d8f252087e639747c74c868c8fe003dbe7380735f6edebf03272029eaf6adb289e65eb15c37a2775844a402fd95799e535f949b9ee17883ff36e5608d3a46459901272b883aa199edcb1564ec25bcc2d5e14f84963c2ed7e086fbdc9b84e84a46a650b0bfb1b1a841db25d2d7bc8a90260dd326d69eec7a578d7c5fc18fea78f9d38558f156ac0bfe62d2d330865db5d683e9693548b8b3401a458e5dd8085fb3f2cce7a03a81912b4de4be0783cc2", 0xfc}, {&(0x7f0000000240)="fd2ca5e13e711aea867a59ab087f3984ee087434e652e7b5ec5afd3f1584f18859200af91c6b85facb64bc40a9b620f146ebbb4e495ebc121cf0547b39b5b10f96165ee2034d3ce92275992bfcb62b2ebd71d10062022d3d9338148add9b06858c2af77f492ce13f48c8aeb0844c04ee59b41f961e", 0x75}, {&(0x7f00000002c0)="6bb387e1967c4a6003ee9a4fe4ec0ecbc8bacc984e104862178c8227a7d16355d6ff052d391a6ea1cb2560694444af83fcb760461b1cdc7fabdc7795e621d733f5a5e6f694c0c3c8e5f03b5a628026b94a1be2c468e9957971be17c07ef592fe5b71529569795292df59d63c7e0020485a4aaf4d43d1951429ecfa20cb19030940e051979fc660bdbffe834e0bea61873d7ef2a542c7c8410704c0", 0x9b}, {&(0x7f0000000380)="1808626ed04f1cec879d3380f723e324f299159884b016be4779215b856b8e1f4b69c180def411ef4ef4f3aad719cf50918dc569333d01010da8bc7387d00afcd0e0a3e5b0fd78b19f28a1c790d8d15b2711161273ace7ef5b35698702a47356e89464fe105b868476d6a68a6c3afc99ef1cc3b079d88ef3d6f5f11b7cb8f22a70046116755eb1326708219d2c0db3fc4e9f2e7b9c3ed1120cc0a94988f8b10c9036108c9763210355e4b4a2c962851993d9d1a510c21e3225aedea86a62cfe7ca66e823737baa9ee2de3360", 0xcc}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f00000009c0)="9320b4bcc28cf200fa6bb5877e7163c83ae80d5b4fd05d9b56ebabcc48348adfad2ef762c19857219169d522960876067e66b9efc39500d2115c03157c1ef9e1e7da977eae853d1d16b9c632717d9149ff4f5710d6f1324c0437038669b70312ab6b7c6b4231a39326ca0696b22ba4980484a0379f2a510ddb1af2445eda8d0b6c5b60e2e8bdb0857f0e95bc27935a2e49c62a4caca40450690d2738e09b1d5226adf1c4674777529910dcdf0f3f5b621134", 0xb2}, {&(0x7f0000000a80)="aa609a6967997ba8062a47717540552db59be7bee1931f087dd610b7782af8ba23b40502ec0bcb6fea37f250f44beeec69350d0020ee453d280c27b0d7101ac2a026fc9739040e3581099177b0063114", 0x50}, {&(0x7f0000000b00)="84451931ea79c0e214aa96136df4f3fb229797c23a7abf03f6b6844b2d61dd1d45a074a37d54c4c1ef3ac55b84c5ed3bd5333238a8af9c4fd823777c0df6bbaeb1b9c666e563e960ca0b4e12284d681c5076906631e3e27a512e650eff", 0x5d}], 0xa, 0x1, 0x1, {0x2}}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct={0x8000, 0x1}}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0xffffffff]}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_elf64(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4600032007ffffff7f0000000003003e00ffffffff4b030000000000004000000000000000a0010000000000000300000022003800010000020500050001000000ffffffff000100000000000002000000000000000100000000000000e000000100000000040000000000000009000000ffffffff0600000000000000a9a90000000000000200000000000000090000000000000008000000000000000500000000000000f71a96aa13847a9bc17770b1bfd1d0df774c93c9ae9869478e2fbfe21d939aa2dc92e260667476bd49f0a0a2728c0126e87168070add4c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcf43a4c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7e6e231212bc061bc2b4dfe4307dc37f0abb30b2f5f11373dd002b8087d0cf95f6ef18e1aa6e13b133d4ffbca66ef3e0150f10b55131615c8e0af0251a78ecde94dfedf5a1e7b3c231d"], 0x3e7) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:06 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200820004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800007, 0x1012, r3, 0xffffc000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:06 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:06 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x16, 0x0, 0x3, 0x0, 0x0) [ 610.513412][T23582] loop4: detected capacity change from 0 to 16382 [ 610.523263][T23587] loop2: detected capacity change from 0 to 240 15:44:06 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200920004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:07 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @struct={0x1, 0x9}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0xfffffffd}, {0x2, @struct, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @usage=0xf800000000000000, 0x0, 0x0, [0x0, 0x0, 0x800000000, 0x0, 0x0, 0x4]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7]}}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x6, 0x0, 0x1}, 0x5) open_tree(r3, &(0x7f0000000040)='./file0/file0\x00', 0x100) [ 610.565561][T23582] loop4: p1 p2 p3 p4 [ 610.578538][T23582] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 610.596521][T23582] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:07 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x17, 0x0, 0x3, 0x0, 0x0) 15:44:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$cgroup_int(r2, &(0x7f0000000080)=0x6, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:07 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200a20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 610.616493][T23610] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 610.617645][T23582] loop4: p4 size 32768 extends beyond EOD, truncated [ 610.642869][T23611] loop2: detected capacity change from 0 to 240 [ 610.777683][T23642] loop2: detected capacity change from 0 to 240 15:44:07 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:07 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:07 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x18, 0x0, 0x3, 0x0, 0x0) 15:44:07 executing program 5: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x4]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, @usage, 0x2}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x3ff, 0x0, 0x880]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000180)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000200), 0x1) rt_sigtimedwait(&(0x7f0000000040)={[0xbae]}, &(0x7f0000000080), &(0x7f0000000140)={0x77359400}, 0x8) 15:44:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x40000) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:07 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200b20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:07 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x19, 0x0, 0x3, 0x0, 0x0) [ 611.416451][T23660] loop4: detected capacity change from 0 to 16382 [ 611.434157][T23667] loop2: detected capacity change from 0 to 240 15:44:07 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x1a, 0x0, 0x3, 0x0, 0x0) 15:44:07 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200c20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:07 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x1b, 0x0, 0x3, 0x0, 0x0) [ 611.461461][T23660] loop4: p1 p2 p3 p4 [ 611.468122][T23660] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 611.477519][T23660] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 611.487407][T23678] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 611.497335][T23660] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x56, 0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x200000000, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) 15:44:07 executing program 4 (fault-call:1 fault-nth:0): sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 611.537593][T23688] loop2: detected capacity change from 0 to 240 [ 611.596606][T23706] FAULT_INJECTION: forcing a failure. [ 611.596606][T23706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 611.609820][T23706] CPU: 0 PID: 23706 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 611.618604][T23706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.628815][T23706] Call Trace: [ 611.632080][T23706] dump_stack+0x137/0x19d [ 611.636404][T23706] should_fail+0x23c/0x250 [ 611.640816][T23706] __alloc_pages+0x102/0x320 [ 611.645400][T23706] alloc_pages_vma+0x391/0x660 [ 611.650165][T23706] wp_page_copy+0x121/0x10c0 [ 611.654863][T23706] ? kstrtouint_from_user+0x104/0x130 [ 611.660249][T23706] do_wp_page+0x5a8/0xba0 [ 611.664582][T23706] handle_mm_fault+0xb31/0x1a70 [ 611.669478][T23706] do_user_addr_fault+0x609/0xc00 [ 611.674499][T23706] ? exit_to_user_mode_prepare+0x65/0x190 [ 611.680224][T23706] exc_page_fault+0x91/0x230 [ 611.684875][T23706] ? asm_exc_page_fault+0x8/0x30 [ 611.689834][T23706] asm_exc_page_fault+0x1e/0x30 [ 611.694702][T23706] RIP: 0033:0x40598c [ 611.698570][T23706] Code: e1 48 29 c1 4c 8b 0e 4c 89 c8 49 f7 e3 48 c1 ea 1b 48 89 d0 48 c1 e0 07 48 01 d0 4c 89 ca 48 c1 e0 14 48 29 c2 48 39 ca 77 3c <48> 89 16 48 89 d1 48 01 c9 48 39 cf 48 0f 42 f9 49 83 c0 01 48 83 [ 611.718200][T23706] RSP: 002b:00007f3dfa832ea0 EFLAGS: 00010287 [ 611.724241][T23706] RAX: 0000000000000000 RBX: 0000000020000080 RCX: 0000000008100000 [ 611.732188][T23706] RDX: 0000000000000000 RSI: 0000000020001008 RDI: 00000000007ffcce [ 611.740151][T23706] RBP: 00000000000001bf R08: 00000000000000a5 R09: 0000000000000000 [ 611.748116][T23706] R10: 00000000000001bf R11: fe03f80fe03f80ff R12: 0000000008100000 [ 611.756138][T23706] R13: 00007ffd4a58fddf R14: 00007f3dfa833300 R15: 0000000000022000 [ 611.764155][T23706] syz-executor.4 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 611.773271][T23706] CPU: 0 PID: 23706 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 611.782029][T23706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.792093][T23706] Call Trace: [ 611.795396][T23706] dump_stack+0x137/0x19d [ 611.799725][T23706] dump_header+0x98/0x400 [ 611.804078][T23706] oom_kill_process+0xf5/0x250 [ 611.808851][T23706] out_of_memory+0x5c2/0x6b0 [ 611.813450][T23706] pagefault_out_of_memory+0x64/0xa0 [ 611.818812][T23706] exc_page_fault+0x91/0x230 [ 611.823401][T23706] ? asm_exc_page_fault+0x8/0x30 [ 611.828348][T23706] asm_exc_page_fault+0x1e/0x30 [ 611.833216][T23706] RIP: 0033:0x40598c [ 611.837096][T23706] Code: e1 48 29 c1 4c 8b 0e 4c 89 c8 49 f7 e3 48 c1 ea 1b 48 89 d0 48 c1 e0 07 48 01 d0 4c 89 ca 48 c1 e0 14 48 29 c2 48 39 ca 77 3c <48> 89 16 48 89 d1 48 01 c9 48 39 cf 48 0f 42 f9 49 83 c0 01 48 83 [ 611.856793][T23706] RSP: 002b:00007f3dfa832ea0 EFLAGS: 00010287 [ 611.862868][T23706] RAX: 0000000000000000 RBX: 0000000020000080 RCX: 0000000008100000 [ 611.870850][T23706] RDX: 0000000000000000 RSI: 0000000020001008 RDI: 00000000007ffcce [ 611.878828][T23706] RBP: 00000000000001bf R08: 00000000000000a5 R09: 0000000000000000 [ 611.886790][T23706] R10: 00000000000001bf R11: fe03f80fe03f80ff R12: 0000000008100000 [ 611.894751][T23706] R13: 00007ffd4a58fddf R14: 00007f3dfa833300 R15: 0000000000022000 [ 611.902770][T23706] Mem-Info: [ 611.905884][T23706] active_anon:220 inactive_anon:78959 isolated_anon:0 [ 611.905884][T23706] active_file:10641 inactive_file:32080 isolated_file:0 [ 611.905884][T23706] unevictable:6 dirty:305 writeback:0 [ 611.905884][T23706] slab_reclaimable:4413 slab_unreclaimable:6954 [ 611.905884][T23706] mapped:63510 shmem:6883 pagetables:2747 bounce:0 [ 611.905884][T23706] free:1811840 free_pcp:895 free_cma:0 [ 611.942893][T23706] Node 0 active_anon:880kB inactive_anon:315836kB active_file:42564kB inactive_file:128320kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:254040kB dirty:1220kB writeback:0kB shmem:27532kB writeback_tmp:0kB kernel_stack:2944kB pagetables:10988kB all_unreclaimable? no [ 611.969693][T23706] Node 0 DMA free:15360kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 611.995650][T23706] lowmem_reserve[]: 0 2938 7916 7916 [ 612.000959][T23706] Node 0 DMA32 free:3012100kB min:4220kB low:7228kB high:10236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:3013524kB mlocked:0kB bounce:0kB free_pcp:1424kB local_pcp:1424kB free_cma:0kB [ 612.028773][T23706] lowmem_reserve[]: 0 0 4978 4978 [ 612.033845][T23706] Node 0 Normal free:4219900kB min:7152kB low:12248kB high:17344kB reserved_highatomic:0KB active_anon:880kB inactive_anon:315836kB active_file:42564kB inactive_file:128320kB unevictable:24kB writepending:1220kB present:5242880kB managed:5098252kB mlocked:0kB bounce:0kB free_pcp:2152kB local_pcp:712kB free_cma:0kB [ 612.063375][T23706] lowmem_reserve[]: 0 0 0 0 [ 612.067915][T23706] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 612.080642][T23706] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 4*16kB (M) 5*32kB (M) 6*64kB (M) 3*128kB (M) 4*256kB (M) 3*512kB (M) 4*1024kB (M) 1*2048kB (M) 733*4096kB (M) = 3012100kB [ 612.096731][T23706] Node 0 Normal: 212*4kB (UME) 96*8kB (UME) 39*16kB (UME) 17*32kB (UME) 22*64kB (UME) 12*128kB (UM) 4*256kB (UM) 7*512kB (UME) 5*1024kB (U) 7*2048kB (UME) 1023*4096kB (UM) = 4220000kB [ 612.114984][T23706] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 612.124274][T23706] 28730 total pagecache pages [ 612.128980][T23706] 0 pages in swap cache [ 612.133117][T23706] Swap cache stats: add 0, delete 0, find 0/0 [ 612.139178][T23706] Free swap = 0kB [ 612.142895][T23706] Total swap = 0kB [ 612.146625][T23706] 2097051 pages RAM [ 612.150413][T23706] 0 pages HighMem/MovableOnly [ 612.155063][T23706] 65267 pages reserved [ 612.159148][T23706] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/,task=syz-executor.4,pid=23706,uid=0 [ 612.173329][T23706] Out of memory (oom_kill_allocating_task): Killed process 23701 (syz-executor.4) total-vm:85192kB, anon-rss:96kB, file-rss:35584kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 612.192491][ T471] oom_reaper: reaped process 23701 (syz-executor.4), now anon-rss:0kB, file-rss:34760kB, shmem-rss:0kB 15:44:08 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee", 0xe, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:08 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x1c, 0x0, 0x3, 0x0, 0x0) 15:44:08 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200d20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8224, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x7}, 0x11, 0x0, 0x0, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) fsync(r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:08 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:08 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000001]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x3]}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 612.330528][T23730] loop4: detected capacity change from 0 to 16382 [ 612.331596][T23732] loop2: detected capacity change from 0 to 240 15:44:08 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @struct={0x2, 0x101}}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x3}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:08 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200e20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:08 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x1d, 0x0, 0x3, 0x0, 0x0) 15:44:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'memory.events\x00'}, {0x20, 'memory.events\x00'}, {0x20, '^!+\'\\!@{'}, {}, {0x20, 'memory.events\x00'}], 0xa, "038ed0fce21b42615bbbcf2a67d2edab4279979c38a4650506c4c2bd0c3b3c5e1d51f9947c34d1607a165f626c83b13c6a7cd9c545fde48b3bf7a34ec3c332fd68a7e8e73b4c32ba4e534ddcf098e4d06e6a4ae15510b3d1b38ba1fea8d97e93fcd1f3dc3fbb9b24fef00ed72ab39d1b64d6c5d974a209dcabc1b39686fb6bff2bfce3887f04936e9a31a77d47fdb5d1edc09deb114c30d2f42330913b59ac8a11ccc70dce4c779fe2802a8f4f6ba92dd05f409daffe19704c7c1bbfdd164315a6"}, 0x103) write$cgroup_int(r0, &(0x7f0000000040)=0x1, 0x12) [ 612.382568][T23748] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.404374][T23730] loop4: p1 p2 p3 p4 [ 612.409154][T23730] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:08 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x1e, 0x0, 0x3, 0x0, 0x0) 15:44:08 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r5, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r8, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}}, 0x8) [ 612.446127][T23730] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 612.453917][T23730] loop4: p4 size 32768 extends beyond EOD, truncated [ 612.468959][T23764] loop2: detected capacity change from 0 to 240 15:44:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000000, 0x900) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x63c3, 0x490}}, 0x0, 0x0, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:09 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x2, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:09 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200f20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:09 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x21, 0x0, 0x3, 0x0, 0x0) 15:44:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) fcntl$addseals(r0, 0x409, 0x2) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80082808}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1d0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x108, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x100, 0x2, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa4, 0x3, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x83, 0x2, "5eb23440da4be132455bb29e5ca9e6845da992a265ad4c640091d82fc7c24be5a0bfe5ea300cbfb2219588b14d9d35f216c5c66fc1bdcc4a03b9326fdf1ca7809bbd3c0e4af441c659cfc97155ff242c7ea36653f1bd8519301e78a0083e79932d7fddc7af716e7d19cb876e141641fcc4e0053f3b7ba1d2731c05c7d22541"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7ff}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x401, 0x76}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40013) r4 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r4, 0x302, 0x0, 0x3, 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000200)=""/67, 0x43}], 0x4, 0x9, 0x4) 15:44:09 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:09 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0xfffffffffffffffe, 0x0, 0x0, [0x0, 0x1, 0x80000]}, {0x2000000000, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0xffffffffffffffff}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:09 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x22, 0x0, 0x3, 0x0, 0x0) [ 613.231608][T23804] loop4: detected capacity change from 0 to 16382 [ 613.238210][T23805] loop2: detected capacity change from 0 to 240 15:44:09 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000201020004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 613.275401][T23804] loop4: p1 p2 p3 p4 [ 613.280331][T23804] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 613.285008][T23820] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 613.312207][T23804] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x58, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x40888, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) mmap(&(0x7f0000629000/0x4000)=nil, 0x4000, 0x2, 0x20013, r3, 0x6c924000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:09 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x23, 0x0, 0x3, 0x0, 0x0) [ 613.334037][T23804] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:09 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x3, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:09 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x110, r0, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000023d000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x3dc4, &(0x7f00000002c0), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)) r7 = syz_io_uring_setup(0x528e, &(0x7f0000000980), &(0x7f00005c6000/0x4000)=nil, &(0x7f00006ef000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x8, 0x2, &(0x7f0000000040)="b36728a5a2ab907dc981cba432ea90da86348f73b5d9e4a2cf017ebeca0c5560823f763fabc68913f262ca9b4c6ec2a4e5267ebd98d6a2ab4a9d4ea98a4c2068a750984a2500c00a8402c592e2f9b932f2226a5c6ae7cd9b3903adfbbc619eaa192270018e5a55d2f0d268501c1584176daec7e22b9f93728c93083e71bed309bb", 0xc27, 0x0, 0x0, {0x2, r8}}, 0x3) r9 = syz_open_dev$vcsa(&(0x7f0000000180), 0x7fffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4010, r9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 613.400526][T23840] loop2: detected capacity change from 0 to 240 15:44:09 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000201120004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:09 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400009) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xda00) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000001540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)={0x12bc, 0x13, 0x100, 0x70bd2d, 0x25dfdbfb, {0x27, 0x0, 0x9, 0x1, {0x4e24, 0x4e24, [0x10000, 0x5, 0x0, 0x36], [0x0, 0x800, 0xffffffff, 0x8], 0x0, [0x8, 0x6]}, 0x6e2, 0x1000}, [@INET_DIAG_REQ_BYTECODE={0x17, 0x1, "bb8c4b2b9b9ff997d09ecf629c440dbb360928"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "aadaa6aab6c0b96bc238ce01f215c25d376c8616667888132f3a3960ee077fd7a28db55446637d0288aa6ad16fdaaa830227c19e01c38be846706bd9992c36966f0b37"}, @INET_DIAG_REQ_BYTECODE={0x52, 0x1, "f83332b94e259b728c7bfad80bb0f677c1d620097ff72dc598f1e1fa7ea4486eadab6dded3b3de06baa808b297c539eb9f1f270ddd1b5597bb564377f7a919ad96ca5007ca6592b0bf1ad914b7c5"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "02e420db48842912190765ef81149edccb6408cfa7609e790cf24971665ff7d75b0e6e62c3ecceea1138aa8537b8d9107c40d41db9b8b03dbb6579003f935d4c1a4148ceb2dfff2166e3c25e0f166e340862ed8dd19b74b32ee00c"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "aebaafc303b24224a5041082e9c04ca7b18fc6f373de0427f363ce9bec3429277e150e128efa5703588e72a752a2d253a4d86144caa421de7a6a4127ba75aa30e90c675b"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "6db191c77dde2d20b7e426cebda6fb995d7cf76ee87d6062762da13d7e58e5ff41c68df20baa8cd856661000d4c1a9e780d2d3f1640cd24d"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "5b53b98091d775dc33f6d0877b198c77dd00b2744ae0850345e745850bc6d4dc7e13a6ce068e0f95e6662fb7d8d6a208a9baa82583d732d1b7211bf5e7471f9cc10c017dd8203259294b1c5788bca4109763576ed9a2a73e8172ce7debb9d2598f1c8c473c22d4901f3651206ad9b948812bb72a8a4b5324f5bfde33684fbd148ae9c220becc32d2e8dcb2ac368ac00495dd9289fcdc5d63ce2b8c352fe24c4d520145542cc3601951bb2f6d961462f7f8279bd26ee7a40c7cb0a575952de395a5a369bcfdb91843cb147ae9514e"}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x8004}, 0x404c015) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000040)) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:09 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x24, 0x0, 0x3, 0x0, 0x0) [ 613.485758][T23855] loop4: detected capacity change from 0 to 16382 15:44:09 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x25, 0x0, 0x3, 0x0, 0x0) [ 613.532429][T23855] loop4: p1 p2 p3 p4 [ 613.539037][T23855] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 613.548015][T23864] loop2: detected capacity change from 0 to 240 [ 613.554793][T23855] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 613.572335][T23855] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:10 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000201220004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:10 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @struct={0x7, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x400, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0x4}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffff7f]}, {0x0, 0x3}}) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x3ff) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) close(r4) io_uring_enter(r0, 0x2dc1, 0x0, 0x3, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r7) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@migrate={0x2c4, 0x21, 0x100, 0x70bd29, 0x25dfdbfe, {{@in6=@remote, @in=@broadcast, 0x4e23, 0x8, 0x4e21, 0x0, 0x2, 0xa0, 0xa0, 0x2f, 0x0, r7}, 0x6e6bbb}, [@algo_auth={0xc8, 0x1, {{'sha512-avx\x00'}, 0x400, "7db7fc0f4f249bbeb3213483f4065ddf4ca5acd80e98fa112aac86cf841c5b1a07f34dd275ce772d7cfd276d0ecbef8e2d1d8743d2fd6dd2afa3c2e9e52fdeb6b7535fcc29532cda402a509df61aa38959f7626f47aa4044d1272846faecfbc78158a1ece58688a2d36c2a4dd049cc281fc53f8d696ea746580f3dd45ff9f119"}}, @migrate={0x50, 0x11, [{@in=@multicast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x33, 0x0, 0x0, 0x3501, 0x2, 0xa}]}, @lastused={0xc, 0xf, 0x5}, @offload={0xc, 0x1c, {0x0, 0x1}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x965}, @migrate={0x134, 0x11, [{@in6=@empty, @in6=@mcast2, @in=@private=0xa010101, @in6=@remote, 0x32, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, @in=@multicast2, 0x6c, 0x1, 0x0, 0x3504, 0x2, 0x2}, {@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x33, 0x1, 0x0, 0x34ff, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in=@multicast2, @in=@local, @in6=@local, 0xff, 0x3, 0x0, 0x3502, 0xa, 0x2}]}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) 15:44:10 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x4, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000040)={r0}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffd214}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x49e}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffa3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x400000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000380)=0x400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:10 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x26, 0x0, 0x3, 0x0, 0x0) 15:44:10 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x27, 0x0, 0x3, 0x0, 0x0) 15:44:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000201820004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 614.115326][T23908] loop2: detected capacity change from 0 to 240 [ 614.124707][T23910] loop4: detected capacity change from 0 to 16382 15:44:10 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x5, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 614.172499][T23910] loop4: p1 p2 p3 p4 [ 614.177193][T23910] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 614.185542][T23910] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 614.193853][T23910] loop4: p4 size 32768 extends beyond EOD, truncated [ 614.195955][T23927] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:10 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x28, 0x0, 0x3, 0x0, 0x0) [ 614.256795][T23935] loop2: detected capacity change from 0 to 240 15:44:10 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000201920004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xffffffffffffff92) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x8, 0x3, 0xee, 0x85, 0x0, 0x8001, 0x82, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x100, 0x100000000, 0xfff, 0x3, 0x7fffffff, 0x4c1, 0x9cc, 0x0, 0xffffffff, 0x0, 0x8}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) mmap(&(0x7f00006c9000/0x2000)=nil, 0x2000, 0x0, 0x20010, r4, 0xe416b000) [ 614.344946][T23951] loop4: detected capacity change from 0 to 16382 [ 614.387574][T23951] loop4: p1 p2 p3 p4 [ 614.392246][T23951] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 614.406572][T23965] loop2: detected capacity change from 0 to 240 [ 614.406890][T23951] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 614.422329][T23951] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:11 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d", 0x15, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:11 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x29, 0x0, 0x3, 0x0, 0x0) 15:44:11 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r6, 0x0) r7 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r7, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x3, 0x0, r2, &(0x7f0000000140), &(0x7f0000000040)='./file0/file0\x00', 0x200, 0x2c00, 0x1}, 0x9) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:11 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000202220004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={0x0, 0x200, 0xf4, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x7fff, 0x0, [0x9, 0xffffffffffffff20, 0x4, 0x0, 0x8], [0x7fffffff, 0x8, 0x1aab, 0xfffffffffffffff7, 0x6e65c759, 0x0, 0x0, 0x4, 0xfff, 0x42a, 0x13cb, 0xcfcd, 0x1, 0x1f, 0x5, 0xb, 0x2728, 0x8, 0x36, 0x8, 0x2, 0x0, 0x2, 0x6, 0x6, 0x242, 0x3, 0x2, 0xa6b4, 0x3ff, 0x400, 0x8, 0xd2e, 0x7, 0x2, 0x8000, 0x1e9, 0x24, 0x0, 0xffffffffffffffff, 0x4, 0x100, 0x200, 0x9, 0x7ff, 0x7fff, 0x0, 0xffffffffffffff00, 0x20, 0xff, 0x6674, 0x280000000000000, 0x3, 0x6, 0x10001, 0x2, 0x5, 0x8000, 0xdb1, 0x9, 0x7, 0x3, 0xe318, 0x3f, 0x828, 0x5, 0x8, 0x2, 0x0, 0x7, 0x1ff, 0xfffffffffffffffb, 0x10001, 0x0, 0x7, 0x100, 0x100, 0x8, 0x3, 0x2, 0x9, 0x87a, 0x1, 0x81, 0x80000001, 0x2403, 0x800, 0x1, 0xffffffff, 0x100000000, 0x800, 0x0, 0x8, 0x8, 0x100000000, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x80000001, 0xffffffffffffff7d, 0xfffffffffffffffb, 0x9, 0x10e2, 0x8, 0x8000000000000000, 0x1, 0x3, 0x4, 0xfc, 0x3ff, 0xb6, 0x9, 0x9, 0x9, 0x6, 0x9835, 0x1, 0x100000001]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:11 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x6, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:11 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000202520004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 614.976323][T23989] loop2: detected capacity change from 0 to 240 [ 614.982704][T23988] loop4: detected capacity change from 0 to 16382 15:44:11 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x2a, 0x0, 0x3, 0x0, 0x0) [ 615.029189][T23988] loop4: p1 p2 p3 p4 [ 615.033846][T23988] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 615.051432][T23988] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 615.064212][T23988] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:11 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x2}, {0x0, @usage=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000]}, {0x0, @struct}}) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:11 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x7, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x9, 0x7fff}]}) mmap(&(0x7f00005bb000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r3, 0x805f000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 615.082465][T24010] loop2: detected capacity change from 0 to 240 [ 615.108364][T24018] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:11 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x2b, 0x0, 0x3, 0x0, 0x0) [ 615.191173][T24038] loop4: detected capacity change from 0 to 16382 [ 615.216716][ T25] kauditd_printk_skb: 331 callbacks suppressed [ 615.216727][ T25] audit: type=1326 audit(1624290251.575:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=24029 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 [ 615.251153][T24038] loop4: p1 p2 p3 p4 [ 615.256291][T24038] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 615.263851][T24038] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 615.273168][T24038] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:12 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b", 0x19, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:12 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000204820004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:12 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80900, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x8000000) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x200, r0, &(0x7f00000001c0)="2ed7d9202f8be28043d3751003b9bd7e426a958e598cdff5c7130e143d0e28cdd59a05bd14a33d68cf7cdb8a6d1da57e1a9543c2a0318fb25d760c259a0581d8ebcef1f32c0283341f27f2a6635fa6ad8c67c034cc92f2891a2b1bf9e02f5eb3e18ec5993d110acaab7400895f42489192138f58eab304f55726898cca3f3a872f80b548b59a9d7c013af9b1c25192bac6fd9ed0050ee8a427f4a099ac933e6eaf155c04369533738b440908c04d07c2abfc79f41d062ac72991d086170972c617", 0xc1, 0x1f, 0x0, 0x3, r0}]) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x101, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, @struct={0x0, 0x9}, 0x0, 0x0, [0x0, 0xffffffffffffffe0, 0x0, 0x0, 0xfffffffffffffffe]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x9, 0x0, 0x3]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct={0x0, 0x3}}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:12 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x2c, 0x0, 0x3, 0x0, 0x0) 15:44:12 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x8, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:12 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000204c20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:12 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x2d, 0x0, 0x3, 0x0, 0x0) 15:44:12 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r4, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r0, 0x7f, {0x0, r0}, 0x0, 0xc, 0x0, {0x0, r5, r6}}, 0x5) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 615.879500][T24071] loop2: detected capacity change from 0 to 240 [ 615.905008][T24073] loop4: detected capacity change from 0 to 16382 15:44:12 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x20]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd41, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:12 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x2e, 0x0, 0x3, 0x0, 0x0) [ 615.978584][T24073] loop4: p1 p2 p3 p4 [ 615.984089][T24073] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 616.003482][T24073] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 616.014132][T24101] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.024042][T24073] loop4: p4 size 32768 extends beyond EOD, truncated [ 616.031051][T24105] loop2: detected capacity change from 0 to 240 [ 616.071435][ T25] audit: type=1326 audit(1624290252.418:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=24029 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x0 15:44:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xda00) r6 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x40200, 0x0) r7 = accept4$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x80000) close(r7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:12 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000206820004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 616.155649][T24132] loop2: detected capacity change from 0 to 240 15:44:13 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b", 0x19, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:13 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x2f, 0x0, 0x3, 0x0, 0x0) 15:44:13 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x9, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:13 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) tee(r1, 0xffffffffffffffff, 0xd510, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) fsetxattr$security_capability(r2, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0xffff, 0xa95}, {0x3ff0, 0x6}]}, 0x14, 0x2) io_uring_enter(r0, 0x5eb7, 0x8ba2, 0x1, &(0x7f0000000040)={[0xffffffff]}, 0x8) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x8e44e000) 15:44:13 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000206c20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x1000, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:13 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x30, 0x0, 0x3, 0x0, 0x0) [ 616.852542][T24158] loop4: detected capacity change from 0 to 16382 [ 616.867429][T24156] loop2: detected capacity change from 0 to 240 15:44:13 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000207420004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:13 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x31, 0x0, 0x3, 0x0, 0x0) [ 616.896797][T24171] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.907317][T24158] loop4: p1 p2 p3 p4 [ 616.920024][T24158] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 616.936381][T24158] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = open(&(0x7f0000000180)='./file0\x00', 0x420440, 0x24) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, r1, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x2, 0x1e) open_by_handle_at(r4, &(0x7f0000000100)=@fuse={0xc, 0x81, {0x5b, 0x200, 0x20}}, 0x48401) openat$cgroup_ro(r5, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:13 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x32, 0x0, 0x3, 0x0, 0x0) [ 616.954083][T24158] loop4: p4 size 32768 extends beyond EOD, truncated [ 616.967677][T24175] loop2: detected capacity change from 0 to 240 15:44:13 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xa, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 617.129941][T24203] loop4: detected capacity change from 0 to 16382 [ 617.189145][T24203] loop4: p1 p2 p3 p4 [ 617.195510][T24203] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 617.210863][T24203] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 617.226110][T24203] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:14 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b", 0x19, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:14 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001500)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000014c0)={&(0x7f0000000080)=@isdn={0x22, 0x5, 0x40, 0x5, 0x7}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000140)="8f59295504c9c8fd6410c5c24469ef0fe4014d96390140fa5711753d63698770abfed87bcff59118b41c06eae30daafc8f11e87350d5319c1088429b4b83797d53ecc59313ae4cc375b9db018070aafe917988bd68d44cd2d1ec501450a3c89efa7335fe52150399cfa46fb48810a47435351c6b360569972f1682e0f49b53f6d94b19056e2196a67c458ab49257d3f14b24f2a8eb0d8f1bed46856ead71b915481a6e8993994ff571112cf9fc786009a876c7cd141aba75257498ab2cca9316867cb49fe221f02918dd64fe10ac0c89d00770ba2198670980a655e7df60a83f071f163438f0c702f0e36c040f62aabe2e95d51d88d715550abee587bc54b8fb71e35e352aabce0468d08405928038997754f201e6c45888771b003656452b01d7a89cd80bbaf5bc7c33d01d02d8ce8b004d771c392581deb4ae0a9b7dd2aa7b2167337d5f63dd4654c1152e754cd4593beea6b94466302a70183fdc8b667bd463597023b35b4064cb219bf9b234585c11a1d7ad9869d1ecb72c142d079226d67a515025e5a63459beae8540538ad5e8f72a2b640f3ca0fc120c0e86aafafc6d8273328b30e149b686b979b3fde5363314804ba7f036b4b0e6b7ff601769d32ea852d2b6b526a74edc53720ef0c189a497d9eeaa36f2b7d0c5bc00919fa7f48f6d5ba9533267fc8bd8e7acff9fb85990f1a3bdcd870e14d9af0c8c426dc83c74a7c0597e041a9475fb1e3c7d89ce4d351221b240c3ce2067f0f123ebc9c400c62d119e990658a98cd3be47e6c0700bf755bd4b84d3e5a83bb21cd66a7d2c9c9104124aad5f2db193a51110644f2af403bc040be79d2c1678c1e9fc3436bf4564b36543ab830d63953b35da84467b7660d6b1f0aa25f4569876405eff623aa4045ae91da7a22a818609bd16f73ab28eb6e862c4a1fb174344e20049d0c4cd0729d5bcbd3f135c0015b5ee0d8ff654f88de60b309b607db31ba2d7ceca56c68330a64a7e9dbdf3cf8354566b8770bbdd0863c4be09bb1ebed6655e3467aa44b763efb1de5dcccd9833154f7093e972983fb35f039461c182e9d15d56597059cea2aa602c5067d60485eadc0688bbcdd2e5eb6e8d6d99bf8fb9ea94c969471ce5d3b1c6c09562b3f8394554f03498d54dd1cd9eccc0316e62293229a5264668af12176bf184759ae8981f1e21e5cd27eacb26d92fd2847482bc518b99cdb8082566e61b3a36936c307f4945ef8fb56e59bcb8a667296fdc95dbb03b6c30ca717d4d08728afb641bb1d3cc465e61d830c5a451d20657cd24083634135993cae52db01d1bdf2404d85e9805f82fbf1d992743187c7602a54487702df5cb99f571285be6572fe4f7a1e27f3c3ed080feaf2294d27ef717078fe086b06983731a97925859b3e9a3afef787c85ea9f88f1802daf8d1b15ee9a6cc9ab4024d61a8de5e01ab2e6eb3476aa7809a34a11543ea68ce222f6071c871b86eb3cea3c1ef18efb7a38bd244294400d6b0d5ca2ba2bd1c17caca071f6871a83bdf545e690db8c64bb2c77f1fe272df93b11de2945df9ff9a1b5d4397893897398a5ab618eae0a9c928b805833ec19ea7dda8e09229b063d3887995cfd04b3d321716c31b853b63486ce563f6d8219686999f7222ca1d569d20a54f65de10d5663efa2b1db8e75c2c9b69c7f65847eb7ad484578a8bebee8eab529027d501b511f81022c667f62fddaa85c27fa0f08d9c2a6087a12156bd2fe0dd60154d84d3958c09a3e33bba3b47d7def269a418915e944c761be25a94d7aba1e55e4bbf3345b7dcfbb6455f8a9026c4b5a294a9a827f994db3cc6f8572c625e3824bb12ac51be17114681ac1d7332ca094c510579fdb41a872addacf975f3ff6c6e061521772ca42c34dfee234b02d8bfd3dc3204e990d66d8cf0374cb181b2f0b53c0a917ca9867379a9ead42a401e225a04f970f5e75ac331c5b80ef870119edf1f27cd2d412a4f8503f80d9efff472ebfb0fced187661a0c98da08702259a1671dce5429b933e1e689551e7813efbd96bf7caa5768210877f037940e9a3e66e04d9073b0939e11231b1e324cf05ef5f95e9819a9a647091e2d4d81fb6800f8696d6a5e48afe1238458392b9da7197d2666f8920059f1efc17638147054f8447f3bf49bf4afd9d5a2ba352596b96994359bd198b3a53ac8ed8fd7d3bc17ee24d006dd10baf7565e7a93e97e1591e55c779ec93a90259b2f213183d55a9b224b79b54f0de4f44c41b8c456c27f113299a76d0d9cf9d5d69cab5cd2c92c2cb437997aa8dcb8ebde38166b4e38f7dff066381fe38b3ba15aabc76412b90649a09ffadbcd6824b49b1ca25aa57fb2745265b823200e8e031b55f232200fd868f703eb6d934bae35e5cf17c55f25cb37917993e9fd520547abc83fe088ef39d5578746cf56b634b21e39e35899f0bcc69fb1a5b1dc38516984203ae37ef1bac6862ec6349bca20b069628e498095fed0cc07d08b03f0f7d82203eda1aed65c32f67f4b373c6ed0fa751f98a8d264bfea2cfe9cb7277f70890764618e98c3d0e95981693740f380c3d80120d3bfb57e31ea6dd5d094794b1b7ef77fc141096ef301fa9a0c626ec699d98e5adb6ccbbd399d8bff8256ad92216a582403593e7e10f680d556904354c6c18ce20ad772efe0d266cc4322c0c65db71aff0ec27aab461815215acc453942c2a12d737185fbd052ecf0f045bb1c4f3bb5fa4f441b63a1d0c06bcd44a73b222f5025e0657b02b118dae02d627cdc74a372cf4f0200a77e3846a59e7b6a0b8bcb15622ab4a32f47f7b18c30404cad8f755fffab678270de557ed0dd8f09897bb9093422f11de1bf497219d6037d4196ca760b6851f0b8488233159edf2daa2bba088d32b026ea4bf08d3ec7e193c6f202fd0fd04cd0feee510d3c3d2ad8030e9a3a7f7fc0e5c42fdf42dff140ea99d7cce62e7e55ab1d8f3a43db402edd192c3f035fb8fceeb07860285192ae72b8c8899b0492efed20a57e0cb7f42e5b5d7bf71d126938efe7d7b52c2cb6ef43f88f9fbf1cb9de939ade15b26d9963ddc81cac21aee88cd81c80a28fb3fa955c6ad461e3d2a158cc111e2bdca23ffe3aaf6890f47a4111b32ca63b782d696a4e7d11cecaacf8a98197b6e8b24598fa1b58babcb9de1d87f9e0a7e470668919a71b5627828974e3cafccfe7e28d4998750138ac27aaa51b19f6c3340d91f0ec0d1ca4c1ab4b5422c986e8b324dfbd11a1a32755e23b5a9e1d3859b2162d02e0d47545e3f9e91621fa0c41c3374c957e1655e53bf64599c0f9979eaff6cf18757c31973ec52dfe718bbc5a5ea5877bcb71ab033a5b3fbf14448be9870acedf3126a54b202cb4fe8f4911a6f7bb6f9df17f7d3dd82243d6f79fd74da41ac3ef639ed464d068abbb3d09d931691e637daa6017c080b082cc7f4cc5753beb830212aee947142bf2ffe1fbdb1e8b3c9c16596bf63462cccf4f6d0605beaa1b6ef8ed905c19c0b4f7c37f8fd4232710cecdbcbf054e9ea0d5846b99626a2da5057869c0791fc5abc89088334ff8bd05cb32de52f9edf754f5fb0adf9b4fbcd8e2d304b4b44cee9666eec07ebbd7839fdae6a8173f3bf4f79ba0df357a9fb3a3523229fe26469a15313d6b359b60a057a4987cec60306b5614adc94141f3f35f779cd22b95cb353b91bd2c41d7ed0d70d44e21fef7ea9072f81f0c533af5cc787b8ae91d18657945c381bfdc9d0e2c9c99ae0cdb426f53bd6f75256995122436834121c871702ad7f280a7f68e385ad047eeb776ad6e9f5fd86c90f139b884491fb4684447d4b6bf3ee8778cdc0fb9072bb1ef2bdb185a63d4efde92743b46ecdf3a9912247fdf675fbf3c9dbb73cb520f8d543b0c5326d32e30b36767895f53d7be11a54e94fdbb6aa417f667781c9b4e794631dd153174845578a4b3e28860f0608f39276bc1d9f64ec72bfdb72c6f18d10db41d453168e778a1fd24f74fb10945251528fe06a1e0353266ec6352094c5c5d82a8d3007822b9375bed7fd116e0ce4f884297c2e4db0868b61129e680a90001e35431f2efe0bcc713050bfa9f71b04b4ea3b995ebd71ae8834bfe2a9c259d3c8c446e57a4a051aee8264f1449af8a72721136694cd3816f21ab584970cc016787adbd767071b38a4f852e3f19f8cd6af90dec33bd4e59f84d4b885e0bb4db360347723fe67e433cf376530a77d65cd894770b450f625438e0396bf6a67ac0ba064ffc92134e575f13db5f8e8f41732c289fecbbd28e6b3a9ca8c0a7c2c1721e2975cf558077d9f0ed7b9363af9d51282f78e1312464764143c34f2f148759cc857d8a2891296354ccda97d28b67f67169cdde0a393c670876205c081e8eb6042a63c7aedc365bce94d10a086771a61cc6927e8ec918baec77549a75ac49bf11496649ecc8dfd5d80405de02c953adc4b62042d859cea13b82ea98abc57619d78a7aa8a1218ca6406322ffa17cce4f8b62d2ee8388e20b973a58c6a6c8e21c76e2b28c9c7dea9cd2a125aea7b10dae2cfd52e2e9182d9e05523c92af03582acc52e3ae5f2bdc5abd234317f0d9969df84e78b0c803682e1fc9f192ffa425d3382af3cac8a47487cdcdf26da279f7ac893b867ad494a3f64ddd4c263fd66df8e9c9973f3c944f2f5c64452d09b77729b6560e2c7e8478ef66cced249a9f517c8cf347c35516143318c58f0a2bfe5f106be1054cf1784065f1003095f9e208bc218dccf4b12869ffce600f8fafdfcc906b42bf518309804e52361ceda556d0b7d7f9dbd3e3132e816fa069dd0b760cc8f848a53823e307a6f1c5cb223d1baa6151e20b51abbfd270ae507a3a59a51a9b2ef078814a9166cf0d3cc68508edd91bd23435d356b642196774ba29dd879731a4b97a756167865352e3cb0c2f50c10f81713f45c2c9c4f4b11a6e273210b3a369601c798a2646b4edf9216da42676d32a3cbcc06568551716460905ecaf2ea84559515d079c25d3b979264bde7e8b6f2436e8fcfb56482e35d30b8b402893d8e1e7b5caec8aee376ca7fca338ce92ad3d0dd84e02fcd7a5d2dd1ff7ac60fc3a10f40e8cc2b77a4d23523185b096cf0926bbeda7603fcf9f89dc5fcf153b5534e4c16a88c73f93948c6730a7426151eab9d10214e1fae3712bcdc9809d32a7f8e740db1cf847897fd522ef88f192dfd95e65d2cdd94d566c63dc6d9dbda5021bdb2fb0058ad816daf6deac7258e86b1ec582c8276d80fd2563de46ceec7a83e5d264b2c4ac6f713e90bc1f3fd61746a87b1af3673e414d5e6768c1ddd582fe95c5b1c4179f917af077aba319fcb82a8b2de408cd9b16cc871810f8c2ea6275f2360d1b40494773ec516f0cafdecebb958af7d5eddaf2390874ef27de0cec2ca86c7719c20518f45d806265ba8ea853502bd58604e6c8d59b6abfbffd8cdf5c8afba5bea0417b1af76fd4601f9bc244245514cec731474f480b25bfd40fb8435844ad36c23c14261d7cc5f28f9583343efe7bf0a72d065ee008d1943a5ec99b1840c7fd80995aea4a3e18f2641ffebf24fc3f1430331c8aa235643d1b7740b34bca63b2d44619b3576ca472577fc6613399a814713df4d7e54af65e4c522578c65184e44b30edcf5f5b70cbec15cd326bdfbe3895d7caf0d0defa991aa5e2e03ef11043175a45e84f24229b0ee97ff45077c1036fc772021940e1d60ccf0743598ba675535f01d5d9c3de95f1a0b38e48367bd061f68b60db610b98ea3765f0505f056d475551558bfc4feb472eddfbbe299bbcdc9bca0da567fe99a", 