d_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:45:52 executing program 1: getresuid(&(0x7f0000000040), 0x0, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) 00:45:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2f, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH70t4m1/ugPdbWKwR9Jk1Yt6EFFoQcFQQ/1GNNtqd020kSwpdgoUo9S8C4eBf8CT3oR9SR41bsUivRiFYSV2Z1JN+numm12u5r9fGCa9/a97XvfmXnJm3mzG8DAKmX/JBHbI+KXiBirZ1dWKNV/XL92Ye7PaxfmkqhW3/g9qdX749qFuaJq8b5teWYijUg/TmJvk3YXzp0/NVuplM/m+anF0+9OLZw7/9TJ07MnyifKZ2YOHz50cPrZZ2ae7kqcO7K+7vlgft/uI29dfm3u6OW3f/gq6+/2vLwxjm4pRWnlvmzwaLcb67MdDelkuI8doSNDEZEdrpHa+B+Lobhx8MbilY/62jmgp6rVanVT6+KlKrCBJdHvHgD9Ufyhz65/i+02TT3+E66+WL8AyuK+nm/1kuFI8zojq65vu+m+iDi69Nfn2RaN9yG29KhBAGDgfZPNf55sNv9L456Genfka0PjEXFnROyMiLsiYldE3B1Rq3tvPp9pa2lltrSq+Ob5Z3plRXZz/vO5DoJsI5v/PZ+vba2c/xWzvxgfynM7avGPJMdPVsoH8n0yESObsvx0mza+ffnnT1uVlRrmf9mWtV/MBfN+XBmu36AbLV45Nrs4u964C1c/jNgz3Cz+ZHklIImI3RGxp7P/Or/CuBgnH/9yX6tK/x5/G11YZ6p+EfFY/fgvxar4C0n79cmpzVEpH5gqzoqb/fjTpddbND+6rvi7IDv+W5ue/8vxjyeN67ULnbdx6ddPWl5TdnD+L8vO/9HkzVq6GBTvzy4unp2OGE1evfn1mRvvLfJF/Sz+if3Nx//OuLEn9kZEdhLfHxEPRMSDed8fioiHI2J/m/i/f+mRd249/t7K4j/W0fHvPDF06ruvW7W/tuN/qJaayF9Zy++/tXZwPfsOAAAA/i/S2jPwSTq5nE7Tycn6M/y7YmtamV9YfOL4/HtnjtWflR+PkbS40zXWcD90Or83XORnVuUP5veNPxvaUstPzs1XerWmDqzNthbjP/PbUL97B/Scz2vB4DL+YXAZ/zC4jH8YXGsd/0s97gdw+zUb/xcjrvehK8BtZv4Pg8v4h8Fl/MPgMv5hIN3y5/qLr0dpUWfnkfV8Y0ClXPTvFt/evUT8Xa2uKnqhg+8X2LiJSFsVVfPnxvvdw64mNm+scPLESD7MmhT14ZcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAD/wTAAD//zFX4Z8=") 00:45:52 executing program 3: prctl$PR_SET_VMA(0x18, 0x0, &(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0) 00:45:52 executing program 5: rt_sigtimedwait(&(0x7f00000016c0), 0x0, &(0x7f0000001780)={0x0, 0x989680}, 0x8) 00:45:52 executing program 2: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+60000000}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) 00:45:52 executing program 3: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40d848d80c22fcfd}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) 00:45:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x34}}, 0x0) [ 2752.870445][T32028] loop4: detected capacity change from 0 to 512 00:45:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x29, 0x0, &(0x7f0000000100)=0x4000000) [ 2752.890949][T32028] EXT4-fs (loop4): Ignoring removed bh option [ 2752.910239][T32028] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2752.923498][T32028] EXT4-fs (loop4): Remounting filesystem read-only [ 2752.928841][T32028] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:45:52 executing program 3: mbind(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x8000000000000001, 0x8, 0x0) [ 2752.945693][T32028] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2752.949398][T32028] EXT4-fs (loop4): 1 truncate cleaned up [ 2752.951516][T32028] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:45:52 executing program 1: request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0) 00:45:53 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000000000)=@framed={{}, [@initr0, @generic]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x79, &(0x7f0000000080)=""/121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000140), 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0xe4) 00:45:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:45:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x30, 0x472, &(0x7f0000000940)="$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") 00:45:53 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0xfffffffd}, 0x8) 00:45:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000780)) 00:45:53 executing program 2: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+60000000}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) 00:45:53 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0585611, &(0x7f0000000080)={"2baff57bfbf684d5eea86217681ac61f"}) [ 2753.782171][T32058] loop4: detected capacity change from 0 to 512 00:45:53 executing program 1: r0 = epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 00:45:53 executing program 5: openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1842, 0x0) 00:45:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0xb, 0x0, &(0x7f0000000100)) [ 2753.813322][T32058] EXT4-fs (loop4): Ignoring removed bh option [ 2753.833460][T32058] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2753.851163][T32058] EXT4-fs (loop4): Remounting filesystem read-only [ 2753.852691][T32058] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2753.859363][T32058] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2753.865599][T32058] EXT4-fs (loop4): 1 truncate cleaned up [ 2753.866903][T32058] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:45:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x41, 0x472, &(0x7f0000000940)="$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") 00:45:53 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) 00:45:53 executing program 5: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000040)) [ 2754.470980][T32078] loop4: detected capacity change from 0 to 512 [ 2754.490541][T32078] EXT4-fs (loop4): Ignoring removed bh option [ 2754.503661][T32078] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2754.508136][T32078] EXT4-fs (loop4): Remounting filesystem read-only [ 2754.509683][T32078] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2754.513170][T32078] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2754.517369][T32078] EXT4-fs (loop4): 1 truncate cleaned up [ 2754.518819][T32078] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:45:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r2, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x52000) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x288000c, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:45:54 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 00:45:54 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000140)={0x3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) 00:45:54 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f00000006c0)=@raw=[@cb_func], &(0x7f0000000040)='GPL\x00', 0x2, 