0x1000}, {&(0x7f0000001140)="bccb0484f003b2d7dc3948c1d6413f3a286b7a86614089692313d78ea4cbeca6a997db66", 0x24}, {&(0x7f00000024c0)="71b08b121719e528b17678f2d9a222884426bf0885132b8396c2616b436ed321b4dcb980584ccf8f176c8162906007d70f0cd275e009ec50c28c028fabbe6e7ad59adf466e9eda23659d9f7a80b231405b93d23bc739792d4fb45f50430eba0c199545c7b9da0bdb40032976399c646145efb2d2501692ecdc629bcbadb30ed613ad603ce839abd85bc4ea4d3ee1c64a0a25c1b81c048a3fb8bcf8037d69e47ee5cf8e7fd643ee52a2618ec53ddd2d45c2739b81aad827c34a960ace9308cd177ca0197703b7f017e1e7b7b527cab9892bfbce4be2dc0ca2d63c16feda35c6e06ca85411b08865ff5dd79b0c905ea2707b495d48d4f07d689f5d883d2e8bf6b7c82e3904a28b91b7a6fe58153a44cc88c6f9fe7d8ff7e7a7f2373ee98ff9f3b1cd1c2de6632dfeb1b9997fbacb92da607b6a87b5803019c558c627dd4c9477b98686091876dac5119308de4e7c1fd2e36e564d3a43ae995e58e9e773e7a37373a233603264c191ac703f9b1e5ab6df20fb1a225e0b5fc6a58cc50fa94f43311206e9d041f891157edf2b258c0eb0e4d6803703a30d9faeb60c176a267a8243628080ef08de9400f053f2577a4a904931fc397ef4639c6546de0779dd0af0eb093ab82ba7406c34fbe90891ed58f0857d258990c209ae151f1bd1f9bbe69c6e180d1e3ef7fbd1730be7deb82735d7ade70200b672717c79da35f6920261c64ec0cd188746a8effcb54c23c546434ef4adc47e3ff3924602f1bdabefafeaaf9ae2e185befd3202e5c762d5d1fab758b6948b239b1680e0e2226d849d03abcf45b23db4b3498bc17054edc341ae3e8c1de0dc995e97bd42c66bba2be4446be1554393fa69645329d64ad5d1dcc115092cb89a613be5468f44286ed2aadf8d2dd794fcb49a7babdbeede120e27a009571a411fd85eb14ae5e2d80be2bbd14a7d2ab9715f7d7141e8c31354ac92ead8abc39ff552bcb64158c14fa5b3429b88049c62c7410138ce6f77a549087eb3796e5231f9ec8b7cbdd259105d85d33ea066c7992a85c678fbb48670e3051e379dade6783dced65afb86102cc8dfe13591195592b690808db560ce1b3bc4bccfe08f0b11336999321fcfb3474b57f1584e1166704eddf543ab835de3d87460167aa338c6ddafd0a0d93fa4bc0379d3ab307d39223ce0344b9fe5e040fa08912d624d3fc1fc9afd883a082a0fb2760070393544e50e169e00224ff96d6913401e89386a1b3d9178f95c3bd0c98214bb6bbb09bbf9d4c7479f134441fdc1ed8c7571678e52ff846a1aabc5a146a439eb74348011a1c728f1d58b0ff675e1e93037f01c609910bf9ac120db471cfd3b1f798e4c1f65d256852077d305328e40d29d516825987ceaa00d979514046b59b1cef6ab81591aca2e830ed350383c8211e2ef853d48d02d29d418a96b92884e2b99b9e11066f92dd7b5eefc77641f205a2bc6da4b52cb3585e3291aa6ad23b4a1c6c0cb9946ca5f11d99f53cb9c4fdd444a49d38e8bfadea0fef1c0a278b5d23047b2e8bb46e41ca7cc714d4b8b9abca00883dd643b23f352a6c819bf15368c0bf2f3b10d0dd983e1a57736be773377bc44bf2de309644e0a30462440b61859c22bcd241a4ba0fb8eaafb4103339e530e72c4719e471c70dec77ff567ae825ef13745b61acc07b2cdf5dc1c198f0ae6e72a015261ee3b25bfaf18527ab0a1c52e9c194560f3937923eeeaf6261deed9fc3483bb04b9c70e3bccb0bcfb730439205fcb28fc214c17654be88673261293f9ba2511eca031797b7868f0ab5c1af7535c601a3fafa74d9f6bbcdcbdbf3e1a3904447c8005b9b5e4190eb04b1d1762bbe230633c1294cd6d5353a0c0f0b6a2681b3512fd923355dbcfacf8632822231ce5b1116cb911c0579cb37831867ed309cef59960f915bb77a3538279146b7bf23122d96f1bcca38008069734fadaf25ceb81fec3417673b600752b7d0ace25cf0b56259e31e75991b5b4a408192b796f3cce06eaf8fb719b67e99ffd06ac72ff3eeffd94da2751bc7dad603562b7138c548584771666043a08fe072ccb050b56206045387004d926e2fe11bfe4c4e1e3b7d483609d850b727f2abac0a931a945b83d3eb4d9810eae4e10f1babd6190ae91c65a7bfba5b73211108acc1860fe072d3b37b2b4c9234f07875f668c454b2f4378c1b34f6e420fbf4704f8bbfb5d94c85164e2535c3fd65cec13e2da5ee9ff0c4b55fbb9fc34da05e967a42b4a67705ec7b76b185c61d9e9a2fd319fab33060b6aee593de63a956f461e0ab9d4aa6cc3af05ff5a26ec71669fcbe69934c5a7b80c6d2b3b505187a922ad4458af7cb81cb71a458da0874d555340c8cde7126f19dee5b1980f87588276561dbeeb5bc121258a4cce14a33e0cb4342b98c34c7a821b5439b8ce7af784966c756cefc3067f069291519a48a9b23ebc7e5f42c250154e434f9cbe0f0a6c073fc8d83d860db0dceecf019813b66ec12dee5ffc401b0929db85d14a5fd62e4478a03c1b53c8f448e02683ae73ad0f2d2919d7fe4729097f9c25edda88d267590210075273e74889d9b446c99130f9b66d21e795f8921783561da962970b8618e887e7137e48cb35487748d1627fc38b5c8eb7be4322966fb4589d91d8d942da4e594b97fe8f6625aa9e018a85a6524b04de49d40eaeb140300bb90f0b057f16ebe8fefbefa8d81b487fbf08bea5da4ae39efafa1797ee2fb5ad78e37c56f94eb768eaf004f8202a4b9ec25966230cfba7dd9b91f429b7ba868361898b46928e2e499714b57e9c5c8b6f065c4f83fe1bcb67505e4baf877ec9d408c450481eddbcc74c8412cda63aec7436f64fc5be110f58f352acc3dbb6c6e6cb73347b9f0ebe349ad1fb7e0a07beb6ad2306dc848e7ada584fa8a84d78c0f78d87e97bab1659f51fe25568894fb80c2ac7006ad17919e7d4e9352bbcccea763a523c115ab476165390dbb0cf5637309eb810e61c78d2a5e878c20f0f25b0441cff0373904d5775efb6c6715ece226821c0e1df61a140da9f97c6420827d9f90c439a45ed5644bfd9a768d60015228467f8e567f293f9c646e8fafcf42e17027cf4e2c38e42ef0ee8626b765fa59acd09d9bc65f9f77f57131df60f630f838885fdeed66a2b0661b145feb8d8bdbae0aa4dfaf1e65e75c77d5dbb6e8a0a87c6c057e4f8a6ac602317cc176866a2c456758f11a69c5fa58aaf5ff42bac8ceb8584bd4fd23b152ece434e14cee9660295fb6eb24130d43956f7e74c7e9a5f417785281a8a73f003e6c91b5528aee00a1191d5319bba6894b938e1326bb7cd9e54cb3ad16d711142f2245bf6e607ab9ceb0f4d08aad287a2d61393abe5daabdc097afd8e3e2b94190fc13c40b658f04c34f290ac12a1ba672f7336e0cff1faf30f42a993483964b2482d127f0fcbe1dc1fc29e7393fb5a782b55d1397f595733cce6ff036c80da1ae0d9c530c6313ca55fd3df74a54fead1a7cd2c8502e513fd375fe2b3fe404751cbee12ad5d350dad84130ba341226e094f35bff4b0f809c873f0b5537a08d14773c26d06948ad38a47ce7ffdbf43894a5a1e2f6406971b4f3c3af1e60bf454c78f7ab3571456f72baedeebe15bcde3f2c95f3878cb886fea641f87b445d05e1dd16aad66e9da25ce47d3d4ab19a63e58534515cadda777b512d6e21e5079772fe03d4aaed9a5a442d44a1aff8f7e81693544d11fd29cce92675f43c9a8b891bc3ca70f12b6ec98628a2c80da12cca56f715f69e48e2f19e7d9bcdb0b5828faaf8611c99f6a1ea9071ed6431465c2534b8632623e3bdcb5581672ffafce477171cbbb308209d69187d284f7e51fe5537f03589cd440ece281c25ed65204f2a760c05d939de3d0077c1ff840c114a08022f062b555b6850e07b9c7ad509097662de3f79d96f4c51b8d306cd61d450d01978e5cbd69fac2a1d6073cb0428b02329732bd8aa5c3ab31e95915f657df0373abdbad71c3bb24d980b1abcdc24b86d344a30f5ef15188434f94b11a799ba445269b2e261bf0f362eb8e9eb7cc51c5066270205d7d31806bce2aa2e888baaf1f01de3f31765a669129c69299ed3ba4ac4fad8458a008399f648dd61284f97cf2e7b324f48dac152d0fe7b2460b4d03d08c398db591926f392a79aeed77c6c1bcb3e76844345637bdfdd258a8b08676044570e2284846e678a167647ba98255e947845f67155cb5b29a01d0133511b4fe62413f99522d30381674520be9f3be59d6d4f73e638fdec417bfc98c89fb7852c94f03e1c52097612eca583b414beb109283b4311def4cf8e8732f70429d2027e271538d849b376700a9e6b0569276d3d9655e428d8bd7a969483cc8f49727543e9aed5bcff8c8d15e94bd4f0ee4b98f237963030ee95a51b73f4a0495816debb9e90834baa5c47daaba0d9b7610db0f61819f8463144dd0a7081b89f47d0f77af7c929746cc52914008b273f4ba1e9676afe6fc242877230383158b5854589ac352618add68d2e375e3bb5e60b28c5c24d24e58923809244b015bcc3ef13df09df132161edafb799148ed57372e08e03a8a4201fbe51579e001ab2d2362131226ef94721d02f4173cc682aa2602b72370c1aa232782461812d2505e6312ee6de0e79d97a88238e6e2ee02ddf24c4fc4d9fbb1411da1d6f078a1c9080988bd5ddc4eb3363bf380d3ca6c6b158f28f09f2a3a0e28cd707db82a5f8038b44939d69437f8fc255d9354c96289fedd94174944a15042115407cf8b25410ddfa64be7721a17f9f8d405e8812315674aa283047915a7722e7d469a84e66b5027784272421f0b45470f46362abdfe7268f7f0bb525ded55526aa6d242ecd574bf7b8e623a850dd74eac6cc7b8b59e8e26fc9a7f35f1797c7bd1cbbe72149b88b025b9eecc4430cb8913a4d84feee9e487ee113ecfdd23a871846c244023e2da92dcda578dbfe3e20934857906b6133027a054fbc64be4211f323004feef0d8df82ad3435cfd763cb697bb7192c0c0c72424cea255482cd1eedf3f36b83a96b26368509434bb24fa88041a7758dc1c738a5f7205e13cb5c992f0a61bd59a80a027442653e16ad36155fea8942d7c6a692c73a30faa8c755c8b0422ab1392ef13f956e7e19847831563a9b6359ae3618259cbb7dd6b274c35e944cced5cb19358056aca6576cca22b0d66e447446a97c1e29d4c1cd7a06198d01fb9b07f6686f3098f4b2f5540b8bd4e1a3c0466ff3be458790ab2dc9e881cc0a8fe230703ba331093e754693e2633213f4e757880b012988b351a6f6bc994e0d6e44be06a77dd619666c0bb62746a74c415ac2df397d695b073500773bc070a815889fd1b416b85803a184d27d5c18af116a5e8ba4d6d3f8486f816ab550975c0bc0672ed8dffb962156c94875f4aace959d17fa692cee16b488a1f76bd1fe09d7dfb79040a3fd59d7199f575aed2cb8707e3e15745a7a3de6896158b8efbe39c17ba677ddbce7b1ae183f648231edec3ea0499166fe15f481ac0dc4a89a0b63a992ed663ec6a0b1728932b1e5e87296a17975ac7c72380f60af5a084f4709c8b1f0fa6c4a34b0b1c74e153d09c87f6647382120964638821d98fd1a583c91155eac82aa80d1b8ba3607dcdf49880f0c69080461c6b04d69398616910b055b168dad35ce3d1d78bdafe773a7bb111a3260d0e09dfdddfd55251b91ea9b7c6d51b975898036757522413aed6154b0ab47648103e9caa686820ff7009c7a3509255b088b98342fd93f873533d4677df1d19980bf45cd1", 0x1000}, {&(0x7f0000001180)="a1e549b72fd0ce180e9af5618024abbbc3d6490258c754661784b18d3432df2a9837e4d997cd04fb8c06d2efe53ed17722c5948bc844929e0da97b274500f34abd36cc221a11fd1dfaa23e30c8d349b0dd4e7c014511a4d0b1f10bf3d676c97e1d0acfe1e7f177cf85ec32da68ee67a749eb5f73e54a6e441f4c8b112ecfbfae2b1f6dc92c278b180f8615011d5eb96f0371d754bae772c78b84ac8b2b67e64281cba5192981c5bdb3ec32da75706fa0f90f2d0c3cbebb95af1e3df3a5b475d8f6d6179b1382305dd68d", 0xca}, {&(0x7f0000001280)="e76f2081a7f9d66605e1121ffe57d3e8c0d05dd6f04d5e310cb2b29a4f14f9cfbafb4f7468af2ffbc590e1cb28096996da88c813e2bf06da57b6016579756b3a33ac548b5c47bd22a495e3c43b8d8c3816d51f0ccb4a05096348acef15a0f3f9bab21a42e65eb99b22be1ba074c1205d25c2586f3870e9953d044ea580970927fe6209b651be2b6dc6fb57ef7949d1ffa93f923bfcc5392025af22cc2bf51632ac133b1712807eb4b3797fb2674478810bccd03d5e77ed6ec9e686ff86c967dfaaeaa132226790e70beb751da99c85e27ca7d4", 0xd3}, {&(0x7f0000001380)="61f571210bf562e898f5377f0ed6adea03a052ecdd550eb3f9fdf66679969993227cd849dba555e3e13fb0d0e9b94aa6b4230ae6a3e0e996daf25b0849b0534d7d9f775accda49a665ee736430daa3e4e5df22d24332e06c7ffda54d94b0de796084ac2d6ab4270cda4121b5873f4e5d70177e7ec4106e59534b0f85fe0da905ff84f7bf2c3b5d3ff5e38a3ae9cde3e09510bdda90bd2eb14a5c61dab28b4cad020a2d776ea35af8031df01d36abad7fe7c9b2579d5999dd691f15c9", 0xbc}], 0x6, &(0x7f00000034c0)=[{0x18, 0x88, 0x1a65, "6885ff"}, {0xc0, 0x10b, 0xdbb, "72fcec174bb9ae0586855729b65383ef95d1ea40320067f42f7bae0e67d3f4a7d7fe4581a2e529e6185bda65592c2d8523ade101739a42d3fd0155be0ebfb59c19a68ed2f4172271ca87e81ce8659db065f50c796deb1d6827306711b0fe5efb092613d3dcaf22f62af5ebb338accb0cbb87a70764123fe65186d4d2cdd5b6e5fc80bc0e67a5df863064bae1ef6c4646a3deeab51e4042dd89f21ab28fb6faac5d57e971f247dc555185fd"}, {0x18, 0x113, 0x8, "6509de2a"}, {0xb8, 0x107, 0x20, "c37074e0d127810457b04f1a3a7ca8c79b0f4397adc38fdea6b931186ab35a3f7fb4bd16cf05179ccb69555f36bd2a92911fa3457f7112e0cbc972ceb38b088149217bdc4771b1e5fa2c1991d1b6873a0ad44f7a47a5b44e79abf32705bb807e374f0c75c685d50dc9dcabf89629b2479d3c185f622dd90f98be6881e8e6012722bc0efef317876b21facdaf992442866d97d5d90e006a27b535db0fdce37b4253"}, {0x1010, 0x104, 0x7, "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"}, {0x38, 0x112, 0x7, "cf6c22bbdf48ec9e6ae94982c693660e92433f7c27074d91ac2d62b1e1739dbd68ca2c"}, {0x1010, 0x10b, 0x8, "babeb7892c843cf6aab37b65689fedd83069bb1d35c5454ad916b4717e77cca3f2a2a4f0f29185cf2ad1506e96d5f76447f5f00f33358ac8302700d272cc1d433b63ae9ed102a85bc882b8fc0605ecc16648d6855a53b0e3819fa9675d3bf6d703392e1178a7344d694e99544589503a06d3c524a5668d801757dafb6b6ba5bee59ca74a270455ff3719c2010af0f9055e424b5dd07390833a79a3c2682b8a41356cf7cc5ebe7993348d8bfe9e8b386da4195241212c66a48eaf7d1697b47b5b7760f8a9368a84d8ec1fe6e04723c80965f2ad0b3e921a24fa6114a9a5603d21ea2be94728ef4e55752d9d5a4b5b1733f7b5a3fe5c4d01d46eb8c345b1babd4372df14297885dfb05f92fa792f7745177efd48261763ec99a4e569661dc9b9a37c7f43868ac0d25d8e0798ffc36218769ece7884cd3c572946872350af5a2ef45e13102888078837e526842d4df1c6b1a9679b6360b931ce64ecb39205b5de92cb186093784acd2c42779a89e1b8ed65ddb43365698746e18e2e2a75597343532dc91a1a08ce2f079010de0d3bb6cfb071141c23d7e6e0e13c509f01f3a5c5effad34888fd52f4f4d3e01f5cb4693d32e2fd1967c04067d44a2bef1c27c0d89374fa3ab1cbcb02155d7bc11b4dbfae44687905aee978b94825a2f8f7403db4418049771850617f12028f13f64435e3ec768932ead4a8ae6a873e7aba852933cc163e7bd7250812921677bd47e776e94ef00f14beca229183fb921b845c10016645faec0344210b84afeed814b51c1322809f4eafa9469f1a492c7282494628abddac61bcc44a635f76d73350b2613ca1921b7cda55df8e98352693ec376c32806f60f1c8e79db0dc81df511c31f38d0efb86359559be94a743f7e91801ae5ce00781a425f7ee5770b2de9dc14b51d78a491ed84d5092965f2f90e350d959f90a131fb2ee267f42a863f44ca607e0662b38d058a3dcae3576937c487d98ab40416c110f910ef48dd023e38034a678fadf67391fe018594c1a6d37772d87f27d94e110c32db33f77f062e8a402e839431283cca7478ce0e4b98ba5527c22cf7718586e5690a94d3be2f7123c1846bd96d8e669809c038bada042938d54fc63d160afe8b94b494ffb7ea3e17262a724196659f2062a955f4606e5c3987d74f23dfe4d69e7769ef79c1447e687bddd6179206081aabd09c61ed118391de50b6fa4af81a645f45f3490ee2b30a0c3637d84b07eb787092bd43655c2eb466fe5eb960a8d3f0dc0552c1b23afdcf7ad7a1925fbaf7f0672614f179ef7d52e4c1c7a46369e59476055d8ca7c86b3be31429f0aa271af8212a8584ea6951787525be57232449964d1eeaadb77ee2e062a3686101df59f77781954d51bff4e59d9a7e9cc28a8825427ae4760dc2a4b45b2e356a2efa9fe349b139420b34102e997a8ad293ee6cc54a59981d4b89aab0206e56001591572d516d11022860ee72f64d81f510bd2211b4b6805a10a1c04afdb14aba73adab496a2c3029820209bd9b3a05c6699b0d00b568b14724895f9badcb357dfb3887f54bc1f4d612453c2a10de7112e905fdc58cfc61b593549d581055bf4be95be95651017f1b88b8046b5fdd364e3c9ab6abbcc2a3658e5439afffb8bf90e16aadceeb607f5476550215f40f3a3c502a7103ccabcc5af8d752b25e1ae581cd8511a349c40e47000a319a0f69d7420790363776ab05934cf86e733b845e9f36eb87a2ebe8f83511f6fd74607d89266179f9ac46e6670c588fa9c0fa42a7f74154681cfa4b945a7906d0e9c1e0cdc61b60e5bed5a1a553d84a88da8f0780ed9610f3e703153cef86835e2289ab126a16d6b2404e30a5ee1456a8e1cd5dcd3ffb945f10133a4b51f0f42933137ce9240894b9ee24ae23bf3fb08c49ec2ece46fea655817983670cefeeee775ddab2b6f3821de10fd095b3059378fdae7cb7ee914fadf795b5b74bc9bc8d72a7d682d556e7d78e1ae5f136f5b6df3a95d22edcb3dbcb295502b713d3ea9db1873eec8f75b8091538daea30a8f4cd7df3ca26dc3268452cd4591db97c7c79310305153089d7f970f94d1d0d29b3044dc037321259e318b6ca23ee7aef6bbcc5619a4dcf381adc63b84ebaba601fb6685c121fe8d1597a50c26be7e0ebd5d29e92b1e71b5126f8ee2257c84c12d442b3fdebe167fd365916e95b369fcd39b2fe004d6ea401efa74105edb2f46e6963b0c5e21c244960de29d1d38e07ae193c368c3bea8fba73b9918af7b05914a5b8746148d7181e9887f39f5df03ee34fdf25c466f162255b7bafdb1190b2968a9f1ee5b3dad8585aaf7f5e10e2be13e4066f4b3071c89bc36152ae160fd7fd99f78b23e2810673023141ba5b0f73390f747a64ab988867c0dc80921659eb9d23864b8cccbce7c7fdbd44d72da10c75d51ede5c74ed1fe2303dc219461ea10e19c48986c250fe8c633e4a72786895c53e2e541b06857ebd109ec5797d997cdf191bac8e213b3f29d5d9b7d427a3211f7235aa77864e7003525d470c8ec6d0c84e8830a97843b49072da42a220aed846547e421dd53de908336dcfb1eeee73982bacfe825edca58f99929339fe12d4eb6bedd42e5f187dae431d251048dfd68747ea268934332be42290b3dd2f52295ff58f8a652f1ef27904575da544b1c8797c1a6e2d4554978329427eb518011735e4bd28c9f82de1bf0aaaeda0040ef714bcd5c3bd08606d6cfae3749cf96800dc26dd1af80d1689ab3ce055efde0a4f23c559509932e2873ecd425604091349ca8baae4164f73b069e5eebd157cd0a69feed2bd5b04637e6f8027c387d091e86d8b8c7c601997b7e653f1492063af5e5ca468c42639d3494a8839e3d830816d576cda92eb7ab0a0e732fb1292be685c25dce029749e6280e8487f31901a48435d318f9b35beb8cd8c89f3d38fbf3dc89b5a924e795ff797dc10ea37e3a069cdef44f11e88d01e04b05bfd4ae1e4b882e491c439e64e37f9d72893df80f829cbac69e67ce8704f9452ed10b31ba56b650da2a98d7646971c28c22b30b8dbd47ef22c6a2aab8bf966872a6a486c680c7f70a995831ad62c67528d247cc13e0bbd1040f3520f97982ae1168c6e7c4d428ca684ab3e63df15352223208fb3d00cfd8f02eb1db79a9517d2aa6d2d6794bba9c4699a8097e127cc0b19553cde082af49aa65e1dedccdd0f41c0d2c5e997b88f726516a06ef1201aba1795ab943fe6e86dc11ecd6fcec24b0a2718cbfa221c2e90eda8675f986278aea477c24043baee3134bb4cae51ae44b1161a9887aecb465d21cb065d96bd3530bac4665be8550306c9aead450eceb4a86ad653a58d1d38e70ae18f4fc40f47ea9a13c1729515d7f52a4c3bc034be4b5c246fa06e57d8f21a349a8ff53c24d0173d2fb2e3ba8db1b97be4c762b43f9f4f9681ed2fa75f6caaaf2aec79882178f019cd94468f4cf7db6e7dc3e22343caaa6fb234c5a1149304fa777c9642c37c5d71da699dde76a272360f006d72c18e397980c5c465a87669a96118631c2218311529223568bbf18e81825488b5d2d6d6b5f70540ed0f4fb1706a0b265e2a39fa25456fcf519884b64f700ebd758acb47aa7d8579ae7f0abdb711b8005245f1185c7d1cd51d6be6aa4bc1ceb6d348cc6e9d619d4f10fa5add03f2064101d00dc4e8d9a279199728d1d99e2b2ff54e93992203f4d9fb46a1a76f8dd4e72848194ce25ebe9436fa6495c19dcd09f064e68ad5acb68fdae13ba4e553b0da22c59693cb65ffcaa69b363399cfd03eae09b15a0b00af721183190c5bba6e175a4c1ba039ce758d89754ea1abcdb3bc978ce1d4fd54bf78ff0231999f9864022a2d2ae34e4f433cff6cc0fceb775ffcd5d726696e24e61f093384452bb38556f48efa5064ba3991a8e4aaa2d3c41ca45c72a9429b5d859a41d83c9b24149d2ab52d2563fb32b8334c9a1f80a4d27992ce891b507693c1bd01ee3f19518dd3edd2aaacee782a2165769bfe1d98c4d942956a28ab8579d4b180c7304034dc59afdeaf53d5c3ca3fa57a1594f12b21efd31e0111dea7bec33a21a9098de889fd2c401008ab2edda834b0e3a472c63ced93a973423055ae48d0a0658b424e38fd656c79139b0297ecfa4ab912606021f202887786acbe63edae85fcf857fea02d66ebe34a7c2e715c97d72489d2baf90f6ce61ee476869d73f29ab26c49932b0d77cbef777be8cec7448ed7075bd5db68a8c065795f52febd9b05e176f5976b6c9c11a5fe53892108909cbafd0039e316399683de80d241d9d0f1159f49cdc04d94c5c562c3103f9404d739b39b08e7f6c07e7fd785163ff86957ef9f09f82168bc663ad68d2ae0319023b450751861eb56bf60e4166f3dfe970dfd05a77eb137e574bdab3dc4a7bf4d6d7255c1d299651f82b57609dcc91b2ca4b9c7056b26584e0d47fb4714077e24c2a65f48fdf73772a70b67b328b44746a3cb915b948e3d4fe99a8baead6273664c870fc7140cefc0ae28d7a0fcafe70df4959626626672f3e2964c6f8650dd0745aecec1f629c022b57f7c7c70234b57de78dbe9509fd037b50f5bc6d53521baed0f582dd76024fdecb26a4d289f5ea225ba8bfcaf96a59b6e670944b552b954363c1500c5679a1a95c300096438a32a13a5c748caa80a7075a234185f57df63563fc73b07818cd521b7aa6027cfa8931708d343336cfa10fd996315d4696ce7c618ec7a71581e3e938ca444a200ff3ac3a7f98c28adc8efd5a9b158d0a8dfa78bb8afd96b8b5584582e00469b5a3201159a0d79d66fc41a3ca829613c950c67b6b43a6bd7d4c916c7189871ead5b4700301bfa0d6d1d50a1d43f9dfed4a19cde2a1d93a206dd0d2ba024601288224042d8cd744a36dbcce6ff20e9b7b3c4551138996b148424981050464e41e598b0ea04f2ca75bf3460042ce2aab4a2857fc4b72fba2264e3389ab073fa1751e15d2107851a666d4c58167004d6ce51599996b382aec2e91a92e12f503c7b8a3013f412e9403a0f2de860dd03f3e7ac0c07a5e9d887241ca14f09f6a28baa5c34a6a25b2795a6604f948c49923832eef04377a2e54a92eac15ca8676e8b60481f472c94d1e73e5edf42fe481e02d65baa18bf5c0a8337f4ed75f73b43a939aba89d0bd1af26d99a9102b59cae110763f5f094ac9351661cd30328a043d4fa124fe544755ce329d30813f519d95c3621c65e8246376d812b228846b016a691debd127bae84957eb5853459055400aa8d7cf9176734ea9ee088d3f73d5fbeb648658ea0aea8ef1e7909046d9004b88fb8c7e5db50f982a9e8365ed1baa81435f817efbc7dcde8020538e1d1426a5ed13f8846269204f65b3569563ba4ea13a0ccc138e3ef15e9d5291958bc45f549a1895ba46ee0ff08a3d711594057a4cbf51b6289ef32a86d90221f1ca0feb20fdffd78e37698de050ca8b02d5fb3ed65c227d9139f1f62b043fc43774219fcbae08cde62aaede4dd3eb700889f2f48b545608e4c531cd1962db89cf5cf1a7cc89eb6a1dd0007455f9ef268e31d2f42b08d02ed276121e1c78836bee3ddbfd2a01a90e1cc47d23d04f9aab7f14cbf5d247d4515739902defaf85dba1fe3e2c5a3b01fd836cd06ac1a4d330ecbb7390abdb64eae8e53b83fd1519a212b9e7ad47387060ee1fae355666c6a0a7576f6182265eb00c715f74b06efc739d8331058a6e9d795f51ad91170efdf136382f6a37ce6f37fca1ef3064e2c370150565c8ea2c76521d3707c5a2a6ef9c12aa80294362f"}, {0x18, 0x111, 0x3ddaece2, 'X'}, {0x88, 0x10c, 0x8, "5abacc14f9ca61c05b99eafbb244725801c79d638abbb61bc06fc622cd24995d8f24a693557745109fd275932e1fed6ca06066a3223061526833362ba3f5b3ce07a5eb71a62725d35d4438289debc0ee86f42cb068759f7e4664ca476b73b14992674a4c4a33e839d70d6018ba7b63d8edb53a"}, {0x28, 0x115, 0xfffffff7, "efe5d3b15b278bff4f59bde3077d2c86b5df35c36866"}], 0x22c8}, 0x0, 0x20004050, 0x1}, 0x1c9) io_uring_enter(r0, 0x219, 0x1e59, 0x1, &(0x7f0000001540)={[0x95a]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000040)=0x3, 0x0, 0x4) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x93, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x2, [0x0, 0xfffffffffffffffe]}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:14 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000207a20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) write$binfmt_script(r0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/111) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:14 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x33, 0x0, 0x3, 0x0, 0x0) 15:44:14 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xb, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:14 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x34, 0x0, 0x3, 0x0, 0x0) [ 617.738421][T24244] loop4: detected capacity change from 0 to 16382 [ 617.740813][T24247] loop2: detected capacity change from 0 to 240 15:44:14 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020fe20004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:14 executing program 5: syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) [ 617.782820][T24244] loop4: p1 p2 p3 p4 [ 617.791174][T24244] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 617.802705][T24260] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 617.823702][T24244] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:14 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x35, 0x0, 0x3, 0x0, 0x0) 15:44:14 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200022004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 617.851498][T24244] loop4: p4 size 32768 extends beyond EOD, truncated [ 617.875191][T24275] loop2: detected capacity change from 0 to 240 [ 618.004046][T24301] loop2: detected capacity change from 0 to 240 15:44:14 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a", 0x1b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:14 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0xffffffffffffffff, 0x3}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, {0x0, @struct, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) openat(r1, &(0x7f0000000040)='./file0/file0\x00', 0x40000, 0x1) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xda00) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) 15:44:14 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x36, 0x0, 0x3, 0x0, 0x0) 15:44:14 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xc, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:14 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200025004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 618.616778][T24315] loop2: detected capacity change from 0 to 240 [ 618.630168][T24320] loop4: detected capacity change from 0 to 16382 15:44:15 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x37, 0x0, 0x3, 0x0, 0x0) 15:44:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200040004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:15 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000040)=0x1) 15:44:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 618.684511][T24320] loop4: p1 p2 p3 p4 [ 618.689664][T24336] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 618.692390][T24320] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 618.720373][T24320] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:15 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x38, 0x0, 0x3, 0x0, 0x0) [ 618.736753][T24320] loop4: p4 size 32768 extends beyond EOD, truncated [ 618.770293][T24352] loop2: detected capacity change from 0 to 240 15:44:15 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xd, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 618.907427][T24377] loop4: detected capacity change from 0 to 16382 [ 618.949930][T24377] loop4: p1 p2 p3 p4 [ 618.954453][T24377] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 618.962177][T24377] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 618.969585][T24377] loop4: p4 size 32768 extends beyond EOD, truncated [ 619.001852][ T1033] loop4: p1 p2 p3 p4 [ 619.006334][ T1033] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 619.014180][ T1033] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 619.021887][ T1033] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:15 executing program 5: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0/file0\x00', 0x88800) r1 = syz_io_uring_setup(0x1d3b, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0x400000000}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @usage, 0x0, 0x40000}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3fffc000000]}}) syz_io_uring_setup(0x5dc, &(0x7f0000000040)={0x0, 0x90c1, 0x1, 0x0, 0xda}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7) fsmount(r0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0/file0\x00', 0xc1, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:15 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a", 0x1b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200078004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:15 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x39, 0x0, 0x3, 0x0, 0x0) 15:44:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:15 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xe, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:15 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x3a, 0x0, 0x3, 0x0, 0x0) 15:44:15 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_setup(0x4a5c, &(0x7f0000000080)={0x0, 0xa202, 0x10, 0x1, 0x2cd, 0x0, r0}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@x25}, 0x1000) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x62f1, 0x4ab8, 0x1, &(0x7f0000000040)={[0x40]}, 0x8) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020fffe004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 619.526539][T24414] loop2: detected capacity change from 0 to 240 [ 619.537733][T24418] loop4: detected capacity change from 0 to 16382 15:44:15 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x31}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x20}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0x48}, {0x6, 0x1}, {0x24}, {0x1b}, {0x3d}, {0x4, 0x1}, {0x3}, {0x6}, {0x3}, {0x1b}]}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x20}]}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xff}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 15:44:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendfile(r0, r1, &(0x7f0000000040)=0x3, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 619.606938][T24418] loop4: p1 p2 p3 p4 [ 619.614402][T24418] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 619.624481][T24418] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 619.632676][T24418] loop4: p4 size 32768 extends beyond EOD, truncated [ 619.640750][T24440] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:16 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0xfffffffffffffffc}}) r1 = mq_open(&(0x7f0000000040)=',/-:,#]\x00', 0x800, 0x80, &(0x7f0000000080)={0x46, 0x4, 0xfffffffffffffff7, 0x4ee}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000740)={&(0x7f0000000140)={0xa, 0x4e22, 0x9, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="71023afd75a2b7e6383c2636ddfcdb35fd7f3d9531f29c331a86ce6f3cd3b105327e62ff302c8b1b02fdeb3dec72d7aff6e47da52225a23545616cc9116664dac79bdfcebbddb6d2fd89fe8829d2e8439bbe6f4f506644518650398accb210f3160780a2d61a8e308a3559c980bf0b99f394decc111c47863f541fa1c2712826cfd527eeb205b691d944cf9c0284804a4494", 0x92}], 0x1, &(0x7f0000000280)=[@dstopts={{0x1d0, 0x29, 0x37, {0x1, 0x37, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0xffff}, @generic={0x0, 0xf5, "e41f6cba3dfd22eed261361e597bed5c0ed8958397f3c65348a4f2ad1660919e9ad2f9c8b69a1ea2a2f0b54a6aaa8e444de0f0cba06310db2de16700474ec1fa42499a383de0773f95b36eb21008bfcacfc9573f4b1ac765ccf2316ad1a1cda64b5c579ebcfa2391ec42bc938a9be91c3d36042694e99a2a753b40fc8357f8abb1a76480f59bcce375282ecffc671bb2ec0b3f3ac338420c260aae33ca71601f9552d165422b62a0de8a6d702212480fe9264f2a67fb814d7b109b1752ee0562a69b397da09443023869f09c7f1f8e607881cb161e56f1658c5c2479a5b7d4a12df7f179494d283150888472dc3b28f4a1972f2cfe"}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @generic={0x7e, 0x96, "7ba631a3228be900ab63fee615b45667ac7fa29d5d380edfb0a5d34ba4cca86f4b22ff1dd01fd02d4308f46f874433ee9b28ab99e4264d3ed70930d1bcde32a1b19d9a2cc56adb3490ade76f3a435331cc9798d67d957831b9e4317b9230a3e52e6c7b695645f6c0c5878534c95e70cec2d5d55702ceeda88d6da8dfb4c3083732231fefbfcf3f29a329be14ce0a924b55441509f599"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts={{0x40, 0x29, 0x36, {0x2b, 0x4, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x47, 0x4, [0x200, 0x80000001, 0x7bf8]}}]}}}, @hopopts_2292={{0xd8, 0x29, 0x36, {0x2, 0x17, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1, @generic={0x26, 0x7f, "6f80fcb3cf2f1b4ab230d9b1575a1fd7e663f1e795704f5012081007c5e32043fb506a9fad6fb2bc24ae181856874025370057fb1df3e93d3a355618d9d4a571738526c1e46737ac907469aaf4cc6c43b233a96cad65605fb00e1bd81f5c7dbba521026a0b07e7c1812e7a31ff74838f10e5d696718ecfd5419b79718b4784"}, @jumbo={0xc2, 0x4, 0x200}, @ra={0x5, 0x2, 0x2}, @pad1, @jumbo={0xc2, 0x4, 0x7fff}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @pad1]}}}, @dstopts={{0x88, 0x29, 0x37, {0x21, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0xffff}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x14, 0x44, "5b5d03e0d8bff04d130cfb1389c3b10a45e7cf032ebfb131846e40ba50e183a8f20635744efe51a5ec2b61c58b425ce7cfc5c103d22a2926c101d59f0c691c4552ca8fe1"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x16}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0xff, 0x0, [@local]}}}, @rthdrdstopts={{0xb8, 0x29, 0x37, {0x88, 0x13, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x40, {0x2, 0xe, 0x0, 0x101, [0xb2, 0x3ff, 0x0, 0x1000, 0xff, 0x0, 0x1]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xf7, 0x53, [0x27c6, 0x3, 0xa79, 0x2, 0x3, 0xffffffffffffffff, 0x7fffffff]}}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x1f}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}], 0x4b0}, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) poll(&(0x7f00000000c0)=[{r1, 0x1420}, {r2, 0x2000}, {0xffffffffffffffff, 0x400}, {r3, 0x1000}, {r5, 0x10}, {r0, 0x121}, {r0, 0xe1}], 0x7, 0xff) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:16 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xf, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 619.715624][T24463] loop2: detected capacity change from 0 to 240 [ 619.777208][T24472] loop4: detected capacity change from 0 to 16382 [ 619.807007][T24472] loop4: p1 p2 p3 p4 [ 619.811722][T24472] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 619.822849][T24472] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 619.831435][T24472] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:16 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a", 0x1b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:16 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x3b, 0x0, 0x3, 0x0, 0x0) 15:44:16 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020000d004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x30, 0x58, 0x2b, 0x5, 0x0, 0x9, 0x4020, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x8}, 0x848, 0x7, 0xe6b0, 0x5, 0x7fffffff, 0x3e, 0x7, 0x0, 0x5, 0x0, 0x20}, r4, 0x6, r5, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:16 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x10, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:16 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x3, 0x0, 0x0) io_uring_enter(r0, 0xad1, 0xd6a4, 0x1, &(0x7f0000000000)={[0xffffffffffffff80]}, 0x8) io_uring_enter(0xffffffffffffffff, 0x1a96, 0xe22e, 0x2, &(0x7f0000000040)={[0x7ff]}, 0x8) 15:44:16 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x3c, 0x0, 0x3, 0x0, 0x0) 15:44:16 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) poll(&(0x7f0000000040)=[{r0, 0x1008}, {r1, 0x8400}, {0xffffffffffffffff, 0x1080}, {r0, 0xc}, {r0, 0x9240}, {r2, 0x1}, {r3, 0x1002}, {r4, 0x144}], 0x8, 0x400) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:16 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020000e004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 620.431189][T24517] loop4: detected capacity change from 0 to 16382 [ 620.435055][T24521] loop2: detected capacity change from 0 to 240 15:44:16 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x3d, 0x0, 0x3, 0x0, 0x0) [ 620.483828][T24517] loop4: p1 p2 p3 p4 [ 620.493501][T24517] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 620.501874][T24538] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:16 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400003) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x81, 0x3, 0x1, 0x4, 0x0, 0x1, 0x10000, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x33, 0x20004000000}, 0x88e2, 0x80000000, 0x7fffffff, 0x5, 0x3, 0x1, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x5, r3, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x284d0f54}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44010) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "e8fb125ff4713e302819d8481d36c394d73f2d3a7b5dba43e29037ffff1a99e9ea96"}, 0x2d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 620.527349][T24517] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 620.547000][T24517] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:16 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200022004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 620.579584][T24553] loop2: detected capacity change from 0 to 240 [ 620.686328][T24576] loop2: detected capacity change from 0 to 240 15:44:17 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x11, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:17 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x3e, 0x0, 0x3, 0x0, 0x0) 15:44:17 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:17 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 15:44:17 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200025004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xb4, 0x0, 0x108, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x10}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff0000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8900000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 621.314556][T24591] loop2: detected capacity change from 0 to 240 [ 621.333955][T24592] loop4: detected capacity change from 0 to 16382 [ 621.340511][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:17 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x41, 0x0, 0x3, 0x0, 0x0) 15:44:17 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200078004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:17 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, r0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x3, 0x0, 0x0) [ 621.363797][T24598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 621.377334][T24598] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 621.400960][T24592] loop4: p1 p2 p3 p4 [ 621.405541][T24592] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:17 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 621.414404][T24592] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 621.422535][T24592] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:17 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x42, 0x0, 0x3, 0x0, 0x0) 15:44:17 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x12, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:17 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x1549, &(0x7f0000000240)={0x0, 0xf019, 0x2, 0x1, 0x3a4, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x28b5, &(0x7f0000000040)={0x0, 0x2e78, 0x20, 0x1, 0x2dc}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x5, 0x6000, @fd_index=0x6, 0x2, &(0x7f0000000180)="2ca58824e009611652acd00a18bcad0a349fb46399dc7a971d9117c4b2af4cf6adf1733a7e8de59aee03d7d77ba25403c530ddcf5dc025b4cd21e98e287c339ef60a40b3", 0x44, 0x12, 0x1}, 0xc9e) 15:44:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x10a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000002c0)={0x0, 0x80, 0x86, 0x5, 0x8, 0x1, 0x0, 0x0, 0x40, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x4100, 0x9, 0x3, 0x5, 0x7fffffff, 0x1e5, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}) preadv(r3, &(0x7f0000000100), 0x0, 0xd9f, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f000079d000/0x4000)=nil, &(0x7f00003f9000/0x2000)=nil, &(0x7f00004af000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000090c000/0x2000)=nil, &(0x7f00006f7000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000337000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c1a000/0x4000)=nil, &(0x7f0000000040)="724e8ee07c67775d18c0530cf765e0f431d65963b7e1ab0e637b53bfd254498dbe8ba1bd9bfd3f2216e577316f7d77c8e6b5b573c430d472fabc2d9d3dd1165bf446cbfc6e0784830db9fdd809b0e5", 0x4f}, 0x68) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 621.497522][T24624] loop2: detected capacity change from 0 to 240 [ 621.518435][T24629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 621.540954][T24641] loop4: detected capacity change from 0 to 16382 15:44:17 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000fe004300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 621.565349][T24629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 621.592644][T24629] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:17 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:17 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x43, 0x0, 0x3, 0x0, 0x0) [ 621.620758][T24641] loop4: p1 p2 p3 p4 [ 621.632791][T24641] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 621.654968][T24641] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 621.663082][T24641] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:18 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x13, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:18 executing program 5: modify_ldt$write(0x1, &(0x7f0000000040)={0x101, 0x0, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x3f51, &(0x7f0000000080)={0x0, 0x28fc, 0x20, 0x3, 0x2ba, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x44, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 621.694542][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 621.704199][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 621.718505][T24671] loop2: detected capacity change from 0 to 240 15:44:18 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000feff4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:18 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x45, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r4, r5, r3]}, 0x6) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:18 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 621.781756][T24687] loop4: detected capacity change from 0 to 16382 [ 621.834851][T24687] loop4: p1 p2 p3 p4 [ 621.841925][T24687] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 621.850552][T24687] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 621.858751][T24687] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:18 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x4}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x46, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 621.896531][T24718] loop2: detected capacity change from 0 to 240 [ 621.924615][T24636] print_req_error: 38 callbacks suppressed [ 621.924628][T24636] blk_update_request: I/O error, dev loop4, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 15:44:18 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020024300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 621.943226][T24635] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 621.958133][T24605] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 621.971674][T24601] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 621.984126][T24687] __loop_clr_fd: partition scan of loop4 failed (rc=-16) 15:44:18 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x22, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 622.018280][ T616] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.029656][ T616] buffer_io_error: 30 callbacks suppressed [ 622.029744][ T616] Buffer I/O error on dev loop4p4, logical block 8064, async page read [ 622.043825][ T616] blk_update_request: I/O error, dev loop4, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.054685][ T616] Buffer I/O error on dev loop4p1, logical block 8, async page read 15:44:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0xfff, 0xd25) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) mmap(&(0x7f00005bd000/0x1000)=nil, 0x1000, 0x3, 0x8010, r0, 0x2bc4f000) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x156) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:18 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0/file0', [{0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '((&'}, {0x20, '\x00'}], 0xa, "d002772361edf477bda65064efb1be622e63257dbee9f34444946e73295ab9441b9293f4859186eba85fdb7f88792112bc2ae552ab1e74591abbb64d4432b3e8e41f39e3b9f41785a61b23cb2b77eea8dbf4bb023db6693ee076b4e4473c46aec9ee882e3bf10cbf82e0e93425b718"}, 0x8e) [ 622.062659][ T616] blk_update_request: I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.073624][ T616] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 622.081665][ T616] blk_update_request: I/O error, dev loop4, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.092645][ T616] Buffer I/O error on dev loop4p1, logical block 10, async page read [ 622.100722][ T616] blk_update_request: I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 15:44:18 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x47, 0x0, 0x3, 0x0, 0x0) [ 622.111667][ T616] Buffer I/O error on dev loop4p1, logical block 11, async page read [ 622.119836][ T616] blk_update_request: I/O error, dev loop4, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.130831][ T616] Buffer I/O error on dev loop4p1, logical block 12, async page read [ 622.138972][ T616] Buffer I/O error on dev loop4p1, logical block 13, async page read [ 622.147198][ T616] Buffer I/O error on dev loop4p1, logical block 14, async page read [ 622.155283][ T616] Buffer I/O error on dev loop4p1, logical block 15, async page read 15:44:18 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 622.163424][ T616] Buffer I/O error on dev loop4p2, logical block 8064, async page read [ 622.189138][T24751] loop4: detected capacity change from 0 to 16382 15:44:18 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x7f8d, 0x28, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:18 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x48, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020034300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 622.265034][T24772] loop2: detected capacity change from 0 to 240 [ 622.282549][T24751] loop4: p1 p2 p3 p4 [ 622.291570][T24751] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x460300, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x3388, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x3160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "8fc1e0e0f841e26e6ba34c58e069968688761d02809954945a4f3e"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "c1243545e3e6c35a6463923e5afe615b8f6fed99f5bc7980e393fb8d1827661f72052216cee71a53235a79e245dedd8b32c5b9c317fa0604fc223d5b3aec23fc66d2d0f13d4d026605cb6de305ecf0661e5196864d7e7ec68ff7c54560d0181102072c7a78a6b83b7b9069eae0573b3db4be34998033a780104270fa115ee64c544cdd58e70aa233e00cf504d0af948c571b9483ced935bc12a54e6d15d9f41aaecc2aba6a3ebc88d00406ef66a1ef2c0cba9038322f6e6139047616cb4222e919adcdfea788590d3bda8742fc48f1972f4572165eb4515a66119e94d9ffe3ddbe8e33c4683ddc4e789b14c469cd2f9e957eb6bea5bd9c28250c197be1255b75100a8779ed500618223357c94bdd05878b674c7b16d8cbcf0e7956c016263d5d2cc510aae615f814c47ab4b49a3072e3520b65fdcd9b95376347deb50dcfe5e34d584b4cad816c70f67f5df59b4b6a6c2b99c596dc81be696b73865b32fac35681c8791aeab2c0380b212f5bb9008e99e194fc43463cb483bf949409ed610afc213d0ebb88469e6ac846d20ffbfd2c572b3ece45cdd92aaeb383e4907cd54a03ec29fc65b2429755a1eacd6a4906f7751db3662632da1a0c8e486fec42603c4fa29d6ef7ab98ad130db0438ac81281bde42ce18e7af1e591b5ba7354676d4aae4fba6fe6d1aec16922a470c52726a081788990dc49414f241ac298d3acd65ad6758b6c1c56a6b99a9b126642fbfdbe46716df153977d42f3d4e2d228fb2bb03913a4009f3616f2becd22b7401c1c4092e557b8571857867ddc944bf9e046c033c33204a6e03b063984bc27474b94575c004fd8e5a041dcbbaed0ea18dc7dbb2c9061dea87da0db22cdfeb1e059945553c66f616ed76433a3cc06af4882201f009f03abca2b6190d8dd3877d9e7caec3dc2da0026b58e4b9b8c06a20dfc1efa9229fb300b93d03f2f7a2067e97c6d3b695583b04ae33009274d672f2d3a6217f97d492edfcdeb15959cf83250447e9df10dd737ee2a5319bd567eab55e9ae5ed50ac184c9981c24c69daabf4303fbfaa1cae33e3dc0076bd30e7112859e1b404f4ea343fa1b06ca202921b2fe759b02669005c39f4cc508f39e112831841ee6d7f33f6b98dcf08a7dcd5c24ce71ecc3df7e85ba5f53887158cf6bb7903f00fafe21181c2095f5a6fe19f158b4c710e455b279f0a9637c642c459d37096ca70a676788c9c636a659ffef059935f6e1054693dddcf581496fe99c23bfc70797f18218d7194884cf78f81d80bb4a78f504710b05007866c198f31fbbee84a8cdad39960d26aea821fe411beafb3d59678a252bee910d8c513aaba3007b9ae33fc3bc32ce9d9afda36914497cc2e92dc8fbf98e798d741c816ed42930011fb14e7bbe2f1c92bf35c9bde104288da65215068a13d80752a2c3cbd84a813b3b184effe7cbc748f080585c0cbddcdb5b8c96905d03b5ca76d535135968990df55fb2eaa504fefc6f37f9d815a4e29cf14406dccb03d5cde68ac1823f3840b08c3cbb9a129aed6c8b0d14f193fd4030deb7e0817387b1f56662e41ac0c1b2c5048a21e659e11f9647501d16ff3fabe033062bed7bd559dc6043799a2ee1c12e9561a71a18ea947c130b73073d0b5464dce44729d6dad12e329f0a4d558c68799c903928c7a410abe0b46dfa1caf47033918002aae896ef3c7ef85ddac120502d7bb14931a870a970fad687307aa55e0d52e38928a2c933d74fe3047351bf9c445094cc99bfc3944b8d6ac594c0da109e9e99d8c3d983042484e80644ae7a6368ac54ca7308543e49a23e2f245f8b16ab7a853b7546a7b112c21897faa74ed0916bda4900da731959761ebcbaf519ae95174fca3f77d3bed27c350b62e935037859fa3dbe68c889e6503af871feaf784b488365d65f5d82b2c9378e800040fc6cffaf730d016cbac116d2c0443e274b13aa08d88765fa5bee20c5810b51067dd6551ed02e0bb41f1b851cef7688a068fa0812487999ea5f3cf9b7dccd7a8c2e4a4dcde464beff7f2c32745096747e51c40ac758fda4195b90f5d189940bae7516fe0226891365235296e4984ccb2ab3bf9b9c05b27f863ff18581d51102b691ce76c1fbbab6145dbc144772964b5d6433d3a0dbed5a0fdb2ab796ea07908fb25b2b697d7224bbfdeea694cc27f34e3e48ff14f72d31f175071eb5d8e9645744c4df76c10e92308160ed08a9dc92636d637dfb99d1e8734a6b119d0c0f5df52ba9aa0efbad31310fb23f18032ba5721f68a9aa52defbf94da4128ce87d1a025339c02871e292c3ec9ab84ef85a5dcdf6b52668b553385e141814680856cdcf06a10ec8a328d755c14f6dce56eb597ac58216c2db906b688277c7ad30d2fa93a93cb5c1c3621870a3101e38d10c918d9a19b845e51cdfce45d54a84206cb190ce9a76292cf70f9d8dc0a2c7317d8ec9b1b589bce9e3dea13b378a30877658ee1409ca1d4d945bb74760b8c605a5d648f45012f96f6967d8f787bcc92cdb5cd2e73d37763d562e54cde6618748b50c00b353eb3e04561913e87ce6f47f9d48537bba0a3856af9ddb626fed95f6438eb26497a868af63c7d607d153f17bfb8c2eb7ce084a8559a58cced7c5e731ccd96e93ca4382d2c5303565849a455cb1a618dabbbd742d5b333a32efd241b1380830bdddcf0badc88a53d6aeb34049af993e6f629f6f699fc651a79a26c122fd707c641de0c9082b0c96384d84792130105cf32f8c54814468e55ee2a2b02f2f8272def1b02ba812cfab236c47acc8e15d9dea99c93b52e6899a9f5ca81ad86e940ca468a34eb092f15b8bbe9633d292840c9016d459eaf5a7fdccc04469a70016c1d82c2c1286d77ebaf43128858370320493322e075e1e68d6f539fc1d6fa149bea6f1f49063e17f79f5c3b7eb1b44638117b16611b727cb3c768f517f314ac80c0317461ffac625dddcf7f1c2b6f8fa2080eb69a423657825922c18c687c758f0529b7ee427ef6970a7766ebffec24c9bc9cf33b0f507813e240c29666d500fd461c9d0b4916f5ca8415195ab2b159f4cf58d54901a3ff91bc4c3b75d1cdc030691dd5e3941520310bcc92722d070f2ac161e2cec76496c0c4867559794d6a23fc59cc9ef237d3da689617f9b2d4931e5bc9f1a220e3ad6ac45dbbb4ff726af544311027e9e8b34ada2a3c4b071a62d9aadb331466787f8b2aae97cfd1f3c0d599eb6d9bffa465e2a75846d754c9193cffe9dedef74af5811cb027a0982250ddc2e5b8803243decaeac3fbe2c8a213208591d2b2187638efd4a989af968aa0e1536916e4ff595c8f673f0bfe8e59a28ec15cd2483a4467d7d3e85cdf7689d41fe7093d4d91d8b4e7fad4ee545a1e49a403d9a01ac3a5634375708fdb764fac2ffefa4fd48171e1b69ab0b009903a5b38b8e7c0227543f4abf182ef79beeb9d7f3e4adf5f3f3e20600ed18b52358a8facad49a17d382e6eec1e882b058ffa9df96666990ffb1b67ec180e2bcb2493aff7cfb7300f74a56b760866ba330d32589efb37baab7ea989ebd5af91c04ef90550eb6e2707c0e54dcec37d974e7ade21281a89e7c3971641e20f02f52ae2d2f9900792b0b5af4533bad1d28349ca4df1462b1aec98602445a7b8e02af42eadfb2e875e796dae9bdc87c0b545a868b1e2de670fc5bdbc478cf0abbe0dc6d8beca6ae3c1afb49359d8395c6c86a56e8fc5c010831dfbb5b12f161be670b4177aa91e5209eab22e7765233a9a96c54e6eb933132222a659db9c039fb1ef418fbc87beab145b6a46fd24a91f90c8a41e3cbb1b692c48bfcfd8a1d17b709e1ae94e8da58df5e5219697c17a82d05ef3ceaa1a95d56437e4fc2fc5786484732af1b3c35a9559a1a95f732e4a2ddaa591a12590f6146cc27a256970ef8c22c06de5662728f7d080bc4f7e3a45371025638e0f2a6e6ec051bc1ce016599b56f0c4568a08e38afd57af272dd70669855b6f784df5f5e9d430a3ed821f9c51e8cb361d5d6b4c101dbc0c7c0e8f090574942a6699a2405f9785625661e5b7b2fd004cc3cb8a8db99a232c353bd3b69f428ddeba99946455505cae58f83c7f91a343db6f88ccc5aaef621546ab324bc7438609d767586b030b891df50d4250e7367c5e67628e3ec4e5d53b1d91ca71ad286085cb309edb28c1f95bc3a38d8ce82a8e56fec0ca7c773c74820437af74b9d75015a4bd6d75afcb4276fa4a7ebb4e7124b812184e1d6e757ffb895f723be9f360ea799ee3c254e52d231a4129c9fbdee435ccfc5d49ddd48f38be191562727b9b7f5882e66572d630c0fa70de4916c3635aee1dbbd7b80f3e8aea8bcd35e1c65b80bff4836e4a230c53ca8f1aef15945080022745c4ac1ae4a44859f928020b1cd86876fc6783cbc83bb605f965b99734e2236bea8dae879e4548a430a935494c7b2ae5f4a416a15eba43771ee3b9946d70b1b3299bf606060cf48cb30e5114ec0e2961cff7df9687c33a8b52eb2cf137b5b6d395dfc97c7838b8d29403052cdee50f4a41f64e89a39183a982762fbaef3943969a819cd7758cb59cdce9f86fd0fce6c481db0095372a33344dca5b2a8c67904ddbc07e997d71ee606db956e5377326cc4b6240911cd8d6266211ecd834f0a7015c8ed6b04f74213fea4959c38202718717c77625945e105feb90d2119684cee527745a58f8c757bcea611975b7320509b3913bf0f33ab9b00432ba55f04d33834e19c8ebcd6cc6f9da48caba26f2a5931e59316f95090eb948854ac378013f8f9ef337048817b9f14a3176defac2f14eda584e0043bb265ffdcbff260ea20633c87ea26e5186e81a7e88681403e5bda7a8137026a9f48f132804f71c4b0a6c94ade0149ca303d1c995575fc01c9d4e5914f5774fdfce9a9d8a47000678a2b099d7fb9171b5d9cc576021b8bd98a9d2d8faf0d2f986ce85f11b6d8d3c4b4085b2892bca62ab7ed66680150de23364cee8b9dfcc08b6737e30b055efd3439ed6b50a104815cd396aa1970f394d5e002045dd8450cf0b1317aecbd373e71980c33c048f03eba89895bfd4a46822263a423c5ad73f9ccef311d67839d23e2dc94a54262107baeb7d9a2cebed261a3f6aec1745a2fef60ee8adf0c3d526aeeff2ee02dcfc2ec1a75323231bbb01e642d08325f511ca68c48288983a61f4d939e9e0ad2592688c8a2e46f494df925ba6ce9689a212a2aec11c16030a931cb994060d026c552e54cbf24d883b2b1013f5b38069fb31acddd85909ca2e4fef93a33f0839e7c27d15942772ca47bf914c81a387a43eee9def2cf950eb3a19b6262d495cfc73f0f6d9057a5a39006d82794a74a154aa69c15125e5092852ac064497ea3764c8835c45416f461333b681ceb852e917ab5999eba650e3ed17c7ca2986a296bbc77a5cc55cc0b0f398c44344e40044441704253b16dccce38a2fcff58ab7881efcd970bd0dbd537f8fce1e0ab2549596b767b22393c2a3fd3dd8c65a0ae76c48a61c524e6a2f2898391c98a9b0617a06c95221c220b8b20fb4eecc976a10b5ab994f69c32f1c3f72f954d6ab0c3ff2933e61835bc744df4a264e3583a9da51e5a36afe6f1a8716f04bd44d43ab3a992b5c9dc4c35edaab960e86ee891434431e5d333534f5924a54fba42de956948ee39136c3c0d1bb86709646e59fee88d65022e05dee751513ce73a32eba0bebf0050fe4179fce958e833df789cd84b7084e35be056455f7ae9f80b16d22e1e6444b5a3fd23b13db0dd05a34bdfa7068ecc1123dca4fc473a7430f"}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "90ab9a73e394e1b2cb6125008e8469b2ce6fe267d0b9ec434cf99711025958a042fdc9e227318cee04d47fa161a9880aa0a6ff7c805dfe633b0d7725245b2a2c49cdf7eb5e6281def36bad04b229739e7e95cd3dca5ab57886b41d11f3d2ad4c1082d9ec37b641f2b7abcc930474579319b5461c6ed86170cb38"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "b3578ec8f2fd8dcf3668d1fc962aecde6ed8d282f11dca0934ae"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "9af0ae0c91b689caccfe42859c5b5be5ed2e2f2360a2ab6c"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "2667a211fc2e4f70c71d78941fc81d6723ba4a111ea8c9939f9226ebcc1059cb4c0fbf2ffbac34ca10fb2a6d38e52b3d0aa52e12b9456d5c49c2f08316f09dfb68d8c200c091242a078bb9e38a3a43b0ad5b1bbc07cf1fa35147dcda95094767bca940467315e20fee4cf7ee28d99d41c8f68877c779329c253312546d06bea97360269879cfa02900c8508f706d18a004dfaac8ff15d16eb881bad49c21c07d6f9c3595df7b378a950bc9b6dcfccb23d460dd859ec729ac880e1002411dcabcc1022498088965889913c0c8041faf76a674d962c464274405698e991345b11f7c94a52787ae59b1e9fbc419e8b884a866d7e0df22fda5d97d473a820613687b39430614b16e162245fab56548e477ca85191a0bb22ed860edb97fbb87f0d03626dfb4101562a6918f8653411ed773a223e0002fa8f083e5bb1fda8789413ef9721c0cb079eb9a280d6e28b0d979efd6a39045112797387ef0bac2c7d2484d56661b8b44e1b390793fb8848e30cd5ae4294b29b8d25763f52d850f79fe65759bb68f6ebbe3899f92319d295b0c954e7e1b0b2d579e51554f09d1b381e82b15d69f3bfdfc2e0fcfd91071dc59a6ec26b89c197f09c654471482ba8a22b8f8355da32c59edd2119c264d3bc8d94e02acba0ae844188c3e76685931afa8fad2285f2d491a82c0e4d80492745d0d57b137917f02928635338286cf3887f9c8ec84f45a4cee6c86f3bb342c23d09fc655069d8d2dcbbf4f398cc979d4c2a862d6b3ad325615b1359f0c4638c03c71d851fa04e5e9cd5b79546984e251263e985690e9adbdd0ae3c39a70caf881d1c0d269d9ade604a3cd3d98e4595dc54b5d635df163e46a1423f7607009b694fe28ff0b07011b02daaecab46300c65a3519f8a99a7f3e87a2565062273f157f3485e29a37f41e4a2270150e6e85522213f4ca991b756dd0beee9c37c5ddac2b43ebb2bdcc332baf704cb4eb32021ec4c7163ed53e261dd60f31ea863366079a9b3fb5639fe532ca4206704adc25a5f8f36df0cab201a3081bde72c677630a9c01f1513722c3fd8111997915290864d48fa2f182fa72eb59771026cbe179298ef63f5940f585537d28c34b0a043433d2612bc9111c89fb2c6d349b5c225dd399cc7c7124c59220cb8da155ce311afc75a4fb6897077988b105509d206537fa66b0ff61dfff6c18e9df3ace1132454ea0b233076a1d6dde575fbaaeafbd33f4b419d994eff642f5951547018d7f5b91b24d6d25f27d750c6c1430d933cd5b760a7c128122cbc88f4182215e8ecdd93ccdf7c899d23159b4d941b139b79f4577ed2fab83b7f34479cee338521416c179d898787088142debdfed8b85cc7f2d9a67b7d3fbed27d2e8b96324b829e91bb70f3a81971f1f08ec1e787aa0697df6083ba9bcc2d8ac72c4888200e3d7b7147e42aa84b2bea11673cd43f29666b630262a7efe655d1ccc1aebe5dc6498140d21cbaa75b2bf2b385ae25a49ed1d7ed7e0b167414694b1cb1e3ca5212bf1d1b568de19799ef717aa33d8f78beee6176850dd4b100ee1bef792a1145888c58d58b079f34fc7b125943affb24e767163f48248ad27937132f04a8a5c43537b475a702f3a3734dfc32ba450a86f37c5e10b5f58cfc27cd640dc01e213a9876181e27de9f4018b8fcd97a58a2545cbcf59b66b1e9eda326370176e58967f5a1e10ed0ab33a92f9751bd7ae9de2eaa8d21ddd6667f1977377993f20c67eb84fe8dd4587cf71b07d865c665a8b0fc396df68fe8aeb852d2bcf133d530e9e9d891eeed0281c206455de4e1a4383671e38a9a5633fc22e6d427ee1ccc5f41a08ddc878c504fd30add3a3833aa21a1dc05297fe2ba7bd0b6fd952945e02acf8ca84b93314c0e41f680c089664d33a0b27e7a364ec417acf7aa0c1cb152b457260a117fe7c3ce0703c92f9549a4119c13b247a3eb6e7a6a95c90bd36791153c2fd487aa5a7d6e3647638b00b2e2ca7bee79f75c91ae44c9bbb5c0a71f3f721f1fe3d68e0ed70f4443869745fc98d1732b0c9ec998c592ed955e17afbe68184c4e366fe1498672d5196345fd15e7ebe13452f17521591149cdf72ffc8116cc3d4e468182dbf9fa3c52799f0ec959b34f747fc1d44435ff3e202e3395eeba7ecbc6e5254b895bc82b42eff5d18c806a4bfc845185456bd47b7b42c4922c7d936bbc9325f7b1f4bd84a9ef5669cddaca38f9fd55cf6032cbcc13c8afb766be4053ec5fa3ba3b52ad24e928ef86b707c8b17a92402bf3b407aa0d240b87b5aed553afeffaeb7e33efc0f823941e84ee27f4808d7574814a6abeee589afc56f8636e625d348776072821c6c0bbbf5916b6b9da00ab74296593e34bb0afa7b195ac1d8eae9712b31e90db63ab273b4a5cceebdd0e454c131cabc14531a187be27a917fcb76573549f65c6e9117071f26d633c33b54daf2a6d10444e51767402bd8cb0166b06661d244db5bd1bf362b6c6205330cba59138d085f76320ddaccfe77aede7eb97dffb23d43f56d92b0d10465cd32783dac1b13a45b5cf6927f748720ad1419e666055f19e7eab1294820c155bc11649b403cd1873d6fbe068e95cd942b6bcf88a2a27dd29e7d4ec2e761d0f6f3d8d595533a3ea0bfff6a519225be7f1b18a0b802d2d75770eef6b08ec2cede447373a8a501e7b55d5941f11b1eae32fc7825c1401c4d11d759b2890cda6779940748cdc1642f2d8df1f5bea009f83e643622593dcc137a78a630b3a15f5e5365f9b08e4e6d7cacb88856fc7d98dffb3f5f5ef8d2d10e223af8b75c7eb2ccfc4bdca435b50e1cf0afa8ff5e4d80307a99211bb60a72c98a458a8d9512856cc397a2a0dc8971561ed096b7dc212a229e640360759b3694815c97dfb65da44a05ba5fa86b42fa58e106a9e6e88ea752893ab0997642347230f5e1814663cde34543e24321487ba673a6c76db0e1599d952aa0798cb90fcc854c6509bef32420f28b7357dcdcf5f271b491608811d309bdb3522b3a4de8f6c154defeb77a6a2c533ee35db91c69802f1f251b4fd3569bf59a0da5d323c44dcfffec5ea88de8cb51b29c4d72b7434909d313e4bdff78ce7cb869f18471769ef16c1070ee1a208673560d5a2518791c9e2b5ae6e93f0c4ca38e64f96f36319c68bc3ab1a8d4cc7b4f334826b630f777ba0110825711de38f3e261bfecbd1580af1d0bb4bb53eefbac18492bd2f8a0dc07cef09588103be03eac729c2207bb6a53c51b492b80d6f7014c44f7c536dcf15095bfb1f822402eeb7575d60f909cf0a55fa7b0ee07b58d865c66157478e9158685eb08f8968fa6ae46ba92a9831ab071cf8876a3ec5dcba2c8376ac2a046182bfb8e72d47be1abdfd10a2cd5dc9f233677222411591638d6e02b9fc745619d421e5b616e2bf19ac97748c9b3ce6b737819c04e5360a4bc58070ea8f60ff54b8b3fbdf2ed3e5b8ce6bd8224f0253515d78711d6dc1fc06fc2459e0f44cea0175ef0d6720303d89fa18bf6c56cf7efc08d7d120b75bbfdea9127021d9e712de6f9c1fe2bdcc772ff67c7591966d28e095f03c3a99f318957dcfb2b2f8140dc431ea102ca64c54c1d5fd23a9269af1c2b44adffb436e76e8f56385d00da8f746812ec2c07c6c460c23650ab3dca96450f3c495d0c20aaef3c6ac829bb8b1dbd8d904e5f060e7e382026a7681c2fe732736b0103802b8df3534e50f7871c2ad9299118775497de0eec3fa638acf60934c764c3cb34c088b5e7563f79656fd0257039d05e0ab2b8bbaf739789a1d20bc7a28333af91d52c0f46debbba6a023f64df2a3f77813fbcfe39e708808b5205dc7a87f0396ce6016f4e085a155ef1f617b6da78e799f8af298e132470c85d2dc5717c2def8dfc6d302bce84e9bfd1d6881eefa29851decc47e384aedcd53152beede6d61096b9c582c4b20414dbd0ba1b97dc62e88199080ff61036ecbfa0f7efddaf3f21f0e4854bcf736d3c6faad2bbaa469f84e8f34324121dbb21cc371c2bed145d9dc4ec833fb0057e77617eb20dff105cdbb42e0ee3e32edc780678a0ae6c9aac030a59ed69d4386fd33b14c0b34a326ba69b90576e31ffc0ed199ed7853ceeac51a2e57ec5002874adfde3d2fa856d2475c36700a7916cdc058905fcc0cadfe1914c02684631fbd9bcfe1acb115e287e4ca82864c2bd9d894e53fd1cefe6aeb2a61b6d9d7890f21e63432ba81e087616630dd8d7bd4f1f1286eb2b81195e2dfcad08f30ee8006e4eb4381dbebb079fc79f4db9edf80993175ead7e4d59f028aff0ebb27378affa8347d2e536ae4a1da4d8fdd505426982342914f105dff31efe39c4a15977c24bae36217e411f3ece75a124f4bd14fd5b6a32a9679aa34927589afaa4e12db5392fd8c03d650315af02897a9c5f82a7876e87ee33fcbb6cf2d3f66ae5a756c0de4a0bf95754e3bd1dad6667cfa60ac9b672f23cea30ec07e8321fdd730ee6c46a5cc1c7a9133fa8290aa418675630fb60d3a2689428d236deba20967e564d025986979096c38a61192ee79fba4a886ce963f5dce55d4e7c6f3bfe68262bb8111e85106a7ec64680ff16074de96c79a8472abb695c607f82cc414b33969ebf137e9877e6cb5101533e8c075fc1aebe5ba7f7e08643d5514e4b3f696479c934d6b55d7160dce32c842f90313098b0ad5fa87b0ea9d8c1b1364a5701cf0f44534ac397832b0b18ccaa7c06982263cad79ae6bc66835f33c29b6cbe039d9234d8e372351a147fefa982ebbfaa79c6ecd4a26416050a12fc42e9fbcfa933301f2434ab9c3a58985f9497cfeb558f62f5ad66f7cb09acf1372292ec3f9e4aed1b657e36e2d2ad1f95db22977d2b13109711048f8c18f8d3c4f043f5c6df80ab97063679e835211aa217e283aa7e5e9562396beec18d00313520250d1c39317d242ec0ccccaf1a9da89770e805c78ebf846db7d1fb9eaf320403252d50b8fcbcbe7ca22ce518af3c56f5eca73204b2443e202bef84217de38c1bd134cfd809b807e0aa3554f60b51653389bc87d791d94c86c25003a16e8dccc9cb36d5ab9ece1151af7e0bce3a41e6ca274cbd64ea96bc83725d4a82beac2476ea97191f9b314bdb45d99af474421a4b5262fbfbcd8b9a4e7bfac0e29861c9efd232ecab6ced4f8ccf25abe8fa30c136608ed4cd8e487288b678d4b13b6e6852a39609aff6e8dab7e9053dfc77fe1075f1089d6492f7f208b0e8798c3a47b2df028b3267cff44e5c5a24585c565de6ea9f567f317be02e4e8da501d6791dd60f1ac67a1553f5fc2307b5eacae46514e23dc26373f8e787fde543bef9894b79a07fb2f7e33a9da658c81493c337b271ac2c3fd1692042fda9ed75df5dbcc81e8dd4a6d7d88308914089b28714b8316dfd35001c5f82544064da0e2b21db589fe192c5baeffdcd815d9547707e2034c45dc8e14e13950b47c998ca39651aaac169866897f0fb7955d0020ad5314e0fad77a5769e68d139ef97734dca213859a3689691dc607586b07103c97c21bf7b8e4e0f62641d441d9a9f353a3445b1bbe1f780c79093dcd2abcd5c4e0bffbc442b12ceba3e3c03c1c065ae957bc14bbbb0abd2af1c2af6d7d0e57af6028e0c29f145cab225ac3ebcc8f0c06029526f42a0c0d66f0fb2619b1462fa29df6a6ec8a27dcf061c09784993532ad2bf87bc1b87a7de7d60be61144d0624c8166c191f26ac47ecde1b03d1aeaad8543d9ca70cb2b5a1e31f6214b7593423d5baf0685ee001017f15267de531fd2f5b4f9745fd6182fa41395ddcb673112"}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "04387e9f68de2d8a16190ae00b87d4a3539a971b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x12, 0x3, "92a99ccc833c5729d9d3d252e696"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "2eb657f4a1d31087e97987619343e2c7b2a99661e1a96c0baabe0cb15b9d7c9c97d5f9d164f3989f0136607031edeaad9b691164ce04bd89aefc609c378b75d92997e4998166c4913933089115fab3c9e0ad413cadbcedb0ac8d72b5603d8a612f253017c6858cf3775cc8178b06bd1f3a6631d0dee9e5450a3cbfe29277a54ae0f423e08df20a083fa8de7521c21249b523305e6d925ac240e4e5dfac78b84791c6a0849b30a1623fc6aefaf456dc5323564a45854e090368139346fc3c18bc7d745eaf35db3641dd221e074395c82ca8dbdfd655fc5db9fa0bfff6544d890f"}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8247}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc29}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}]}]}, 0x3388}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:18 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)='##*!\xb5#\x00', &(0x7f00000000c0)=']##\x00', &(0x7f0000000140)=',&$/\x00', &(0x7f0000000180)='},@)&/\x00'], &(0x7f0000000380)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='+\x00', &(0x7f0000000280)='++\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='}\x00'], 0x400) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 622.331378][T24751] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 622.352286][T24751] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:18 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x25, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:18 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x49, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020044300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 622.409118][T24803] loop2: detected capacity change from 0 to 240 15:44:18 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:18 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r1, &(0x7f0000000580)='cpuset.mem_hardwall\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x100010, r2, 0x466d4000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0050}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x424, 0x3f4, 0x4, 0x70bd27, 0x25dfdbfc, {0x2, 0x2, 0x1f, [0x5, 0x3f, 0x6, 0x2, 0x0, 0x80000000, 0x6, 0x5, 0xb15d, 0x5, 0x8, 0x6, 0x100, 0x0, 0xffff, 0x0, 0x10000, 0x8, 0x400, 0x9, 0x151d, 0x2, 0x2a47, 0x30, 0xfffffffa, 0xe6000, 0x22, 0x2149, 0x1, 0x9, 0x2, 0x94b, 0x10001, 0x7f, 0x3, 0x4, 0x8, 0x6, 0x3, 0x9, 0x0, 0x5, 0x800, 0x0, 0x3, 0x2, 0x7f, 0x9, 0x7, 0xff, 0x80000001, 0xdf4b, 0x7ff, 0x100, 0x4, 0x1, 0x8, 0x40, 0x80000001, 0xa0, 0xfffffff9, 0x10001, 0x4, 0x4], [0xfff, 0x10001, 0x9, 0x100, 0xf8b, 0xfffffff7, 0x2, 0xce17, 0x0, 0x1ff, 0x8, 0x4, 0x1f, 0x0, 0x5, 0xcb23, 0x299, 0x1, 0x1, 0x4b2c, 0x9, 0x1f, 0xd12, 0x8, 0x8, 0x2, 0x7, 0x8000, 0x6, 0x0, 0x6, 0x20, 0x0, 0x2, 0x2, 0xffffffff, 0x10000, 0x3, 0x5, 0x6, 0x7fffffff, 0x3, 0x9, 0x1, 0x0, 0x3, 0x87, 0x6, 0x4, 0x69, 0x1, 0x8, 0xa04, 0x800, 0x10000, 0x200, 0xe0, 0x1ff, 0x4, 0xdcbb, 0x80, 0x8, 0x401, 0x3f], [0x4, 0x8, 0x81, 0x2, 0x9, 0x1f, 0xfff, 0x0, 0x7ff, 0x7, 0x6, 0xc74, 0x1, 0xdc5, 0xa94, 0x3, 0x80, 0x1f, 0x1, 0x4, 0x4, 0x1, 0x100, 0x6, 0x1, 0x8, 0x6d, 0xfff, 0x1ff, 0x7, 0x13, 0xff, 0x3, 0x494, 0x7, 0x80000001, 0xd31a192, 0x1, 0x80, 0x1, 0xe2f1, 0x900, 0xfffffffe, 0x5, 0x7, 0x20000000, 0x8, 0x8, 0x3ff, 0xf6a, 0x1, 0x80000000, 0x0, 0x9, 0x2, 0x5, 0x4, 0x20, 0x4, 0x3, 0x3, 0x20, 0x1, 0x1], [0x6, 0x5, 0x1, 0x3, 0x1480a558, 0x18000000, 0x7fffffff, 0x2, 0x9, 0x1, 0x4, 0x5, 0x4, 0x200, 0x17e, 0x5, 0x8, 0x0, 0x3, 0x6, 0x9a8, 0x1bcc, 0x5, 0xc, 0x2000, 0x4, 0x8001, 0xffffffff, 0x2, 0x4, 0xfffffffa, 0x2, 0x80000000, 0x1, 0x5, 0xc7, 0xf30, 0x3, 0x6, 0x1ff, 0x20, 0xfffffffb, 0x4, 0x80000001, 0xd8c, 0x3, 0x20, 0x9, 0x6, 0x4, 0x2b, 0x5, 0x4316, 0x2, 0x50000000, 0x8, 0x3, 0x8, 0x200, 0xffffff00, 0x9, 0x0, 0x9, 0x5], 0x4, ['+.}\x00']}, ["", "", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x24002080}, 0x0) 15:44:18 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x4a, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f00000027c0)={0x14}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:18 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020054300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:18 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 622.532503][T24831] loop2: detected capacity change from 0 to 240 [ 622.552773][T24826] loop4: detected capacity change from 0 to 16382 15:44:18 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x4b, 0x0, 0x3, 0x0, 0x0) 15:44:18 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x9c5, 0xcf20, 0x1, &(0x7f0000000080)={[0x1ff]}, 0x8) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000140)={0x0, 0x5, 0x1, [0xff, 0x5, 0x200, 0x7, 0x1], [0x6b5d, 0x5, 0x1, 0x7fffffff, 0x5, 0x2, 0x2, 0x7, 0xa7, 0x0, 0x100, 0x1, 0x204a, 0x9, 0x20, 0x80000000, 0x3, 0x0, 0xc9, 0x100000001, 0x800, 0x6, 0x6f, 0xffff, 0x7fffffff, 0x0, 0x80, 0x0, 0x400, 0x674e7bfb, 0x6, 0x7f, 0x4, 0xfffffffffffffffc, 0xbeb, 0x8f2, 0xffffffffffffffe1, 0x1, 0x1, 0x5, 0x1fffe00000, 0x3f, 0x7, 0xffffffffffffcd31, 0x20, 0x0, 0x3, 0x3, 0x514c, 0x0, 0x80000001, 0x100000001, 0x0, 0x2, 0x7fffffff, 0x2, 0xfffffffffffffffd, 0x4, 0x1f, 0x3, 0x3, 0x9, 0x33cb, 0x4, 0x43140df, 0x100000001, 0x80000000, 0x7fffffff, 0x7, 0x4, 0x1df, 0x0, 0x4, 0x8, 0x7ff, 0x10000, 0xff, 0x7, 0x3, 0x80000000, 0x7ff, 0x8, 0x39a, 0x361f, 0x81, 0x7f, 0x8, 0x8000, 0xd37, 0x3a0, 0x77, 0x7, 0x5, 0x20c85bf, 0x5, 0x4, 0x9bc, 0x100000000, 0x0, 0x8e2, 0x1000, 0x2, 0x5380000000, 0x8000, 0x2, 0x1, 0x40, 0x6, 0x100000001, 0x5, 0x5c, 0x70, 0x7, 0xff, 0xfff, 0xffffffff, 0x800, 0x6, 0x7, 0x3ff, 0x5]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000580)={r2, 0x7f, 0x0, [0x40, 0xfffffffffffff800, 0xcc24, 0x80000001, 0x9], [0x0, 0x65, 0x7f, 0x6, 0x101, 0x3, 0xffffffffffffff00, 0x80000001, 0x8bdc, 0xfffffffffffff501, 0x40, 0x0, 0xffffffffffffffe1, 0x7, 0x6, 0x8, 0x3ff, 0x8001, 0xbbc, 0x8, 0x3, 0xff, 0x5, 0xfffffffffffffff9, 0x3, 0x8, 0x8, 0x2, 0x5, 0x560b, 0x5, 0xfffffffffffffc00, 0x1, 0xfffffffffffffff9, 0x0, 0x80000001, 0x216b, 0x9, 0x0, 0x9, 0x3, 0x9, 0x1, 0x7f, 0x1ff, 0xfffffffffffffffd, 0x5, 0x3, 0x9, 0x101, 0x1b, 0x0, 0x1000, 0x1, 0x121, 0x4, 0x4, 0x8, 0xffffffff, 0x20dac86e, 0x8, 0x2, 0x100000001, 0x7, 0x4, 0x5, 0x55, 0x6, 0x7, 0x6c3c999b, 0x5, 0x9, 0x3, 0xfff, 0x5, 0x26f7, 0x7, 0x9, 0x2, 0x4, 0x3f, 0x83, 0x2, 0x81, 0x5, 0x6, 0x9, 0x40, 0xfffffffffffffff9, 0xfff, 0x1, 0x8, 0xffffffffffff3502, 0x6, 0x3, 0x7, 0x1, 0xdc, 0x0, 0x3f, 0x1, 0x6, 0x4, 0xc8, 0x0, 0x85, 0x7eb8, 0x8, 0xfffffffffffffffa, 0x1, 0x4, 0x3, 0x3, 0x5, 0x2, 0x9, 0x7fffffff, 0x7fffffff, 0x0, 0x7f, 0x180000000000000]}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040), 0x1) [ 622.632159][T24826] loop4: p1 p2 p3 p4 [ 622.636826][T24826] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 622.658731][T24826] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:19 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x4c, 0x0, 0x3, 0x0, 0x0) [ 622.682495][T24863] loop2: detected capacity change from 0 to 240 [ 622.690802][T24826] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:19 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x26, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020064300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:19 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500), 0x20c41, 0x0) sendfile(r1, r0, &(0x7f0000000100)=0x1f, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRESHEX, @ANYRES64=r3, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=r1], 0xda00) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.controllers\x00', 0x7a05, 0x1700) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/220, 0xfffffffffffffff4}, {&(0x7f00000003c0)=""/96, 0xffffffffffffffb7}], 0x3, 0x9, 0x200) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) r6 = eventfd2(0xabf, 0x800) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000440)={0x20000000}) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:19 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x4d, 0x0, 0x3, 0x0, 0x0) 15:44:19 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x7d, 0x0, 0x0, 0x4]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x1]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:19 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:19 executing program 5: ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct={0xfffffffd}}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) close(r1) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x3, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x8010, r0, 0xaf490000) 15:44:19 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 622.904463][T24895] loop4: detected capacity change from 0 to 16382 [ 622.914181][T24899] loop2: detected capacity change from 0 to 240 [ 622.940901][T24895] loop4: p1 p2 p3 p4 [ 622.945367][T24895] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:19 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020074300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:19 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x4e, 0x0, 0x3, 0x0, 0x0) [ 622.995189][T24895] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 623.022964][T24895] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:19 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x48, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) fcntl$dupfd(r0, 0x0, r1) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYRESOCT], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xda00) write$P9_RREADLINK(r6, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:19 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) fallocate(r1, 0x4, 0x6, 0x1) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:19 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40800, 0x0, 0x0) 15:44:19 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x4f, 0x0, 0x3, 0x0, 0x0) [ 623.080132][T24934] loop2: detected capacity change from 0 to 240 15:44:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020084300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:19 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x50, 0x0, 0x3, 0x0, 0x0) [ 623.163531][T24951] loop4: detected capacity change from 0 to 16382 [ 623.192990][T24951] loop4: p1 p2 p3 p4 [ 623.197835][T24951] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 623.205433][T24951] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:19 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40800, 0x0, 0x0) 15:44:19 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, 0xf43d, 0x10000000}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 623.213339][T24951] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:19 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x51, 0x0, 0x3, 0x0, 0x0) 15:44:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdeb, 0x81}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0/file0\x00', 0x202200, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:19 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x4c, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:19 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40800, 0x0, 0x0) 15:44:19 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) close(r1) 15:44:19 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020094300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 623.308506][T24973] loop2: detected capacity change from 0 to 240 [ 623.345169][T24991] loop4: detected capacity change from 0 to 16382 15:44:19 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x52, 0x0, 0x3, 0x0, 0x0) 15:44:19 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x40800, 0x0, 0x0) 15:44:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x7a05, 0x1700) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x36) ptrace$cont(0x9, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0xf58f, &(0x7f0000000300)="b23369fc956bc4000000000000000000000b9d0ba84bff4e1c8a2f19761a823685a6ab18b63344e44982b5a9374c51f48e1787005d860b2b3d7a961bb871362cdbb5c76105d5d82d45107f9c06e6595f28610f6f00d792fa634903745612c793c153cbbb078437481f276f2321efe13272e7a6186c201a0aa06868f49eefb667928f2d267c461cf6b42246c6360000000000001000"/160) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x59, 0x2, 0x40, 0x2, 0x0, 0x6, 0x40082, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0x5}, 0x8000, 0x800, 0x5, 0x2, 0x20, 0x0, 0x1, 0x0, 0xc5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x3) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 623.414443][T24991] loop4: p1 p2 p3 p4 [ 623.423805][T24991] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 623.437797][T24991] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 623.454203][T24991] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:19 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x40800, 0x0, 0x0) 15:44:19 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0xa, &(0x7f0000000040)={0x77359400}}, 0x7) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:19 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_io_uring_setup(0x66c2, &(0x7f0000000040)={0x0, 0xb058, 0x4, 0x3, 0x80}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 623.513261][T25020] loop2: detected capacity change from 0 to 240 15:44:19 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x53, 0x0, 0x3, 0x0, 0x0) 15:44:19 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x60, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:19 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x54, 0x0, 0x3, 0x0, 0x0) 15:44:19 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, 0x0, 0x2}}) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r4, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x3, 0x0, &(0x7f0000000140)="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", 0x7, 0x0, 0x1, {0x0, r5}}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x55, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000200a4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x40800, 0x0, 0x0) 15:44:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc49}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 623.719009][T25053] loop4: detected capacity change from 0 to 16382 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fe", 0x35, 0x40800, 0x0, 0x0) [ 623.759756][T25053] loop4: p1 p2 p3 p4 [ 623.764973][T25053] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 623.795267][T25053] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:20 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000002, 0x80010, r0, 0x10000000) r1 = dup(r0) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000140)={0x0, 0x7}) io_uring_enter(r1, 0x6c1a, 0x329a, 0x0, &(0x7f0000000040)={[0x3]}, 0x8) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000024c0)={0x1, 0x7, @status={[0x25d0, 0x8, 0x800, 0x400, 0xffffffffffffe8f3, 0x5]}, [0x101, 0xfffffffffffff001, 0x13, 0x3f, 0x5be3, 0x9, 0x5, 0x0, 0x2, 0x7, 0x5f4, 0x268, 0x9, 0x6ce6, 0x299c, 0x95b0, 0x7, 0x7, 0xfffffffffffffff8, 0x0, 0x5, 0x2, 0xfffffffffffffc01, 0x80000000, 0xaf6, 0x0, 0x1ff, 0x7fff, 0x80, 0x9b, 0x4, 0x100000001, 0x3, 0x81, 0x3, 0x5, 0x9, 0x7fff, 0x10f, 0x610, 0x162dde83, 0x800, 0x4, 0x75, 0xfffffffffffffffe, 0x4, 0x400, 0x80, 0x7, 0x200, 0x200000000000, 0x8, 0x7, 0x200, 0x200, 0x8000, 0x180000000000000, 0x8, 0x8, 0x36, 0x5, 0x2, 0xfffffffffffffffb, 0x3]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000200b4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:20 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x56, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fe", 0x35, 0x40800, 0x0, 0x0) [ 623.809584][T25079] loop2: detected capacity change from 0 to 240 [ 623.834930][T25053] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:20 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x68, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fe", 0x35, 0x40800, 0x0, 0x0) 15:44:20 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x7, 0x5}, {0x100, 0x401}]}, 0x14, 0x2) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r4, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f0000000140)={r5, r6+10000000}, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000072000/0x2000)=nil, 0x2000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r5, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) fcntl$dupfd(r0, 0x406, r1) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x4882) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) 15:44:20 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x57, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000200c4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 623.966680][T25114] loop2: detected capacity change from 0 to 240 15:44:20 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x3dc4, &(0x7f00000002c0), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r9 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r12 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r12, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r11, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00006d7000/0x1000)=nil, 0x1000, 0x65}, 0x635) r13 = syz_io_uring_setup(0x528e, &(0x7f0000000980), &(0x7f00005c6000/0x4000)=nil, &(0x7f00006ef000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r13, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x10001, 0x2, &(0x7f0000000340)="316b063e329f014971816c76076917344f5766a4bb59002c998aa78078d204350c46507dfc794af396e9945cc101136586a060cc43c5fe94cc503e22182aaa711a99efd864fc190fd7470476854af7573adff7f36f016ff2c76cda8cbf647e903860a178de621934a5596899a792da29818e2169e76c6aa4e0b1bfa3ac9dc5baeb1c367218b5", 0x3, 0x0, 0x1, {0x1, r14}}, 0x8b) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000200d4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 624.074124][T25131] loop2: detected capacity change from 0 to 240 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffff", 0x50, 0x40800, 0x0, 0x0) 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffff", 0x50, 0x40800, 0x0, 0x0) 15:44:20 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x58, 0x0, 0x3, 0x0, 0x0) [ 624.128634][T25134] loop4: detected capacity change from 0 to 16382 [ 624.182528][T25134] loop4: p1 p2 p3 p4 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffff", 0x50, 0x40800, 0x0, 0x0) [ 624.206665][T25134] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 624.233792][T25152] loop2: detected capacity change from 0 to 240 [ 624.267190][T25134] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 624.296265][T25134] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(r0, &(0x7f0000000080)='devices.list\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00006f3000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r3, 0x54aac000) preadv(r0, &(0x7f0000000280), 0x0, 0x40000d9f, 0x800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:20 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x59, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000200e4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0", 0x5d, 0x40800, 0x0, 0x0) 15:44:20 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x6c, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:20 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0xfb2, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="752f3ed59cf631987ed6309a", 0xc, 0xfffffffffffffbff}, {&(0x7f0000000140)="e4b52a36f026958eb2c3d6a6244a4b3665700094ccbee0603527e98df355f36ccc4af8c089fdfd9fdf8355717504300e947456e2e7e44fd26ad12930397c9c3f5466b0c283b88f2713f2d63eb1c366494b3e6614fd324c33e7e1e5d87a6e6e3e086572f2c4ecee97d992177c08dff58f6ea9cc537caa1e9f16eb0e9bc9583d01a070e1c8833821c7a7c2fa557230f08a4d15b52b22fc600d1bbe63c47e0066ca4f62674aed59a7ac6209ae30a951a483bfed7ac4a553d365600c3a1d21f54aab5b7d9237fc13d01ecf6289aa0eb02bc26a89", 0xd2, 0x650047b1}], 0x2042, &(0x7f0000000280)={[{'$'}, {'\x00'}, {'\x00'}, {'\x00'}], [{@appraise_type}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfshat={'smackfshat', 0x3d, '#'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_measure}, {@fsname={'fsname', 0x3d, '\x00'}}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0x1b}}]}) close(r1) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0", 0x5d, 0x40800, 0x0, 0x0) 15:44:20 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x5a, 0x0, 0x3, 0x0, 0x0) [ 624.435419][T25201] loop5: detected capacity change from 0 to 264192 [ 624.449882][T25199] loop2: detected capacity change from 0 to 240 [ 624.458084][T25200] loop4: detected capacity change from 0 to 16382 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0", 0x5d, 0x40800, 0x0, 0x0) 15:44:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e22, 0x91b3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="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", 0x1000}], 0x2}, 0x41) [ 624.494908][T25200] loop4: p1 p2 p3 p4 [ 624.499439][T25200] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 624.529597][T25200] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 624.533103][T25219] loop5: detected capacity change from 0 to 264192 15:44:20 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000200f4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 624.541309][T25200] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:20 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x5b, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2000cffd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000240)) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x20, 0x620002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0xc0000002}) r4 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x5, @usage, 0x0, 0x0, 0x4}, {0x20000000000000, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="2321202e2f66696c65302f66696c65302020277b202127200020402a230ab539f58ea55d42e49ba736144e5ad12ac9fa1db2e55cce288d08e59fe1a97849b24dfb5756878278eb0ae8b5ae40d47eaa543dd30aaba324446445d729d8926523db1d3da769eeec1a6edaf2bb354c08528451c247415c4163b30a46fb469996a1d15612b13e2b75d10f11b39f9492d3374fb202e145b0d2ec376c4657af170e14371d76571a996fbe1ec6c01c8e3d5fd04945a704377a7bdcad6d38ddba7443c00809574f40644be8560bd907491d156576a878e00b7b19092882a6cae2ec6753d36673b8"], 0xea) ftruncate(r4, 0xe7b) io_uring_enter(r4, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:20 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf", 0x64, 0x40800, 0x0, 0x0) 15:44:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000400)=""/157, 0x9d}], 0x5, 0x81, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 624.646331][T25241] loop2: detected capacity change from 0 to 240 [ 624.670851][T25200] __loop_clr_fd: partition scan of loop4 failed (rc=-16) 15:44:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020104300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:21 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x74, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:21 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x5c, 0x0, 0x3, 0x0, 0x0) [ 624.715993][T25257] __nla_validate_parse: 85 callbacks suppressed [ 624.716004][T25257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.753664][T25257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.763179][T25260] loop4: detected capacity change from 0 to 16382 [ 624.786369][T25270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:21 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x5d, 0x0, 0x3, 0x0, 0x0) 15:44:21 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x80400, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4080, 0x0) close(r1) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf", 0x64, 0x40800, 0x0, 0x0) [ 624.819202][T25260] loop4: p1 p2 p3 p4 [ 624.824537][T25260] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 624.844292][T25280] loop2: detected capacity change from 0 to 240 [ 624.856915][T25260] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006d4000/0x14000)=nil, 0x14000, 0x2000002, 0x4000010, r1, 0x6672000) r2 = fork() perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xff, 0x3d, 0x49, 0xff, 0x0, 0x10000, 0x10, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x1ff}, 0x100, 0x33d, 0x5c, 0x0, 0xfffffffffffffe01, 0x10001, 0x2, 0x0, 0x8, 0x0, 0x6}, r2, 0xc, 0xffffffffffffffff, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) pwrite64(r3, &(0x7f0000000240)="4cb28480bd973e3711af993f376c59a780071976c14d879f86290c826ceee7586fe0ed8d9a7b39252c02440b5999413a8d1f861bfc4a2e43acf3f2a941067b2260a43841617c1f41a815d20864a0db5acaaf1e240381ab5180c7aa9b88e654baa3f2b46a03e5b6e5575fcf02ab6218eb40576a037947da73ca49a951059b79c9442464036b8c1a9cd105b73ae9bc9abcdd16273425ef8775aa6523224a4f7364143ae4be30313c48391d9a00e806f1ff235da57797aef7c08f0e777ed5d7a22030aa3faca0ada3058b4ec48bd54bee6a2857bfd151bc72e1bde1f389ceb7f5bee497568498554c19", 0xe8, 0xf6c) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 624.864976][T25260] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020114300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:21 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x5e, 0x0, 0x3, 0x0, 0x0) [ 624.902689][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:21 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x7a, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:21 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @struct={0x2, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x81]}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 624.948505][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.960834][T25315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:21 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct={0x3, 0x7ff}}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:21 