0xce, &(0x7f0000000080)=""/206, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x82, 0x472, &(0x7f0000000940)="$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") 00:45:54 executing program 2: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+60000000}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) 00:45:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) 00:45:54 executing program 5: syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2754.708092][T32088] loop4: detected capacity change from 0 to 512 00:45:54 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='encrypted\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 2754.728548][T32088] EXT4-fs (loop4): Ignoring removed bh option [ 2754.761322][T32088] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:45:54 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) [ 2754.787665][T32088] EXT4-fs (loop4): Remounting filesystem read-only [ 2754.797092][T32088] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2754.820001][T32088] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2754.839020][T32088] EXT4-fs (loop4): 1 truncate cleaned up 00:45:54 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000002180)={0x0, "56976a44bbfcebfadd8aeefec58e2bbdce5c0f41fd62ebceb2731eaf339586d51ff8186d43d5f05599b6fd5b7d7433a49e1b4f368960ad9f90b0e1eda0882d45"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) [ 2754.851174][T32088] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:45:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x8562ee3eed604595}, 0x14}}, 0x0) 00:45:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r2, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x52000) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x288000c, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:45:55 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x4, 0x0, &(0x7f0000000240)) 00:45:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x89, 0x472, &(0x7f0000000940)="$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") 00:45:55 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680), 0x345000, 0x0) 00:45:55 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000005c0)) 00:45:55 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) [ 2755.953583][T32116] loop4: detected capacity change from 0 to 512 [ 2755.957732][T32120] Soft offlining pfn 0x1b34b2 at process virtual address 0x20ffb000 00:45:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x1d, 0x0, &(0x7f0000000100)) [ 2755.991135][T32116] EXT4-fs (loop4): Ignoring removed bh option [ 2755.996800][T32120] Memory failure: 0x1b34b2: unhandlable page. 00:45:55 executing program 3: r0 = io_uring_setup(0x2295, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000016c0)={0x2, 0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/114, 0x72}, {0x0}], &(0x7f0000001680)=[0x0, 0x40]}, 0x20) [ 2756.020069][T32116] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:45:56 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x4, 0xcc, &(0x7f0000000400)=""/204, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500), 0x10}, 0x80) [ 2756.053734][T32116] EXT4-fs (loop4): Remounting filesystem read-only [ 2756.065405][T32116] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:45:56 executing program 2: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$usbfs(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x7, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x5}]}) [ 2756.092506][T32116] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:45:56 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) [ 2756.107512][T32116] EXT4-fs (loop4): 1 truncate cleaned up 00:45:56 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0445624, &(0x7f0000000080)={"2baff57bfbf684d5eea86217681ac61f"}) [ 2756.113526][T32116] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2756.127323][ T26] audit: type=1326 audit(2756.090:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff95c54f64 code=0x0 00:45:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0905664, &(0x7f0000000080)={"2baff57bfbf684d5eea86217681ac61f"}) 00:45:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r2, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x52000) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x288000c, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:45:57 executing program 1: socketpair(0x1d, 0x0, 0x1f, &(0x7f0000000000)) 00:45:57 executing program 3: prctl$PR_SET_VMA(0x38, 0x0, &(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0) 00:45:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0xa7, 0x472, &(0x7f0000000940)="$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") 00:45:57 executing program 2: syz_io_uring_setup(0x2848, &(0x7f0000000100), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001cc0)) pselect6(0x40, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)={0x9}, 0x0, 0x0) 00:45:57 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffffff, 0x208205) [ 2757.211762][T32151] loop4: detected capacity change from 0 to 512 00:45:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x4, 0x0, &(0x7f0000000100)=0x4000000) 00:45:57 executing program 3: syz_io_uring_setup(0x6045, &(0x7f00000016c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1f, 0x0) 00:45:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) [ 2757.282005][T32151] EXT4-fs (loop4): Ignoring removed bh option 00:45:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x3}]}) [ 2757.306120][T32151] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2757.309206][T32151] EXT4-fs (loop4): Remounting filesystem read-only [ 2757.311889][T32151] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2757.323175][T32151] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2757.328734][T32151] EXT4-fs (loop4): 1 truncate cleaned up [ 2757.330078][T32151] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:45:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0xa8, 0x472, &(0x7f0000000940)="$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") 00:45:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x22, 0x0, &(0x7f0000000100)=0x4000000) [ 2757.513091][T32172] loop4: detected capacity change from 0 to 512 [ 2757.524335][T32172] EXT4-fs (loop4): Ignoring removed bh option [ 2757.531877][T32172] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2757.538869][T32172] EXT4-fs (loop4): Remounting filesystem read-only [ 2757.541538][T32172] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2757.548728][T32172] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2757.556684][T32172] EXT4-fs (loop4): 1 truncate cleaned up [ 2757.559247][T32172] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:45:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:45:58 executing program 1: syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_clone(0x41002200, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:45:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x10, 0x0, &(0x7f0000000100)) 00:45:58 executing program 5: getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x802, 0x0) 00:45:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0xe9, 0x472, &(0x7f0000000940)="$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") 00:45:58 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0285629, &(0x7f0000000080)={"2baff57bfbf684d5eea86217681ac61f"}) [ 2758.400566][T32182] loop4: detected capacity change from 0 to 512 00:45:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) 00:45:58 executing program 3: r0 = eventfd2(0x6, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) [ 2758.431918][T32182] EXT4-fs (loop4): Ignoring removed bh option 00:45:58 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000300)=@raw=[@generic, @map_fd], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2758.464061][T32182] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2758.489697][T32182] EXT4-fs (loop4): Remounting filesystem read-only [ 2758.491096][T32182] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2758.559757][T32182] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:45:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c2ebd039"}, 0x0, 0x1, {0x0}}) [ 2758.596333][T32182] EXT4-fs (loop4): 1 truncate cleaned up [ 2758.597573][T32182] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:45:58 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x40044160, &(0x7f0000000140)={0x0, "b451585c79e065ead4cfe4e308ad6b7fb7092d3d8d8f070bc7e76edb255a3b5e3b120f72706416752017b006de8362574a75dd8bbf79a48aeb80e1364df070d9"}) 00:45:58 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:45:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:45:59 executing program 2: syz_io_uring_setup(0x20ac, &(0x7f0000000000)={0x0, 0x0, 0x2100}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:45:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0xec, 0x472, &(0x7f0000000940)="$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") 00:45:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:45:59 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x8}, &(0x7f0000000280)={0x1}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x6874]}, 0x8}) 00:45:59 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6079ea91, 0x0) read$snddsp(r0, 0x0, 0x0) [ 2759.665559][T32213] loop4: detected capacity change from 0 to 512 00:45:59 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r0, 0x0, 0x0, 0x100c00) [ 2759.677126][T32213] EXT4-fs (loop4): Ignoring removed bh option 00:45:59 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "56976a44bbfcebfadd8aeefec58e2bbdce5c0f41fd62ebceb2731eaf339586d51ff8186d43d5f05599b6fd5b7d7433a49e1b4f368960ad9f90b0e1eda0882d45"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000002180)={0x0, "56976a44bbfcebfadd8aeefec58e2bbdce5c0f41fd62ebceb2731eaf339586d51ff8186d43d5f05599b6fd5b7d7433a49e1b4f368960ad9f90b0e1eda0882d45"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) 00:45:59 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 00:45:59 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"2baff57bfbf684d5eea86217681ac61f"}) [ 2759.724027][T32213] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2759.737157][T32213] EXT4-fs (loop4): Remounting filesystem read-only [ 2759.745149][T32213] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2759.768814][T32213] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:45:59 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x40040) 00:45:59 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000003c0)) [ 2759.814513][T32213] EXT4-fs (loop4): 1 truncate cleaned up [ 2759.815783][T32213] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:00 executing program 1: clock_gettime(0x0, &(0x7f00000014c0)={0x0}) pselect6(0x40, &(0x7f0000001400), 0x0, &(0x7f0000001480)={0x2}, &(0x7f0000001500)={r0}, 0x0) 00:46:00 executing program 5: syz_clone(0x80048200, 0x0, 0x31, 0x0, 0x0, 0x0) 00:46:00 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x22}, 0x10) 00:46:00 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000002b40)={0x0, 0x0, 0x28}, 0x10) 00:46:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0xf6, 0x472, &(0x7f0000000940)="$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") [ 2761.046654][T32245] loop4: detected capacity change from 0 to 512 [ 2761.065108][T32245] EXT4-fs (loop4): Ignoring removed bh option 00:46:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="4800000014001d0d09074beafd0d8c560284006080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 00:46:01 executing program 2: pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='\x00A9', 0x0, r0) 00:46:01 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x4140, 0x0) [ 2761.107817][T32245] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:46:01 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x890e507e1a5e03f1) [ 2761.123547][T32245] EXT4-fs (loop4): Remounting filesystem read-only [ 2761.135759][T32245] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:46:01 executing program 2: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ff9000/0x4000)=nil) [ 2761.149467][T32245] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2761.155818][T32245] EXT4-fs (loop4): 1 truncate cleaned up [ 2761.157252][T32245] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0xf7, 