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x5f, 0x0, 0x3, 0x0, 0x0) 15:44:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'memory.events\x00'}, {0x20, 'memory.events\x00'}, {0x20, '('}, {0x20, 'memory.events\x00'}, {0x20, 'memory.events\x00'}, {}, {0x20, '++\\-'}, {}], 0xa, "044cd04c9dfe6fb14ab615617f25ee39c575fbab75a26f7456000edf02adf63205947bc33a370d7cdd84879d605a0e4d5cfad16c69db1e608a7849c9ce5682828e005df2e0c1b213275df6a909c7ea36aac97bbc93ced51d5eb07b277f225756018f656d4ab8cd487f62f50cff4cc96c1475fd9c8f41cba7c184e841282ce11ea48a8e26543b3a5e1aab4ae32d901b4dc27845c1932cf50df92dae25cca44a360ea2d87f63d212"}, 0xf7) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) mmap(&(0x7f0000425000/0x3000)=nil, 0x3000, 0x32c3df082bbd576, 0x80010, r5, 0xffffe000) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf", 0x64, 0x40800, 0x0, 0x0) [ 625.015285][T25327] loop2: detected capacity change from 0 to 240 [ 625.028329][T25328] loop4: detected capacity change from 0 to 16382 15:44:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020124300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:21 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x60, 0x0, 0x3, 0x0, 0x0) [ 625.100939][T25328] loop4: p1 p2 p3 p4 [ 625.113519][T25328] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 625.127223][T25328] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 625.135459][T25328] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:21 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x3000)=nil, 0x3000, 0x2000008, 0x11, r5, 0x10000000) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x414) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @usage=0x2}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, 0x0, 0x100}}) r6 = signalfd4(r4, &(0x7f0000000180)={[0x3f]}, 0x8, 0x1000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) mmap(&(0x7f00002f5000/0x4000)=nil, 0x4000, 0x100000f, 0x810, r7, 0x83452000) openat(r6, &(0x7f00000001c0)='./bus\x00', 0x69c000, 0x100) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 625.146647][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 625.152077][T25356] loop2: detected capacity change from 0 to 240 [ 625.186597][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020184300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x81, 0x7, 0x9, 0x0, 0x0, 0x6, 0x180, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x1a011, 0xb0, 0x120000, 0x8, 0xffffffff, 0x800, 0x9, 0x0, 0x3, 0x0, 0xda}, r2, 0x10, r3, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:21 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x90, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:21 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x61, 0x0, 0x3, 0x0, 0x0) 15:44:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a", 0x67, 0x40800, 0x0, 0x0) [ 625.208636][T25365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:21 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r3 = accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000140)={r1, 0x9, 0x1f, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000540)={r4, 0x8c4, 0x0, [0x0, 0x1, 0x190, 0x8, 0x120000000000000], [0x5, 0xffffffff, 0x8, 0x6, 0xff, 0x5, 0x1, 0x10001, 0x7ff, 0x9, 0xfffffffffffffffe, 0x4, 0x4, 0x800, 0x3, 0x0, 0x72f, 0x7, 0x8000, 0x9, 0x1, 0x329, 0x0, 0x7f, 0xc51, 0x1, 0xf4c8, 0xca1, 0xfcf, 0x2, 0x3, 0x360c00000, 0xf68e, 0x8001, 0x70000, 0x8, 0x10000000000000, 0x3, 0x3, 0x1, 0xffffffff900a6775, 0x3f60, 0x0, 0xfff, 0x7fff, 0x6, 0x1, 0xd6, 0xff, 0x6, 0x81, 0x8, 0x310, 0xff, 0x1, 0x6, 0x1, 0x81, 0xfff, 0x3, 0x10000, 0x200, 0x74c, 0x6, 0x7, 0x0, 0x3ff, 0x80, 0x8, 0x3, 0x8917, 0x9, 0x1ff, 0x80000000, 0x8, 0x7fffffff, 0x5, 0x6, 0x5146, 0x34, 0x81, 0x50, 0x3, 0x3, 0xe8, 0x8, 0x7, 0x2, 0x7fffffff, 0x6, 0x4, 0x5, 0x4190, 0xb38, 0x5, 0x62b9, 0x7df, 0x9, 0xfff, 0x10, 0x9, 0x9b6, 0x1, 0x3e7727dd0000, 0x8, 0x8001, 0x5, 0x8, 0x81, 0x6, 0x80000000, 0x5, 0xfe, 0x0, 0x8001, 0x8c86, 0x100000000, 0x3f, 0x200020000, 0x7, 0x7]}) 15:44:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a", 0x67, 0x40800, 0x0, 0x0) 15:44:21 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x62, 0x0, 0x3, 0x0, 0x0) [ 625.300279][T25383] loop2: detected capacity change from 0 to 240 [ 625.312419][T25392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 625.312827][T25387] loop4: detected capacity change from 0 to 16382 15:44:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020194300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:21 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x6}, {0x0, @struct, 0x0}, {0x0, @struct={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000140)={r3, 0xe7, 0x0, [0x8, 0x7, 0x5, 0x4, 0x3f], [0x0, 0x233e, 0x2, 0x80, 0x3, 0x5d4, 0x10000, 0x8b, 0x8, 0x6, 0xffff, 0x4, 0x400, 0x3, 0x8, 0x7, 0x400, 0x4, 0x8000, 0x4, 0x7, 0xfffffffffffffffa, 0x101, 0x480000000000, 0x7, 0x9, 0xf75, 0x8, 0xffff, 0x8fd7, 0xfa3, 0x4, 0x3ff, 0x401, 0x9, 0x200, 0x3, 0x46f03082, 0x9, 0x3f, 0x1ff, 0x200, 0x401, 0x5, 0x7, 0x0, 0x1f, 0x0, 0x9, 0xb5, 0x9856, 0xfffffffffffffffe, 0x10001, 0xfffffffffffffff7, 0x5e, 0x2, 0xa0, 0xff, 0x4, 0xffffffffffffffff, 0x101, 0x81, 0x7, 0x9, 0x1, 0x7, 0x7ff, 0x81, 0xdbe9, 0x5, 0x5, 0x252, 0x2, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1, 0xfffffffffffffff9, 0x0, 0x3cc4, 0xc19, 0x0, 0x7f, 0xc9c2, 0x7, 0x5, 0x6, 0x40, 0x101, 0x81, 0x1, 0x4b, 0x81, 0x4, 0xfffffffffffffffe, 0x3f, 0xbcca, 0x6, 0x3, 0x5, 0x7ff, 0xffff, 0xa33, 0x0, 0x80000001, 0x2000000000, 0x10001, 0x3, 0x983b, 0x7fff, 0x3, 0x6, 0x4aad4089, 0x7fffffff, 0x2, 0x60a, 0x7, 0x1000, 0x81]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x4010, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x8, 0x0, &(0x7f0000000980)="b1ad69a3a3d4b9b538e7abd648cd04e8aaadfd76e121e3e2577705dc8271c348052c6045a9a0501f0555944f8e9da23b6b9323e13341ccfd2d06558f1a8517a6567e9f4791e5233ac3b609176c2cd7e5a74b3be6624efa3fd14f9ff287b176907849601b47689cda2a4320965dbaf8b5d0823942bca5cb5229556f945a95a5f3d88e4f03b245b09dec050120215e19469036a289d067da646ee4c313050d3fa6fa3e0b5b1b559b872ddfce5f0de2f65a9f97aea803b9fffe52f565c12b960ef0ea2ac096cbc1edb43148cdb2b910379092", 0x6, 0x0, 0x0, {0x2}}, 0x3) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000580)={r2, 0x4e00000000000000, 0xff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$int_out(r6, 0xa8c0, &(0x7f0000000040)) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a", 0x67, 0x40800, 0x0, 0x0) [ 625.368916][T25387] loop4: p1 p2 p3 p4 [ 625.375748][T25387] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 625.388160][T25387] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 625.404371][T25387] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:21 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x4, 0x4e, 0xcd, 0xfffffffa}]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) poll(&(0x7f00000000c0)=[{r2}, {0xffffffffffffffff, 0xd484}, {r0, 0x8004}, {r0, 0x1000}, {r3, 0x8}, {r0, 0x8}, {r4, 0x1000}, {r5, 0x8384}], 0x8, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000140)={r1, 0x7, 0x0, [0x0, 0x2, 0x26, 0x20, 0x200], [0x7fffffff, 0x1, 0x7, 0x8, 0x9, 0x100, 0x80000000, 0xfffffffffffffff8, 0xab37, 0x5, 0x9, 0x7ef, 0x62, 0x3, 0x3, 0x6, 0xfffffffffffffe00, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x2, 0xff, 0x9, 0x3be, 0x3ff, 0x7f, 0xeca, 0x80000001, 0xffff, 0x4, 0x7fffffff, 0x1f, 0x3f73, 0x80, 0xb41, 0xffffffff80000001, 0x81, 0x100, 0xe2, 0x5, 0xfffffffffffffffe, 0x8, 0x5, 0x8, 0x80000000, 0x1, 0xe36, 0x0, 0x8, 0x2, 0x7f, 0x60e, 0x6, 0x8, 0x2, 0x6b, 0x6, 0xe5ff, 0x7fff, 0x6, 0xffffffff, 0x0, 0x5, 0x9, 0x1, 0x7, 0x1, 0x9, 0x18, 0x77eb, 0xab, 0x0, 0x9, 0xfffffffffffffffd, 0x5, 0x9, 0x866a, 0x99c4, 0x8, 0x8ceb, 0x3f, 0x2, 0xfffffffffffffff8, 0x0, 0x9, 0x4, 0x3000000000000000, 0xffffff8000000000, 0x3, 0x2, 0x6, 0x9, 0x6, 0x2e1f, 0xa8dc7b3, 0x5, 0x7, 0x0, 0x7f, 0x3, 0x0, 0x6, 0x9, 0x7, 0x3f, 0x2, 0xfffffffffffffffe, 0x7, 0x4, 0x80, 0x8000, 0xdf86, 0xc5fd, 0x7, 0x94dd, 0x200, 0x8, 0xfffffffffffffffb, 0xfe, 0x1]}) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dff", 0x69, 0x40800, 0x0, 0x0) [ 625.435965][ T1033] loop4: p1 p2 p3 p4 [ 625.442810][ T1033] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:21 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x63, 0x0, 0x3, 0x0, 0x0) 15:44:21 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x142, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xad, 0x0, 0x2, 0x7f, 0x0, 0xfffffffffffff801, 0x50100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x0, 0x3, 0x0, 0x8, 0x4000000000005, 0x1f, 0x1, 0x0, 0x3}, r4, 0x0, r5, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dff", 0x69, 0x40800, 0x0, 0x0) 15:44:21 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020224300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:21 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0xe8ee, 0x1, 0x0, 0xfffffffe, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x11, r2, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x2243) 15:44:21 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x64, 0x0, 0x3, 0x0, 0x0) [ 625.487387][ T1033] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 625.500019][T25424] loop2: detected capacity change from 0 to 240 [ 625.514035][ T1033] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:21 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dff", 0x69, 0x40800, 0x0, 0x0) 15:44:21 executing program 1: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x16, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe001, 0x1, 0x0, 0x6, 0x6, 0xfffeffff, 0x20, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/108, 0x6c}], 0x1, 0x80000000, 0x9) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 625.623758][T25456] loop2: detected capacity change from 0 to 240 [ 625.652477][T25458] loop4: detected capacity change from 0 to 16382 15:44:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020254300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:22 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x65, 0x0, 0x3, 0x0, 0x0) 15:44:22 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1]}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) io_uring_enter(r1, 0x581f, 0x640d, 0x4, &(0x7f0000000080)={[0x7f]}, 0x8) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:22 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0x6a, 0x0, 0x0, 0x0) [ 625.681191][T25458] loop4: p1 p2 p3 p4 [ 625.685980][T25458] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 625.721265][T25458] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 625.742497][T25458] loop4: p4 size 32768 extends beyond EOD, truncated [ 625.833336][T25493] loop2: detected capacity change from 0 to 240 15:44:22 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x1d0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:22 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0x6a, 0x0, 0x0, 0x0) 15:44:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffffffc, 0x202) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) 15:44:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020484300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:22 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x66, 0x0, 0x3, 0x0, 0x0) 15:44:22 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x810, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd_index=0x1, 0x100000000, 0x0, 0x0, 0x2}, 0x2) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:22 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0x6a, 0x0, 0x0, 0x0) 15:44:22 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x67, 0x0, 0x3, 0x0, 0x0) [ 626.005299][T25517] loop2: detected capacity change from 0 to 240 [ 626.028633][T25519] loop4: detected capacity change from 0 to 16382 15:44:22 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1d15, &(0x7f0000000040)={0x0, 0x5fa2, 0x0, 0x0, 0x147, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='devices.list\x00', 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r3, 0x0, r0}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000204c4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 626.064486][T25519] loop4: p1 p2 p3 p4 [ 626.072324][T25519] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:22 executing program 3 (fault-call:5 fault-nth:0): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:22 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x68, 0x0, 0x3, 0x0, 0x0) [ 626.110316][T25519] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 626.164230][T25519] loop4: p4 size 32768 extends beyond EOD, truncated [ 626.172528][T25553] loop2: detected capacity change from 0 to 240 [ 626.177617][T25551] FAULT_INJECTION: forcing a failure. [ 626.177617][T25551] name failslab, interval 1, probability 0, space 0, times 0 [ 626.191369][T25551] CPU: 0 PID: 25551 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 626.200260][T25551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.210340][T25551] Call Trace: [ 626.213606][T25551] dump_stack+0x137/0x19d [ 626.217980][T25551] should_fail+0x23c/0x250 [ 626.222449][T25551] __should_failslab+0x81/0x90 [ 626.227270][T25551] should_failslab+0x5/0x20 [ 626.231796][T25551] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 626.237513][T25551] ? local_bh_enable+0x1b/0x20 [ 626.242319][T25551] ? __get_vm_area_node+0x11b/0x260 [ 626.247527][T25551] __get_vm_area_node+0x11b/0x260 [ 626.252598][T25551] __vmalloc_node_range+0xc2/0x5b0 [ 626.257753][T25551] ? netlink_sendmsg+0x425/0x7c0 [ 626.262702][T25551] ? rht_key_hashfn+0x60/0x60 [ 626.267418][T25551] ? netlink_hash+0x90/0x90 [ 626.271912][T25551] ? netlink_sendmsg+0x425/0x7c0 [ 626.276856][T25551] vmalloc+0x5a/0x70 [ 626.280816][T25551] ? netlink_sendmsg+0x425/0x7c0 [ 626.285828][T25551] netlink_sendmsg+0x425/0x7c0 [ 626.290623][T25551] __sys_sendto+0x2a8/0x370 [ 626.295123][T25551] ? __fget_light+0x21b/0x260 [ 626.299790][T25551] ? __cond_resched+0x11/0x40 [ 626.304464][T25551] ? perf_trace_sys_exit+0x4d/0x160 [ 626.309679][T25551] ? fput+0x2d/0x130 [ 626.313649][T25551] __x64_sys_sendto+0x74/0x90 [ 626.318322][T25551] do_syscall_64+0x4a/0x90 [ 626.322833][T25551] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 626.328909][T25551] RIP: 0033:0x4665d9 [ 626.332795][T25551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 626.352410][T25551] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 626.360967][T25551] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 626.368932][T25551] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 626.376905][T25551] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 626.384958][T25551] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 626.392923][T25551] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:22 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x1d3, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:22 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x69, 0x0, 0x3, 0x0, 0x0) 15:44:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020684300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:22 executing program 5: syz_io_uring_setup(0x6ad4, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x7d98ccd7bd77ad80, @fd=r2, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000001740)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@id, 0x80, &(0x7f0000001640)=[{&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/237, 0xed}, {&(0x7f00000013c0)=""/241, 0xf1}, {&(0x7f00000014c0)=""/136, 0x88}, {&(0x7f0000001580)=""/160, 0xa0}], 0x6, &(0x7f00000016c0)=""/101, 0x65}, 0x0, 0x41, 0x0, {0x3}}, 0x80) r3 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000002, 0x20010, r3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) syz_io_uring_submit(r5, r4, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x10020, 0x0, {0x3}}, 0x7fff) io_uring_enter(r3, 0x302, 0x0, 0x3, 0x0, 0x0) [ 626.400981][T25551] syz-executor.3: vmalloc size 65408 allocation failure: vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 626.416126][T25551] CPU: 0 PID: 25551 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 626.424940][T25551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.434994][T25551] Call Trace: [ 626.438282][T25551] dump_stack+0x137/0x19d [ 626.442612][T25551] warn_alloc+0x105/0x160 [ 626.446932][T25551] __vmalloc_node_range+0x222/0x5b0 [ 626.452234][T25551] ? rht_key_hashfn+0x60/0x60 [ 626.456912][T25551] ? netlink_hash+0x90/0x90 15:44:22 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct={0xb360, 0x671ea976}}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) read(r1, &(0x7f0000000040)=""/48, 0x30) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 15:44:22 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x6a, 0x0, 0x3, 0x0, 0x0) [ 626.461421][T25551] ? netlink_sendmsg+0x425/0x7c0 [ 626.466356][T25551] vmalloc+0x5a/0x70 [ 626.470259][T25551] ? netlink_sendmsg+0x425/0x7c0 [ 626.475286][T25551] netlink_sendmsg+0x425/0x7c0 [ 626.480098][T25551] __sys_sendto+0x2a8/0x370 [ 626.484609][T25551] ? __fget_light+0x21b/0x260 [ 626.489379][T25551] ? __cond_resched+0x11/0x40 [ 626.494068][T25551] ? perf_trace_sys_exit+0x4d/0x160 [ 626.499264][T25551] ? fput+0x2d/0x130 [ 626.503149][T25551] __x64_sys_sendto+0x74/0x90 [ 626.507825][T25551] do_syscall_64+0x4a/0x90 15:44:22 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x6b, 0x0, 0x3, 0x0, 0x0) [ 626.512361][T25551] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 626.518254][T25551] RIP: 0033:0x4665d9 [ 626.522192][T25551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 626.541961][T25551] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 626.550362][T25551] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 15:44:22 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x6c, 0x0, 0x3, 0x0, 0x0) 15:44:22 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x6d, 0x0, 0x3, 0x0, 0x0) [ 626.558365][T25551] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 626.566348][T25551] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 626.574356][T25551] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 626.582360][T25551] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 626.590424][T25551] Mem-Info: [ 626.593534][T25551] active_anon:251 inactive_anon:79623 isolated_anon:0 [ 626.593534][T25551] active_file:10649 inactive_file:32140 isolated_file:0 [ 626.593534][T25551] unevictable:6 dirty:379 writeback:0 [ 626.593534][T25551] slab_reclaimable:4435 slab_unreclaimable:7048 [ 626.593534][T25551] mapped:63619 shmem:6944 pagetables:3032 bounce:0 [ 626.593534][T25551] free:1802186 free_pcp:888 free_cma:0 [ 626.630540][T25551] Node 0 active_anon:1004kB inactive_anon:318492kB active_file:42596kB inactive_file:128560kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:254476kB dirty:1516kB writeback:0kB shmem:27776kB writeback_tmp:0kB kernel_stack:3168kB pagetables:12128kB all_unreclaimable? no [ 626.657557][T25551] Node 0 DMA free:15360kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 626.683527][T25551] lowmem_reserve[]: 0 2938 7916 7916 [ 626.688815][T25551] Node 0 DMA32 free:3012100kB min:4220kB low:7228kB high:10236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:3013524kB mlocked:0kB bounce:0kB free_pcp:1424kB local_pcp:1424kB free_cma:0kB [ 626.716545][T25551] lowmem_reserve[]: 0 0 4978 4978 [ 626.721588][T25551] Node 0 Normal free:4177164kB min:7152kB low:12248kB high:17344kB reserved_highatomic:0KB active_anon:1004kB inactive_anon:318492kB active_file:42596kB inactive_file:128560kB unevictable:24kB writepending:1516kB present:5242880kB managed:5098252kB mlocked:0kB bounce:0kB free_pcp:2220kB local_pcp:980kB free_cma:0kB [ 626.751218][T25551] lowmem_reserve[]: 0 0 0 0 [ 626.755736][T25551] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 626.768443][T25551] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 4*16kB (M) 5*32kB (M) 6*64kB (M) 3*128kB (M) 4*256kB (M) 3*512kB (M) 4*1024kB (M) 1*2048kB (M) 733*4096kB (M) = 3012100kB [ 626.784593][T25551] Node 0 Normal: 129*4kB (UME) 59*8kB (UM) 19*16kB (UME) 22*32kB (UM) 11*64kB (UM) 11*128kB (UM) 5*256kB (UME) 6*512kB (UM) 3*1024kB (UM) 6*2048kB (UME) 1014*4096kB (UM) = 4177164kB [ 626.802851][T25551] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 626.812147][T25551] 28812 total pagecache pages 15:44:23 executing program 3 (fault-call:5 fault-nth:1): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:23 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x6e, 0x0, 0x3, 0x0, 0x0) [ 626.816807][T25551] 0 pages in swap cache [ 626.820964][T25551] Swap cache stats: add 0, delete 0, find 0/0 [ 626.827076][T25551] Free swap = 0kB [ 626.830830][T25551] Total swap = 0kB [ 626.834532][T25551] 2097051 pages RAM [ 626.838329][T25551] 0 pages HighMem/MovableOnly [ 626.842987][T25551] 65267 pages reserved [ 626.917486][T25599] FAULT_INJECTION: forcing a failure. [ 626.917486][T25599] name failslab, interval 1, probability 0, space 0, times 0 [ 626.930132][T25599] CPU: 0 PID: 25599 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 626.933035][T25607] loop2: detected capacity change from 0 to 240 [ 626.938949][T25599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.938978][T25599] Call Trace: [ 626.938986][T25599] dump_stack+0x137/0x19d [ 626.955323][T25599] should_fail+0x23c/0x250 [ 626.955345][T25599] __should_failslab+0x81/0x90 [ 626.972048][T25599] should_failslab+0x5/0x20 [ 626.976540][T25599] kmem_cache_alloc_node+0x58/0x2b0 [ 626.981731][T25599] ? alloc_vmap_area+0x12f/0x1340 [ 626.986743][T25599] alloc_vmap_area+0x12f/0x1340 [ 626.991583][T25599] ? kmem_cache_alloc_node_trace+0x1f6/0x2e0 [ 626.997573][T25599] __get_vm_area_node+0x165/0x260 [ 627.002616][T25599] __vmalloc_node_range+0xc2/0x5b0 [ 627.007788][T25599] ? netlink_sendmsg+0x425/0x7c0 [ 627.012726][T25599] ? rht_key_hashfn+0x60/0x60 [ 627.017397][T25599] ? netlink_hash+0x90/0x90 [ 627.021893][T25599] ? netlink_sendmsg+0x425/0x7c0 [ 627.026822][T25599] vmalloc+0x5a/0x70 [ 627.030723][T25599] ? netlink_sendmsg+0x425/0x7c0 [ 627.035653][T25599] netlink_sendmsg+0x425/0x7c0 [ 627.040462][T25599] __sys_sendto+0x2a8/0x370 [ 627.044952][T25599] ? __fget_light+0x21b/0x260 [ 627.049691][T25599] ? __cond_resched+0x11/0x40 [ 627.054353][T25599] ? perf_trace_sys_exit+0x4d/0x160 [ 627.059540][T25599] ? fput+0x2d/0x130 [ 627.063421][T25599] __x64_sys_sendto+0x74/0x90 [ 627.068097][T25599] do_syscall_64+0x4a/0x90 [ 627.072562][T25599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 627.078464][T25599] RIP: 0033:0x4665d9 [ 627.082479][T25599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 627.102088][T25599] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 627.110524][T25599] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 627.118482][T25599] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 627.126526][T25599] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 627.134490][T25599] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 627.142494][T25599] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 627.160155][T25610] loop4: detected capacity change from 0 to 16382 15:44:23 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x6f, 0x0, 0x3, 0x0, 0x0) 15:44:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0x80000d9e, 0x6d2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3dc4, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x0, 0x0, 0x2e8}, &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)) r5 = syz_io_uring_setup(0x528e, &(0x7f0000000980)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00005c6000/0x4000)=nil, &(0x7f0000261000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000040)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r6) 15:44:23 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x204, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:23 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000206c4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:23 executing program 3 (fault-call:5 fault-nth:2): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 627.192962][T25610] loop4: p1 p2 p3 p4 [ 627.197519][T25610] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 627.206089][T25610] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 627.214418][T25610] loop4: p4 size 32768 extends beyond EOD, truncated [ 627.270211][T25633] FAULT_INJECTION: forcing a failure. [ 627.270211][T25633] name failslab, interval 1, probability 0, space 0, times 0 [ 627.282839][T25633] CPU: 1 PID: 25633 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 627.283938][T25631] loop2: detected capacity change from 0 to 240 [ 627.291615][T25633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.291628][T25633] Call Trace: [ 627.291635][T25633] dump_stack+0x137/0x19d [ 627.307907][T25633] should_fail+0x23c/0x250 [ 627.307944][T25633] __should_failslab+0x81/0x90 [ 627.307965][T25633] should_failslab+0x5/0x20 [ 627.329194][T25633] kmem_cache_alloc_node+0x58/0x2b0 [ 627.334456][T25633] ? alloc_vmap_area+0x202/0x1340 [ 627.339472][T25633] alloc_vmap_area+0x202/0x1340 [ 627.344370][T25633] ? kmem_cache_alloc_node_trace+0x1f6/0x2e0 [ 627.350342][T25633] __get_vm_area_node+0x165/0x260 [ 627.355364][T25633] __vmalloc_node_range+0xc2/0x5b0 [ 627.360465][T25633] ? netlink_sendmsg+0x425/0x7c0 [ 627.365408][T25633] ? rht_key_hashfn+0x60/0x60 [ 627.370078][T25633] ? netlink_hash+0x90/0x90 [ 627.374568][T25633] ? netlink_sendmsg+0x425/0x7c0 [ 627.379518][T25633] vmalloc+0x5a/0x70 [ 627.383403][T25633] ? netlink_sendmsg+0x425/0x7c0 [ 627.388341][T25633] netlink_sendmsg+0x425/0x7c0 [ 627.393152][T25633] __sys_sendto+0x2a8/0x370 [ 627.397641][T25633] ? __fget_light+0x21b/0x260 [ 627.402386][T25633] ? __cond_resched+0x11/0x40 [ 627.407060][T25633] ? perf_trace_sys_exit+0x4d/0x160 [ 627.412274][T25633] ? fput+0x2d/0x130 [ 627.416172][T25633] __x64_sys_sendto+0x74/0x90 [ 627.420861][T25633] do_syscall_64+0x4a/0x90 [ 627.425287][T25633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 627.431192][T25633] RIP: 0033:0x4665d9 [ 627.435084][T25633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 627.454756][T25633] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 627.463224][T25633] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 627.471184][T25633] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 627.479213][T25633] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 627.487172][T25633] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 627.495127][T25633] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:23 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x70, 0x0, 0x3, 0x0, 0x0) 15:44:23 executing program 3 (fault-call:5 fault-nth:3): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:23 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020744300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xd3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x6, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) fcntl$notify(r0, 0x402, 0x32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 627.595122][T25645] loop4: detected capacity change from 0 to 16382 [ 627.633765][T25655] FAULT_INJECTION: forcing a failure. [ 627.633765][T25655] name failslab, interval 1, probability 0, space 0, times 0 [ 627.646436][T25655] CPU: 0 PID: 25655 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 627.655291][T25655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.665336][T25655] Call Trace: [ 627.668649][T25655] dump_stack+0x137/0x19d [ 627.673052][T25655] should_fail+0x23c/0x250 [ 627.676613][T25661] loop2: detected capacity change from 0 to 240 [ 627.677513][T25655] __should_failslab+0x81/0x90 [ 627.688551][T25655] should_failslab+0x5/0x20 15:44:24 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x71, 0x0, 0x3, 0x0, 0x0) [ 627.693053][T25655] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 627.698787][T25655] ? __kmalloc_node+0x30/0x40 [ 627.703468][T25655] ? __get_vm_area_node+0x226/0x260 [ 627.708657][T25655] __kmalloc_node+0x30/0x40 [ 627.713159][T25655] __vmalloc_node_range+0x250/0x5b0 [ 627.718428][T25655] ? rht_key_hashfn+0x60/0x60 [ 627.723131][T25655] ? netlink_sendmsg+0x425/0x7c0 [ 627.728098][T25655] vmalloc+0x5a/0x70 [ 627.732119][T25655] ? netlink_sendmsg+0x425/0x7c0 [ 627.737055][T25655] netlink_sendmsg+0x425/0x7c0 15:44:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000207a4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 627.741895][T25655] __sys_sendto+0x2a8/0x370 [ 627.746392][T25655] ? __fget_light+0x21b/0x260 [ 627.751079][T25655] ? __cond_resched+0x11/0x40 [ 627.755760][T25655] ? perf_trace_sys_exit+0x4d/0x160 [ 627.760958][T25655] ? fput+0x2d/0x130 [ 627.764867][T25655] __x64_sys_sendto+0x74/0x90 [ 627.769539][T25655] do_syscall_64+0x4a/0x90 [ 627.774057][T25655] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 627.779957][T25655] RIP: 0033:0x4665d9 15:44:24 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x800000000000}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x4]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='cpu<-0\n&Xp\x9c\xe8|\bB\xe0|') r1 = eventfd(0x3ff) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='cpu<-0\n&Xp\x9c\xe8|\bB\xe0|') io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000001c0)=r1, 0x1) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='cpu<-0\n&Xp\x9c\xe8|\bB\xe0|') poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x4000}, {r1, 0x8038}, {r2, 0x1414}, {0xffffffffffffffff, 0x5474}, {}, {r3, 0x100}], 0x7, 0xfffffffc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x14, @inherit={0x88, &(0x7f0000001440)=ANY=[@ANYRES16=r5, @ANYRES16=r1, @ANYRES64]}, @devid}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRESOCT, @ANYRES32=r4, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000140)={{}, r5, 0xa, @unused=[0x16, 0xb5, 0x5, 0x81], @name="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"}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) [ 627.783846][T25655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 627.803444][T25655] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 627.811876][T25655] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 627.819887][T25655] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 627.827845][T25655] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 627.835848][T25655] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 15:44:24 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x72, 0x0, 0x3, 0x0, 0x0) [ 627.843807][T25655] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 627.870217][T25645] loop4: p1 p2 p3 p4 [ 627.875078][T25645] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 627.883137][T25645] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x36) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7, 0x11, 0x3, 0xd2, 0x0, 0x0, 0xf0802, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffc731, 0x2, @perf_config_ext={0x4, 0xffff}, 0x5006, 0x2, 0x9, 0x9, 0x2, 0xfffffffe, 0x3, 0x0, 0xef1, 0x0, 0x1}, 0x0, 0x7, r1, 0x8) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 627.895315][T25645] loop4: p4 size 32768 extends beyond EOD, truncated [ 627.929976][T25686] loop2: detected capacity change from 0 to 240 15:44:24 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x210, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:24 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x73, 0x0, 0x3, 0x0, 0x0) 15:44:24 executing program 3 (fault-call:5 fault-nth:4): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020fe4300440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 628.033318][T25706] FAULT_INJECTION: forcing a failure. [ 628.033318][T25706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 628.046589][T25706] CPU: 0 PID: 25706 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 628.055377][T25706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.065441][T25706] Call Trace: [ 628.068833][T25706] dump_stack+0x137/0x19d [ 628.073223][T25706] should_fail+0x23c/0x250 [ 628.077641][T25706] __alloc_pages+0x102/0x320 [ 628.082251][T25706] __vmalloc_node_range+0x319/0x5b0 [ 628.087020][T25709] loop4: detected capacity change from 0 to 16382 [ 628.087461][T25706] ? netlink_sendmsg+0x425/0x7c0 [ 628.098777][T25706] vmalloc+0x5a/0x70 [ 628.102721][T25706] ? netlink_sendmsg+0x425/0x7c0 [ 628.107779][T25706] netlink_sendmsg+0x425/0x7c0 [ 628.112557][T25706] __sys_sendto+0x2a8/0x370 [ 628.117073][T25706] ? __fget_light+0x21b/0x260 [ 628.121843][T25706] ? __cond_resched+0x11/0x40 [ 628.126591][T25706] ? perf_trace_sys_exit+0x4d/0x160 15:44:24 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x74, 0x0, 0x3, 0x0, 0x0) 15:44:24 executing program 5: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x1110, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f000023d000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x3dc4, &(0x7f00000002c0), &(0x7f0000033000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000080)) r6 = syz_io_uring_setup(0x528e, &(0x7f0000000980), &(0x7f00005c6000/0x4000)=nil, &(0x7f00006ef000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000001280)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r2, 0x0, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000001140)=""/91, 0x5b}], 0x5}, 0x0, 0x2000, 0x1, {0x3, r7}}, 0xc23) [ 628.131788][T25706] ? fput+0x2d/0x130 [ 628.136706][T25706] __x64_sys_sendto+0x74/0x90 [ 628.141396][T25706] do_syscall_64+0x4a/0x90 [ 628.145809][T25706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 628.151744][T25706] RIP: 0033:0x4665d9 [ 628.155629][T25706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 628.175488][T25706] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 628.183899][T25706] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 628.191885][T25706] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 628.199848][T25706] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 628.207840][T25706] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 628.215818][T25706] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:24 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x75, 0x0, 0x3, 0x0, 0x0) 15:44:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x8, 0x9, 0x79, 0x8, 0x0, 0x7, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080)}, 0x20, 0x96, 0x5, 0x4, 0x6, 0xacf2, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x10, r2, 0xb) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 628.255342][T25709] loop4: p1 p2 p3 p4 [ 628.266367][T25709] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 628.291659][T25709] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:24 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x3f4) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f0000000000000001000a0000", 0x32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) recvfrom(r1, &(0x7f0000000000)=""/13, 0xd, 0x40, &(0x7f00000000c0)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x80) 15:44:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004302440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 628.318313][T25729] loop2: detected capacity change from 0 to 240 [ 628.331166][T25709] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000040)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001240)={0x5, 0x1, {0x5, @struct={0x0, 0x20}, 0x0, 0x5, 0x40, 0x8, 0x400, 0x9, 0x0, @usage=0x40, 0x6, 0x159dd9e2, [0x2, 0x7, 0x6, 0x7ff, 0x6, 0x6]}, {0x101, @struct={0x8ae, 0x7}, 0x0, 0x6, 0x10001, 0x1, 0x3, 0xffff, 0x10, @struct={0x5, 0xc0}, 0x400, 0xffffffff, [0x100000d2, 0x2, 0x40, 0x3, 0x5, 0xb86]}, {0x4, @struct={0x1, 0x10001}, 0x0, 0x0, 0x1ff, 0x4, 0x10001, 0x50, 0x0, @struct={0x4, 0x5}, 0xb, 0xf40, [0x8000, 0xd4a0, 0x0, 0x7fff, 0xfffffffffffffffa, 0xe16]}, {0x80000000, 0x7ff, 0x5}}) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:24 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x240, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:24 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x76, 0x0, 0x3, 0x0, 0x0) 15:44:24 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004303440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 628.505664][T25758] loop2: detected capacity change from 0 to 240 [ 628.561207][T25762] loop4: detected capacity change from 0 to 16382 15:44:24 executing program 3 (fault-call:5 fault-nth:5): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:25 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x77, 0x0, 0x3, 0x0, 0x0) 15:44:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCGETA(r1, 0x5406, &(0x7f0000000000)) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x36) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x36) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB="2cdf7e502d0091dc38337f356692e1f6bf2dafa794272ec9d6a39fc7f4c6969eac818c28d339c9a8ad8b88a41cf184dbc86c961bce82f7fa012790673a02aae6bfe223568e1b7d4839591c473f0a9152eddb0700503f6a885f23356da519c1be"]) r5 = socket(0x2, 0x800, 0xfffffffe) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x1, 0x2, 0x80000001, 0xffff0000, 0x5, "47f40cb8effc7c6c0e5f2fa0717f44cbfe442e"}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r6}}]}) [ 628.629727][T25762] loop4: p1 p2 p3 p4 [ 628.635404][T25762] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 628.661634][T25762] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 628.669491][T25771] loop2: detected capacity change from 0 to 240 [ 628.703637][T25789] FAULT_INJECTION: forcing a failure. [ 628.703637][T25789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 628.717009][T25789] CPU: 0 PID: 25789 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 628.725811][T25789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.735858][T25789] Call Trace: [ 628.739147][T25789] dump_stack+0x137/0x19d [ 628.743499][T25789] should_fail+0x23c/0x250 [ 628.748047][T25789] __alloc_pages+0x102/0x320 [ 628.752656][T25789] __vmalloc_node_range+0x319/0x5b0 [ 628.757863][T25789] ? netlink_sendmsg+0x425/0x7c0 [ 628.762829][T25789] vmalloc+0x5a/0x70 [ 628.766820][T25789] ? netlink_sendmsg+0x425/0x7c0 [ 628.771763][T25789] netlink_sendmsg+0x425/0x7c0 [ 628.776587][T25789] __sys_sendto+0x2a8/0x370 [ 628.781111][T25789] ? __fget_light+0x21b/0x260 [ 628.785798][T25789] ? __cond_resched+0x11/0x40 [ 628.790522][T25789] ? perf_trace_sys_exit+0x4d/0x160 [ 628.795758][T25789] ? fput+0x2d/0x130 [ 628.796641][T25762] loop4: p4 size 32768 extends beyond EOD, [ 628.799652][T25789] __x64_sys_sendto+0x74/0x90 [ 628.799675][T25789] do_syscall_64+0x4a/0x90 [ 628.805567][T25762] truncated [ 628.817853][T25789] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 628.823804][T25789] RIP: 0033:0x4665d9 [ 628.827689][T25789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:44:25 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x78, 0x0, 0x3, 0x0, 0x0) 15:44:25 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x298, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:25 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004304440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:25 executing program 5: timer_create(0x3, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={&(0x7f0000000500)="0604ff3e5100d37d6796bf2f5413d1704919e8028b9463c66856d7c6fc6dda3202e378fe5459660eb205c702a20d27a718dde238903e6b1b5c389129fed218c849dd48f226d6a64bc03810bd7a64fdfde7562521bd2c9c6840e736036b6fd5c9105bef34e4cd25a75a8aa375c11179fec1ef69c364383c27ee5a", &(0x7f0000000580)="fe27ba9c62eb4a9d1a62cc31f92b9437839d767770876aab1c559ed5e6fe2ecf326f393d6d1097522ebbc3dfeef33376a821992638a23c5ee388428bad162defe5f5062a82665a3bd3851df47ae9aa51fded68a18f925db1063c3bda6a28509e9febb2769148ff4cb9f36473cf6c197358d9d47d84eba2335080a5dd4938f4782104ce5537f68dedb3d1dc7e34caa90368531c23b08d04bd612f3f3dbad825fa3daf6e303e1182d80ad73886b04be47eec69579f1143a89ec6d9aad9b149f587484a302a8a58dbe259bc52609736bcb68de909d2a6f6004a1af285ca106608a7e74e8fda1f8aa55724be7e5f"}}, &(0x7f0000000000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000017c0)=""/407, 0x197) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3a]}, 0x8, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x9, 0x4}, &(0x7f0000000100)=0x0) r3 = pidfd_open(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/117, 0x75}], 0x4, 0x5, 0x8) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 15:44:25 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x79, 0x0, 0x3, 0x0, 0x0) [ 628.847291][T25789] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 628.855694][T25789] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 628.863653][T25789] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 628.871651][T25789] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 628.879614][T25789] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 628.887575][T25789] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x52430, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$rfkill(r2, &(0x7f0000000100), 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x7a05, 0x1700) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x101) r4 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x24a420, 0x240) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat2(r3, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x7}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:25 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x7a, 0x0, 0x3, 0x0, 0x0) [ 628.964600][T25818] loop2: detected capacity change from 0 to 240 15:44:25 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x300, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:25 executing program 3 (fault-call:5 fault-nth:6): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:25 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004305440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) fdatasync(r4) [ 629.080993][T25844] FAULT_INJECTION: forcing a failure. [ 629.080993][T25844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 629.094341][T25844] CPU: 0 PID: 25844 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 629.103096][T25844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.113170][T25844] Call Trace: [ 629.116438][T25844] dump_stack+0x137/0x19d [ 629.120778][T25844] should_fail+0x23c/0x250 [ 629.125218][T25844] __alloc_pages+0x102/0x320 15:44:25 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x7b, 0x0, 0x3, 0x0, 0x0) 15:44:25 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x7c, 0x0, 0x3, 0x0, 0x0) [ 629.129820][T25844] __vmalloc_node_range+0x319/0x5b0 [ 629.135154][T25844] ? netlink_sendmsg+0x425/0x7c0 [ 629.140137][T25844] vmalloc+0x5a/0x70 [ 629.142375][T25840] loop4: detected capacity change from 0 to 16382 [ 629.144042][T25844] ? netlink_sendmsg+0x425/0x7c0 [ 629.144068][T25844] netlink_sendmsg+0x425/0x7c0 [ 629.160287][T25844] __sys_sendto+0x2a8/0x370 [ 629.164784][T25844] ? __fget_light+0x21b/0x260 [ 629.169485][T25844] ? __cond_resched+0x11/0x40 [ 629.174152][T25844] ? perf_trace_sys_exit+0x4d/0x160 [ 629.179347][T25844] ? fput+0x2d/0x130 [ 629.182346][T25854] loop2: detected capacity change from 0 to 240 [ 629.183260][T25844] __x64_sys_sendto+0x74/0x90 [ 629.183355][T25844] do_syscall_64+0x4a/0x90 [ 629.198806][T25844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 629.204718][T25844] RIP: 0033:0x4665d9 [ 629.208622][T25844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 629.228252][T25844] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 629.236786][T25844] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 