0x472, &(0x7f0000000940)="$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") [ 2761.425257][T32270] loop4: detected capacity change from 0 to 512 [ 2761.436412][T32270] EXT4-fs (loop4): Ignoring removed bh option [ 2761.449059][T32270] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2761.457926][T32270] EXT4-fs (loop4): Remounting filesystem read-only [ 2761.460756][T32270] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2761.468929][T32270] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2761.474884][T32270] EXT4-fs (loop4): 1 truncate cleaned up [ 2761.476161][T32270] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:02 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000180)={0x4}, 0x0, 0x0) 00:46:02 executing program 2: syz_clone(0x41002200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2ab8c200, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:02 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="4800000014001d0d09074beafd0d8c560284006080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 00:46:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0xfc, 0x472, &(0x7f0000000940)="$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") 00:46:02 executing program 1: syz_clone(0xf5102000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2762.427152][T32277] loop4: detected capacity change from 0 to 512 [ 2762.441009][T32277] EXT4-fs (loop4): Ignoring removed bh option [ 2762.457132][T32277] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2762.471466][T32277] EXT4-fs (loop4): Remounting filesystem read-only [ 2762.486685][T32277] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2762.504129][T32277] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2762.516058][T32277] EXT4-fs (loop4): 1 truncate cleaned up [ 2762.521197][T32277] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH70t4m1/ugPdbWKwR9Jk1Yt6EFFoQcFQQ/1GNNtqd020kSwpdgoUo9S8C4eBf8CT3oR9SR41bsUivRiFYSV2Z1JN+numm12u5r9fGCa9/a97XvfmXnJm3mzG8DAKmX/JBHbI+KXiBirZ1dWKNV/XL92Ye7PaxfmkqhW3/g9qdX749qFuaJq8b5teWYijUg/TmJvk3YXzp0/NVuplM/m+anF0+9OLZw7/9TJ07MnyifKZ2YOHz50cPrZZ2ae7kqcO7K+7vlgft/uI29dfm3u6OW3f/gq6+/2vLwxjm4pRWnlvmzwaLcb67MdDelkuI8doSNDEZEdrpHa+B+Lobhx8MbilY/62jmgp6rVanVT6+KlKrCBJdHvHgD9Ufyhz65/i+02TT3+E66+WL8AyuK+nm/1kuFI8zojq65vu+m+iDi69Nfn2RaN9yG29KhBAGDgfZPNf55sNv9L456Genfka0PjEXFnROyMiLsiYldE3B1Rq3tvPp9pa2lltrSq+Ob5Z3plRXZz/vO5DoJsI5v/PZ+vba2c/xWzvxgfynM7avGPJMdPVsoH8n0yESObsvx0mza+ffnnT1uVlRrmf9mWtV/MBfN+XBmu36AbLV45Nrs4u964C1c/jNgz3Cz+ZHklIImI3RGxp7P/Or/CuBgnH/9yX6tK/x5/G11YZ6p+EfFY/fgvxar4C0n79cmpzVEpH5gqzoqb/fjTpddbND+6rvi7IDv+W5ue/8vxjyeN67ULnbdx6ddPWl5TdnD+L8vO/9HkzVq6GBTvzy4unp2OGE1evfn1mRvvLfJF/Sz+if3Nx//OuLEn9kZEdhLfHxEPRMSDed8fioiHI2J/m/i/f+mRd249/t7K4j/W0fHvPDF06ruvW7W/tuN/qJaayF9Zy++/tXZwPfsOAAAA/i/S2jPwSTq5nE7Tycn6M/y7YmtamV9YfOL4/HtnjtWflR+PkbS40zXWcD90Or83XORnVuUP5veNPxvaUstPzs1XerWmDqzNthbjP/PbUL97B/Scz2vB4DL+YXAZ/zC4jH8YXGsd/0s97gdw+zUb/xcjrvehK8BtZv4Pg8v4h8Fl/MPgMv5hIN3y5/qLr0dpUWfnkfV8Y0ClXPTvFt/evUT8Xa2uKnqhg+8X2LiJSFsVVfPnxvvdw64mNm+scPLESD7MmhT14ZcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAD/wTAAD//zFX4Z8=") 00:46:02 executing program 1: clock_gettime(0xe163cf13df8e7432, 0x0) [ 2762.752655][T32298] loop4: detected capacity change from 0 to 512 [ 2762.770543][T32298] EXT4-fs (loop4): Ignoring removed bh option [ 2762.788469][T32298] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2762.817832][T32298] EXT4-fs (loop4): Remounting filesystem read-only [ 2762.821701][T32298] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2762.844708][T32298] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2762.863151][T32298] EXT4-fs (loop4): 1 truncate cleaned up [ 2762.892269][T32298] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:02 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)={&(0x7f0000000a40)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)={&(0x7f0000000bc0)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001080)={&(0x7f0000001040)='./file0\x00'}, 0x10) 00:46:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0xd, 0x0, &(0x7f0000000100)) 00:46:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x40a, &(0x7f0000000940)="$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") 00:46:02 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000dc0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000f00)) 00:46:03 executing program 5: migrate_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)) 00:46:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:03 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x32}, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 00:46:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x425, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH70t4m1/ugPdbWKwR9Jk1Yt6EFFoQcFQQ/1GNNtqd020kSwpdgoUo9S8C4eBf8CT3oR9SR41bsUivRiFYSV2Z1JN+numm12u5r9fGCa9/a97XvfmXnJm3mzG8DAKmX/JBHbI+KXiBirZ1dWKNV/XL92Ye7PaxfmkqhW3/g9qdX749qFuaJq8b5teWYijUg/TmJvk3YXzp0/NVuplM/m+anF0+9OLZw7/9TJ07MnyifKZ2YOHz50cPrZZ2ae7kqcO7K+7vlgft/uI29dfm3u6OW3f/gq6+/2vLwxjm4pRWnlvmzwaLcb67MdDelkuI8doSNDEZEdrpHa+B+Lobhx8MbilY/62jmgp6rVanVT6+KlKrCBJdHvHgD9Ufyhz65/i+02TT3+E66+WL8AyuK+nm/1kuFI8zojq65vu+m+iDi69Nfn2RaN9yG29KhBAGDgfZPNf55sNv9L456Genfka0PjEXFnROyMiLsiYldE3B1Rq3tvPp9pa2lltrSq+Ob5Z3plRXZz/vO5DoJsI5v/PZ+vba2c/xWzvxgfynM7avGPJMdPVsoH8n0yESObsvx0mza+ffnnT1uVlRrmf9mWtV/MBfN+XBmu36AbLV45Nrs4u964C1c/jNgz3Cz+ZHklIImI3RGxp7P/Or/CuBgnH/9yX6tK/x5/G11YZ6p+EfFY/fgvxar4C0n79cmpzVEpH5gqzoqb/fjTpddbND+6rvi7IDv+W5ue/8vxjyeN67ULnbdx6ddPWl5TdnD+L8vO/9HkzVq6GBTvzy4unp2OGE1evfn1mRvvLfJF/Sz+if3Nx//OuLEn9kZEdhLfHxEPRMSDed8fioiHI2J/m/i/f+mRd249/t7K4j/W0fHvPDF06ruvW7W/tuN/qJaayF9Zy++/tXZwPfsOAAAA/i/S2jPwSTq5nE7Tycn6M/y7YmtamV9YfOL4/HtnjtWflR+PkbS40zXWcD90Or83XORnVuUP5veNPxvaUstPzs1XerWmDqzNthbjP/PbUL97B/Scz2vB4DL+YXAZ/zC4jH8YXGsd/0s97gdw+zUb/xcjrvehK8BtZv4Pg8v4h8Fl/MPgMv5hIN3y5/qLr0dpUWfnkfV8Y0ClXPTvFt/evUT8Xa2uKnqhg+8X2LiJSFsVVfPnxvvdw64mNm+scPLESD7MmhT14ZcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAD/wTAAD//zFX4Z8=") 00:46:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x37, 0x0, &(0x7f0000000100)=0x4000000) 00:46:03 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="4800000014001d0d09074beafd0d8c560284006080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 00:46:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="1d"], 0x1c}}, 0x0) 00:46:03 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8000]]}) 00:46:03 executing program 5: add_key(&(0x7f0000000240)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 00:46:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x45c, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH70t4m1/ugPdbWKwR9Jk1Yt6EFFoQcFQQ/1GNNtqd020kSwpdgoUo9S8C4eBf8CT3oR9SR41bsUivRiFYSV2Z1JN+numm12u5r9fGCa9/a97XvfmXnJm3mzG8DAKmX/JBHbI+KXiBirZ1dWKNV/XL92Ye7PaxfmkqhW3/g9qdX749qFuaJq8b5teWYijUg/TmJvk3YXzp0/NVuplM/m+anF0+9OLZw7/9TJ07MnyifKZ2YOHz50cPrZZ2ae7kqcO7K+7vlgft/uI29dfm3u6OW3f/gq6+/2vLwxjm4pRWnlvmzwaLcb67MdDelkuI8doSNDEZEdrpHa+B+Lobhx8MbilY/62jmgp6rVanVT6+KlKrCBJdHvHgD9Ufyhz65/i+02TT3+E66+WL8AyuK+nm/1kuFI8zojq65vu+m+iDi69Nfn2RaN9yG29KhBAGDgfZPNf55sNv9L456Genfka0PjEXFnROyMiLsiYldE3B1Rq3tvPp9pa2lltrSq+Ob5Z3plRXZz/vO5DoJsI5v/PZ+vba2c/xWzvxgfynM7avGPJMdPVsoH8n0yESObsvx0mza+ffnnT1uVlRrmf9mWtV/MBfN+XBmu36AbLV45Nrs4u964C1c/jNgz3Cz+ZHklIImI3RGxp7P/Or/CuBgnH/9yX6tK/x5/G11YZ6p+EfFY/fgvxar4C0n79cmpzVEpH5gqzoqb/fjTpddbND+6rvi7IDv+W5ue/8vxjyeN67ULnbdx6ddPWl5TdnD+L8vO/9HkzVq6GBTvzy4unp2OGE1evfn1mRvvLfJF/Sz+if3Nx//OuLEn9kZEdhLfHxEPRMSDed8fioiHI2J/m/i/f+mRd249/t7K4j/W0fHvPDF06ruvW7W/tuN/qJaayF9Zy++/tXZwPfsOAAAA/i/S2jPwSTq5nE7Tycn6M/y7YmtamV9YfOL4/HtnjtWflR+PkbS40zXWcD90Or83XORnVuUP5veNPxvaUstPzs1XerWmDqzNthbjP/PbUL97B/Scz2vB4DL+YXAZ/zC4jH8YXGsd/0s97gdw+zUb/xcjrvehK8BtZv4Pg8v4h8Fl/MPgMv5hIN3y5/qLr0dpUWfnkfV8Y0ClXPTvFt/evUT8Xa2uKnqhg+8X2LiJSFsVVfPnxvvdw64mNm+scPLESD7MmhT14ZcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAD/wTAAD//zFX4Z8=") 00:46:03 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x33, 0xffffffffffffffff, 0x0) 00:46:03 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x95025fa6f5812b95, 0x0) 00:46:03 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) connect$llc(r0, 0x0, 0xffffffffffffff2f) 00:46:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:05 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000300)=@raw=[@map_idx_val, @generic], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:05 executing program 2: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+60000000}, 0x0) 00:46:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01402dbd7008fddbdf2502000000090001"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x2) 00:46:05 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="4800000014001d0d09074beafd0d8c560284006080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) [ 2765.201050][T32348] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2765.202732][T32348] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2765.230272][T32349] loop4: detected capacity change from 0 to 512 00:46:05 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="91") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000ec0)) [ 2765.272401][T32349] EXT4-fs (loop4): Ignoring removed bh option [ 2765.274162][T32349] EXT4-fs (loop4): inodes count not valid: 0 vs 32 00:46:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x13, 0x0, &(0x7f0000000100)) 00:46:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxNr/dEfarSKwR9Jk1Yt6EFFoQcFQQ/1GNNtqd020kSwpdgoUo9S8C4eBf8CT3oR9SR41bsUivRiFYSV2Z1JNunumm12u9r9fGDIe/te8t53Zt7mzbzZDWCwJRHbI+KXiBitZ1eM17fsx/VrF+b+vHZhLolq9Y3fk1q9P65dmGv4MzXb8sxEGpF+nMTeJk0unDt/arZSKZ/N81OLp9+dWjh3/qmTp2dPlE+Uz8wcPnzo4PSzz8w83ZUQd2R93fPB/L7dR966/Nrc0ctv//BV1t/teXljHN0yHuOr92WDR7vdWJ/taEgnw33sCB0ZiojscJVq4380hmLl4I3GKx/1tXNAT1Wr1eqm1sVLVeA2lkS/ewD0R/GPPrv+LbZbNPX4T7j6Yv0CKIv7er7VS4YjzeuU1lzfdtN9EXF06a/Psy0a70Ns6VGDAMDA+yab/zzZbP6Xxj0N9e7I14bGIuLOiNgZEXdFxK6IuDuiVvfefD7T1tLq7Pia4hvnn+mVVdnN+c/nOgiyjWz+93y+trV6/lfM/mJsKM/tqMVfSo6frJQP5PtkIkqbsvx0mza+ffnnT1uVjTfM/7Ita7+YC+b9uDJcv0E3UrxybHZxdqNxF65+GLFnuFn8yfJKQBIRuyNiT2d/Or/CuBgnH/9yX6tK/x5/G11YZ6p+EfFY/fgvxZr4C0n79cmpzVEpH5gqzoob/fjTpddbND+yofi7IDv+W5ue/8vxjyWN67ULnbdx6ddPWl5TdnD+L8vO/5HkzVq6GBTvzy4unp2OGElevfH1mZXfLfJF/Sz+if3Nx//OWNkTeyMiO4nvj4gHIuLBvO8PRcTDEbG/Tfzfv/TIOzcff29l8R/r6Ph3nhg69d3Xrdpf3/E/VEtN5K+s5/1vvR3cyL4DAACA/4u09gx8kk4up9N0crL+DP+u2JpW5hcWnzg+/96ZY/Vn5ceilBZ3ukYb7odO5/eGi/zMmvzB/L7xZ0NbavnJuflKr9bUgfXZ1mL8Z34b6nfvgJ7zeS0YXMY/DC7jHwaX8Q+Da73jf6nH/QBuvWbj/2LE9T50BbjFzP9hcBn/MLiMfxhcxj8MpJv+XH/x9Sgt6uw8spFvDKiUi/7d5K93LxF/V6tril7o4PsFbt9EpK2Kqvlz4/3uYVcTm2+vcPJEKR9mTYr68GYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQA/8EAAD//6nX4X8=") 00:46:05 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000002480)) 00:46:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) [ 2765.452821][T32370] loop4: detected capacity change from 0 to 512 00:46:05 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "56976a44bbfcebfadd8aeefec58e2bbdce5c0f41fd62ebceb2731eaf339586d51ff8186d43d5f05599b6fd5b7d7433a49e1b4f368960ad9f90b0e1eda0882d45"}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='+\'#{\x00', r0) [ 2765.492147][T32370] EXT4-fs (loop4): Ignoring removed bh option [ 2765.508033][T32370] EXT4-fs (loop4): inodes count not valid: 0 vs 32 00:46:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 00:46:06 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000005c0)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}) 00:46:06 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 00:46:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:06 executing program 3: prctl$PR_SET_VMA(0x2, 0x0, &(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0) [ 2766.500669][T32382] loop4: detected capacity change from 0 to 512 00:46:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x0, 0x0, 0x0, 0x0, 0xb06}, 0x48) 00:46:06 executing program 3: pipe2$watch_queue(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x6d4f, &(0x7f00000002c0)={0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000000340), &(0x7f0000000380)) [ 2766.540760][T32382] EXT4-fs (loop4): Ignoring removed bh option [ 2766.542145][T32382] EXT4-fs (loop4): inodes count not valid: 1 vs 32 00:46:06 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8904, 0x0) 00:46:06 executing program 2: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0) 00:46:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:06 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) [ 2766.719209][T32402] loop4: detected capacity change from 0 to 512 [ 2766.739912][T32402] EXT4-fs (loop4): Ignoring removed bh option [ 2766.741402][T32402] EXT4-fs (loop4): inodes count not valid: 2 vs 32 00:46:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x2d, 0x0, &(0x7f0000000100)=0x4000000) 00:46:08 executing program 1: syz_io_uring_setup(0x1345, &(0x7f0000000200), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x298d, &(0x7f0000000300), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:46:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x1e, 0x0, &(0x7f0000000100)) 00:46:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:08 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x0, 0x0, 0x8000}) [ 2768.186496][T32410] loop4: detected capacity change from 0 to 512 00:46:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="18040000170001"], 0x418}}, 0x0) 00:46:08 executing program 3: clock_gettime(0x0, &(0x7f00000014c0)={0x0}) pselect6(0x40, &(0x7f0000001400), 0x0, &(0x7f0000001480)={0x2}, &(0x7f0000001500)={r0}, &(0x7f0000001580)={&(0x7f0000001540)={[0x8001]}, 0x8}) 00:46:08 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000000)={0x28, 0x0, r2, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) 00:46:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1c4}, 0x48) [ 2768.244871][T32410] EXT4-fs (loop4): Ignoring removed bh option [ 2768.246263][T32410] EXT4-fs (loop4): inodes count not valid: 4 vs 32 00:46:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2768.293399][T32421] netlink: 752 bytes leftover after parsing attributes in process `syz-executor.5'. 00:46:08 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002f00)={0x6, 0x1, &(0x7f0000002c00)=@raw=[@kfunc], &(0x7f0000002c40)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002e40)={0x4, 0xf, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 2768.384533][T32425] loop4: detected capacity change from 0 to 512 [ 2768.389994][T32425] EXT4-fs (loop4): Ignoring removed bh option [ 2768.391559][T32425] EXT4-fs (loop4): inodes count not valid: 10 vs 32 00:46:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:09 executing program 2: add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="7cf2576209", 0x5, 0xfffffffffffffffe) 00:46:09 executing program 1: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) syz_io_uring_setup(0x6c93, &(0x7f0000000380), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 00:46:09 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:09 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 2769.656878][T32441] trusted_key: encrypted_key: master key parameter '' is invalid 00:46:09 executing program 5: pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000280)={0x1}, &(0x7f00000001c0), 0x0) 00:46:09 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000000)) [ 2769.694284][T32438] loop4: detected capacity change from 0 to 512 00:46:09 executing program 2: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 00:46:09 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) [ 2769.739743][T32438] EXT4-fs (loop4): Ignoring removed bh option [ 2769.741328][T32438] EXT4-fs (loop4): inodes count not valid: 12 vs 32 00:46:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3MtrXNUfAPDvvcmk7ya//uqjDzVaxeAjadKqBV2oKHShIOiiLmM6LbXTRpoIthQbRepSCu7FpeBf4Eo3oq4Et7qXQpFurIIwcmfuTSbpzJhpZjra+XzgNufMOdNzvvfek5x7z50JYGDtzP5JIrZHxM8RMVrPrhivb9mPG9cvzv1x/eJcEtXq678ltXq/X784V1Qt3rctz0ykEelHSexr0u7C+QunZyuV8rk8P7V45p2phfMXnjx1ZvZk+WT57MyRI4cPTT/z9MxTXYlzR9bXve/P799z9M0rr84du/LW919m/d2elzfG0S3jMb56XzZ4pNuN9dmOhnQy3MeO0JGhiMgOV6k2/kdjKFYO3mi8/GFfOwf0VLVarW5qXbxUBe5gSfS7B0B/FH/os+vfYrtNU49/hWsv1C+Asrhv5Fu9ZDjSvE5pzfVtN90bEceW/vws26LxPsSWHjUIAAy8r7P5zxPN5n9p3N1Qb2e+NjQWEf+LiF0R8f+I2B0Rd0XU6t6Tz2faWlqdHV9TfPP8M726Krs5//lsB0G2kc3/nsvXtlbP/4rZX4wN5bkdtfhLyYlTlfLBfJ9MRGlTlp9u08Y3L/30Sauy8Yb5X7Zl7RdzwbwfV4frN+hGileOzy7ObjTuwrUPIvYON4s/WV4JSCJiT0Ts7ey/zq8wLsWpx77Y36rSP8ffRhfWmaqfRzxaP/5LsSb+QtJ+fXJqc1TKB6eKs+JmP/x4+bUWzY9sKP4uyI7/1qbn/3L8Y0njeu1C521c/uXjlteUHZz/y7LzfyR5o5YuBsV7s4uL56YjRpJXbn59ZuW9Rb6on8U/caD5+N8VK3tiX0RkJ/F9EXF/RDyQ9/3BiHgoIg60if+7Fx9++9bj760s/uMdHf/OE0Onv/2qVfvrO/6Ha6mJ/JX1/P5bbwc3su8AAADgvyKtPQOfpJPL6TSdnKw/w787tqaV+YXFx0/Mv3v2eP1Z+bEopcWdrtGG+6HT+b3hIj+zJn8ov2/86dCWWn5ybr7SqzV1YH22tRj/mV+H+t07oOd8XgsGl/EPg8v4h8Fl/MPgWu/4X+pxP4Dbr9n4vxRxow9dAW4z838YXMY/DC7jHwaX8Q8D6ZY/1198PUqLOruObuQbAyrlon+3+PbuJeKvanVN0fMdfL/AnZuItFVRNX9uvN897Gpi850VTp4o5cOsSVEffhkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0wN8BAAD//3Uf4Y0=") 00:46:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) [ 2769.858862][T32458] loop4: detected capacity change from 0 to 512 [ 2769.913604][T32458] EXT4-fs (loop4): Ignoring removed bh option [ 2769.916088][T32458] EXT4-fs (loop4): inodes count not valid: 14 vs 32 00:46:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:10 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x0, 0x13, r0, 0x83000000) syz_clone(0x88140000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:10 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) 00:46:10 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000100)=[@clear_death], 0x0, 0x0, 0x0}) 00:46:10 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x300, 0x0, 0x0, 0x0) 00:46:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2770.792059][T32465] binder: 32461:32465 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 00:46:10 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x1) write$snddsp(r0, 0x0, 0x0) 00:46:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/15, 0xf}], 0x1, &(0x7f0000001a00)=[{&(0x7f0000000480)=""/228, 0xe4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2770.836075][T32468] loop4: detected capacity change from 0 to 512 00:46:10 executing program 1: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2848, &(0x7f0000000100)={0x0, 0xa966}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001ac0), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001b80)) 00:46:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x30, 0x0, &(0x7f0000000100)) [ 2770.887915][T32468] EXT4-fs (loop4): Ignoring removed bh option [ 2770.889343][T32468] EXT4-fs (loop4): inodes count not valid: 15 vs 32 00:46:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000032c0)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000004ec0)=0x40) 00:46:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:10 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000001900), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000001980), &(0x7f00000019c0)=0x0) syz_io_uring_setup(0x4225, &(0x7f0000000000)={0x0, 0x52bd}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, r0, &(0x7f0000000140)=@IORING_OP_READ_FIXED, 0x0) 00:46:10 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6}, @map_fd], &(0x7f0000000340)='GPL\x00', 0x101, 0xf, &(0x7f0000000380)=""/15, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xe, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getpid() setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) [ 2771.036622][T32486] loop4: detected capacity change from 0 to 512 00:46:11 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x4, &(0x7f0000000840)=@framed={{}, [@kfunc]}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2771.053072][T32486] EXT4-fs (loop4): Ignoring removed bh option 00:46:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f0000000100)) [ 2771.086503][T32486] EXT4-fs (loop4): inodes count not valid: 21 vs 32 00:46:11 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000c00)) 00:46:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:11 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) gettid() pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1, 0x8}, &(0x7f0000000140)={0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x3}, &(0x7f0000000280)={0x1, 0x4, 0x10001, 0x5, 0x0, 0x0, 0x2}, &(0x7f00000001c0), 0x0) 00:46:11 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x4020565a, &(0x7f0000000080)={"2baff57bfbf684d5eea86217681ac61f"}) 00:46:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) [ 2771.232566][T32507] loop4: detected capacity change from 0 to 512 00:46:11 executing program 1: syz_io_uring_setup(0x4a69, &(0x7f0000000100)={0x0, 0x0, 0x886}, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) [ 2771.267146][T32507] EXT4-fs (loop4): Ignoring removed bh option [ 2771.274928][T32507] EXT4-fs (loop4): inodes count not valid: 22 vs 32 00:46:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:46:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r1, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r2, &(0x7f0000000040), 0xfea0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x52000) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x288000c, r2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x39, 0x0, &(0x7f0000000100)=0x4000000) 00:46:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 00:46:11 executing program 2: request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='-\x00', 0xffffffffffffffff) 00:46:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 00:46:11 executing program 5: mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 00:46:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r1, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r2, &(0x7f0000000040), 0xfea0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x52000) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x288000c, r2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d40000001300010027bd7000fbdbdf25fe0000000000000000000000bbffffffa13600000000000000000000004e2200064e236c814e012ce775216704000a003000330000003a07d5827c780903b9a8d190932f9ee1a73eee2eaa1474cb4f2220cae2b85b0b2ba0aca68341728598446a915026f9199556e730849081208f0b1ffbebbe7d40d88004cf7f2b6289c7061877ce84814f34737240435d8e4fff35fb2627f79aed42fef387b172b82cd987ae796205"], 0xd4}}, 0x0) 00:46:11 executing program 2: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) [ 2771.475355][T32533] loop4: detected capacity change from 0 to 512 [ 2771.486713][T32536] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2771.493167][T32533] EXT4-fs (loop4): Ignoring removed bh option [ 2771.500074][T32533] EXT4-fs (loop4): inodes count not valid: 23 vs 32 00:46:11 executing program 3: getresgid(&(0x7f0000000500), &(0x7f0000000540), 0x0) 00:46:11 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x40086602, &(0x7f0000000140)={0x0, "b451585c79e065ead4cfe4e308ad6b7fb7092d3d8d8f070bc7e76edb255a3b5e3b120f72706416752017b006de8362574a75dd8bbf79a48aeb80e1364df070d9"}) 00:46:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40d848d80c22fcfd}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 00:46:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r1, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r2, &(0x7f0000000040), 0xfea0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x52000) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x288000c, r2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter, 0x48) 00:46:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:11 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc1004110, &(0x7f0000000140)={0x0, "b451585c79e065ead4cfe4e308ad6b7fb7092d3d8d8f070bc7e76edb255a3b5e3b120f72706416752017b006de8362574a75dd8bbf79a48aeb80e1364df070d9"}) 00:46:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x48, 0x0, &(0x7f0000000100)=0x4000000) 00:46:11 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000500)={0x0, [[0x0, 0x2]]}) 00:46:11 executing program 2: add_key$fscrypt_v1(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "56976a44bbfcebfadd8aeefec58e2bbdce5c0f41fd62ebceb2731eaf339586d51ff8186d43d5f05599b6fd5b7d7433a49e1b4f368960ad9f90b0e1eda0882d45"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 00:46:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:11 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, 0x0, 0x0, 0x31bac41d9f2371f8) [ 2771.748018][T32558] loop4: detected capacity change from 0 to 512 00:46:11 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 00:46:11 executing program 1: clock_gettime(0x0, &(0x7f0000000280)) getitimer(0x0, &(0x7f0000000080)) [ 2771.784054][T32558] EXT4-fs (loop4): Ignoring removed bh option [ 2771.785442][T32558] EXT4-fs (loop4): inodes count not valid: 24 vs 32 00:46:11 executing program 2: r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "7d5267584091157b048e10a9f3d018adf250d4b711ad0af4d2dcccd40ecd1d2e4f591de3c8d8b3cb49924b703eed0bcdd94aaf3d0f8dbd9ac7304c96b34f1b64"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, r1) 00:46:11 executing program 1: openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x50000, 0x0) 00:46:11 executing program 2: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff4000/0x2000)=nil) 00:46:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:12 executing program 5: prctl$PR_SET_VMA(0x7, 0x0, &(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0) 00:46:12 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x3, &(0x7f0000000840)=@framed, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0x98, &(0x7f0000000900)=""/152, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:12 executing program 2: r0 = syz_io_uring_setup(0x20ac, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) 00:46:12 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x40084149, &(0x7f0000000140)={0x0, "b451585c79e065ead4cfe4e308ad6b7fb7092d3d8d8f070bc7e76edb255a3b5e3b120f72706416752017b006de8362574a75dd8bbf79a48aeb80e1364df070d9"}) [ 2772.444817][T32591] loop4: detected capacity change from 0 to 512 [ 2772.451005][T32591] EXT4-fs (loop4): Ignoring removed bh option [ 2772.452655][T32591] EXT4-fs (loop4): inodes count not valid: 37 vs 32 00:46:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:12 executing program 3: r0 = io_uring_setup(0xb18, &(0x7f0000000000)) io_uring_setup(0x6cf0, &(0x7f0000004a00)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 00:46:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a}, 0x48) 00:46:12 executing program 2: r0 = syz_io_uring_setup(0x20ac, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) 00:46:12 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000001380), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, 0x0) 00:46:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3MtrXNUfAPDvvXn0/Ut+tT76UKNVDD6SJq1a0IUVhS4UBF3UZUynpXbaSBPBlmKjSF1Kwb24FPwLXOlG1JXgVvdSKNKNVRBG7sy9ySSZGTPNTEcznw/c5pw5Z3rO9957knPvuTMB9K0ns3+SiJ0R8XNEjNSyy8ZqW/bj1s3Ls3/cvDybRKXy+m9Jtd7vNy/PFlWL9+3IM+NpRPpREvsbtDt/8dLZmXK5dCHPTy6ce2dy/uKlp86cmzldOl06P3306JHDU88+M/10R+LclfV13/tzB/Yef/Paq7Mnrr31/ZdZf3fm5fVxdMpYjK3cl3Ue7XRjPbarLp0M9rAjtGUgIrLDNVQd/yMxEMsHbyRe/rCnnQO6qlKpVLY0L16sAJtYEr3uAdAbxR/67Pq32O7Q1ONf4cax2gVQFvetfKuVDEaa1xladX3bSfdFxInFPz/Ltqi/D7GtSw0CAH3v62O1RaC187807qmr9798bWg0Iv4fEbsj4q6I2BMRd0dU696bz2daWlyZHVtVvHb+mV5fkd2a/3yujSBbyOZ/z+drWyvnf8XsL0YH8tyuavxDyakz5dKhfJ+Mx9CWLD/Voo1vXvrpk2ZlY3Xzv2zL2i/mgnk/rg/WbtANF6+cnFmY2WjchRsfROwbbBR/srQSkETE3ojY195/nV9hXIkzj39xoFmlf46/hQ6sM1U+j3isdvwXY1X8haT1+uTk1iiXDk0WZ8VaP/x49bUmzQ9vKP4OyI7/9obn/1L8o0n9eu18+21c/eXjpteUbZz/S7Lzfzh5o5ouBsV7MwsLF6YihpNX1r4+vfzeIl/Uz+IfP9h4/O+O5T2xPyKyk/j+iHggIh7M+/5QRDwcEQdbxP/di4+8ffvxd1cW/8m2jn/7iYGz337VrP31Hf8j1dR4/sp6fv+tt4Mb2XcAAADwX5FWn4FP0omldJpOTNSe4d8T29Py3PzCE6fm3j1/svas/GgMpcWdrpG6+6FT+b3hIj+9Kn84v2/86cC2an5idq7crTV1YH12NBn/mV8Het07oOt8Xgv6l/EP/cv4h/5l/EP/Wu/4X+xyP4A7r9H4vxJxqwddAe4w83/oX8Y/9C/jH/qX8Q996bY/1198PUqTOruPb+QbA8qlon+3+fbOJeKvSmVV0QttfL/A5k1E2qyokj833usedjSxdXOFkyeG8mHWoKgHv4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC64O8AAAD//wQn4as=") 00:46:12 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) 00:46:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a00), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="1d"], 0x1c}}, 0x0) [ 2772.661328][T32602] loop4: detected capacity change from 0 to 512 00:46:12 executing program 3: sigaltstack(0x0, &(0x7f0000001640)={0x0}) [ 2772.685254][T32602] EXT4-fs (loop4): Ignoring removed bh option [ 2772.689039][T32602] EXT4-fs (loop4): inodes count not valid: 44 vs 32 00:46:12 executing program 3: r0 = io_uring_setup(0x4fd8, &(0x7f0000000000)={0x0, 0x9355}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = io_uring_setup(0x5f60, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r1) 00:46:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:12 executing program 2: r0 = syz_io_uring_setup(0x20ac, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) 00:46:13 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x4142, 0x0) 00:46:13 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_LK(r0, 0x0, 0x0) 00:46:13 executing program 2: r0 = syz_io_uring_setup(0x20ac, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) 00:46:13 executing program 3: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r0, 0x1}, 0x14}}, 0x0) 00:46:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:13 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, r1}, 0x28) write$FUSE_CREATE_OPEN(r0, &(0x7f00000041c0)={0xa0, 0x0, r1}, 0xa0) [ 2773.564830][T32632] loop4: detected capacity change from 0 to 512 00:46:13 executing program 2: syz_clone(0x5001000, 0x0, 0x4d, 0x0, 0x0, 0x0) 00:46:13 executing program 5: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000240), 0x0) 00:46:13 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc038563b, &(0x7f0000000080)={"2baff57bfbf684d5eea86217681ac61f"}) [ 2773.603995][T32632] EXT4-fs (loop4): Ignoring removed bh option [ 2773.606123][T32632] EXT4-fs (loop4): inodes count not valid: 47 vs 32 00:46:13 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) io_uring_setup(0x7b1c, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 00:46:13 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000026c0), 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 00:46:13 executing program 3: socketpair(0x9, 0x0, 0x0, &(0x7f0000000080)) 00:46:13 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000500)={0x0, [[0x0, 0x2]], '\x00', [], '\x00', 0x1}) 00:46:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:13 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="91") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffdd6, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f00000002c0)) 00:46:13 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 2773.978832][T32659] loop4: detected capacity change from 0 to 512 [ 2774.017934][T32659] EXT4-fs (loop4): Ignoring removed bh option [ 2774.019469][T32659] EXT4-fs (loop4): inodes count not valid: 48 vs