629.244741][T25844] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 629.252709][T25844] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 629.260666][T25844] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 629.268627][T25844] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:25 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x7d, 0x0, 0x3, 0x0, 0x0) 15:44:25 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004306440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 629.294776][T25840] loop4: p1 p2 p3 p4 [ 629.304200][T25840] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 629.331750][T25840] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 629.348629][T25840] loop4: p4 size 32768 extends beyond EOD, truncated [ 629.390144][T25876] loop2: detected capacity change from 0 to 240 15:44:28 executing program 3 (fault-call:5 fault-nth:7): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x3, 0x0, 0x0, 0x6}) openat$cgroup_ro(r2, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x2, 0x2, 0xac4e, 0x2, 0xe36}) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x80, 0x4, 0x80, 0x0, 0x0, 0x7fffffff, 0x209, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x10000, 0x5, 0x4, 0x6, 0x2, 0x8000, 0x7, 0x0, 0x1, 0x0, 0x3f}, r5, 0xe, 0xffffffffffffffff, 0x3) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:28 executing program 5: timer_create(0x3, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={&(0x7f0000000500)="0604ff3e5100d37d6796bf2f5413d1704919e8028b9463c66856d7c6fc6dda3202e378fe5459660eb205c702a20d27a718dde238903e6b1b5c389129fed218c849dd48f226d6a64bc03810bd7a64fdfde7562521bd2c9c6840e736036b6fd5c9105bef34e4cd25a75a8aa375c11179fec1ef69c364383c27ee5a", &(0x7f0000000580)="fe27ba9c62eb4a9d1a62cc31f92b9437839d767770876aab1c559ed5e6fe2ecf326f393d6d1097522ebbc3dfeef33376a821992638a23c5ee388428bad162defe5f5062a82665a3bd3851df47ae9aa51fded68a18f925db1063c3bda6a28509e9febb2769148ff4cb9f36473cf6c197358d9d47d84eba2335080a5dd4938f4782104ce5537f68dedb3d1dc7e34caa90368531c23b08d04bd612f3f3dbad825fa3daf6e303e1182d80ad73886b04be47eec69579f1143a89ec6d9aad9b149f587484a302a8a58dbe259bc52609736bcb68de909d2a6f6004a1af285ca106608a7e74e8fda1f8aa55724be7e5f"}}, &(0x7f0000000000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000017c0)=""/407, 0x197) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3a]}, 0x8, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x9, 0x4}, &(0x7f0000000100)=0x0) r3 = pidfd_open(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/117, 0x75}], 0x4, 0x5, 0x8) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 15:44:28 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x360, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:28 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x7e, 0x0, 0x3, 0x0, 0x0) 15:44:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004307440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:28 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x82, 0x0, 0x3, 0x0, 0x0) [ 631.934125][T25899] loop4: detected capacity change from 0 to 16382 [ 631.947023][T25908] __nla_validate_parse: 48 callbacks suppressed [ 631.947036][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 631.947047][T25904] loop2: detected capacity change from 0 to 240 [ 631.954355][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004308440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:28 executing program 5: timer_create(0x3, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={&(0x7f0000000500)="0604ff3e5100d37d6796bf2f5413d1704919e8028b9463c66856d7c6fc6dda3202e378fe5459660eb205c702a20d27a718dde238903e6b1b5c389129fed218c849dd48f226d6a64bc03810bd7a64fdfde7562521bd2c9c6840e736036b6fd5c9105bef34e4cd25a75a8aa375c11179fec1ef69c364383c27ee5a", &(0x7f0000000580)="fe27ba9c62eb4a9d1a62cc31f92b9437839d767770876aab1c559ed5e6fe2ecf326f393d6d1097522ebbc3dfeef33376a821992638a23c5ee388428bad162defe5f5062a82665a3bd3851df47ae9aa51fded68a18f925db1063c3bda6a28509e9febb2769148ff4cb9f36473cf6c197358d9d47d84eba2335080a5dd4938f4782104ce5537f68dedb3d1dc7e34caa90368531c23b08d04bd612f3f3dbad825fa3daf6e303e1182d80ad73886b04be47eec69579f1143a89ec6d9aad9b149f587484a302a8a58dbe259bc52609736bcb68de909d2a6f6004a1af285ca106608a7e74e8fda1f8aa55724be7e5f"}}, &(0x7f0000000000)) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000017c0)=""/407, 0x197) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0xffffffffffffeb3a]}, 0x8, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x9, 0x4}, &(0x7f0000000100)=0x0) r3 = pidfd_open(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/176, 0xb0}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/117, 0x75}], 0x4, 0x5, 0x8) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) [ 632.001176][T25899] loop4: p1 p2 p3 p4 [ 632.009086][T25899] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 632.020438][T25915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 632.030054][T25899] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 632.044900][T25899] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:28 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x83, 0x0, 0x3, 0x0, 0x0) [ 632.070652][T25908] FAULT_INJECTION: forcing a failure. [ 632.070652][T25908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 632.083914][T25908] CPU: 1 PID: 25908 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 632.092691][T25908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.102802][T25908] Call Trace: [ 632.106083][T25908] dump_stack+0x137/0x19d [ 632.110418][T25908] should_fail+0x23c/0x250 [ 632.114834][T25908] __alloc_pages+0x102/0x320 15:44:28 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x386, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 632.119437][T25908] __vmalloc_node_range+0x319/0x5b0 [ 632.124701][T25908] ? netlink_sendmsg+0x425/0x7c0 [ 632.129639][T25908] vmalloc+0x5a/0x70 [ 632.133545][T25908] ? netlink_sendmsg+0x425/0x7c0 [ 632.138388][T25931] loop2: detected capacity change from 0 to 240 [ 632.138753][T25908] netlink_sendmsg+0x425/0x7c0 [ 632.149801][T25908] __sys_sendto+0x2a8/0x370 [ 632.149823][T25908] ? __fget_light+0x21b/0x260 [ 632.149844][T25908] ? __cond_resched+0x11/0x40 [ 632.163774][T25908] ? perf_trace_sys_exit+0x4d/0x160 15:44:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004309440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 632.168974][T25908] ? fput+0x2d/0x130 [ 632.172891][T25908] __x64_sys_sendto+0x74/0x90 [ 632.177582][T25908] do_syscall_64+0x4a/0x90 [ 632.182069][T25908] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 632.188042][T25908] RIP: 0033:0x4665d9 [ 632.191938][T25908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 632.211971][T25908] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 15:44:28 executing program 3 (fault-call:5 fault-nth:8): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000056f9000000582e8d8d3e431d000000bf3fb760000000fb56e3596e2b3ec9806484ac572d46b7d464d934a2c48804d0e559a566a8f0fb64afabba513bf3aa369a620cd4a5a37801ec6e70fa0dba1d4e97552245be8ecb294c5048383994618f77f962fe829c8822b7e7448289427c2ebc673fd2f61e344a721ff149890d788a6f7c696256f572559938aacc98a17e43986916f9fa8e839c000c22600405810d15b0fa6db26ab3b13b445ff26fd79e403e6d7ee0f151c21d017cda9d40f992a2273176a21c1aa725e48a61f714ca00c66f4060f8ad1160885b2b", @ANYRES16=r1, @ANYBLOB="010000000000000000007b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000014002b0148915327536c2f4f0d6d9cd5ca504415"], 0x3c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x0, 0x1a7, 0x8, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x6, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r4, 0x4, 0xff, 0x9, 0xe241, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7, 0x10, 0x1}}) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x9, 0x18, 0x21, @dev={0xfe, 0x80, '\x00', 0x35}, @remote, 0x8000, 0x40, 0x20, 0x4ba}}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendfile(r0, r2, &(0x7f0000000000)=0x369a9d3c, 0x0) 15:44:28 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x84, 0x0, 0x3, 0x0, 0x0) [ 632.220380][T25908] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 632.228468][T25908] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 632.236501][T25908] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 632.244481][T25908] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 632.252465][T25908] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) pwritev2(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="10e9", 0x2}, {&(0x7f0000000100)}, {&(0x7f0000000380)="0bae3ae9d8719648efab51bf2622f82d983a9b4e1774d0719239c540a39031a5c5e3d78bd90815af5b77fec989c44af149215ee2b1b9759b40577af66d977070a3c974618486c2f3c77cc9e80fb862d23e5f91c90a21ae0b9572c186db7cb2925afa575e9d7f05936eb0bf41a8254565116bf52886751756235d14e78e468c97579340b64f2f0c150ef480f01c3f668514aef248e2edc834afb0ac12f3594e44b70374f3", 0xa4}, {&(0x7f0000000440)="8a40698b8df0062f7d6db4aebe68a1750ac6ef698c38419c96ecfcd646e5b1cecd9022d4c68d3f5afcf18498a5409f034145b60b334a351df4123441ef1e636022fac83a154a2c200a23a9dac682e683143da1197c9e507c90ab371b1c1c72663101eb2184efe8a8a827e74cbfe9ae370648a3e0b0a5d39a54f3a42821bb265f4051d74b9061ece875d3d8e1553f3e8bcbd9399a995feef0e957949885ba265c85187bc5d31b365b17bece9bf054bfff5df145be826e10493de5c77f05845c", 0xbf}, {&(0x7f0000000180)="385649d6486be6f271da788fcff05154f663cf627bf0de32b4fa717031b65feb5d5d62688fff86c1b9bccd62987c49e5168f1d82bd73", 0x36}, {&(0x7f0000000100)="b4e4e246d3059919394e95952514892e60bd5decc0681290cafaff8ce267b7a8dccf22ff7394d47f9534b2179799f53f3120839ef44b190e0290ed3aa5", 0x3d}], 0x6, 0x0, 0xfb, 0x6) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800002, 0x12, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$security_evm(r5, &(0x7f0000000040), &(0x7f0000000240)=@v2={0x3, 0x2, 0x4, 0x8001, 0xfe, "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"}, 0x107, 0x3) [ 632.307894][T25946] loop4: detected capacity change from 0 to 16382 [ 632.315750][T25965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 632.346969][T25973] loop2: detected capacity change from 0 to 240 15:44:28 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x85, 0x0, 0x3, 0x0, 0x0) 15:44:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020002000430a440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 632.359927][T25965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 632.369876][T25946] loop4: p1 p2 p3 p4 [ 632.375437][T25946] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 632.402417][T25946] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 632.406762][T25982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 632.420829][T25965] FAULT_INJECTION: forcing a failure. [ 632.420829][T25965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 632.422130][T25946] loop4: p4 size 32768 extends beyond EOD, truncated [ 632.434064][T25965] CPU: 0 PID: 25965 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 632.449616][T25965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.459673][T25965] Call Trace: [ 632.462944][T25965] dump_stack+0x137/0x19d [ 632.467279][T25965] should_fail+0x23c/0x250 [ 632.471692][T25965] __alloc_pages+0x102/0x320 [ 632.476340][T25965] __vmalloc_node_range+0x319/0x5b0 [ 632.481607][T25965] ? netlink_sendmsg+0x425/0x7c0 [ 632.486552][T25965] vmalloc+0x5a/0x70 [ 632.490455][T25965] ? netlink_sendmsg+0x425/0x7c0 [ 632.495392][T25965] netlink_sendmsg+0x425/0x7c0 [ 632.500153][T25965] __sys_sendto+0x2a8/0x370 [ 632.504654][T25965] ? __fget_light+0x21b/0x260 [ 632.509335][T25965] ? __cond_resched+0x11/0x40 [ 632.514071][T25965] ? perf_trace_sys_exit+0x4d/0x160 [ 632.519702][T25965] ? fput+0x2d/0x130 [ 632.523623][T25965] __x64_sys_sendto+0x74/0x90 [ 632.528293][T25965] do_syscall_64+0x4a/0x90 [ 632.532714][T25965] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 632.538622][T25965] RIP: 0033:0x4665d9 [ 632.542516][T25965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 632.562126][T25965] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 632.570622][T25965] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 632.578627][T25965] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 632.586587][T25965] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 632.594594][T25965] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 15:44:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240)={'syz0', "81a47f4bc853c0ed93ac6c39009096ac2be6cdf6b76654cafad9ffa350361a4153248c44c6affe9ed6e590b29e8107bf05915269775b9f14cb48277f0fe08dfd3c637f2e19d1d2731f45f2f4d2add163443a5596f1e966247a3faeee2d36f6804f8fb4034099ff1ed054bfb9a548b3f771d256d9559ace0174abd02115c85ba6db1cfe6377461bc3df576dda1bfde9401c86c7d400a9ef45c2c98c37339387e10564a62c27307cd6f9c1d5465e476f773a4c648b"}, 0xb8) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:28 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x86, 0x0, 0x3, 0x0, 0x0) 15:44:28 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x3d6, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:29 executing program 3 (fault-call:5 fault-nth:9): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 632.602562][T25965] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:29 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x87, 0x0, 0x3, 0x0, 0x0) [ 632.656153][T26011] loop2: detected capacity change from 0 to 240 [ 632.661385][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 632.696126][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 632.706468][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 632.726060][T26015] loop4: detected capacity change from 0 to 16382 [ 632.732451][T26019] FAULT_INJECTION: forcing a failure. [ 632.732451][T26019] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 632.745691][T26019] CPU: 1 PID: 26019 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 15:44:29 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020002000430b440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x8, 0x8001, 0x4, 0xffffffff}) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:29 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) clone3(&(0x7f0000000080)={0x680a2400, 0x0, 0x0, 0x0, {0x1000}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, r3, r2, r0], 0x4}, 0x58) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) waitid(0x2, 0x0, 0x0, 0x2, 0x0) 15:44:29 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x88, 0x0, 0x3, 0x0, 0x0) [ 632.754445][T26019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.764505][T26019] Call Trace: [ 632.767782][T26019] dump_stack+0x137/0x19d [ 632.772118][T26019] should_fail+0x23c/0x250 [ 632.776738][T26019] __alloc_pages+0x102/0x320 [ 632.781319][T26019] __vmalloc_node_range+0x319/0x5b0 [ 632.786567][T26019] ? netlink_sendmsg+0x425/0x7c0 [ 632.791514][T26019] vmalloc+0x5a/0x70 [ 632.795416][T26019] ? netlink_sendmsg+0x425/0x7c0 [ 632.800383][T26019] netlink_sendmsg+0x425/0x7c0 15:44:29 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x89, 0x0, 0x3, 0x0, 0x0) [ 632.805257][T26019] __sys_sendto+0x2a8/0x370 [ 632.809845][T26019] ? __fget_light+0x21b/0x260 [ 632.814557][T26019] ? __cond_resched+0x11/0x40 [ 632.819264][T26019] ? perf_trace_sys_exit+0x4d/0x160 [ 632.824465][T26019] ? fput+0x2d/0x130 [ 632.828354][T26019] __x64_sys_sendto+0x74/0x90 [ 632.833032][T26019] do_syscall_64+0x4a/0x90 [ 632.837479][T26019] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 632.843400][T26019] RIP: 0033:0x4665d9 15:44:29 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x7) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006540), 0x20042, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r5) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x400, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) [ 632.847289][T26019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 632.866894][T26019] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 632.875336][T26019] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 632.883306][T26019] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 632.891273][T26019] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 632.899293][T26019] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 632.907260][T26019] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 632.923953][T26015] loop4: p1 p2 p3 p4 [ 632.930809][T26015] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:29 executing program 3 (fault-call:5 fault-nth:10): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 632.956075][T26015] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 632.973687][T26015] loop4: p4 size 32768 extends beyond EOD, truncated [ 632.978384][T26074] loop2: detected capacity change from 0 to 240 15:44:29 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x8a, 0x0, 0x3, 0x0, 0x0) 15:44:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 633.103743][T26098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 633.131088][T26098] FAULT_INJECTION: forcing a failure. [ 633.131088][T26098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.144333][T26098] CPU: 1 PID: 26098 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 15:44:29 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x402, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) socketpair(0x2b, 0x80000, 0x6290d2f8, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r3, r5, 0x0, 0x80001d00c0d0) 15:44:29 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020002000430c440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:29 executing program 1: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6537) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 633.153150][T26098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.163202][T26098] Call Trace: [ 633.166522][T26098] dump_stack+0x137/0x19d [ 633.170861][T26098] should_fail+0x23c/0x250 [ 633.175326][T26098] __alloc_pages+0x102/0x320 [ 633.180051][T26098] __vmalloc_node_range+0x319/0x5b0 [ 633.185258][T26098] ? netlink_sendmsg+0x425/0x7c0 [ 633.190300][T26098] vmalloc+0x5a/0x70 [ 633.194193][T26098] ? netlink_sendmsg+0x425/0x7c0 [ 633.199164][T26098] netlink_sendmsg+0x425/0x7c0 15:44:29 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x8b, 0x0, 0x3, 0x0, 0x0) [ 633.204041][T26098] __sys_sendto+0x2a8/0x370 [ 633.208662][T26098] ? __fget_light+0x21b/0x260 [ 633.213346][T26098] ? __cond_resched+0x11/0x40 [ 633.218022][T26098] ? perf_trace_sys_exit+0x4d/0x160 [ 633.223219][T26098] ? fput+0x2d/0x130 [ 633.227109][T26098] __x64_sys_sendto+0x74/0x90 [ 633.231849][T26098] do_syscall_64+0x4a/0x90 [ 633.236266][T26098] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 633.242251][T26098] RIP: 0033:0x4665d9 [ 633.246144][T26098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.265975][T26098] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 633.274391][T26098] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 633.282418][T26098] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 633.290385][T26098] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 633.298350][T26098] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 633.306346][T26098] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 633.309418][T26117] loop4: detected capacity change from 0 to 16382 [ 633.326157][T26119] loop2: detected capacity change from 0 to 240 15:44:29 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x8c, 0x0, 0x3, 0x0, 0x0) 15:44:29 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020002000430d440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 633.355614][T26117] loop4: p1 p2 p3 p4 [ 633.362369][T26117] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:29 executing program 3 (fault-call:5 fault-nth:11): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 633.401710][T26117] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x4, 0x0, 0x53, 0x0, 0x0, 0x8004, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x2, @perf_config_ext={0x675, 0x8}, 0x2, 0x2, 0x7f, 0x9, 0x6, 0x9, 0x401, 0x0, 0x1, 0x0, 0xe2}, 0x0, 0xc, r1, 0x1434cce10e2d34c) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 633.448697][T26117] loop4: p4 size 32768 extends beyond EOD, truncated [ 633.507783][T26148] FAULT_INJECTION: forcing a failure. [ 633.507783][T26148] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.521106][T26148] CPU: 1 PID: 26148 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 633.530261][T26148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.540307][T26148] Call Trace: [ 633.543576][T26148] dump_stack+0x137/0x19d [ 633.547998][T26148] should_fail+0x23c/0x250 [ 633.552485][T26148] __alloc_pages+0x102/0x320 [ 633.557157][T26148] __vmalloc_node_range+0x319/0x5b0 [ 633.562543][T26148] ? netlink_sendmsg+0x425/0x7c0 [ 633.567483][T26148] vmalloc+0x5a/0x70 [ 633.571390][T26148] ? netlink_sendmsg+0x425/0x7c0 [ 633.576344][T26148] netlink_sendmsg+0x425/0x7c0 [ 633.581228][T26148] __sys_sendto+0x2a8/0x370 [ 633.585779][T26148] ? __fget_light+0x21b/0x260 [ 633.590534][T26148] ? __cond_resched+0x11/0x40 [ 633.595241][T26148] ? perf_trace_sys_exit+0x4d/0x160 [ 633.600455][T26148] ? fput+0x2d/0x130 [ 633.604405][T26148] __x64_sys_sendto+0x74/0x90 [ 633.609097][T26148] do_syscall_64+0x4a/0x90 [ 633.613513][T26148] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 633.619409][T26148] RIP: 0033:0x4665d9 [ 633.623299][T26148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.642984][T26148] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 15:44:30 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x8d, 0x0, 0x3, 0x0, 0x0) [ 633.651398][T26148] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 633.659382][T26148] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 633.667350][T26148] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 633.675351][T26148] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 633.683325][T26148] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 633.705644][T26149] loop2: detected capacity change from 0 to 240 15:44:30 executing program 3 (fault-call:5 fault-nth:12): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:30 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x406, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0xd9f, 0xfffffffe) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'memory'}]}, 0x15) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) [ 633.800495][T26173] FAULT_INJECTION: forcing a failure. [ 633.800495][T26173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.813824][T26173] CPU: 0 PID: 26173 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 633.822578][T26173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.832652][T26173] Call Trace: [ 633.835922][T26173] dump_stack+0x137/0x19d [ 633.840283][T26173] should_fail+0x23c/0x250 [ 633.844697][T26173] __alloc_pages+0x102/0x320 [ 633.849306][T26173] __vmalloc_node_range+0x319/0x5b0 [ 633.854580][T26173] ? netlink_sendmsg+0x425/0x7c0 [ 633.859597][T26173] vmalloc+0x5a/0x70 [ 633.863497][T26173] ? netlink_sendmsg+0x425/0x7c0 [ 633.868444][T26173] netlink_sendmsg+0x425/0x7c0 [ 633.873249][T26173] __sys_sendto+0x2a8/0x370 [ 633.877753][T26173] ? __fget_light+0x21b/0x260 [ 633.882461][T26173] ? __cond_resched+0x11/0x40 [ 633.887159][T26173] ? perf_trace_sys_exit+0x4d/0x160 [ 633.892379][T26173] ? fput+0x2d/0x130 [ 633.896303][T26173] __x64_sys_sendto+0x74/0x90 [ 633.901013][T26173] do_syscall_64+0x4a/0x90 [ 633.905431][T26173] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 633.911325][T26173] RIP: 0033:0x4665d9 [ 633.915209][T26173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.932709][T26185] loop4: detected capacity change from 0 to 16382 [ 633.934829][T26173] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 633.934854][T26173] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 633.958274][T26173] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 633.966342][T26173] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 633.974313][T26173] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 633.982447][T26173] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 634.026084][T26185] loop4: p1 p2 p3 p4 [ 634.031429][T26185] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 634.040074][T26185] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 634.048134][T26185] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:30 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x8e, 0x0, 0x3, 0x0, 0x0) 15:44:30 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020002000430e440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000300)={0x2, 0x3, 0x94, &(0x7f0000000240)=""/148}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) accept4$packet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:30 executing program 3 (fault-call:5 fault-nth:13): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 634.130341][T26191] print_req_error: 48 callbacks suppressed [ 634.130356][T26191] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 634.131484][T26198] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 634.143959][ T853] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 634.149322][T26187] blk_update_request: I/O error, dev loop4, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 634.159550][ T853] buffer_io_error: 38 callbacks suppressed [ 634.159561][ T853] Buffer I/O error on dev loop4p2, logical block 8064, async page read [ 634.174598][T26199] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 634.199575][T26185] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 634.212549][T26209] loop2: detected capacity change from 0 to 240 [ 634.216203][ T853] blk_update_request: I/O error, dev loop4, sector 16130 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 634.232369][ T853] Buffer I/O error on dev loop4p2, logical block 8065, async page read [ 634.240658][ T853] blk_update_request: I/O error, dev loop4, sector 16132 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 634.251898][ T853] Buffer I/O error on dev loop4p2, logical block 8066, async page read [ 634.260167][ T853] blk_update_request: I/O error, dev loop4, sector 16134 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 634.271397][ T853] Buffer I/O error on dev loop4p2, logical block 8067, async page read 15:44:30 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003800)={0x0, 0x0, 0x0}, &(0x7f0000003840)=0xc) r5 = getegid() r6 = syz_io_uring_complete(0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r8 = socket(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r9}}]}) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003880), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004f40)=[{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000001c0)="b1aed35f56a5e1fd40e44f8be42ffacaa59523530fd7021429ee31d72d59d81ec307e170f36586c0594e7a7010b3e35fa204f06791be05fa3b4f7847cee0f02bc461b3ad8118d67e7740c3ce5566066264e248307f8df6862d5815519c02819716b249b4625113a57760", 0x6a}, {&(0x7f0000000240)="4a5342c34ff8a45ccaea04942f2f58eba39765010b5b3ddbe44fe2440af59a00e2df597ff649e596abef9f641aed11934d8b29372fc4000d3fca98ed820acebe03a1c06f44bb728de23f070779bc4473754f57bba3df30d375eb981aab0dc4debcf0b37f259d6b4929ed0b866a3531e418375753ad6820eb5afc88b2f3e390a57c7504c118ce0c0960916bc9f7d20cd1a13a0e70f2d53853d89f", 0x9a}, {&(0x7f0000000300)="45b9aa7a6d7779b2b2bb7d5cedf456d478fdf7ee2705db68deb5fd72be3c681edc59402aea5d74aad93bedadeba249bd43b7da0b4ff27295989d64005d0a03b016e98f1f52ca9b8de44af2d2fb49dce4ac43fe6187efae0fd7427c9e8298c383e216694c6ef47126fa94ed301fb31b13697ede", 0x73}, {&(0x7f0000000380)="9ccfd20b7db4e3701a713373b8e6e2951fade41b1f9e5d7d20ded9f9cd1697a9fe8214b601ebf9d6a96fe3b2b9e2fc099d2d9e9a84704f03a26850479fa6f7c95a4b124c7858b08d48edbe9e5481e1407a48b79588679a84751e37d542fa9bf4266704e3bf72853b81a687dc097bb7a3f7622c0e7d5bf1b58e886eaa118a4544b8066a4782d21ffe06adf178b0ddf15af981bc09b9a7e9c58e4b864f011f960291b21e85eee8fa771ec96894ee1cdf9e7de500284959e49a760f2a5f80354911b4f27792ce236599d971f19b8015bec48853a3aec8ab480c1312180f4484890479", 0xe1}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)}], 0x6, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x40004}, {&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001600)="d972a77cb94cb9cfa1d24205cf4a00328f2aadc2d9ed17f0f7091e2abab17faf43237e0a5182ca48bc58db0864e9050215f75baae71c069f514ed36577395f4531da44f2f2c175e2e4c2b336c314e5e68fa402d8b5d9ed9f7f6eddd06931c192776cf735dff5859e398ae3916282307c6c6da9d16b247b9f3d282745ac27e3", 0x7f}, {&(0x7f0000001680)="79640a64c5aad081e46ae8827ea50d566fafd5a66fa4766771d0d09f3b79e9545bfdafedbe1fa90448f93387efe4891e9f6eaea9f609a8a71d01327efef9", 0x3e}], 0x2, 0x0, 0x0, 0x10}, {&(0x7f0000001700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001780)="8e10fd5ae8c87956aa06f2d62999a06721117cb2d77df2c6653d75d9076452e3ed4fee3ed8f6aabc828a82db1613f690e21160f695c9fe24840ef6363cf24e9aced7b2027776e91f761a140debe5a36adfa2cfef066523b92fc7e95e9b010bd1d5ea42aa", 0x64}, {&(0x7f0000001800)="551fb1bef78daa15ee5c2d0c84ea6f7eab060329291c2b262ac391581779bec43dd0fa2a4cccba08245643f311d687762bd0bba89b087ab9a57cabb355951834017ef9e16ad4dc0f5a7a93fb6c96eab1e8fafa2887293e0a73f63a690fb129bcc738325c825550ed59c2edac03879c0f40bcf74c0698c66ba920597b44a381d8c546765dd31ed1ebd340feffe47fc32a644b6cd70613ff6d47a5ad947dc36ae851e47eab635c930e38f617d997b1dbde7b316e33e688d21cf609c7fb4eb7d731b1b9b0a2804f0e36cb0b0cff3e36376c702fcb05c5b67eec98701a40787bef739b802c1aa893163631d6bd", 0xeb}, {&(0x7f0000001900)="bb61313cf8a428252662a168c642c37ac0ec8aedf7d9c0c9ccbe13bdc1099f2bd79fe5cce800855eb27bd60bdf9307b0beee571dae80e275d6fbc7fc0696276279f053677dbc033ae3aa002e746eadc25537ba4e4fc6f91dd3c276fe58b4173e9b1b49f8daa4c886da7c60a84df972a6f630e2c33fed1b499f20ef35a9712c24960f4c6b3b0a11", 0x87}], 0x3, &(0x7f0000001a80)=[@rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x48, 0x44}, {&(0x7f0000001b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001b80)="7fee2b9b365090540fdeea804b3a36b5e9827895ccd57df86e6e7b97b63ac7cb314ed48c764770321a0566fad6e8d6ca7575716257faecf04315a47533b7ec346ea1ad5aa1503213330637d5dca2ea85e382ce59209ec04052957bd35418134de2c81365fc0f0837ef595142d54314de674f87226072f4e58e9106", 0x7b}, {&(0x7f0000001c00)="39d8666000f1e46e14e98ef97b8fa9116549374a38d77cca79ba26b3a863b28041458a8a5bdceba03fa5511d835aebedccb763711a8f08faf1df92ef349e0cb449ad08e15e3ca0d5a4ea0e0f0eb1d223979fb2ce53a859080ab79773e7c0549bb1da141cfbf106d95f83de0898972c865f9b36fe29f371df72a2bb088718dce83c669c6325032b", 0x87}, {&(0x7f0000001cc0)="a9ca537840970aea8b76d5839494af4444106eab41a3f39b33a128ea5057ab16b557404de4e7bc8d119e", 0x2a}, {&(0x7f0000001d00)="234a42c520142006e3fcfbb5f081721a5fb043b565f4da643dbd613a2aec60ca90e2a025092a147fb5d7399e61cdf6985c0845388451ffdaf0815778c32018564175b8908ace01e4fc2c2ac37813b2a5dda9f17fe5078592cee1bea335748e79727f7ed0c3492d69e972cde75ac2a86b3ae14e8fd5d6c1074a1222a58e124317c64013d618aa0ec5bec2c8109e8dc721b19e27d0659ee68aa3b25f18e4a910a141a8c25492", 0xa5}, {&(0x7f0000001dc0)="92b99588ed53f0d6d79f9357f716b664ea87dcbbb074473bc7cb65536543501f20", 0x21}, {&(0x7f0000001e00)="26710667cc9d7cb141cb1a82486bb0f6717e30c41d367e0c2767256fb549a230fec0f927c8b58e8a1db038582d90fd66191c4b11c0c1a11db2ec191be5fed9a945ca9f67f5949e7b778f917fb83577e4c95a36c475faa360facf8aad90b83d5065c523b05be4f17e108a764eb56ac1bc17f699cb165477b3b41b083aa2bcb2a64c4f9760c77490bdf685a4eabbc7a19f34db6bad92ceed07245a3b3d7f024f60508f15dfac85b285089825cf536e5550b5b3e3462c7b33e40aa92bd91b97f4eab8f40e521ffe306c275b8051d99d291897c0ed3a15972cb9d7d9566ec37b18bf18d58d7fb52b37bbd02179d387dbf1dfc0c4d0bb5091c6", 0xf7}, {&(0x7f0000001f00)="c936a6301167178c5fe87a6c1c83d6c02f3eecd8869812b67a0158ac2f6be6e0d8cfccf6739255ae1f066907448e1ad939490755fb7184a6190132804d0172dd04d30a07a419620b22247144a0aab54a199f7b8035d8d2383b7e", 0x5a}, {&(0x7f0000001f80)="a7028f6c79bc1fd1db0acd85bf3fa0a46eb3721021b77a44b425e959b7609f2902edbccb1942509e63e40247f0772c0acef40100f0f72fce512096f4baaa093ab0d2168b88e6b77c9221a7f6ca5dd5", 0x4f}, {&(0x7f0000002000)="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", 0xfc}], 0x9, 0x0, 0x0, 0x4004000}, {&(0x7f00000021c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002240)="313930a23f6f61b58ab2cbbb46266bcd45684925adb7776294c62667d43e4425d80e195c07a23111c45895843fe013fb441fa4957e96f7f899d10e3a6cfc9bea279fe26fdd4886fb85b1b903932acc", 0x4f}, {&(0x7f00000022c0)="a578ff86af5c86d0832b45499b7dab3db38d9488adc32459fb6a90ae36608c2acc80e51214ecc2cc39546d603b2ef79beb272ec9e5058ce6e72cf9d6b082a7f37c9dad952fce81670dd79fe05ee81f6c4ed9e2ed92c1560d5a6ec61d445612493a8a11c4daf8b44bc12f714becdfab59fe6bf17941fbaa3b4bc7a50e22e91a66cb2eea8d1f42a2baf09c25b7f91eff4f5919c3a154854c52c3fe07", 0x9b}, {&(0x7f0000002380)="6623a9ab4c573fd7819eef8742acdd51638f39a5147217aa0d686fe9f132a764c975ed568b9827c154b3b5b8781240ad1ee4cb2d28f4a7ee8e9e951a68d42e3b54a65f39f2fb5ddb1bff09679bca69fab2c1b1c53d756054cd1e230a392b7496cb65182e2037ee4748306d691fab05736adf52c2244cc5ffce3988b835c865f6f0bbf5be5fdfd8759bb2133694d02bb364edcdf7ca4bdef8", 0x98}, {&(0x7f0000002440)="fab1d9858ab015e91ece7dc9e43987e0ec298439f6d76a3f1f06dda0cb6da2032b9901f4a7b1f40dc7348613ba4f984389534c0c440afa6d5f63e9f07a7831e0cbfcdcc66e0bbab139d141d9f0270612a8a3a0d92485f84f91a3677ec0087aff08c468a75405c2a5e7c30a8b455de458b104710e703bde7ff383ec5f5b2dca3062a45562c2be79d293e0a6150d67ba3444c2d3f811be74b961749cbb95b07ffb67dd8c0aeaecd69c4b5d3cfc5a08d85b512786b91c0c2dba7afaf0e4ac24a0b149cb300f26594e089e1da8e12556039c4690e67aa6d0fc07589e81ec78fa", 0xde}], 0x4, &(0x7f00000030c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r0, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}], 0xf0, 0x8000}, {&(0x7f00000031c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000003240)="46225b6e93a11704a33f141b8fdf80b970159ff7e1e4bbdcb89cf954d0f4a0a5247d419b6f269daedfc44dc92c202f387474f81ab07168c534cd5d9af9849c9b00cce694d7598a2ae0238744810b62fbb29c0e9eda62b6a8a9bbed7e56b70f2a908b167948777c33743c36d6b29dbc3f2a11e2340f65b19b8377af49bb5d7fe5d7e518ddac08fa4f774b51fb705c7f1edfc4da8b78006b346ba7391a5f5c5d50a4f29c784110c60f91776a44ce9b967afe0a2aad775dc04ae738144e3a7f7e0a47d78bf988432940f03d528a6e1f0de8d3fa8e76aa20019b50f16928f900128d9f4bcbb601d76dc353ee0e600f5b682088a16395206e7d", 0xf7}, {&(0x7f0000003340)="2cb058e969b6613d593ecddf951928928f91f9af0011cfa20b0c4413769ee51e186f8c0fe271ec9134031a23b2443323315c133cbafa84dc5ba9664e5f8fcbe0f4eec9d912f8d3325bba16499395aaa79b325cc82e5bbbab49d6803f8ea62cf5f00f7cfcfab2c8599354b58165c38a545e209af80266d70e632bb79e5a8ab41166c05311505b787d7c46c522f65754d3cdd3fe85d468b71a91a3085bfc9a9a7d4c9c93059a13aad98edf1c74a2f4d21c5d190d2d1036d2ccae39e856c658bfdf3f98c94a5bc6992b1ff08c27654dce5821f77242e06d87", 0xd7}, {&(0x7f0000003440)="b02524f30ad4b858bce54fc7b89be11a2acf9c64ce0f4024315f11a4f22c5e15b6050dd5a9e120ecfa6738379275981d22dd46791b983926902379ac26bbd280f926b35f9652687d1f1f851b9a80f241df2556152ff3624cc3e706260ffabdceb8ae", 0x62}, {&(0x7f00000034c0)="98b444e040c7c220fa3f4c4a5e0ee5f0fea331c7b5f42fc4f917b8072cf8b7337036686d66c0747e1619dd77984332e641117feffcb56bc767507438705e1e6083a82f153a9e26e418a9d252554d3a4e02da92e08349c5cf71982cb72de72a25b16dc6579b21d4349eae68fc9286dcbd21c1cea8f6004cafb8786942d21c4bafbf9ab4d01d58a1c1e945f7", 0x8b}, {&(0x7f0000003580)="3a94f6b5f236868a85d77c602e563ec3e9c57ea1dc55f228b8539ffa1f6aab749c3e5bd029b53b042f8c9227591a9604080b0729a0808eafb6978ea49f267d159f4c1426ef8890e23641bd220f7be3282db130e674a50e2ec084b2b55ac32266a39ce8ddd79c2d08591628f69d62e0c1a706981b5c4dd675a571dab0bea625718b8a99f8c39f49614f64", 0x8a}, {&(0x7f0000003640)="bbc8e48bbd1daefc1b306b566c1d37e4979d462149c20230176d77901789225ef0ee362950ffb09e8fd16da2fcfb6b6a98ebb5924292e0bb6bcf3423033fc10f21b1e4181b42f1a36bf37b1cf82a2bae754bc292d2c1e3ca8f86f6dc807e742f", 0x60}, {&(0x7f00000036c0)="b2d2ad313dcaa3a8c9a6430c2deba896a7a00de034add2842faf2414fc960cf03e4cfbb7090387e1020353c225504c9517bc9252a0622a5adf", 0x39}, {&(0x7f0000003700)="027b66450e198bf8642e4f4fae081b7243cebc8ad624692037ce91c5828246c88df6ecd6d47e8cacf039e3577b6260aeaf37e130f786d32759b6867cb5dcf714657f", 0x42}], 0x8, &(0x7f00000038c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r5}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r6, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r9}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0xc8, 0x800}, {&(0x7f00000039c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000004a40)="70f08b6c278cc05f3d44d09df5ae0e00d189613307a2d27437c9cea973d6b31407885b2d1538a9f6dc0223016b93efff7d5c18b38c5784d5cd33723ee8c0ef16efe925943d48ba4f9c43aa091b2331bb6302ec387f50a4c5a88575cd1f91c5ab1e3cd5e4889b697dc8abfdaf9a8422f00878c0270aeaae457d196b0fa4f245dd5fda9869ca8203c7619e2de99b959f4d83d32eba0db0c09e62db33465777f593c488eaeccd3e61fcd16e1b6ea7959b2b3a6a1f23f3bb669a5b345dae07052005740e734fae014c40217283a89ca3e5e82eeefcb772bc96ae950171701a6612696946b4", 0xe3}, {&(0x7f0000004b40)="29e01c45e8380bdabfbe80cfceb991683ca58df472e1ae342f0b41415e6e5cbf0059e6b04774cac27a57af95470dc8a89a4f352cfc", 0x35}, {&(0x7f0000004b80)="74103e0a0b38bdd750c5284fcf61deb9802e125555e950b548be07e888f33a0eedd7e9470bacf69629f525942ed3e4e637350078d9fedfb61c035114e188d2186e6b543d5852f27a37231275c327113740677f6cdd8de798e2a33bc752d19ccf2c304792dbc9075c02e3d1212addd4d69e36621dee62f404c28f1493f37d9a5ee6b3a78d22a559f54b69fb7d33930f18b06d14ee2ac2c101828287eb", 0x9c}, {&(0x7f0000004c40)="b9d2a60dedc097d11294e34da15638c5b922f9dc689cfffa20c0e0e3f923203f1b4dff8fa0c6244289e50c6537ac1bcbedcad540b4a6720545deaf596c76fe0bba3b7cbf6e53ada372dc742535eb5cbdc502623ca3df5b5c", 0x58}, {&(0x7f0000004cc0)="ebef97651046f89bbf8f97e1822194fc036b652a0d5d011784b5218dba9dfd9bab4359f89d7a3e8b2c", 0x29}, {&(0x7f0000004d00)="99ff7e4db2a4d117d5d63ca0e768a727f24481d0bd7e8e75e0efcaa8268ce5018ba016594722b1d637e01840f4b67160f5c4ee6eece01e37fec44b48f0da99f2c6908fbfa55ec8bd658cceaa8c5f4567208b31d0164360139dc4ec8d2087b12babae545fd2bf9d0ea1cc1949b693c6a1f5febaf3ef714b5225d4c4cfaaea", 0x7e}, {&(0x7f0000004d80)="2b7e4a2e859ba7517baada1ece15ca827f5712fcb8b1fa2b0b9781d475d16681fde8227e11e3beb6de68d1d3be5bd4d5032747e7997e0493c1818e5d2aa173b06741af1d74db1d93a6e675e6de914668090d37a983e3f262deca7771b0", 0x5d}, {&(0x7f0000004e00)="a9a5629b6f983309f52e2689bb46099e19cf2afd75dc809120c76a5e393fe5c3e37e19e0937c64d35c38bf5afb982de6d6a40b412585804b04e17de245d603e6f29d678005f359385b46793e6d99aea926ef4b8643176c73abf1574b", 0x5c}], 0x9, 0x0, 0x0, 0x20010800}], 0x7, 0x4001) r11 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) sendfile(r11, r11, &(0x7f0000000000)=0x7, 0x3) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) [ 634.279750][ T853] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 634.291574][ T853] Buffer I/O error on dev loop4p3, logical block 8064, async page read [ 634.299887][ T853] blk_update_request: I/O error, dev loop4, sector 16130 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 634.311111][ T853] Buffer I/O error on dev loop4p3, logical block 8065, async page read [ 634.319418][ T853] Buffer I/O error on dev loop4p3, logical block 8066, async page read 15:44:30 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x8f, 0x0, 0x3, 0x0, 0x0) [ 634.327696][ T853] Buffer I/O error on dev loop4p3, logical block 8067, async page read [ 634.335999][ T853] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 634.344014][ T853] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 634.365244][T26218] FAULT_INJECTION: forcing a failure. [ 634.365244][T26218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 634.378576][T26218] CPU: 1 PID: 26218 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 634.387347][T26218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.397422][T26218] Call Trace: [ 634.400729][T26218] dump_stack+0x137/0x19d [ 634.405183][T26218] should_fail+0x23c/0x250 [ 634.409599][T26218] __alloc_pages+0x102/0x320 [ 634.414189][T26218] __vmalloc_node_range+0x319/0x5b0 [ 634.419394][T26218] ? netlink_sendmsg+0x425/0x7c0 [ 634.424334][T26218] vmalloc+0x5a/0x70 [ 634.428269][T26218] ? netlink_sendmsg+0x425/0x7c0 [ 634.433205][T26218] netlink_sendmsg+0x425/0x7c0 [ 634.438048][T26218] __sys_sendto+0x2a8/0x370 [ 634.442579][T26218] ? __fget_light+0x21b/0x260 [ 634.447263][T26218] ? __cond_resched+0x11/0x40 [ 634.451940][T26218] ? perf_trace_sys_exit+0x4d/0x160 [ 634.457144][T26218] ? fput+0x2d/0x130 [ 634.461035][T26218] __x64_sys_sendto+0x74/0x90 [ 634.465707][T26218] do_syscall_64+0x4a/0x90 [ 634.470159][T26218] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 634.476052][T26218] RIP: 0033:0x4665d9 [ 634.479937][T26218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 634.499631][T26218] RSP: 002b:00007fde2f3a0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 634.508120][T26218] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 634.516092][T26218] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000003 [ 634.524228][T26218] RBP: 00007fde2f3a01d0 R08: 0000000000000000 R09: ffffffffffffff95 15:44:30 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x480, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:30 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020002000430f440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 634.532268][T26218] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 634.540299][T26218] R13: 00007ffea5da648f R14: 00007fde2f3a0300 R15: 0000000000022000 [ 634.571277][T26243] loop4: detected capacity change from 0 to 16382 15:44:30 executing program 3 (fault-call:5 fault-nth:14): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 634.581229][T26222] PM: suspend entry (deep) 15:44:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x100010, r1, 0xeed13000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 634.605154][T26243] loop4: p1 p2 p3 p4 [ 634.612782][T26243] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 634.638032][T26243] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 634.639313][T26259] FAULT_INJECTION: forcing a failure. [ 634.639313][T26259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 634.658437][T26259] CPU: 0 PID: 26259 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 634.663476][T26243] loop4: p4 size 32768 extends beyond EOD, [ 634.667200][T26259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.667213][T26259] Call Trace: [ 634.667222][T26259] dump_stack+0x137/0x19d [ 634.673235][T26243] truncated [ 634.683282][T26259] should_fail+0x23c/0x250 [ 634.683310][T26259] __alloc_pages+0x102/0x320 15:44:31 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x90, 0x0, 0x3, 0x0, 0x0) [ 634.691476][T26222] Filesystems sync: 0.105 seconds [ 634.693999][T26259] __vmalloc_node_range+0x319/0x5b0 [ 634.713213][T26259] ? netlink_sendmsg+0x425/0x7c0 [ 634.713241][T26259] vmalloc+0x5a/0x70 [ 634.713332][T26259] ? netlink_sendmsg+0x425/0x7c0 15:44:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004310440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000003c0)=0xc) openat$cgroup_ro(r0, &(0x7f0000000540)='cgroup.stat\x00', 0x0, 0x0) clone3(&(0x7f0000000440)={0x10000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x40}, &(0x7f0000000240)=""/235, 0xeb, &(0x7f0000000340)=""/71, &(0x7f0000000400)=[0x0, r3], 0x2}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000500)=0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:31 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x91, 0x0, 0x3, 0x0, 0x0) [ 634.713354][T26259] netlink_sendmsg+0x425/0x7c0 [ 634.713451][T26259] __sys_sendto+0x2a8/0x370 [ 634.713470][T26259] ? __fget_light+0x21b/0x260 [ 634.713491][T26259] ? __cond_resched+0x11/0x40 15:44:31 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x4f5, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 634.713510][T26259] ? perf_trace_sys_exit+0x4d/0x160 15:44:31 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004311440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 634.713543][T26259] ? fput+0x2d/0x130 [ 634.713560][T26259] __x64_sys_sendto+0x74/0x90 [ 634.713574][T26259] do_syscall_64+0x4a/0x90 [ 634.713594][T26259] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 634.713617][T26259] RIP: 0033:0x4665d9 [ 634.713632][T26259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 634.713660][T26259] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 634.713717][T26259] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 634.713745][T26259] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 634.713757][T26259] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 634.713768][T26259] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 634.713779][T26259] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 634.730327][T26258] loop2: detected capacity change from 0 to 240 [ 634.813861][T26280] loop2: detected capacity change from 0 to 240 [ 634.901853][T26298] loop4: detected capacity change from 0 to 16382 [ 634.904860][T26222] Freezing user space processes ... [ 634.908967][ T1033] synth uevent: /devices/virtual/block/loop3: failed to send uevent [ 635.008608][ T1033] block loop3: uevent: failed to send synthetic uevent [ 635.015585][T26222] (elapsed 0.087 seconds) done. [ 635.015670][T26222] OOM killer disabled. [ 635.015673][T26222] Freezing remaining freezable tasks ... (elapsed 0.004 seconds) done. [ 635.020688][T26222] printk: Suspending console(s) (use no_console_suspend to debug) [ 635.072121][ T9733] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 635.574419][T26222] ACPI: Preparing to enter system sleep state S3 [ 635.574574][T26222] PM: Saving platform NVS memory [ 635.574578][T26222] Disabling non-boot CPUs ... [ 635.577643][T26222] smpboot: CPU 1 is now offline [ 635.583015][T26222] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 635.583130][T26222] ACPI: Low-level resume complete [ 635.583220][T26222] PM: Restoring platform NVS memory [ 635.583228][T26222] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 635.593741][T26222] Enabling non-boot CPUs ... [ 635.593936][T26222] x86: Booting SMP configuration: [ 635.593940][T26222] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 635.594113][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 635.595183][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 635.596738][T26222] CPU1 is up [ 635.597096][T26222] ACPI: Waking up from system sleep state S3 [ 635.696800][T26222] OOM killer enabled. [ 635.698238][T26222] Restarting tasks ... done. [ 635.702828][T26222] PM: suspend exit 15:44:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80005, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000000140)="000000000000000010000000f2a953140c764271ad9be301789147cf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d1f4755fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000540)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000224d02d700000000000400000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000befd03c5f2707781000000000002ea0407000000000000000000dd000000006461746106015400000000000600000000000000786174747231000006014c000000000006000000000000007861747472320000000000000000000078617474723200007861747472310100ed81000028230000d1f4655fd1", 0x115, 0x2200}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000040)='./file1\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x93) 15:44:32 executing program 3 (fault-call:5 fault-nth:15): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:32 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x92, 0x0, 0x3, 0x0, 0x0) 15:44:32 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004312440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 635.740789][T26307] loop2: detected capacity change from 0 to 240 [ 635.753711][T26298] loop4: p1 p2 p3 p4 [ 635.755430][T26298] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 635.758194][T26298] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 635.759974][T26298] loop4: p4 size 32768 extends beyond EOD, truncated [ 635.777889][T26317] FAULT_INJECTION: forcing a failure. [ 635.777889][T26317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 635.780676][T26317] CPU: 1 PID: 26317 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 635.782419][T26317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.784166][T26317] Call Trace: [ 635.784816][T26317] dump_stack+0x137/0x19d [ 635.785510][T26317] should_fail+0x23c/0x250 [ 635.786397][T26317] __alloc_pages+0x102/0x320 [ 635.787314][T26317] __vmalloc_node_range+0x319/0x5b0 [ 635.788352][T26317] ? netlink_sendmsg+0x425/0x7c0 [ 635.789327][T26317] vmalloc+0x5a/0x70 15:44:32 executing program 3 (fault-call:5 fault-nth:16): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000240)=""/130) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 635.790196][T26317] ? netlink_sendmsg+0x425/0x7c0 [ 635.791421][T26317] netlink_sendmsg+0x425/0x7c0 [ 635.792244][T26317] __sys_sendto+0x2a8/0x370 [ 635.792966][T26317] ? __fget_light+0x21b/0x260 [ 635.793747][T26317] ? __cond_resched+0x11/0x40 [ 635.794422][T26317] ? perf_trace_sys_exit+0x4d/0x160 [ 635.795208][T26317] ? fput+0x2d/0x130 [ 635.796039][T26317] __x64_sys_sendto+0x74/0x90 [ 635.796991][T26317] do_syscall_64+0x4a/0x90 [ 635.797734][T26317] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 635.798778][T26317] RIP: 0033:0x4665d9 [ 635.799496][T26317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.802987][T26317] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.804372][T26317] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 635.805555][T26317] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 635.806772][T26317] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 635.808004][T26317] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 635.809208][T26317] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:32 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004318440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 635.843909][T26327] loop5: detected capacity change from 0 to 1024 [ 635.853108][T26330] loop2: detected capacity change from 0 to 240 [ 635.857466][T26332] FAULT_INJECTION: forcing a failure. [ 635.857466][T26332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 635.859614][T26332] CPU: 0 PID: 26332 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 635.861434][T26332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.863373][T26332] Call Trace: [ 635.863922][T26332] dump_stack+0x137/0x19d [ 635.864728][T26332] should_fail+0x23c/0x250 [ 635.865517][T26332] __alloc_pages+0x102/0x320 [ 635.866194][T26332] __vmalloc_node_range+0x319/0x5b0 [ 635.867000][T26332] ? netlink_sendmsg+0x425/0x7c0 [ 635.867905][T26332] vmalloc+0x5a/0x70 [ 635.868578][T26332] ? netlink_sendmsg+0x425/0x7c0 [ 635.869573][T26332] netlink_sendmsg+0x425/0x7c0 [ 635.870458][T26332] __sys_sendto+0x2a8/0x370 [ 635.871311][T26332] ? __fget_light+0x21b/0x260 [ 635.872062][T26332] ? __cond_resched+0x11/0x40 [ 635.872831][T26332] ? perf_trace_sys_exit+0x4d/0x160 [ 635.873697][T26332] ? fput+0x2d/0x130 [ 635.874407][T26332] __x64_sys_sendto+0x74/0x90 [ 635.875133][T26332] do_syscall_64+0x4a/0x90 [ 635.875785][T26332] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 635.876797][T26332] RIP: 0033:0x4665d9 [ 635.877384][T26332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.880377][T26332] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.881748][T26332] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 635.883154][T26332] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 635.884503][T26332] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 635.885716][T26332] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 635.887174][T26332] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:32 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x93, 0x0, 0x3, 0x0, 0x0) 15:44:32 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x500, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffffffffffffffdd, 0x5, &(0x7f0000000440)=[{&(0x7f0000000240)="1ce8bd6807bd29eb6af47e449888761d01839a339cd4bc4f064dadf8c88b09f2ed1f94d66046b47f4cc7e2acc5d36719726e1e59fa7489098c3ab9c446ca369c6ebf8793ac776d3222480bd63d8510b08d432e784429d797efc250903cb2cdd5f2eb3143acc1ac", 0x67, 0x5}, {&(0x7f0000000100)="96a0a7aa702be8b9da54670966711da3e4f9de8bd184a0184705606b5d0e14b6678b85091140e456d3ec17ef8de8", 0x2e, 0x4}, {&(0x7f00000002c0)="634d6d77e899760b3c31c638fccaea5a539259e14019879fb4e1b81a9bd5aaee16959a3396544e1ebb1d2d0486019cfe592b09694f63f3e5eaeddf123bd114fcf4f9d836be76826f5ab9e6cc45ca5d92997ba4eace1e64635279ea471c3cd25e899774aad029", 0x66, 0x6}, {&(0x7f0000000340)="3d30e20863ba09a92ee8a16df9ee38a09358e749132274b8bd9f111dadacd27720f12be211d758ecdfd151f2f9b3fbffb46ec6e0919824c7ffdc080095a522984f2385bf2ac0552dc27159bc250f7cd3b9de699335412a9495", 0x59, 0x10000}, {&(0x7f00000003c0)="c0c91088fa69aa30db97c985b62f00b5139e142ca1231473b2398d01b40c172b99adc60e6302a37e2829c35ce88f8980dba1983aefa4a5e0267926a821a335c56f38fa555e51d005aab851f1b219554f6686d80b277ff5c28e272ecd4ef8e3da43f6", 0x62, 0x1}], 0x810, &(0x7f00000004c0)={[{@shortname_mixed}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) write$binfmt_script(r2, &(0x7f0000000540)={'#! ', './file0', [{}, {0x20, ')$'}, {0x20, 'memory.events\x00'}, {}, {0x20, 'memory.events\x00'}], 0xa, "1d6163ff240b8ec4b557d7e919db3e2a16dc21929ac1d46abcc6e80e484b010e4a0d603eadd88d3dee860b741fd850ccf6cf0dec46293ac7b375e8b5805c2602450179a09587de0c3e810d8b8d7d53acbf2141b6f2459c2c7d5654120668f29131e1423ef3a3881c10ef11392110c40746318ddca16b309f299e1e0e0d139e362d5ece37f904c39d22cb9fbf46243440854aae5565afd40c75d3b7f920cb70d1df66f671632bf47e138f67091bf9a63717c9aaa2a3e7e7915ac3c67a4f3fb25f8f895b33abca12c72d84b55fe40f395b8d65562c0536fdcce9c5b5ad7308"}, 0x10c) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:32 executing program 3 (fault-call:5 fault-nth:17): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 635.931168][T26327] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz-executor.5: bad orphan inode 16 [ 635.933358][T26327] ext4_test_bit(bit=15, block=4) = 1 [ 635.934801][T26327] is_bad_inode(inode)=0 [ 635.935521][T26327] NEXT_ORPHAN(inode)=209 [ 635.936661][T26327] max_ino=32 [ 635.937192][T26327] i_nlink=0 [ 635.938325][T26327] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 15:44:32 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x94, 0x0, 0x3, 0x0, 0x0) 15:44:32 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x931e, 0x2, &(0x7f0000001f40)=[{&(0x7f0000001d80)='?', 0x1}, {0x0, 0x0, 0x400003}], 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x151802, 0xbe) [ 635.994853][T26364] FAULT_INJECTION: forcing a failure. [ 635.994853][T26364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 635.997451][T26364] CPU: 1 PID: 26364 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 635.999519][T26364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.002412][T26364] Call Trace: [ 636.003092][T26364] dump_stack+0x137/0x19d [ 636.004057][T26364] should_fail+0x23c/0x250 [ 636.004796][T26364] __alloc_pages+0x102/0x320 [ 636.005604][T26364] __vmalloc_node_range+0x319/0x5b0 [ 636.006902][T26364] ? netlink_sendmsg+0x425/0x7c0 [ 636.007637][T26364] vmalloc+0x5a/0x70 [ 636.008322][T26364] ? netlink_sendmsg+0x425/0x7c0 [ 636.009069][T26364] netlink_sendmsg+0x425/0x7c0 [ 636.009805][T26364] __sys_sendto+0x2a8/0x370 [ 636.010666][T26364] ? __fget_light+0x21b/0x260 [ 636.011349][T26364] ? __cond_resched+0x11/0x40 [ 636.012210][T26364] ? perf_trace_sys_exit+0x4d/0x160 [ 636.013098][T26364] ? fput+0x2d/0x130 [ 636.013675][T26364] __x64_sys_sendto+0x74/0x90 [ 636.014449][T26364] do_syscall_64+0x4a/0x90 [ 636.015135][T26364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 636.016100][T26364] RIP: 0033:0x4665d9 [ 636.016694][T26364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 636.019673][T26364] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 636.020958][T26364] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 636.022307][T26364] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 636.023580][T26364] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 636.024739][T26364] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 636.025659][T26362] loop4: detected capacity change from 0 to 16382 [ 636.025949][T26364] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 636.028337][T26355] loop2: detected capacity change from 0 to 240 15:44:32 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004319440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:32 executing program 3 (fault-call:5 fault-nth:18): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 636.054918][T26365] loop1: detected capacity change from 0 to 264192 [ 636.057322][T26365] FAT-fs (loop1): Unrecognized mount option "pcr=00000000000000000006" or missing value [ 636.064234][T26362] loop4: p1 p2 p3 p4 [ 636.066301][T26362] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 636.069339][T26362] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 636.071672][T26362] loop4: p4 size 32768 extends beyond EOD, truncated [ 636.108148][T26394] FAULT_INJECTION: forcing a failure. [ 636.108148][T26394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 636.111745][T26394] CPU: 1 PID: 26394 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 636.114065][T26394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.116647][T26393] loop2: detected capacity change from 0 to 240 [ 636.117562][T26394] Call Trace: [ 636.117572][T26394] dump_stack+0x137/0x19d [ 636.122012][T26394] should_fail+0x23c/0x250 [ 636.122820][T26394] __alloc_pages+0x102/0x320 [ 636.123733][T26394] __vmalloc_node_range+0x319/0x5b0 [ 636.124718][T26394] ? netlink_sendmsg+0x425/0x7c0 [ 636.125627][T26394] vmalloc+0x5a/0x70 [ 636.126216][T26394] ? netlink_sendmsg+0x425/0x7c0 [ 636.127101][T26394] netlink_sendmsg+0x425/0x7c0 [ 636.127892][T26394] __sys_sendto+0x2a8/0x370 [ 636.128651][T26394] ? __fget_light+0x21b/0x260 [ 636.129586][T26394] ? __cond_resched+0x11/0x40 [ 636.130422][T26394] ? perf_trace_sys_exit+0x4d/0x160 [ 636.131354][T26394] ? fput+0x2d/0x130 [ 636.132194][T26394] __x64_sys_sendto+0x74/0x90 [ 636.133174][T26394] do_syscall_64+0x4a/0x90 [ 636.133994][T26394] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 636.135123][T26394] RIP: 0033:0x4665d9 [ 636.135713][T26394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 636.138702][T26394] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 636.140206][T26394] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 636.141401][T26394] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 636.142751][T26394] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 636.144054][T26394] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 636.145640][T26394] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x400d9f, 0x80000000) mmap(&(0x7f00002c9000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x3e75f000) accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = eventfd2(0x81, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0x3, 0xfdb}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000080), 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') ppoll(&(0x7f0000000180)=[{}, {r1, 0x3000}, {0xffffffffffffffff, 0x1000}, {r3, 0x62ec39da7ca767d6}, {0xffffffffffffffff, 0x8022}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x300}], 0x7, &(0x7f00000001c0), &(0x7f0000000200)={[0x276]}, 0x8) mq_timedreceive(r3, &(0x7f0000000240)=""/143, 0x8f, 0x5, 0x0) [ 636.183523][T26397] loop5: detected capacity change from 0 to 16384 15:44:32 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x95, 0x0, 0x3, 0x0, 0x0) 15:44:32 executing program 3 (fault-call:5 fault-nth:19): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:32 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004322440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:32 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x600, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x5) tkill(0x0, 0x36) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x5, 0x81, 0x8, 0x0, 0x100000001, 0x208, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa1, 0x4, @perf_config_ext={0xe9e, 0x5}, 0x31, 0x4, 0x3ff, 0x4, 0x4, 0x2a42, 0x81, 0x0, 0x7f, 0x0, 0x1}, 0x0, 0x10, r1, 0xc518ef7271b8e5d1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 636.217018][T26399] loop1: detected capacity change from 0 to 264192 [ 636.225753][T26399] FAT-fs (loop1): Unrecognized mount option "pcr=00000000000000000006" or missing value 15:44:32 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone3(&(0x7f0000000400)={0x40000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) clone(0x4c200, &(0x7f0000000180)="5856796c943b3449bd56628150ee8474bfa35fbc5381304a36e649a4259758b385135c95106e5262e113d9804f3b4a8ef37d184e37d193af81416bc37872f8e2b00fe9138af9e7b44407ab1db17431eb973f099a3e7d46b6b727c87c2225b58dbbcb0dcfe1af2469efea5231c0785cab6c51b04c6174252e0684bfd5bff51145adfaf44e241fe42211c5d8ce1451fddc0e89b8f8ef4b74f9cd5780c14fdfed359f692068936cff44", &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)="52518c4a4fc0c8d77b873cafee651ad566aa348e329d27c0f9902cba85d790f69da6f01ee69b44c94df2537b3dbc8e1299a5382144a73cdf91fe2a42969c2c1228a721072158c9f184d917") ptrace$setopts(0x4206, r0, 0x4, 0x10000c) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4085, 0xff5}, {&(0x7f00000000c0)=""/186, 0xba}], 0x2, 0xd9f, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) 15:44:32 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x96, 0x0, 0x3, 0x0, 0x0) [ 636.282038][T26424] FAULT_INJECTION: forcing a failure. [ 636.282038][T26424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 636.284595][T26424] CPU: 0 PID: 26424 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 636.286066][T26424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.287911][T26424] Call Trace: [ 636.288635][T26424] dump_stack+0x137/0x19d [ 636.289439][T26424] should_fail+0x23c/0x250 [ 636.290338][T26424] __alloc_pages+0x102/0x320 [ 636.291246][T26424] __vmalloc_node_range+0x319/0x5b0 [ 636.292172][T26424] ? netlink_sendmsg+0x425/0x7c0 [ 636.292999][T26424] vmalloc+0x5a/0x70 [ 636.293584][T26424] ? netlink_sendmsg+0x425/0x7c0 [ 636.294576][T26424] netlink_sendmsg+0x425/0x7c0 [ 636.295451][T26424] __sys_sendto+0x2a8/0x370 [ 636.296383][T26424] ? __fget_light+0x21b/0x260 [ 636.297296][T26424] ? __cond_resched+0x11/0x40 [ 636.298263][T26424] ? perf_trace_sys_exit+0x4d/0x160 [ 636.299376][T26424] ? fput+0x2d/0x130 [ 636.300207][T26424] __x64_sys_sendto+0x74/0x90 [ 636.301129][T26424] do_syscall_64+0x4a/0x90 [ 636.301834][T26424] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 636.302948][T26424] RIP: 0033:0x4665d9 [ 636.303583][T26424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 636.306934][T26424] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 636.308397][T26424] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 636.309815][T26424] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 636.311337][T26424] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 636.312754][T26424] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 636.314073][T26424] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:32 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004325440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 636.353105][T26432] loop4: detected capacity change from 0 to 16382 [ 636.357981][T26438] loop2: detected capacity change from 0 to 240 [ 636.383664][T26432] loop4: p1 p2 p3 p4 [ 636.385865][T26432] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 636.387475][T26432] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 636.389491][T26432] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:33 executing program 3 (fault-call:5 fault-nth:20): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:33 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x604, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:33 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x97, 0x0, 0x3, 0x0, 0x0) [ 636.472163][T26474] FAULT_INJECTION: forcing a failure. [ 636.472163][T26474] name failslab, interval 1, probability 0, space 0, times 0 [ 636.474816][T26474] CPU: 0 PID: 26474 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 636.476432][T26474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.478212][T26474] Call Trace: [ 636.478855][T26474] dump_stack+0x137/0x19d [ 636.479596][T26474] should_fail+0x23c/0x250 [ 636.480827][T26474] ? __build_skb+0x2d/0x170 [ 636.481580][T26474] __should_failslab+0x81/0x90 [ 636.482698][T26474] should_failslab+0x5/0x20 [ 636.483533][T26474] kmem_cache_alloc+0x46/0x2f0 [ 636.484370][T26474] __build_skb+0x2d/0x170 [ 636.485140][T26474] netlink_sendmsg+0x443/0x7c0 [ 636.485995][T26474] __sys_sendto+0x2a8/0x370 [ 636.487219][T26474] ? __fget_light+0x21b/0x260 [ 636.488380][T26474] ? __cond_resched+0x11/0x40 [ 636.489166][T26474] ? perf_trace_sys_exit+0x4d/0x160 [ 636.489971][T26474] ? fput+0x2d/0x130 [ 636.490759][T26474] __x64_sys_sendto+0x74/0x90 [ 636.491507][T26474] do_syscall_64+0x4a/0x90 [ 636.492247][T26474] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 636.493223][T26474] RIP: 0033:0x4665d9 [ 636.493870][T26474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 636.496929][T26474] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 636.498144][T26474] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 636.499318][T26474] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 636.500559][T26474] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 636.501736][T26474] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 636.503488][T26474] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 636.514026][T26478] loop2: detected capacity change from 0 to 240 15:44:33 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004348440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 636.550640][T26491] loop4: detected capacity change from 0 to 16382 15:44:33 executing program 3 (fault-call:5 fault-nth:21): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:33 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x98, 0x0, 0x3, 0x0, 0x0) [ 636.588903][T26491] loop4: p1 p2 p3 p4 [ 636.590198][T26491] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 636.591740][T26491] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 636.594738][T26491] loop4: p4 size 32768 extends beyond EOD, truncated [ 636.634490][T26510] loop2: detected capacity change from 0 to 240 [ 636.641271][T26513] FAULT_INJECTION: forcing a failure. [ 636.641271][T26513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.643536][T26513] CPU: 0 PID: 26513 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 636.645897][T26513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.647327][T26513] Call Trace: [ 636.647877][T26513] dump_stack+0x137/0x19d [ 636.648658][T26513] should_fail+0x23c/0x250 [ 636.649340][T26513] should_fail_usercopy+0x16/0x20 [ 636.650146][T26513] _copy_from_iter_full+0x148/0xa10 [ 636.651024][T26513] ? kmem_cache_alloc+0x201/0x2f0 [ 636.651847][T26513] ? __build_skb+0x2d/0x170 [ 636.652616][T26513] ? check_stack_object+0x61/0x70 [ 636.653364][T26513] ? __virt_addr_valid+0x79/0x1a0 [ 636.654750][T26513] ? __check_object_size+0x253/0x310 [ 636.656339][T26513] netlink_sendmsg+0x579/0x7c0 [ 636.657456][T26513] __sys_sendto+0x2a8/0x370 [ 636.658593][T26513] ? __fget_light+0x21b/0x260 [ 636.659432][T26513] ? __cond_resched+0x11/0x40 [ 636.660605][T26513] ? perf_trace_sys_exit+0x4d/0x160 [ 636.661538][T26513] ? fput+0x2d/0x130 [ 636.662297][T26513] __x64_sys_sendto+0x74/0x90 [ 636.663445][T26513] do_syscall_64+0x4a/0x90 [ 636.664439][T26513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 636.666174][T26513] RIP: 0033:0x4665d9 [ 636.667389][T26513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 636.673220][T26513] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 636.675349][T26513] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 636.677575][T26513] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 636.679996][T26513] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 15:44:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000640)={0x3f0d172cec668dc1, 0x6, {0x1, @struct={0x1, 0x36}, 0x0, 0x101, 0xd2, 0x3, 0x5, 0x9, 0x80, @usage=0x10000, 0x9, 0x6, [0x7, 0x9, 0x100000001, 0xdac000, 0xfff, 0x1]}, {0x6971, @usage=0x8, 0x0, 0x4, 0x9, 0x53, 0x0, 0x7, 0x400, @usage=0x38, 0x4, 0x9f26, [0x0, 0x5, 0x80000001, 0x10001, 0x1]}, {0x7, @struct={0x6, 0x98}, 0x0, 0x16f, 0xffffffffffffff99, 0x3, 0x6, 0x400, 0x8, @usage=0x3, 0x5, 0x1, [0x3, 0x400, 0x0, 0x5, 0xffffffff, 0x3]}, {0xfffffffffffffff7, 0x1000, 0x2}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="e305532f21776d175664251cd602b15b363fe23e25b78176633273670068b3274bb24c2004ef1ff0c8baa2ccaa067d916099ab987c059bc0ac9e44796c9beb8b083e77bab7baf4588771781dfed0913b85630dd958c9d3c34b46f8f9725cfd55ec2eb65c582f8936a502d5662ae41ebe0325ac580ccc24e07b1d219d60315ab8f526b76e76750e8e430065284e098c76f60c625618d7abd5f78f4fcb917292619e415ea01b6379cfeb27e2d6b3744541b857baf9c36d5860e5bc4c529b86ae050e77bdd70a88cdde64e33371"], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 636.682315][T26513] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 636.684760][T26513] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:33 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x67d, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:33 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020002000434c440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 636.791231][T26528] loop4: detected capacity change from 0 to 16382 [ 636.807023][T26537] loop2: detected capacity change from 0 to 240 [ 636.829193][T26528] loop4: p1 p2 p3 p4 [ 636.830770][T26528] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 636.832920][T26528] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 636.834585][T26528] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:35 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x99, 0x0, 0x3, 0x0, 0x0) 15:44:35 executing program 3 (fault-call:5 fault-nth:22): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r2, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x8, 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:35 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004368440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:35 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x700, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:35 executing program 5: perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/state', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) fcntl$notify(r0, 0x402, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x7dbeb000) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x100) [ 639.361781][T26565] __nla_validate_parse: 32 callbacks suppressed [ 639.361796][T26565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 639.365957][T26565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 639.369745][T26565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 639.371315][T26560] loop2: detected capacity change from 0 to 240 [ 639.379774][T26572] PM: suspend entry (deep) [ 639.396334][T26565] FAULT_INJECTION: forcing a failure. [ 639.396334][T26565] name failslab, interval 1, probability 0, space 0, times 0 [ 639.399147][T26565] CPU: 0 PID: 26565 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 639.400608][T26565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.402658][T26565] Call Trace: [ 639.403476][T26565] dump_stack+0x137/0x19d [ 639.404652][T26565] should_fail+0x23c/0x250 [ 639.405890][T26565] __should_failslab+0x81/0x90 [ 639.407004][T26565] ? rtnl_newlink+0x59/0x1310 [ 639.407699][T26565] should_failslab+0x5/0x20 [ 639.408454][T26565] kmem_cache_alloc_trace+0x49/0x310 [ 639.409355][T26565] rtnl_newlink+0x59/0x1310 [ 639.410007][T26565] ? skb_put+0xb9/0xf0 [ 639.410671][T26565] ? nla_put+0xd8/0x100 [ 639.411312][T26565] ? inet6_fill_ifla6_attrs+0xb81/0xba0 [ 639.412173][T26565] ? __list_del_entry_valid+0x54/0xc0 [ 639.413010][T26565] ? __inc_numa_state+0x10/0x50 [ 639.413756][T26565] ? rmqueue_pcplist+0x152/0x190 [ 639.414564][T26565] ? avc_has_perm_noaudit+0x19a/0x240 [ 639.415537][T26565] ? rmqueue_bulk+0xf4a/0xf90 [ 639.416588][T26565] ? cred_has_capability+0xe4/0x210 [ 639.417729][T26565] ? cred_has_capability+0x1af/0x210 [ 639.418901][T26565] ? selinux_capable+0x34/0x40 [ 639.420280][T26565] ? security_capable+0x91/0xa0 [ 639.421675][T26565] ? ns_capable+0x86/0xb0 [ 639.422645][T26565] ? rtnl_setlink+0x280/0x280 [ 639.423557][T26565] rtnetlink_rcv_msg+0x6f4/0x7a0 [ 639.424459][T26565] ? handle_mm_fault+0x71f/0x1a70 [ 639.425556][T26565] ? do_user_addr_fault+0x74e/0xc00 [ 639.426775][T26565] ? alloc_vmap_area+0x1222/0x1340 [ 639.427691][T26565] ? exc_page_fault+0x91/0x230 [ 639.428467][T26565] ? rhashtable_jhash2+0x13a/0x1a0 [ 639.429718][T26565] ? jhash+0x2b0/0x2b0 [ 639.430638][T26565] netlink_rcv_skb+0x13e/0x240 [ 639.431496][T26565] ? rtnetlink_bind+0x60/0x60 [ 639.432248][T26565] rtnetlink_rcv+0x18/0x20 [ 639.432907][T26565] netlink_unicast+0x5ec/0x6b0 [ 639.433704][T26565] netlink_sendmsg+0x6f8/0x7c0 [ 639.435064][T26565] __sys_sendto+0x2a8/0x370 [ 639.436683][T26565] ? __fget_light+0x21b/0x260 [ 639.437705][T26565] ? __cond_resched+0x11/0x40 [ 639.438705][T26565] ? perf_trace_sys_exit+0x4d/0x160 [ 639.439747][T26565] ? fput+0x2d/0x130 [ 639.440502][T26565] __x64_sys_sendto+0x74/0x90 [ 639.441258][T26565] do_syscall_64+0x4a/0x90 [ 639.442212][T26565] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 639.443257][T26565] RIP: 0033:0x4665d9 [ 639.443945][T26565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 639.447053][T26565] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 639.448826][T26565] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 639.450150][T26565] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 639.451628][T26565] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 639.452825][T26565] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 639.454258][T26565] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 15:44:36 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020002000436c440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:36 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x9a, 0x0, 0x3, 0x0, 0x0) [ 639.466246][T26577] loop4: detected capacity change from 0 to 16382 [ 639.491535][T26572] Filesystems sync: 0.109 seconds [ 639.492836][T26572] Freezing user space processes ... [ 639.506672][T26577] loop4: p1 p2 p3 p4 [ 639.509504][T26577] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 639.511403][T26577] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 639.513320][T26577] loop4: p4 size 32768 extends beyond EOD, truncated [ 639.523157][T26572] (elapsed 0.030 seconds) done. [ 639.524337][T26572] OOM killer disabled. [ 639.525317][T26572] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 639.528206][T26572] printk: Suspending console(s) (use no_console_suspend to debug) 15:44:36 executing program 3 (fault-call:5 fault-nth:23): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x40, 0xb4, 0x1, 0x0, 0x6, 0x30800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x4030, 0x10001, 0x8f28, 0x6, 0x2dda6229, 0x80, 0xfc01, 0x0, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) [ 639.576813][T10365] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 640.083650][T26572] ACPI: Preparing to enter system sleep state S3 [ 640.083780][T26572] PM: Saving platform NVS memory [ 640.083784][T26572] Disabling non-boot CPUs ... [ 640.087346][T26572] smpboot: CPU 1 is now offline [ 640.089622][T26572] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 640.089723][T26572] ACPI: Low-level resume complete [ 640.089835][T26572] PM: Restoring platform NVS memory [ 640.089845][T26572] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 640.099375][T26572] Enabling non-boot CPUs ... [ 640.099480][T26572] x86: Booting SMP configuration: [ 640.099484][T26572] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 640.099651][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 640.100542][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 640.101921][T26572] CPU1 is up [ 640.102210][T26572] ACPI: Waking up from system sleep state S3 [ 640.185973][T26572] OOM killer enabled. [ 640.186765][T26572] Restarting tasks ... [ 640.190326][ T1033] synth uevent: /devices/virtual/block/loop0: failed to send uevent [ 640.192604][ T1033] block loop0: uevent: failed to send synthetic uevent 15:44:36 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x783, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:36 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x9b, 0x0, 0x3, 0x0, 0x0) [ 640.217420][T26572] done. [ 640.220132][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.222140][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.223986][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.226065][T26590] netlink: 40023 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.227843][T26590] FAULT_INJECTION: forcing a failure. [ 640.227843][T26590] name failslab, interval 1, probability 0, space 0, times 0 [ 640.229879][T26590] CPU: 0 PID: 26590 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 640.231209][T26590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.231223][T26590] Call Trace: [ 640.231231][T26590] dump_stack+0x137/0x19d [ 640.231259][T26590] should_fail+0x23c/0x250 [ 640.231281][T26590] __should_failslab+0x81/0x90 [ 640.231387][T26590] should_failslab+0x5/0x20 [ 640.231402][T26590] kmem_cache_alloc_node+0x58/0x2b0 [ 640.231423][T26590] ? __alloc_skb+0xed/0x420 [ 640.231446][T26590] __alloc_skb+0xed/0x420 [ 640.231504][T26590] rtmsg_ifinfo_build_skb+0x61/0x130 [ 640.231527][T26590] rtmsg_ifinfo+0x58/0xc0 [ 640.231547][T26590] netdev_state_change+0x106/0x160 [ 640.231721][T26590] do_setlink+0x229/0x2380 [ 640.231763][T26590] ? __nla_validate_parse+0x113c/0x17f0 [ 640.231784][T26590] ? __nla_validate_parse+0x11f5/0x17f0 [ 640.231805][T26590] ? __nla_parse+0x3c/0x50 [ 640.231834][T26590] ? validate_linkmsg+0x251/0x2c0 [ 640.231858][T26590] rtnl_newlink+0xabd/0x1310 [ 640.231880][T26590] ? nla_put+0xd8/0x100 [ 640.231899][T26590] ? put_dec_trunc8+0x10e/0x130 [ 640.231920][T26590] ? cred_has_capability+0xe4/0x210 [ 640.231944][T26590] ? cred_has_capability+0x1af/0x210 [ 640.231966][T26590] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 640.231988][T26590] ? selinux_capable+0x34/0x40 [ 640.232083][T26590] ? security_capable+0x91/0xa0 [ 640.232182][T26590] ? ns_capable+0x86/0xb0 [ 640.232202][T26590] ? rtnl_setlink+0x280/0x280 [ 640.232277][T26590] rtnetlink_rcv_msg+0x6f4/0x7a0 [ 640.232298][T26590] ? handle_mm_fault+0x71f/0x1a70 [ 640.232321][T26590] ? do_user_addr_fault+0x74e/0xc00 [ 640.232399][T26590] ? alloc_vmap_area+0x1222/0x1340 [ 640.232425][T26590] ? exc_page_fault+0x91/0x230 [ 640.232454][T26590] ? rhashtable_jhash2+0x13a/0x1a0 [ 640.232476][T26590] ? jhash+0x2b0/0x2b0 [ 640.232494][T26590] netlink_rcv_skb+0x13e/0x240 [ 640.232516][T26590] ? rtnetlink_bind+0x60/0x60 [ 640.232651][T26590] rtnetlink_rcv+0x18/0x20 [ 640.232673][T26590] netlink_unicast+0x5ec/0x6b0 [ 640.232694][T26590] netlink_sendmsg+0x6f8/0x7c0 [ 640.232713][T26590] __sys_sendto+0x2a8/0x370 [ 640.232728][T26590] ? __fget_light+0x21b/0x260 [ 640.232792][T26590] ? __cond_resched+0x11/0x40 [ 640.232821][T26590] ? perf_trace_sys_exit+0x4d/0x160 [ 640.232843][T26590] ? fput+0x2d/0x130 [ 640.232863][T26590] __x64_sys_sendto+0x74/0x90 [ 640.232914][T26590] do_syscall_64+0x4a/0x90 [ 640.232935][T26590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 640.232957][T26590] RIP: 0033:0x4665d9 [ 640.232970][T26590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 640.232985][T26590] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 640.233027][T26590] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 640.233041][T26590] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 640.233055][T26590] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 640.233068][T26590] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 640.233082][T26590] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 640.253191][T26593] PM: suspend entry (deep) [ 640.253200][T26593] PM: suspend exit [ 640.276761][T26595] loop2: detected capacity change from 0 to 240 [ 640.308137][T26606] loop4: detected capacity change from 0 to 16382 [ 640.365731][T26606] loop4: p1 p2 p3 p4 [ 640.366208][T26606] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 640.369875][T26606] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 640.370408][T26606] loop4: p4 size 32768 extends beyond EOD, truncated [ 640.400480][T26572] PM: suspend exit [ 640.406767][T26583] print_req_error: 38 callbacks suppressed [ 640.406781][T26583] blk_update_request: I/O error, dev loop4, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 640.410055][ T853] blk_update_request: I/O error, dev loop4, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.412511][ T853] buffer_io_error: 30 callbacks suppressed [ 640.412537][ T853] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 640.416514][T26571] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 15:44:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80d00, 0x6, &(0x7f00000002c0)=[{&(0x7f0000000040)="200000003600000019016820600100000f2d0000000000000000000004000000000002000020000020000000ddf4655fddf465e88e00ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203c30c9388c373a3bf7423cd16e26262afab07a0cdd14203a0", 0x7e, 0x400}, {&(0x7f00000000c0)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="0005", 0x2, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000cdf4655fddf4655fddf4655f00000000e5c700000800000010000800000000000af30200040000000000000000000000020000001d000000020000000400000032", 0x49, 0x1600}], 0x81, &(0x7f00000001c0)=ANY=[]) 15:44:36 executing program 3 (fault-call:5 fault-nth:24): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:36 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004374440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:36 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x9c, 0x0, 0x3, 0x0, 0x0) 15:44:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64=r2], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$P9_RFSYNC(r4, &(0x7f0000000180)={0x7, 0x33, 0x1}, 0x7) r5 = openat(0xffffffffffffffff, &(0x7f0000000240)='/proc/self/exe\x00', 0x800, 0x0) mmap(&(0x7f00007ad000/0x1000)=nil, 0x1000, 0x1800003, 0x30, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 640.418386][T26628] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 640.418609][ T853] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.422445][T26627] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.424072][ T853] Buffer I/O error on dev loop4p2, logical block 8064, async page read [ 640.426264][T26627] Buffer I/O error on dev loop4p4, logical block 8064, async page read [ 640.427803][T26606] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 640.429276][T26627] blk_update_request: I/O error, dev loop4, sector 16128 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 640.432500][T26627] blk_update_request: I/O error, dev loop4, sector 16130 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.434962][T26627] Buffer I/O error on dev loop4p4, logical block 8065, async page read [ 640.436540][T26627] blk_update_request: I/O error, dev loop4, sector 16132 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.438810][T26627] Buffer I/O error on dev loop4p4, logical block 8066, async page read [ 640.440476][T26627] blk_update_request: I/O error, dev loop4, sector 16134 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.442839][T26627] Buffer I/O error on dev loop4p4, logical block 8067, async page read 15:44:37 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x9d, 0x0, 0x3, 0x0, 0x0) [ 640.462165][ T853] Buffer I/O error on dev loop4p2, logical block 8065, async page read [ 640.463657][ T853] Buffer I/O error on dev loop4p2, logical block 8066, async page read [ 640.465055][ T853] Buffer I/O error on dev loop4p2, logical block 8067, async page read [ 640.469356][ T853] Buffer I/O error on dev loop4p1, logical block 9, async page read [ 640.486517][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.499305][T26641] loop5: detected capacity change from 0 to 1030 [ 640.502339][T26641] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1280)! [ 640.504108][T26641] EXT4-fs (loop5): group descriptors corrupted! [ 640.506224][T26646] loop2: detected capacity change from 0 to 240 [ 640.508058][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.510154][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:37 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x786, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000080)) mmap(&(0x7f00006a3000/0x4000)=nil, 0x4000, 0x1000007, 0x10, r1, 0xccf8a000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xfffffffffefffffc, 0x12) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x64480, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:37 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x9e, 0x0, 0x3, 0x0, 0x0) 15:44:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e005500580020002000200020002000200020002000200020002000437a440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 640.548578][T26642] FAULT_INJECTION: forcing a failure. [ 640.548578][T26642] name failslab, interval 1, probability 0, space 0, times 0 [ 640.550977][T26642] CPU: 1 PID: 26642 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 640.552539][T26642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.553996][T26642] Call Trace: [ 640.554632][T26642] dump_stack+0x137/0x19d [ 640.555417][T26642] should_fail+0x23c/0x250 [ 640.556489][T26642] __should_failslab+0x81/0x90 [ 640.557462][T26642] should_failslab+0x5/0x20 [ 640.558275][T26642] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 640.559303][T26642] ? __kmalloc_node_track_caller+0x30/0x40 [ 640.560391][T26642] ? kmem_cache_alloc_node+0x1da/0x2b0 [ 640.561231][T26642] __kmalloc_node_track_caller+0x30/0x40 [ 640.562271][T26642] ? rtmsg_ifinfo_build_skb+0x61/0x130 [ 640.563345][T26642] __alloc_skb+0x187/0x420 [ 640.564116][T26642] rtmsg_ifinfo_build_skb+0x61/0x130 [ 640.565067][T26642] rtmsg_ifinfo+0x58/0xc0 [ 640.565779][T26642] netdev_state_change+0x106/0x160 [ 640.566640][T26642] do_setlink+0x229/0x2380 [ 640.567517][T26642] ? __nla_validate_parse+0x11f5/0x17f0 [ 640.568380][T26642] ? __nla_parse+0x3c/0x50 [ 640.569256][T26642] ? validate_linkmsg+0x251/0x2c0 [ 640.570419][T26642] rtnl_newlink+0xabd/0x1310 [ 640.571238][T26642] ? nla_put+0xd8/0x100 [ 640.571904][T26642] ? put_dec_trunc8+0x10e/0x130 [ 640.572942][T26642] ? cred_has_capability+0xe4/0x210 [ 640.573726][T26642] ? cred_has_capability+0x1af/0x210 [ 640.574506][T26642] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 640.575563][T26642] ? selinux_capable+0x34/0x40 [ 640.576563][T26642] ? security_capable+0x91/0xa0 [ 640.577598][T26642] ? ns_capable+0x86/0xb0 [ 640.578450][T26642] ? rtnl_setlink+0x280/0x280 [ 640.579462][T26642] rtnetlink_rcv_msg+0x6f4/0x7a0 [ 640.580255][T26642] ? handle_mm_fault+0x71f/0x1a70 [ 640.581198][T26642] ? do_user_addr_fault+0x74e/0xc00 [ 640.582112][T26642] ? alloc_vmap_area+0x1222/0x1340 [ 640.582968][T26642] ? exc_page_fault+0x91/0x230 [ 640.583708][T26642] ? rhashtable_jhash2+0x13a/0x1a0 [ 640.584058][T26657] loop4: detected capacity change from 0 to 16382 [ 640.584677][T26642] ? jhash+0x2b0/0x2b0 [ 640.584699][T26642] netlink_rcv_skb+0x13e/0x240 [ 640.584719][T26642] ? rtnetlink_bind+0x60/0x60 [ 640.588126][T26642] rtnetlink_rcv+0x18/0x20 [ 640.588931][T26642] netlink_unicast+0x5ec/0x6b0 [ 640.589667][T26642] netlink_sendmsg+0x6f8/0x7c0 [ 640.590772][T26642] __sys_sendto+0x2a8/0x370 [ 640.591629][T26642] ? __fget_light+0x21b/0x260 [ 640.592305][T26642] ? __cond_resched+0x11/0x40 [ 640.593444][T26642] ? perf_trace_sys_exit+0x4d/0x160 [ 640.594742][T26642] ? fput+0x2d/0x130 [ 640.595504][T26642] __x64_sys_sendto+0x74/0x90 [ 640.596464][T26642] do_syscall_64+0x4a/0x90 [ 640.597261][T26642] entry_SYSCALL_64_after_hwframe+0x44/0xae 15:44:37 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x9f, 0x0, 0x3, 0x0, 0x0) 15:44:37 executing program 3 (fault-call:5 fault-nth:25): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 640.598405][T26642] RIP: 0033:0x4665d9 [ 640.599211][T26642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 640.602783][T26642] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 640.604234][T26642] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 640.605641][T26642] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 640.607373][T26642] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 640.608720][T26642] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 640.610374][T26642] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 640.619171][T26641] loop5: detected capacity change from 0 to 1030 [ 640.620953][T26641] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1280)! [ 640.623001][T26641] EXT4-fs (loop5): group descriptors corrupted! [ 640.652044][T26678] FAULT_INJECTION: forcing a failure. [ 640.652044][T26678] name failslab, interval 1, probability 0, space 0, times 0 [ 640.654604][T26678] CPU: 0 PID: 26678 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 640.656197][T26678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.657948][T26678] Call Trace: [ 640.658416][T26678] dump_stack+0x137/0x19d [ 640.659110][T26678] should_fail+0x23c/0x250 [ 640.659832][T26678] __should_failslab+0x81/0x90 [ 640.660643][T26678] should_failslab+0x5/0x20 [ 640.661395][T26678] kmem_cache_alloc_node+0x58/0x2b0 [ 640.662718][T26678] ? __alloc_skb+0xed/0x420 [ 640.663538][T26678] __alloc_skb+0xed/0x420 [ 640.664379][T26678] rtmsg_ifinfo_build_skb+0x61/0x130 [ 640.665235][T26678] rtmsg_ifinfo+0x58/0xc0 [ 640.666072][T26678] netdev_state_change+0x106/0x160 [ 640.666947][T26678] do_setlink+0x229/0x2380 [ 640.667942][T26678] ? __nla_validate_parse+0x11f5/0x17f0 [ 640.669127][T26678] ? __nla_parse+0x3c/0x50 [ 640.669984][T26678] ? validate_linkmsg+0x251/0x2c0 [ 640.670766][T26678] rtnl_newlink+0xabd/0x1310 [ 640.671625][T26678] ? nla_put+0xd8/0x100 [ 640.672256][T26678] ? put_dec_trunc8+0x10e/0x130 [ 640.673403][T26678] ? cred_has_capability+0xe4/0x210 [ 640.674154][T26678] ? cred_has_capability+0x1af/0x210 [ 640.675096][T26678] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 640.675978][T26678] ? selinux_capable+0x34/0x40 [ 640.676985][T26678] ? security_capable+0x91/0xa0 [ 640.678571][T26678] ? ns_capable+0x86/0xb0 [ 640.679532][T26678] ? rtnl_setlink+0x280/0x280 [ 640.680798][T26678] rtnetlink_rcv_msg+0x6f4/0x7a0 [ 640.681814][T26678] ? handle_mm_fault+0x71f/0x1a70 [ 640.682656][T26678] ? do_user_addr_fault+0x74e/0xc00 [ 640.683724][T26678] ? alloc_vmap_area+0x1222/0x1340 [ 640.684636][T26678] ? exc_page_fault+0x91/0x230 [ 640.685543][T26678] ? rhashtable_jhash2+0x13a/0x1a0 [ 640.686507][T26678] ? jhash+0x2b0/0x2b0 [ 640.687372][T26678] netlink_rcv_skb+0x13e/0x240 [ 640.688040][T26678] ? rtnetlink_bind+0x60/0x60 [ 640.688755][T26678] rtnetlink_rcv+0x18/0x20 [ 640.689586][T26678] netlink_unicast+0x5ec/0x6b0 [ 640.690405][T26678] netlink_sendmsg+0x6f8/0x7c0 [ 640.691350][T26678] __sys_sendto+0x2a8/0x370 [ 640.692621][T26678] ? __fget_light+0x21b/0x260 [ 640.693475][T26678] ? __cond_resched+0x11/0x40 [ 640.694378][T26678] ? perf_trace_sys_exit+0x4d/0x160 [ 640.695462][T26678] ? fput+0x2d/0x130 [ 640.696195][T26678] __x64_sys_sendto+0x74/0x90 [ 640.697313][T26678] do_syscall_64+0x4a/0x90 [ 640.697986][T26678] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 640.699117][T26678] RIP: 0033:0x4665d9 15:44:37 executing program 5: r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x408400, 0x28}, 0x18) read$snapshot(r0, &(0x7f0000000080)=""/20, 0x14) unshare(0x46000400) r1 = eventfd2(0x0, 0x0) fallocate(r1, 0x50, 0x0, 0x5) unshare(0x10800) sendfile(r0, r0, &(0x7f00000000c0)=0xffffffff, 0x81) 15:44:37 executing program 3 (fault-call:5 fault-nth:26): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 640.699775][T26678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 640.703026][T26678] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 640.704621][T26678] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 640.705952][T26678] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 640.707614][T26678] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 640.708826][T26678] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 640.710634][T26678] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 640.728647][T26657] loop4: p1 p2 p3 p4 [ 640.730258][T26657] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 640.737636][T26657] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 640.745055][T26657] loop4: p4 size 32768 extends beyond EOD, truncated [ 640.772714][T26700] FAULT_INJECTION: forcing a failure. [ 640.772714][T26700] name failslab, interval 1, probability 0, space 0, times 0 [ 640.774929][T26700] CPU: 1 PID: 26700 Comm: syz-executor.3 Not tainted 5.13.0-rc7-syzkaller #0 [ 640.776338][T26700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.777942][T26700] Call Trace: [ 640.778435][T26700] dump_stack+0x137/0x19d [ 640.779139][T26700] should_fail+0x23c/0x250 [ 640.779990][T26700] __should_failslab+0x81/0x90 [ 640.780708][T26700] should_failslab+0x5/0x20 [ 640.781915][T26700] kmem_cache_alloc_node+0x58/0x2b0 [ 640.782958][T26700] ? __alloc_skb+0xed/0x420 [ 640.783788][T26700] __alloc_skb+0xed/0x420 [ 640.784512][T26700] rtmsg_ifinfo_build_skb+0x61/0x130 [ 640.785515][T26700] rtmsg_ifinfo+0x58/0xc0 [ 640.786411][T26700] netdev_state_change+0x106/0x160 [ 640.787291][T26700] do_setlink+0x229/0x2380 [ 640.788174][T26700] ? __nla_validate_parse+0x11f5/0x17f0 [ 640.789261][T26700] ? __nla_parse+0x3c/0x50 [ 640.790069][T26700] ? validate_linkmsg+0x251/0x2c0 [ 640.791166][T26700] rtnl_newlink+0xabd/0x1310 [ 640.791961][T26700] ? nla_put+0xd8/0x100 [ 640.792747][T26700] ? put_dec_trunc8+0x10e/0x130 [ 640.793634][T26700] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 640.794986][T26700] ? cred_has_capability+0xe4/0x210 [ 640.796127][T26700] ? cred_has_capability+0x1af/0x210 [ 640.797329][T26700] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 640.799381][T26700] ? selinux_capable+0x34/0x40 [ 640.800343][T26700] ? security_capable+0x91/0xa0 [ 640.801143][T26700] ? ns_capable+0x86/0xb0 [ 640.802084][T26700] ? rtnl_setlink+0x280/0x280 [ 640.802957][T26700] rtnetlink_rcv_msg+0x6f4/0x7a0 [ 640.804013][T26700] ? handle_mm_fault+0x71f/0x1a70 [ 640.805348][T26700] ? do_user_addr_fault+0x74e/0xc00 [ 640.807202][T26700] ? alloc_vmap_area+0x1222/0x1340 [ 640.808401][T26700] ? exc_page_fault+0x91/0x230 [ 640.809227][T26700] ? rhashtable_jhash2+0x13a/0x1a0 [ 640.810262][T26700] ? jhash+0x2b0/0x2b0 [ 640.811042][T26700] netlink_rcv_skb+0x13e/0x240 [ 640.811923][T26700] ? rtnetlink_bind+0x60/0x60 [ 640.812854][T26700] rtnetlink_rcv+0x18/0x20 [ 640.813671][T26700] netlink_unicast+0x5ec/0x6b0 [ 640.814542][T26700] netlink_sendmsg+0x6f8/0x7c0 [ 640.815434][T26700] __sys_sendto+0x2a8/0x370 [ 640.816405][T26700] ? __fget_light+0x21b/0x260 [ 640.817364][T26700] ? __cond_resched+0x11/0x40 [ 640.818097][T26700] ? perf_trace_sys_exit+0x4d/0x160 [ 640.818973][T26700] ? fput+0x2d/0x130 [ 640.819828][T26700] __x64_sys_sendto+0x74/0x90 [ 640.820976][T26700] do_syscall_64+0x4a/0x90 [ 640.821786][T26700] entry_SYSCALL_64_after_hwframe+0x44/0xae 15:44:37 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa0, 0x0, 0x3, 0x0, 0x0) 15:44:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x50044, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}, {@debug={'debug', 0x3d, 0xffffffff}}, {@cache_fscache}, {@cache_loose}, {@access_any}, {@cache_mmap}], [{@smackfsdef}, {@audit}, {@fowner_eq}]}}) [ 640.822895][T26700] RIP: 0033:0x4665d9 [ 640.823726][T26700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 640.827322][T26700] RSP: 002b:00007fde2f3c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 640.828605][T26700] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 640.830419][T26700] RDX: 000000000000fe0b RSI: 00000000200000c0 RDI: 0000000000000004 [ 640.832031][T26700] RBP: 00007fde2f3c11d0 R08: 0000000000000000 R09: ffffffffffffff95 [ 640.833347][T26700] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002 [ 640.834539][T26700] R13: 00007ffea5da648f R14: 00007fde2f3c1300 R15: 0000000000022000 [ 640.836389][T26696] loop2: detected capacity change from 0 to 240 15:44:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000200043fe440052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:37 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x900, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:37 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa1, 0x0, 0x3, 0x0, 0x0) 15:44:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x3) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="e76b3dc9d4731bb44ec73fcf30230177703d5e8535cbe07811db3a6dede5b5d0f65caf41f254ffa33e8582f22e170bb83cc913be3530419c3b8dd615fac211c57e22099689c5c9e5785e1580dcd6aa7ef33f54f3859afad4cf418571812ac96ef2737d135e184dc678a984438d0e9d98dfe1176bcc85975d80958f36ec43b1f0fe6a56877a75b796a0b0bf7f76dc17fc8c9d70840657df52fbe2835b172b59b00a6c097588fd02db5a56726e"], 0x71) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x80, 0x2, 0x6, 0x0, 0x80000001, 0x80302, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x5}, 0xaa04, 0x2901b67b, 0x401, 0x7, 0x1, 0x3863, 0x1, 0x0, 0x8, 0x0, 0x5}, r0, 0x6, 0xffffffffffffffff, 0x8) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 15:44:37 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa2, 0x0, 0x3, 0x0, 0x0) [ 640.970243][T26727] loop2: detected capacity change from 0 to 240 [ 640.983443][T26729] loop4: detected capacity change from 0 to 16382 15:44:37 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300ee0052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 641.011016][T26729] loop4: p1 p2 p3 p4 [ 641.012714][T26729] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 641.014607][T26729] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 641.014853][T26741] PM: suspend entry (deep) [ 641.016260][T26729] loop4: p4 size 32768 extends beyond EOD, truncated [ 641.031560][T26741] Filesystems sync: 0.014 seconds [ 641.033680][T26741] Freezing user space processes ... (elapsed 0.024 seconds) done. [ 641.060164][T26741] OOM killer disabled. [ 641.061338][T26741] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 641.065390][T26741] printk: Suspending console(s) (use no_console_suspend to debug) 15:44:38 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa3, 0x0, 0x3, 0x0, 0x0) 15:44:38 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 641.099811][T12572] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 641.607238][T26741] ACPI: Preparing to enter system sleep state S3 [ 641.607576][T26741] PM: Saving platform NVS memory [ 641.607590][T26741] Disabling non-boot CPUs ... [ 641.611190][T26741] smpboot: CPU 1 is now offline [ 641.614990][T26741] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 641.615046][T26741] ACPI: Low-level resume complete [ 641.615116][T26741] PM: Restoring platform NVS memory [ 641.615125][T26741] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 641.624486][T26741] Enabling non-boot CPUs ... [ 641.625224][T26741] x86: Booting SMP configuration: [ 641.625236][T26741] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 641.625525][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 641.626467][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 641.628022][T26741] CPU1 is up [ 641.628275][T26741] ACPI: Waking up from system sleep state S3 [ 641.711405][T26741] OOM killer enabled. [ 641.712193][T26741] Restarting tasks ... [ 641.720359][ T1033] synth uevent: /devices/virtual/block/loop0: failed to send uevent [ 641.722666][ T1033] block loop0: uevent: failed to send synthetic uevent [ 641.743715][T26741] done. [ 641.744624][T26741] PM: suspend exit [ 641.765530][T26758] loop2: detected capacity change from 0 to 240 [ 641.768925][T26760] PM: suspend entry (deep) [ 641.778307][T26760] Filesystems sync: 0.008 seconds [ 641.779921][T26760] Freezing user space processes ... (elapsed 0.022 seconds) done. [ 641.804020][T26760] OOM killer disabled. [ 641.804815][T26760] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 641.807480][T26760] printk: Suspending console(s) (use no_console_suspend to debug) 15:44:39 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa4, 0x0, 0x3, 0x0, 0x0) 15:44:39 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xa00, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:39 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1000000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:39 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) clone(0x27100d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ext2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x4000, 0x0) mmap(&(0x7f000032a000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) write$P9_RSTAT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="580000007d0200000051000700ffff00000a030000000600000000000000000010004000000021d000008b0200000000000007002a5d3a2b265c2d0100260f005d6b2e7d7d26242c25242d2d5c5d3a07005d2d23212e5e5b8a285bd4b5f265dafd0fc99de904b955912070b7ae2ebfe6ddc7a2fed721693049560588d106f9b2b89b7c8ca83309456908264c54d2776406ee2a1267dafb87fc0d2d2ea6cc247e93ba4303639e621bbb7db7c4494e527f258a8771e626e8d5"], 0x58) ptrace$cont(0x18, 0x0, 0x3, 0x5) 15:44:39 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fallocate(r0, 0x0, 0x1000, 0x80000001) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x100, 0xa, &(0x7f0000000980)=[{&(0x7f00000002c0)="3792a0c304b9e85f8be6b3edfdcca64e6709fab14ffee6bc826784e20c77a12f7ef83e4bfc82cd1a1df6ab1b7fbe458a0c55741e048865195646e69d92f0a0ce8f2e219dbe5459f10f3561ec95147149bc98ba7e7c959410a4c3f1043cb2c73376ba6e068674d2f32111339384048d45", 0x70}, {&(0x7f0000000340)="787ce70d6bf13a0548ae2cd3f3e8bc2b01ef90da81a174e1f1f70f64ba06109d4c25b528b9b7c0dc4b595d46dde7175a2e1e9a9578978840b46823cd91c00c1be983a504b542ad8f21afe985c3ca6899b6c1e53758d047ed9615277d91bbc8da02ab9eff47cf811634e8b1f0fcc33fbc6fe10ba0c58c0e41142806f813f74628277b60784f68b3bbeeb10a2e0b778d98175a124dc24b331d905e1060dfa2a060d003ac2ae130e5652f1796b5cd2a9298761f1a190afece897f0212a64079dc8b423cba9216f476a49a753786e6b161e68caa20b6fd30898bb885b08c", 0xdc, 0x9}, {&(0x7f0000000440)="82c1e8734f721846f0aea1b99bc9b9e986cc5e4457e250460defbe4a9530927986c9989c6eb01582ae73eff4cd052f8e10c06432f8996bd97dc33d94a25d18023c0cb1f85dff5d225b0486472dcb32fba270e0fa0c8e4d9a413e8ac2b76d3271fdcece206b2718af7fef1572a0a92f2eeb084c531f201c29c743a3498ad2b9f0abe3701414a9a1b77acf34a6ef45feb9ccf1a0259679330d37ea7d40868c482224f5e0ed82047da1fb34a5b7b85989b88f45f2c857ae15e278df047d3450e6bbe5c3fdcc55651afb6198d315dbb5569d47c464568f8b9afb5ec73fc065d55be05c0ab593aa9f", 0xe6, 0xffffffff}, {&(0x7f0000000540)="2da3e9a289ace777c18ca44a59dc367fdf3fffff3cf9c34b2573901f8458ca7994d4808e8fc2b77c13f83fad88751e313ecc93440074d5da8e9209718b64b2273d950688dd267b0689a1b3fc550e244c", 0x50, 0xfffffffffffff000}, {&(0x7f00000005c0)="3b189686b1927aeed12123411a9718a1d8991b58d28f2400de22a72d8349bba1c7b35db5d97e650482d35c660fbd88eb4145f2eb1d903d99dd43529bcd4cf01cb0ffcf4b796394724d5752050bb9057180e0d1f215fb267283b17c71efd779eb1e02d76fa526dd9bbc7e20a1eb274a32bb40c1a13bfe8d", 0x77, 0x401}, {&(0x7f0000000640)="43479d34f6361d13b50bea626b8d978d1c60ad17875456e517457b8b773d8af72206fb3047e1fca5e819f6a7d3a63a3cc55fd1125a06c87d0b9c5e775ef1a5cd0432e2703749cda18a331ccd57d3ab04163080555c76a4760465f3bed94d31e022d245fe94394a49ca61cd7f76e781ce0be6fccea16db953897c2c779cb28c705215e3e1b84403135c2c3cbd863854f3123456296797153bd7447196596088c6429135e512", 0xa5, 0x80000001}, {&(0x7f0000000700)="56aa5f12488d4852052f9d1e410d7b926bfcda3612f71aaba1fefe0f3ceb07a7c9b35944a12c637c9fa12445b551632e1409f8c80e9c25119d97527ebe0bbe8918b776e0ba44a11724ac6adde948ba9aa739482ee16ad16aea96ba2611a106305fde498dd270eee7e20184ca209303220767c1c350f315412147863ddbf5be85747575628d88786a06f285d69cfa2474a16ee27c182a9c12960e6fd3f40c8d406a84d282663357f22e919e568982e7533444d82b0c35acf9be68db5af47f58d5acf91fe3381a59749555", 0xca, 0x6b}, {&(0x7f0000000800)="f6c5a21ecf10a2f6122914ef5e3f31bbabf11a61988303129926ff08abace412978d21a2fc6b95ca660728126c59c873ca0654165088a8355e974f650d5c5f1ceb77fbb485e70bb77b45bd1305331ef92f44364430d845af0410c4b3941e04ccefcb53bfde6b71c24787cfe97bcfeca31320e12b49117b", 0x77, 0x2}, {&(0x7f0000000880)="df6ad39693c3061ca77fc643f9054385e97e3a19fefb0e04c8d90cc1dfeef64c0fde19d84cd382592f59", 0x2a}, {&(0x7f00000008c0)="4893b565ee3cb3a4f802aecbcc387092774cd133af5605c270a67787226fa65cafa31e542929806800f1bdfba428e6adcc70b65c697506e49d88b9f40f7fe051a58643948a02dfd5ae56e66cbde2cdce001b137ffc561a7e6ef405df13fcdd7afa49091fa9e74c1b3f548a8805942c43639d1c28632f390d362f667ed3b3afc21592ede997477270", 0x88, 0x1886}], 0x804c00, &(0x7f0000000a80)={[{@nodots}, {@fat=@umask={'umask', 0x3d, 0x3ff}}, {@nodots}, {@fat=@nfs}, {@nodots}, {@dots}], [{@uid_lt={'uid<', 0xee01}}, {@smackfsroot}, {@fsname={'fsname', 0x3d, '-'}}, {@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@obj_type={'obj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write(r1, &(0x7f00000001c0)="313056e91e6c2b4ba0cc411c2ee6d6ec4727434cb20140e3f7acdaa012035263385588e2e664465c2184b2938e45ab460496117190fb79debde07e2239022fc5ab1844ccbc0ba15251a3ea276bfb0d2df158551462ff2485fa807c47d0d84018551b6074c36978f43c92bf7230613c2fcca35fa4f327306eb1f806a7b8ce60d2763a8022478a9d5038f4723b55859a9b998326a9266be3c7127195d23de5c141f0aa95db15c327bb726871", 0xab) [ 641.997929][ T4285] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 642.491924][ T7] psmouse serio1: Failed to reset mouse on isa0060/serio1: -5 [ 642.509838][T26760] ACPI: Preparing to enter system sleep state S3 [ 642.509925][T26760] PM: Saving platform NVS memory [ 642.509931][T26760] Disabling non-boot CPUs ... [ 642.512746][T26760] smpboot: CPU 1 is now offline [ 642.515127][T26760] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 642.515185][T26760] ACPI: Low-level resume complete [ 642.515329][T26760] PM: Restoring platform NVS memory [ 642.515338][T26760] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 642.537092][T26760] Enabling non-boot CPUs ... [ 642.537321][T26760] x86: Booting SMP configuration: [ 642.537326][T26760] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 642.537528][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 642.538623][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 642.540207][T26760] CPU1 is up [ 642.540491][T26760] ACPI: Waking up from system sleep state S3 [ 642.736667][T26760] OOM killer enabled. [ 642.737446][T26760] Restarting tasks ... done. [ 642.754209][T26760] PM: suspend exit 15:44:39 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300f00052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:39 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendfile(r1, r2, &(0x7f0000000000)=0x8, 0x400) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 642.801590][ T25] audit: type=1326 audit(1624290279.346:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=26776 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 642.806280][T26774] loop4: detected capacity change from 0 to 16382 [ 642.809512][ T25] audit: type=1326 audit(1624290279.356:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=26776 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=285 compat=0 ip=0x4665d9 code=0x7ffc0000 [ 642.810974][T26781] EXT4-fs (loop11): unable to read superblock [ 642.833454][T26787] EXT4-fs (loop11): unable to read superblock [ 642.847777][ T1033] loop4: p1 p2 p3 p4 [ 642.849182][ T1033] loop4: p2 size 1073741824 extends beyond EOD, truncated 15:44:39 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa5, 0x0, 0x3, 0x0, 0x0) 15:44:39 executing program 5: r0 = socket(0xa, 0x3, 0x6) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005400)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000005500)=0xe8) sendmmsg$inet(r0, &(0x7f0000005a00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="2233b2797bfd8bef0aee2e88beb3bc682e2d3b79a814afe6d2e7b4e9f9e905f1601bd82dd02b802a6f843bc8dbd7031cae5a41edf508c341b39c9a39f662334814810a514463f6cbd9e712ecf93150970ca74457d5e74870", 0x58}, {&(0x7f0000000140)="76c85fbc915500df80f62ff3fbb657dcc7593c7c8092a81310833c6fda9d662071786270250f8bf44570918da6569c9f3aa46dbfeb87cd233fd2b87d9e59b8e51ec382a226fece9ec985f9e3ba3ec1d3046a94cc6860c531f986420ad1634dcff002fa94592d5cf1874341c720222f984f9015b3cee10c34373bdd8cd37633fbdce5ee704af90706ae88935c952d687556149ff083d1f97a14b1824900b06baea70f878c9bd6e6614ed917d24b53e46fa6273c5527bf874b703fb9b7da4e514e8c4cd8aa936b98acf32bdbbf", 0xcc}, {&(0x7f0000000240)="19944585aaad38a93cfd006e6e2c09cfd72e45b864314026d4b86d30d8cf4ddb727c7bbece0fe4d0cfe7ab8afbdf2c390dc2815b2c670adaa353defa77b4ac12a49d6306f0b4d5a05ca33c140bfb730b8ef355531dc0de1d3b6d28be4e3ea4945ae2aff6c973013e1c640a3d67dc7f5dc63a1a8a3f8953382b402a723707c7b48c9a10285ca036c86b88ce3e4e75daae7982332a7aa92f02c3081bf072542768d5a1f6fbad4df4aae99aba4d873128487cec210879babd0b1e9b11376588e0a462a1a80a6d03053d0a694ceaaf1813e52dbea6671f150e686b", 0xd9}], 0x3, &(0x7f0000000380)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}, @lsrr={0x83, 0x1f, 0x76, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @broadcast, @private=0xa010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}]}, @timestamp_addr={0x44, 0x24, 0x84, 0x1, 0x7, [{@broadcast, 0x58e}, {@multicast1, 0x4}, {@rand_addr=0x64010100, 0x3210012f}, {@multicast2, 0x5}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0x14, 0x0, [{0x0, 0xe, "2ccfbc3f7a80afd369cb596f"}]}, @rr={0x7, 0x7, 0x31, [@local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x94, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x23, [@multicast2]}, @timestamp_addr={0x44, 0x54, 0xc9, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1679}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@empty, 0x200}, {@loopback}, {@remote, 0x7}, {@empty, 0x9}, {@local, 0xe103}, {@empty, 0x7}, {@private=0xa010101, 0x3}]}, @noop, @timestamp_addr={0x44, 0x24, 0x86, 0x1, 0x2, [{@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2a2}}], 0x178}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="b2823817356e8cf2e3053a5376190633740580a3d57788935ccc24d98e64bc7cfcdb93e89fa2aabbfe62bc5b666958e5de4f71515549e3305bc6a86af6c75f00552c3e78ba03634b0cbee3f19dd86a2d6ae7f03a7062fe74d59b820049627ef013ead511b8565bbf9f9b73c2e03d1eedae378246afb51caad7bd39401b84fdb71abde2968e34c960ad2a4739", 0x8c}, {&(0x7f00000015c0)="f08c701fd4a319e77ba8028fb47e54949d4baf3be8d2e910ebe0a507b1c8d4441df4b1d952722b415241d3e56ae2a1b898edbc5b5c74798a7f37d7ac45fce96d3260be2a28d6753c6e252198be7c981157eb43da257bb0260d9762f673d10c12dd5461d460ba8b1d62ad3757264583effe23a6402e4d0a22de4be3b1970c0274b2eb383beb8c74bf66b955cd75d8aafa74a9732094", 0x95}, {&(0x7f0000001680)="3c238ceb2458c67d832e0a44873666d9024870b982b53f2fb8763dcaf5bffe00f23fde6e2a1810ce09b8e71a566783c625ff010953fb5166475432cacc70f3939a83939851c3915ed6079b401ce0c683e060acc3079b78afc8b248e5b1229ad4918cdafa6cd44582c53a888db4d2475ece641cb24c364c27545ec5db97c8f9a47e76a8c9f8b9526f244fcb7d919ad55d8f356a22f9e18954e13e1e37c56c882f2cbd6065695bc064a0406f0efb2e2b889aad5634f9", 0xb5}], 0x4, &(0x7f0000001780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x33}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xcfe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="0621112624480136943d45ccbe500344e68250bf3143588615dc9db8f548c5613c06d7ad898f123e688df9b0bd6b03714d754650ca3c4b026c438614d4c6b2465ed302dd14b6729ae4b27a7b23a976297de33d3ef559b56e9338df63320bd1c51df09e84c05b92bd6fffb7e2a0fe0a5214b7c25f6df826c2ab9481c62df1b4ccf6635ad9bd568c02b624e62d6ef0ffaad8bc8452fb66f0ee93bfad", 0x9b}, {&(0x7f0000002900)="2592277273c052ba03cbd0e2e491759c95b177caa0652a4a026b630c45f9d3972ac40742d37b1f365e70538542033a23ea116ae0e30ba5474c299c9357fc5303697f4251383829e1ad6dea55cbf2c1f0df511235a1fe94f3f1b52244bf22cff45a3701cd887190485d03cd4fb741200633aca4379577703711d0c2bed22d379222391f8aa6b3732156e3b4999fd97f13feb3734c91cec7859f6aa78f6b410df5e45a304054bc7b722ffd609ecc7a6b5f448800d91ee54af8dd4e741e92d0cfbc3107e054771ba5285ea8", 0xca}, {&(0x7f0000002a00)="e08007709dc5c3da839487846aed8c5aa886cc7924a33c44167193e5eb6842d9b7495221642cb99e292caa03a31c36ac7ea37d2aa5aa26fc6cd9fcd91f5a58358eb01b3573efb21e45e7f9533a33f1d018f77a40720cd32a3c4daa706bcbb0f10ee856a5feb52dc7bb5959b4b09d8a370b", 0x71}, {&(0x7f0000002a80)="7c1a652a14b3ec80845237a0b54513d75e6e2f94b2d700821354cda0add4b8075a62d89b7b36ce4c838be708eaab3335f252ee9b8dc4f7544d1d1fdb9cf5a89c289e912105031fad95d47864f965adc945d43c606f9eb000fba831255defd5abe742a6", 0x63}, {&(0x7f0000002b00)="aa430700ea84223ad16033cf9515d68dce9c1442438e0c58f8fb4baa1200432d4b2f718cbaeb5021d30018893113a95efdae74850c4966294569aca39c706312a7c6ecf7e73d17138a3ec79ae98c0f53bc95512fee56ae7dfb987f382e97b2df9e45e75696b1d0281aa7a788e864f2c58f6a6c5739bb679a82e153648e36dfa17ab7c33aebd3711701cc552ace329835736c1cff4d761e009c239c620f078412e65b6ad484b7a5fcff0d3c399eb8267ba3", 0xb1}, {&(0x7f0000002bc0)="0030f5806aa5fed0e2efe66cdacb53f5385f164a69697e25023dc6c53839b090d0e0db82d6f73d352669bbc32367a8d2602315bfe0b90608819cc64d50494a282c75b8", 0x43}, {&(0x7f0000002c40)="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", 0x1000}], 0x8, &(0x7f0000003cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}}, {{&(0x7f0000003d00)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004080)=[{&(0x7f0000003d40)="ea113845f089c8b8fd513d6ad919b62712155d57cfbeeab1aa6c180e581aac9c33fd67fff541b2de74bce0818ff765cb7489bd3b7cc06f4ddb2359334b7fbb7db7529c1c548396b28d204261990dd739cbaed364b1a36b82967b8ba96268c96e68abcf87c419089001594f4f8efdd4d186376b50c48c7ec646efc32e93464198c9f6d6a34634230035ee39a8445f9779b206da2238cc0b849a2910cbb1695ad283f7d657ff9ee6af8bae09f5b37af0afb604148f9af56161288a2b96ef04ce054ebb98ebe7fab6761667bf00df183abb43f99597821fe54d35f736e6aa", 0xdd}, {&(0x7f0000003e40)="cf4013f038b952b9bb65c46de7ad70b8936974f180e3a695df4ac4b1415e5322c8523353ffd2fa456725bbeaf67ad55f2b97f213d063e53f2b7f6110", 0x3c}, {&(0x7f0000003e80)="5c2d695abf9f19b8ba0dfe50ba37b781dd0a8cc11ae488dd204940badba7aae3941486fe81ca61b1d56a18bed537d707a305d1d7d5f9b2b66c327fd50691e89958d54e45fb48a6e41673633def0a75866169d64c5f2dddeec60e4e0acd442bb62653b2755a3cd83858b564df7cd6874583a08e8643750a84da56eae9386f3aa8571046009c7175c41f7c5f4343a75999cc38dcc66d3af06ce812f43dd737", 0x9e}, {&(0x7f0000003f40)="fd3480ad30741f62859362cce9de2dae9a0e7a1a7c36627eae2f263384fea90032a9a832547623a50f97be23b8d7a23c3773b088345c30ae2a32af9619237135544da30c3ada9577effae92abed435d758989a28c9a8445c03bcd80d94292cb043cec5563310a78db846afcc148068aa56df3a5c3782ff1022859daf68004eec6121e803a49bde", 0x87}, {&(0x7f0000004000)="9da4743a62c09804b965fa9caaac6179f8e88387b4f1b53d17c85ec16bb3bd6feaaf1f4710ab6d33a515ba33578f828b729509b712ba5fd1d641a0e0bb6382efcf99c5aaf72aaf10edf11bab25147b0f982bfc9105fcd63cabdbc70bbd11fa984b834646737406e3aab240ddf85a9b0808a6ab71c7027808648a8642816e41", 0x7f}], 0x5}}, {{&(0x7f0000004100)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000041c0)=[{&(0x7f0000004140)="5149c2f6132a76f6a571b1c04fa036986de8d86b931c775c060ccce0fe5ffabdcf2062708c13aa26330dcbb0261b0cbc5c332863100ad3283a69dd3d019b3cbe021a91d92e8cd98492f08481227f1e5ac4c2bdb725cee46fa9d8654776195edd84ee2d59e29e", 0x66}], 0x1}}, {{&(0x7f0000004200)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000053c0)=[{&(0x7f0000004240)="69e74b30be48db31de02c75c2a12cc57b838", 0x12}, {&(0x7f0000004280)="d11c63ef6359e7df89a851e82b440097331e", 0x12}, {&(0x7f00000042c0)="bda33e14c8f3452e72ed648ed346aa4c8b951c4720ebbbca7e0004a43dcb7743a93e0bb1ad91b853cc81902c3ae5d00303340aceae12a48e7d77ef91cf9edd6cdf9f49c24cdef25824f46cbed8f7131b32d230d8c468916775098fbc4b2f88f68c31506f34c3c11e7207f0cb31c5987e58ae16852bb526cbd37a8c82572147a53c7388a207a93e56c27f771d13630ac926dfe302f97b05a193031eb09a0b5f8f4691d05cbb160db221fec15165e77ab75b3b74920c0b01b885fecd8aeaf641b5cece1619510ab9be99bf6e754212e63184dbf4ac9b", 0xd5}, {&(0x7f00000043c0)="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", 0x1000}], 0x4, &(0x7f0000005540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010102, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x36, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc49}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xd8, 0x0, 0x7, [0xffff, 0x40, 0x2, 0x6]}, @ssrr={0x89, 0x7, 0xb, [@loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x856a}}], 0x128}}, {{&(0x7f0000005680)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000057c0)=[{&(0x7f00000056c0)="93e7b7f60ca41b0e681e7f0726dd4126a1ad8aea3b266da7387ef45003113290f69f78048395d643705994fcfeea10070443b60d04b84c60b566a5773a04be3a313261e90829272c8e81ac03f9708b81c046fe9f18d92c496b09bff9fcaf9abfab012d960bd628bde39d0c193a3a1bf1d4a187fd5b8fcf0a76fc9ef3cef06963824e5cf1fa82485e1d4459112044a9fadbe9c8a7f34916c816134d5307dfc1d3d1cfd32f24082a9d35b52a4cc56cc0eca76f01d42556afe19e59530605aa7a281fb8b2a1d92ca7ab5b4566f840bc1f24f2b6353b11f50aa39e4beb5c14262d960c3e5fd9b2dbdfb1edae77f2a3cb2041f915ba66", 0xf4}], 0x1}}, {{&(0x7f0000005800)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000059c0)=[{&(0x7f0000005840)="b5a7c96c870d1318f54ad1cca707349bd12976388c5d1d35e50decb0ea731e11d057d80bc26d05d22567880f8c67eedf23195627382f861e2f14a488da5e7127f1c83998f278e9f0ee50b723d22fe0707b432d6333af5eb9bd9ac4829d69237c4bbf7be9e588bb8af5f99cbf6a69d4222b650b1c14d0b48d054374269d9190feedaeb8c3b858d8651c9ab464a9ba71ba100eaca3da4e69d333d5457481325e43fa329db460e449545ac2491ac021ae069b955e839bd7bd7a89bec3e80e7f87c51f2436fe50b1176a6a1b4d9602ff7d2e035bc4c3cca04e64fb58e563efd65db44d98b649cf", 0xe5}, {&(0x7f0000005940)="47e016cab60467762372381f92e65ac6e7", 0x11}, {&(0x7f0000005980)}], 0x3}}], 0x8, 0x8895) 15:44:39 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="37a0000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:39 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300ee0052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 642.850804][ T1033] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 642.853049][ T1033] loop4: p4 size 32768 extends beyond EOD, truncated [ 642.867869][T26774] loop4: p1 p2 p3 p4 [ 642.869612][T26774] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 642.871135][T26774] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 642.872786][T26774] loop4: p4 size 32768 extends beyond EOD, truncated [ 642.887846][T26794] loop2: detected capacity change from 0 to 240 [ 642.894995][ T1329] kernel write not supported for file /26802/net/snmp (pid: 1329 comm: kworker/1:3) 15:44:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000300)}], 0x5, 0xd9f, 0x40) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) 15:44:39 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x21, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x12000005f) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400002}, 0x18) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x2010, r1, 0x71e52000) 15:44:39 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xb00, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:39 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa6, 0x0, 0x3, 0x0, 0x0) 15:44:39 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="0bfe000010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:39 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300f00052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 642.971647][T26836] loop2: detected capacity change from 0 to 240 [ 643.009349][T26847] PM: suspend entry (deep) [ 643.028558][T26844] loop4: detected capacity change from 0 to 16382 [ 643.033034][T26847] Filesystems sync: 0.022 seconds [ 643.034456][T26847] Freezing user space processes ... (elapsed 0.132 seconds) done. [ 643.170142][T26847] OOM killer disabled. [ 643.171049][T26847] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 643.174158][T26847] printk: Suspending console(s) (use no_console_suspend to debug) 15:44:40 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa7, 0x0, 0x3, 0x0, 0x0) [ 643.210597][ T4633] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 643.732655][T26847] ACPI: Preparing to enter system sleep state S3 [ 643.732794][T26847] PM: Saving platform NVS memory [ 643.732798][T26847] Disabling non-boot CPUs ... [ 643.736128][T26847] smpboot: CPU 1 is now offline [ 643.738502][T26847] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 643.738557][T26847] ACPI: Low-level resume complete [ 643.738620][T26847] PM: Restoring platform NVS memory [ 643.738629][T26847] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 643.748209][T26847] Enabling non-boot CPUs ... [ 643.748442][T26847] x86: Booting SMP configuration: [ 643.748445][T26847] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 643.748614][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 643.749583][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 643.750982][T26847] CPU1 is up [ 643.751314][T26847] ACPI: Waking up from system sleep state S3 [ 643.797720][T26857] hwrng: no data available [ 643.840667][T26847] OOM killer enabled. [ 643.841464][T26847] Restarting tasks ... [ 643.857688][ T1033] synth uevent: /devices/virtual/block/loop4: failed to send uevent [ 643.860238][ T1033] block loop4: uevent: failed to send synthetic uevent [ 643.863435][T26847] done. [ 643.864060][T26847] PM: suspend exit 15:44:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb25e1c3e4ffff06000000010000004500000025000000190010c00500000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) r2 = socket(0x3, 0x80000, 0x7fff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x65, 0x1, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x20, 0xda05, 0x9}}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) 15:44:40 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1bc00e0010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 643.888808][T26844] loop4: p1 p2 p3 p4 [ 643.890631][T26844] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 643.900675][T26863] loop2: detected capacity change from 0 to 240 [ 643.903898][T26844] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 643.910767][T26844] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:40 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x12, 0x60) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="66530700ae897094e7b126b097eaa769be6d28c41bd34e677d114b655ef5f0166391c68f72e44e260f82e8a9bfc92b5579c65d37237647e947e4df73950000bb3987b178b1ead5a678216d5d3568dab9af674d5cc06f3eb349fd086c22e3fc56d2b0cae5170871c145a8300ccb63617aa1dd7d7833bb045174ad6edb6b23de0a183dd660efa2d6eaaf0ebc8ae15948eb13fe714f32449bb5e2bdfe6c86a8d504f1144634b26cafc25714cf7fdc166f16fa0d74cd1164f949d143aa7692731e", 0xbf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x42) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) tkill(r1, 0x33) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000240)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000003c0)=""/189, &(0x7f0000000140)=0xbd) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0xc0c81) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000280)=""/50) ptrace$cont(0x1f, 0x0, 0x6, 0x11) exit_group(0x0) 15:44:40 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa8, 0x0, 0x3, 0x0, 0x0) 15:44:40 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xc00, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:40 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440252004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) close(r2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="f00000001000000000000000000000000a010102000000000000000000000000ac1414aa0000000000000000000000000000000000f9000000000000000000005606be0af1fb8d40e62a7a5e466776e4f5c236f93f1d025283ceead83d95fe6e18b98b996ad441f2edef0629213b42abe8eeb3df56f575b0ad7b3df26662f76c4962ec6200032f0136c6c70fceb1d1aba48063a14b9089cd62bc64f2c87d87412875fdf9f8ca9055f3180684eed47aea0363f2b0ffb8097737a3be", @ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="0000000000000000000000ac14144000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000001000080000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004000000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4001}, 0xc4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @local, @remote}, &(0x7f0000000740)=0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)) sendmsg$nl_xfrm(r0, &(0x7f0000001bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b80)={&(0x7f0000001c00)=ANY=[@ANYBLOB="f4130000180002002abd7000ffdbdf2500000000000000000000000000000000ac1414aa0000000000000000000000004e2300444e2000060200a00004000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000004d66c0000000000000000000000000000000000000120000000000000009707000000000000060000000000000008000000000000000800000000000000010000ff01000000080000000000000004000000000000004b3b0000000000007500000000000000000000000000000030000000000000000900000004000000020000002abd7000000000000200016c440000000000000021000000000000002101120067636d5f6261736528637472286165732d6165736e69292c67686173682d67656e65726963290000000000000000000000000000000000000000000000000000a80600004000000078379d9d0dac2bb69d8ad035f3da687ae971dd42d66642374bfe142970c873a3629c806cebd213e4bef05ab61f3c310ef8cf3f24d2f9f76ce5bd9b90e2a4e0ea9840315a40b9c8d2570695073744ea8ad7b5276345dfaec0efba2d64597ae449c32f5a2d347dd56d2bc556d86dd2b982b65c7003e89a0e4f8e20ebb6f60823ea3f50190b81de89d68aee9d074d9dceef3b582f5159b36c10f0ec23a01b155ee0f7cc73ea494f7a96da2f98f9f6d5707c51b559e3324f397426f1c8b060cd0847b199e258479a2ebe319fef273390372261107433e8000000ac000700ac1414aa000000000000000000000000ac1e01010000000000000000000000004e2100044e200007020020a000000000819b98438b98d99a1ed7079ac3275fc5706f14fb2a16d579c4d21004a386dd84731c4740bcd0ec26212f33205ea46690c99315228671e82a737bf5571955c1bfae819c87066043f7112f436c53c1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x13f4}}, 0x4000000) listen(r4, 0x401) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000080)) 15:44:40 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0020010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 644.013442][T26894] loop4: detected capacity change from 0 to 16382 15:44:40 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xa9, 0x0, 0x3, 0x0, 0x0) [ 644.044387][T26907] loop2: detected capacity change from 0 to 240 15:44:40 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440352004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x7, 0x4, 0x5}) ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000240)) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) splice(r4, &(0x7f0000000180)=0x4678a7b5, r5, &(0x7f00000001c0)=0x83, 0x8, 0xc) sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x3) [ 644.066272][T26917] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 644.069707][T26894] loop4: p1 p2 p3 p4 [ 644.071402][T26894] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 644.073282][T26894] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 644.093310][T26894] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:40 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0030010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 644.157531][T26941] PM: suspend entry (deep) [ 644.166115][T26917] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 644.175010][T26931] loop2: detected capacity change from 0 to 240 [ 644.193157][T26941] Filesystems sync: 0.034 seconds [ 644.194614][T26941] Freezing user space processes ... (elapsed 0.019 seconds) done. [ 644.215741][T26941] OOM killer disabled. [ 644.216689][T26941] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 644.219379][T26941] printk: Suspending console(s) (use no_console_suspend to debug) 15:44:50 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xd00, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:50 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440452004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:50 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xaa, 0x0, 0x3, 0x0, 0x0) 15:44:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x180000e, 0x20010, r3, 0x8) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000013) [ 644.279848][T10365] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 654.218844][T26941] ACPI: Preparing to enter system sleep state S3 [ 654.218917][T26941] PM: Saving platform NVS memory [ 654.218921][T26941] Disabling non-boot CPUs ... [ 654.222191][T26941] smpboot: CPU 1 is now offline [ 654.224300][T26941] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 654.224356][T26941] ACPI: Low-level resume complete [ 654.224427][T26941] PM: Restoring platform NVS memory [ 654.224435][T26941] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 654.234176][T26941] Enabling non-boot CPUs ... [ 654.234295][T26941] x86: Booting SMP configuration: [ 654.234299][T26941] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 654.234458][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 654.235538][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 654.237136][T26941] CPU1 is up [ 654.237362][T26941] ACPI: Waking up from system sleep state S3 [ 654.327099][T26941] OOM killer enabled. [ 654.327690][T26941] Restarting tasks ... [ 654.353299][ T1033] synth uevent: /devices/virtual/block/loop0: failed to send uevent [ 654.355164][ T1033] block loop0: uevent: failed to send synthetic uevent [ 654.356031][T26941] done. [ 654.356816][T26941] PM: suspend exit 15:44:50 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x81, 0x0, 0x0, 0x0, 0x7ff, 0x10, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x2, @perf_config_ext={0x7, 0x7}, 0x80, 0x9, 0x16, 0x0, 0x8388, 0x7, 0x1f, 0x0, 0xd6a, 0x0, 0x8}, 0x0, 0x7, r0, 0xb) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x1b4, 0x96000000, 0x0) 15:44:50 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0040010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 654.380482][T26961] serio: Serial port pts0 [ 654.383924][T26960] loop4: detected capacity change from 0 to 16382 15:44:50 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xab, 0x0, 0x3, 0x0, 0x0) [ 654.419186][T26975] __nla_validate_parse: 45 callbacks suppressed [ 654.419200][T26975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.422329][T26975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.425672][T26960] loop4: p1 p2 p3 p4 [ 654.427086][T26960] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 654.429093][T26960] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 654.430577][T26960] loop4: p4 size 32768 extends beyond EOD, truncated [ 654.432017][T26973] loop2: detected capacity change from 0 to 240 [ 654.438228][T26975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:51 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xe00, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440552004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:51 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0050010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x5}, 0x1c) r5 = socket(0x11, 0x3, 0x0) sendmsg(r5, &(0x7f0000000280)={&(0x7f00000000c0)=@hci={0x1f, 0x6488, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="f254294737bb0057", 0x5c8}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) 15:44:51 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xac, 0x0, 0x3, 0x0, 0x0) [ 654.459940][T26975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.466176][T26975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.470803][T26992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:51 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0060010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:51 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xad, 0x0, 0x3, 0x0, 0x0) [ 654.534877][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.538651][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.540332][T27007] loop4: detected capacity change from 0 to 16382 [ 654.542465][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.546614][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 654.570612][T27012] loop2: detected capacity change from 0 to 240 [ 654.574580][T27007] loop4: p1 p2 p3 p4 [ 654.575847][T27007] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 654.581205][T27007] loop4: p3 size 1912633224 extends beyond EOD, truncated 15:44:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440652004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 654.586506][T27007] loop4: p4 size 32768 extends beyond EOD, truncated [ 654.652392][T27054] loop2: detected capacity change from 0 to 240 15:44:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x180000e, 0x20010, r3, 0x8) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000013) 15:44:51 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0xf00, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:51 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440552004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:51 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xae, 0x0, 0x3, 0x0, 0x0) 15:44:51 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0070010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440752004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x180000e, 0x20010, r3, 0x8) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000013) 15:44:51 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xaf, 0x0, 0x3, 0x0, 0x0) 15:44:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440852004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:51 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0090010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 654.968391][T27077] loop1: detected capacity change from 0 to 240 [ 654.971144][T27075] loop2: detected capacity change from 0 to 240 [ 654.975490][T27076] serio: Serial port pts0 [ 654.994206][T27079] loop4: detected capacity change from 0 to 16382 15:44:51 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb0, 0x0, 0x3, 0x0, 0x0) 15:44:51 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x1002, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 655.029269][T27079] loop4: p1 p2 p3 p4 [ 655.030745][T27079] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 655.032662][T27079] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 655.035843][T27079] loop4: p4 size 32768 extends beyond EOD, truncated [ 655.037106][T27097] serio: Serial port pts1 [ 655.089854][T27115] loop2: detected capacity change from 0 to 240 [ 655.136249][T27130] loop4: detected capacity change from 0 to 16382 [ 655.140005][T27130] ================================================================== [ 655.141243][T27130] BUG: KCSAN: data-race in generic_fillattr / shmem_getpage_gfp [ 655.142851][T27130] [ 655.143348][T27130] write to 0xffff88812de0d8e0 of 8 bytes by task 27136 on cpu 0: [ 655.144645][T27130] shmem_getpage_gfp+0xfe7/0x1410 [ 655.145393][T27130] shmem_file_read_iter+0x1a2/0x5c0 [ 655.146205][T27130] do_iter_readv_writev+0x2e8/0x360 [ 655.146985][T27130] do_iter_read+0x109/0x4b0 [ 655.147721][T27130] vfs_iter_read+0x4c/0x70 [ 655.148380][T27130] loop_queue_work+0xdeb/0x1310 [ 655.149154][T27130] kthread_worker_fn+0x280/0x4d0 [ 655.149924][T27130] loop_kthread_worker_fn+0x3e/0x50 [ 655.150725][T27130] kthread+0x1d0/0x1f0 [ 655.151404][T27130] ret_from_fork+0x1f/0x30 [ 655.152070][T27130] [ 655.152461][T27130] read to 0xffff88812de0d8e0 of 8 bytes by task 27130 on cpu 1: [ 655.153828][T27130] generic_fillattr+0x167/0x190 [ 655.154624][T27130] shmem_getattr+0x231/0x250 [ 655.155323][T27130] vfs_getattr_nosec+0x152/0x2f0 [ 655.156063][T27130] vfs_getattr+0x4d/0x60 [ 655.156798][T27130] loop_get_status+0x23e/0x310 [ 655.157721][T27130] lo_ioctl+0x1af/0x11f0 [ 655.158481][T27130] blkdev_ioctl+0x1d0/0x3c0 [ 655.159381][T27130] block_ioctl+0x6d/0x80 [ 655.160445][T27130] __se_sys_ioctl+0xcb/0x140 [ 655.161168][T27130] __x64_sys_ioctl+0x3f/0x50 [ 655.161986][T27130] do_syscall_64+0x4a/0x90 [ 655.162671][T27130] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 655.163705][T27130] [ 655.164064][T27130] value changed: 0x0000000000000008 -> 0x0000000000000010 [ 655.165147][T27130] [ 655.165563][T27130] Reported by Kernel Concurrency Sanitizer on: [ 655.166641][T27130] CPU: 1 PID: 27130 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 655.168249][T27130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.170009][T27130] ================================================================== 15:44:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a9ffffffe70000024000000000ffffffa6000800000000000000024000ffffffbf000000e10000008877007200300700a9ffffff00000000008000da55aa", 0x40, 0x1c0}]) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4e) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x80000001, 0x3, &(0x7f0000001380)=[{&(0x7f0000000200)="024e82a595e0e99dc817c07aa587f381eb3cf3172c472cffef9a4057bf1d5b5a634698214c55c896acf82c13f17487fda7a8c7d8853d5bdd3cf0831e22261c089a7b9f52fa55cb4f3fd5b054c4f4c2a8cc7ca7f1fbdba3c2d878538a3832dbee4210517aec8e9ec13a38b73a4db5ade0ad8b350ee5f2eba979c451afd170d9950d9a97bcdf3c043cdfdc5e71190ee4831f0c1c887b057cf8b0416d0347fa1ad199e115026e87e71e304ea426677835da0bf7f8e2c8594c61f782cfbcc89cdf771efe282d21", 0xc5}, {&(0x7f0000000300)="bd19b28247aa71f0fb0ee46f18ea16f85802c1f59c358b041e6ef6c916c02fdfdb64999bf1389ec9c70e3aca2cd8b17ed65056e207de2f15874a04f59529096b9902d563a84ed7ff1cc1a53824765b8671f8c1b93f6eb42cd14b6ccef4f67ab3ece194af4e76ff2c2f81b91e5168066e5c0fa414bc567298a7203d462a880a2b", 0x80, 0x6}, {&(0x7f0000000380)="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", 0x1000, 0x80}], 0x120010, &(0x7f0000001400)={[{@unhide}, {@gid={'gid', 0x3d, 0xee00}}, {@dmode={'dmode', 0x3d, 0x1}}, {@map_acorn}, {@session={'session', 0x3d, 0x1}}, {@check_relaxed}], [{@smackfshat}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x64, 0x61, 0x61, 0x30, 0x66, 0x32, 0x65], 0x2d, [0x31, 0x61, 0x32, 0x30], 0x2d, [0x36, 0x63, 0x38, 0x39], 0x2d, [0x36, 0x61, 0x37, 0x31], 0x2d, [0x66, 0x0, 0x38, 0x63, 0x66, 0x0, 0x62, 0x64]}}}, {@permit_directio}]}) 15:44:51 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0100010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440952004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:51 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb1, 0x0, 0x3, 0x0, 0x0) [ 655.209503][T27130] loop4: p1 p2 p3 p4 [ 655.211635][T27130] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 655.213676][T27130] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 655.215770][T27130] loop4: p4 size 32768 extends beyond EOD, truncated [ 655.232949][T27156] loop2: detected capacity change from 0 to 240 15:44:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440a52004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:51 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb2, 0x0, 0x3, 0x0, 0x0) [ 655.256697][T27165] loop5: detected capacity change from 0 to 1 15:44:51 executing program 1: clone(0x20016406dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/softnet_stat\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/77) write$tcp_mem(r0, &(0x7f0000000000)={0x0, 0x20, 0x1, 0x20, 0x0, 0x9}, 0x48) 15:44:51 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0370010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:51 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x1100, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 655.292446][T27165] loop5: p1 p2 p3 p4 [ 655.293282][T27165] loop5: p1 start 33554663 is beyond EOD, truncated [ 655.294274][T27165] loop5: p2 size 1073872896 extends beyond EOD, truncated [ 655.297792][T27165] loop5: p3 start 225 is beyond EOD, truncated [ 655.298758][T27165] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 655.298813][T27176] loop2: detected capacity change from 0 to 240 15:44:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440b52004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:51 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb3, 0x0, 0x3, 0x0, 0x0) 15:44:51 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0600010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 655.355352][T27192] loop5: detected capacity change from 0 to 264192 [ 655.363254][ T25] audit: type=1400 audit(1624290291.897:3580): avc: denied { sys_admin } for pid=27206 comm="syz-executor.1" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 [ 655.367643][ T25] audit: type=1400 audit(1624290291.897:3581): avc: denied { dac_override } for pid=27209 comm="syz-executor.1" capability=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 [ 655.378773][T27211] loop4: detected capacity change from 0 to 16382 [ 655.390977][T27211] loop4: p1 p2 p3 p4 [ 655.392397][T27211] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 655.393913][T27211] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 655.395571][T27211] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000080)=""/147, &(0x7f0000000000)=0x93) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0xd545e23b9d60290e, 0x4) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000000700)=""/74, 0x4a}, {&(0x7f0000000300)=""/51, 0x33}], 0x8, &(0x7f0000000800)=""/148, 0x94}, 0x40000020) sendto$inet(r0, &(0x7f0000000180)="12", 0x1, 0x8001, 0x0, 0x0) 15:44:51 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb4, 0x0, 0x3, 0x0, 0x0) 15:44:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440c52004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 655.410053][T27228] loop2: detected capacity change from 0 to 240 15:44:52 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x402900, 0x22) creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/state', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x3) socket(0x22, 0x4, 0x8) syz_open_dev$rtc(&(0x7f00000000c0), 0x7fff, 0x1) r3 = pidfd_getfd(r2, r2, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000100)=0x5, 0x804) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 15:44:52 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000110001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:52 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x1200, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 655.518134][T27254] PM: suspend entry (deep) [ 655.547625][T27254] Filesystems sync: 0.028 seconds [ 655.548792][T27257] loop2: detected capacity change from 0 to 240 [ 655.557938][T27254] Freezing user space processes ... (elapsed 0.014 seconds) done. [ 655.573555][T27254] OOM killer disabled. [ 655.574259][T27254] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 655.576762][T27254] printk: Suspending console(s) (use no_console_suspend to debug) [ 655.612414][ T45] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 656.119173][T27254] ACPI: Preparing to enter system sleep state S3 [ 656.119281][T27254] PM: Saving platform NVS memory [ 656.119285][T27254] Disabling non-boot CPUs ... [ 656.122303][T27254] smpboot: CPU 1 is now offline [ 656.124820][T27254] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 656.124889][T27254] ACPI: Low-level resume complete [ 656.125014][T27254] PM: Restoring platform NVS memory [ 656.125022][T27254] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 656.134477][T27254] Enabling non-boot CPUs ... [ 656.134621][T27254] x86: Booting SMP configuration: [ 656.134625][T27254] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 656.134781][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 656.135837][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 656.137260][T27254] CPU1 is up [ 656.137540][T27254] ACPI: Waking up from system sleep state S3 [ 656.220937][T27254] OOM killer enabled. [ 656.221541][T27254] Restarting tasks ... done. [ 656.238293][T27254] PM: suspend exit [ 656.241905][T27271] PM: suspend entry (deep) [ 656.242830][T27269] loop4: detected capacity change from 0 to 16382 [ 656.252356][T27271] Filesystems sync: 0.009 seconds [ 656.253294][T27271] Freezing user space processes ... [ 656.258635][T27269] loop4: p1 p2 p3 p4 [ 656.260302][T27269] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 656.261671][T27269] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 656.263001][T27269] loop4: p4 size 32768 extends beyond EOD, truncated [ 656.268355][T27271] (elapsed 0.014 seconds) done. [ 656.269159][T27271] OOM killer disabled. [ 656.269744][T27271] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 656.272100][T27271] printk: Suspending console(s) (use no_console_suspend to debug) 15:44:53 executing program 1: r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x4, 0xd3b1) fcntl$getownex(0xffffffffffffffff, 0xa, &(0x7f0000000240)) mkdir(&(0x7f0000000080)='./file0\x00', 0x41) 15:44:53 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440d52004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:53 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000310001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:53 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb5, 0x0, 0x3, 0x0, 0x0) 15:44:53 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="03002ff275f6ebdfece0ef"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x9, r0, 0x40, 0x7ff8000000000) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x9) [ 656.429620][ T9730] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 656.929563][T27271] ACPI: Preparing to enter system sleep state S3 [ 656.929623][T27271] PM: Saving platform NVS memory [ 656.929628][T27271] Disabling non-boot CPUs ... [ 656.931999][T27271] smpboot: CPU 1 is now offline [ 656.934444][T27271] kvm-clock: cpu 0, msr 4506001, primary cpu clock, resume [ 656.934500][T27271] ACPI: Low-level resume complete [ 656.934567][T27271] PM: Restoring platform NVS memory [ 656.934576][T27271] kvm-guest: stealtime: cpu 0, msr 237c170c0 [ 656.944178][T27271] Enabling non-boot CPUs ... [ 656.944322][T27271] x86: Booting SMP configuration: [ 656.944326][T27271] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 656.944557][ T0] kvm-clock: cpu 1, msr 4506041, secondary cpu clock [ 656.945546][ T14] kvm-guest: stealtime: cpu 1, msr 237d170c0 [ 656.947225][T27271] CPU1 is up [ 656.947351][T27271] ACPI: Waking up from system sleep state S3 [ 657.030683][T27271] OOM killer enabled. [ 657.031246][T27271] Restarting tasks ... done. [ 657.049263][T27271] PM: suspend exit 15:44:53 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x1300, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 657.095336][T27288] loop2: detected capacity change from 0 to 240 15:44:53 executing program 1: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="8e57dc8ab3c8a5e02bac1db10106c9e4fc3d2d4780d0bc1cda8bcca32c6aece20ad99812e0cb190d1d59fe5fa9300200b0d6b403d5d2c78fe09acc4d7a75a2ea18c202baf8e5d8e20a256310fd6827745259c61778b9f034d56fea4ff2931954e15b22072887bed874c55b5aef9483bf1d87cac2ce3464ddf3211771"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="34010000170001000000000100000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000000000000000000566c894be8a4fe32481b53015c1013f4398545bf05e884da51748b3269c229273d54a09abdcbd4f3b215b670bab7adfd8fda80683e612c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x134}}, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) close(r3) 15:44:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r0, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x18) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', r1, 0x2f, 0x0, 0x9, 0x7, 0x90, @remote, @loopback, 0x40, 0x20, 0x1ff, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000400)={'sit0\x00', 0x0}) [ 657.117433][ T25] audit: type=1400 audit(1624290293.665:3582): avc: denied { read } for pid=27289 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=10620 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:modem_device_t:s0 tclass=file permissive=1 15:44:53 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440e52004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:53 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb6, 0x0, 0x3, 0x0, 0x0) 15:44:53 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000510001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:53 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x1, 0x28120001) fallocate(r0, 0x0, 0xff07, 0x800001) [ 657.177565][T27310] loop4: detected capacity change from 0 to 16382 15:44:53 executing program 5: r0 = dup(0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x2a2}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {}, 0xab852ebbeefbd6b9}) 15:44:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fchdir(r0) r2 = memfd_create(&(0x7f0000000140)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff-\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6\xc5\xb7w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa0M5\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\x92\x01\xe6\xae\xb1\xecB)\xe5\xaa7\xfe\xe6,\x05\x00\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd00|\xa3\x89\xc9~9\x00\x00\x00\x00\x00\x00\x00\x17)z\xb9WT\xde\x88\xfc\xa8V\x92\xbb\x06\"\x01;6\xe8e\f;\xf4\xc4\x85\xd9cF,\x8e\x92', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0xc40001e1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x92fd) close(r0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 15:44:53 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000610001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 657.214824][T27310] loop4: p1 p2 p3 p4 [ 657.216239][T27310] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 657.218844][T27310] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 657.220513][T27310] loop4: p4 size 32768 extends beyond EOD, truncated [ 657.238979][ T1033] loop4: p1 p2 p3 p4 [ 657.240946][ T1033] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 657.249609][ T1033] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 657.253322][T27340] loop2: detected capacity change from 0 to 240 [ 657.256842][ T1033] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:53 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb7, 0x0, 0x3, 0x0, 0x0) 15:44:53 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440f52004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 657.305039][ T25] audit: type=1400 audit(1624290293.843:3583): avc: denied { write } for pid=27360 comm="syz-executor.1" name="fdinfo" dev="proc" ino=131889 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 657.309402][ T25] audit: type=1400 audit(1624290293.843:3584): avc: denied { add_name } for pid=27360 comm="syz-executor.1" name="3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 657.312716][ T25] audit: type=1400 audit(1624290293.843:3585): avc: denied { create } for pid=27360 comm="syz-executor.1" name="3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 15:44:53 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x2000, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(0xfffffffffffffffc, &(0x7f0000000000)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) lsetxattr$security_capability(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0x80000001, 0x10001}]}, 0xc, 0x1) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0/file0\x00') 15:44:53 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000710001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:53 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb8, 0x0, 0x3, 0x0, 0x0) 15:44:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0xfffffe58) fallocate(r1, 0x10, 0x0, 0x2a) 15:44:53 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300441052004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 657.349516][T27378] loop2: detected capacity change from 0 to 240 [ 657.407356][T27388] loop4: detected capacity change from 0 to 16382 15:44:54 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000500)="66530700ae897094e7b126b097eaa769be6d05c41bd34e67227b678855b480df335a8ad2438c", 0x26}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x100000001}) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r1, 0x3d) 15:44:54 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000910001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:54 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xb9, 0x0, 0x3, 0x0, 0x0) 15:44:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="9b45b1f3599bcb3454b4fd178981800607f3d9c7dc3026ee0906445149b7437d120d372195b640240bc7a070f3ce", 0x2e}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000140)="5fd1cfeb3bc7399954f9d99cca6bad3cf4a512c92cb36de27d5950e488a94ba3cf43c4bc52a44f02463ad4eda4eabb45b51e7b8dd403d4c729d5b92f32c5c444c6030176625bc74b426f544a9845ff9eb55b2a53455c0db6cf53c9715206b151920c2f39651df676c98a6bbcf20f062409b73857b4406639a5f674f29cd9e127e643899863284292882ac2630764e492d8fc28cb51fb22ad6b41d82097c90af1bac0933e54ed8199df766845a058a46373a4ece15316f5f12b2bb30e819cbf432d155f7d88ffafb84ad24eb57919586c969675786d46f4d82b4164f74f", 0xdd}, {&(0x7f0000000240)="bdc00bf0ea7dfa2f2025b780d1c24cf6", 0x10}, {&(0x7f0000000280)="e2779fa5a8eadbafd12f55273e96022db99599721fca490552d2e7cfe0cee5731f46cca398d192beb7a1", 0x2a}, {&(0x7f0000000380)="7ecb3c3f6bf85e2c866303d347ae724736e9654d6e901dd6095e2c537f2ff725011e994da50e3036ba632e01dd78f052dcae1c6d3548a5c6747860123743a2c6", 0x40}, {&(0x7f00000003c0)="c2226d", 0x3}], 0x7, 0x4) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000840)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1d1001c", 0x21, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="87686dfc746e0600653d6c00db0c7728c0aaabf226e70b5e3ccefac0d32b65d715cb0fc8c5b7e96a32ae099ef5793f746a1d4a5c728f771de420152bcae70771af20ce3fe2dd5b2625431aaaa82645090693b0140cb7f930a4eb8a901130209b5a189362f48b65bec391908255f6c55b3e1cc9adf394e4417332ac0500b46df61450f99f020120704468c973fbf8fd59592d804e8a44e2edbb7101f5334c6b127c3d5cc48e0af26b564f23ac9a58356ee2f9c04d142b7ee580976b736a2f769000"/206]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000002c0)) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x0) faccessat(r0, &(0x7f0000000580)='./file0\x00', 0xe) 15:44:54 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300441152004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:54 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0003710001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 657.435994][T27403] loop2: detected capacity change from 0 to 240 [ 657.448841][ T1033] loop4: p1 p2 p3 p4 [ 657.449973][ T1033] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 657.451833][ T1033] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 657.453488][ T1033] loop4: p4 size 32768 extends beyond EOD, truncated [ 657.466472][T27388] loop4: p1 p2 p3 p4 [ 657.467771][T27388] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 657.470002][T27388] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 657.471624][T27388] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:54 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x2200, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:54 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xba, 0x0, 0x3, 0x0, 0x0) [ 657.503341][T27429] loop5: detected capacity change from 0 to 270 [ 657.505624][T27429] FAT-fs (loop5): Unrecognized mount option "‡hmütn" or missing value [ 657.506744][T27430] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 15:44:54 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0ef5d10001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef0300000000000000655f000000000000000001000000000000000b0000000104000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000040)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x8}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x9}, {&(0x7f0000000340)="ed410000000000000000000005f4655fdbf4655f080000000000040080a7d747dfe1cf7e3868921a1d3be73fc786e5e147a0f266a820e8991dfec4eb6a61088b3632f041df13f0942a75d2125ae0033227e2b2cc2f6933a33658c126e97de68b59ecce1cebf94b87e678d7de00ae3d7d75d4ef87f6f92e8c374ed6df7cb4b5bdbb366478611b814adf0c701de4f12b7d7ee0822d874f81e68f147b6f66651d940ad7f247f59f69eb40597a2e60e8eb9226adb41d2d5e7324cbee70819136d4516c8ec8b901f52a96f9810c948b1461539d1efe92a3c4b6d395138895544c253497cce025d806b48c7f04b595ca", 0xed, 0xee}], 0x0, &(0x7f00000000c0)=ANY=[]) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "22b7b80f045d80fc3aa40c50c0bb188b"}, 0x11, 0x1) 15:44:54 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300441252004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:54 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xbb, 0x0, 0x3, 0x0, 0x0) [ 657.553010][T27453] loop4: detected capacity change from 0 to 16382 [ 657.560093][T27454] loop2: detected capacity change from 0 to 240 [ 657.580052][T27453] loop4: p1 p2 p3 p4 [ 657.581700][T27453] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 657.583782][T27453] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 657.586510][T27453] loop4: p4 size 32768 extends beyond EOD, truncated [ 657.612909][T27482] loop5: detected capacity change from 0 to 4096 [ 657.615250][T27482] EXT4-fs (loop5): unsupported inode size: 1025 [ 657.616165][T27482] EXT4-fs (loop5): blocksize: 4096 [ 657.653919][T27481] loop2: detected capacity change from 0 to 240 [ 657.660046][T27482] loop5: detected capacity change from 0 to 4096 [ 657.675205][T27482] EXT4-fs (loop5): unsupported inode size: 1025 [ 657.676439][T27482] EXT4-fs (loop5): blocksize: 4096 15:44:57 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) r2 = open(&(0x7f0000000040)='./file0\x00', 0x14b042, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x1c1042, 0x0) fallocate(r3, 0x3, 0x0, 0x9ef5) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000039d0696647b8ba7bbf793ba26e525a86da6e30c22e63d6dd66e1f17c2a662abb055794456304c05ad7a553c8e1af1a9db3309c7ebe12c7828641fb415a3ebeec00"/86], 0x20) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x0, r0}) 15:44:57 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0006010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:57 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xbc, 0x0, 0x3, 0x0, 0x0) 15:44:57 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x2500, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300441852004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:57 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xf431cd1ddab6ff63, &(0x7f0000000380)="db359ff4b2a3331fbfcc82e0dcc17e669e2837123bc0e7ec22069fe86be687a0a4b797a7af24dd8db07cd96781918d4a4999ff112f4aad815c8230ac15c714e2cd05c06b5f5c3ba852ca6a2b8fb65a8475f91531a0c1e9226790fa4e84cb6ba7d2fde7563b0e4a08e845f1d61956542e4523c657a6625323f7b055c155e7826071c54f56838703099de64eeb2736b73c258ea279af847c5e0fc34a7488a7899f9199d6b20abd6c07a7d356459a46b71f03dd9058f43c7da4b4f770c17c8b68669c93561011159ff7457806dcbb9eb6b56a1d9ecc9ed5e7967007b00a4dcd058cc7", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000480)="a38dd629d8ece3d4ec2546158ea74353c73b8a876a31a3a6f5a50b744c8ac98b61996c4c347c301fdb5626b77dfafa05e8aaf7398e5533f0b186657ae0953ae9e1e85e46c510efba17b45fe0380a7d9dc6f533fd0d70d9cda00c25ec5d40e29476fe80698a8a61781244960fafb86da540fbb30ae681ff032d9ab029f8081ecd10c55c79e714c75ca96b55107a5c2a2a96400117d22924ef35") wait4(0x0, &(0x7f0000000080), 0x2, &(0x7f00000002c0)) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030302030303030303030302c646566636f6e746578743d756e226f6e66696e65e45f"]) 15:44:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x50, 0x200100) [ 660.541615][T27514] loop4: detected capacity change from 0 to 16382 [ 660.555037][T27521] loop2: detected capacity change from 0 to 240 [ 660.555463][T27522] 9pnet: p9_fd_create_tcp (27522): problem connecting socket to 127.0.0.1 [ 660.561832][T27525] __nla_validate_parse: 88 callbacks suppressed [ 660.561843][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300441952004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:57 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xbd, 0x0, 0x3, 0x0, 0x0) [ 660.585966][T27514] loop4: p1 p2 p3 p4 [ 660.587348][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 660.587684][T27514] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 660.594306][T27514] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 660.596093][T27514] loop4: p4 size 32768 extends beyond EOD, truncated [ 660.606159][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:57 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x2600, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:57 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba05def10001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 660.755876][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 660.757513][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 660.759102][T27542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:44:57 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xbe, 0x0, 0x3, 0x0, 0x0) [ 660.807585][T27554] loop2: detected capacity change from 0 to 240 [ 660.834903][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 660.836548][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 660.848289][T27564] loop4: detected capacity change from 0 to 16382 [ 660.850755][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 660.853150][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 660.907370][T27564] loop4: p1 p2 p3 p4 [ 660.909124][T27564] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 660.912754][T27564] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 660.914452][T27564] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x108000000, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x1000, 0x8000}) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 15:44:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300442252004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:57 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xbf, 0x0, 0x3, 0x0, 0x0) 15:44:57 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000200001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:57 executing program 5: write(0xffffffffffffffff, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x0) pwritev2(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) r2 = open(&(0x7f0000000040)='./file0\x00', 0x14b042, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fdf0df252000080003000000", @ANYRES32=0x0, @ANYBLOB="0c009900010000004d000000"], 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x80000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) open(0x0, 0x1070c5, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) lseek(r0, 0x0, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:57 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x26bd, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:57 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xc0, 0x0, 0x3, 0x0, 0x0) 15:44:57 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba000000a001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 661.297598][T27597] loop4: detected capacity change from 0 to 16382 [ 661.314570][T27607] loop2: detected capacity change from 0 to 240 [ 661.324209][T27597] loop4: p1 p2 p3 p4 [ 661.328967][T27597] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 661.332965][T27597] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 661.336177][T27597] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:57 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300442552004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:57 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xc1, 0x0, 0x3, 0x0, 0x0) [ 661.430844][T27625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=27625 comm=syz-executor.3 15:44:57 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000210001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:57 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x3f00, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 661.497806][T27635] loop2: detected capacity change from 0 to 240 [ 661.565805][ T1033] loop4: p1 p2 p3 p4 [ 661.568379][ T1033] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 661.569923][ T1033] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 661.577347][ T1033] loop4: p4 size 32768 extends beyond EOD, truncated [ 661.638760][ T1033] loop4: p1 p2 p3 p4 [ 661.642662][ T1033] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 661.647927][ T1033] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 661.650799][ T1033] loop4: p4 size 32768 extends beyond EOD, truncated [ 661.908760][T27608] debugfs: File 'dropped' in directory 'loop4' already present! [ 661.910031][T27608] debugfs: File 'msg' in directory 'loop4' already present! 15:44:58 executing program 1: write(0xffffffffffffffff, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x0) pwritev2(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) r2 = open(&(0x7f0000000040)='./file0\x00', 0x14b042, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fdf0df252000080003000000", @ANYRES32=0x0, @ANYBLOB="0c009900010000004d000000"], 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x80000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) open(0x0, 0x1070c5, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) lseek(r0, 0x0, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:58 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xc2, 0x0, 0x3, 0x0, 0x0) 15:44:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300444852004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:58 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000310001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:58 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x3ffd, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:58 executing program 5: write(0xffffffffffffffff, &(0x7f0000000340), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x0) pwritev2(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) r2 = open(&(0x7f0000000040)='./file0\x00', 0x14b042, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fdf0df252000080003000000", @ANYRES32=0x0, @ANYBLOB="0c009900010000004d000000"], 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x80000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) open(0x0, 0x1070c5, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r0}) lseek(r0, 0x0, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:44:58 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000410001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300444c52004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 662.117688][T27703] loop4: detected capacity change from 0 to 16382 [ 662.119232][T27706] loop2: detected capacity change from 0 to 240 15:44:58 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xc3, 0x0, 0x3, 0x0, 0x0) [ 662.156103][T27703] loop4: p1 p2 p3 p4 [ 662.157412][T27703] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 662.158904][T27703] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 662.160617][T27703] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:58 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000510001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:58 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x3ffe, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 662.225776][T27730] loop2: detected capacity change from 0 to 240 15:44:58 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300446852004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 662.324627][T27753] loop4: detected capacity change from 0 to 16382 [ 662.347625][T27753] loop4: p1 p2 p3 p4 [ 662.348866][T27753] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 662.350326][T27753] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 662.351905][T27753] loop4: p4 size 32768 extends beyond EOD, truncated [ 662.394024][T27768] loop2: detected capacity change from 0 to 240 15:44:59 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',afid=0x0000000600000000']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x100002, 0x0) preadv(r2, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/187, 0x7ffff000}], 0x1, 0xbb00, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f00000003c0)=0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x108000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@dont_appraise}, {@hash}, {@euid_gt={'euid>', r4}}]}}) 15:44:59 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xc4, 0x0, 0x3, 0x0, 0x0) 15:44:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300446c52004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:59 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000610001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:59 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x4000, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x36) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200)}, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x70, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x8, r1, 0x0) gettid() open$dir(0x0, 0x0, 0x25) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000001c0)={'syztnl1\x00', 0x0}) sendfile(r0, r1, 0x0, 0x8400fffffffa) 15:44:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x3b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x3, 0x4e22, 0x20, 0x2, 0x20, 0x20, 0x0, r3, 0xffffffffffffffff}, {0x6, 0x10000, 0x0, 0x0, 0x20000000, 0x100, 0x2, 0x8000}, {0x400, 0x7, 0x4, 0x9}, 0x6904a18f, 0x6e6bb1, 0x1, 0x0, 0x3, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x32}, 0xa, @in=@private=0xa010102, 0x3503, 0x2, 0x0, 0x1, 0x3, 0x584f, 0x5}}, 0xe8) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 15:44:59 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000710001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:59 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xc5, 0x0, 0x3, 0x0, 0x0) [ 662.738832][T27795] loop2: detected capacity change from 0 to 240 [ 662.756476][T27799] loop4: detected capacity change from 0 to 16382 15:44:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300447452004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) 15:44:59 executing program 1: unshare(0x6c060000) accept(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6e}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="c69768b4f52d1446af5079cc270fb03f2e73e1127f9c3eb79d6deef577d9e7784a787a588ddec920", @ANYRESDEC=r3, @ANYBLOB="1231301244e83d5a0b9df37c68ed17b174422cbb8c6f3d63974b716ce1b8d8393bf73b8acc6e", @ANYRESDEC=0x0], 0x190) [ 662.784180][T27813] loop5: detected capacity change from 0 to 87 [ 662.792714][T27799] loop4: p1 p2 p3 p4 [ 662.793960][T27799] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 662.796068][T27799] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 662.797584][T27799] loop4: p4 size 32768 extends beyond EOD, truncated 15:44:59 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe67}, {&(0x7f0000000e40)="c9", 0x1}], 0x1000000000000035, 0x0, 0x10}}], 0x1, 0x0) syz_read_part_table(0x4002, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000063000800000000000000004000ffffffa500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 15:44:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x3f, 0xbc, 0x20, 0x80, 0x0, 0x80000000, 0x20800, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000180), 0xc}, 0x2, 0x3aee, 0x80, 0x1, 0x100000001, 0x8, 0x9, 0x0, 0xe4b, 0x0, 0x80}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) 15:44:59 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffff99}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000001010b040000000000000000020000001800018014000180080001000000000008"], 0x2c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 15:44:59 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xc6, 0x0, 0x3, 0x0, 0x0) 15:44:59 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000910001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) [ 662.861405][T27831] loop2: detected capacity change from 0 to 240 [ 662.865270][T27850] loop4: detected capacity change from 0 to 16382 15:44:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300447a52004f004d002000200020fe1f00200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000400000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000240)="22001e0000000000001e0008d100000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000080)={[{@map_normal}]}) [ 662.902709][ T1033] loop4: p1 p2 p3 p4 [ 662.903844][ T1033] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 662.906477][ T1033] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 662.909126][ T1033] loop4: p4 size 32768 extends beyond EOD, truncated [ 662.914438][T27850] loop4: p1 p2 p3 p4 [ 662.915451][T27850] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 662.916840][T27850] loop4: p3 size 1912633224 extends beyond EOD, truncated [ 662.918391][T27850] loop4: p4 size 32768 extends beyond EOD, truncated [ 662.926488][T27865] loop5: detected capacity change from 0 to 4096 15:44:59 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0001010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:59 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000020c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) io_uring_enter(r0, 0xc7, 0x0, 0x3, 0x0, 0x0) [ 662.951419][T27865] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 15:44:59 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0003710001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:59 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000018c0)="1c0000001200050f0ca6760000ee53c6ce0ffb299d49b23e9b200a00", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_READ_FIXED, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0006010001d0260fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740cffffffc3d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) 15:44:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff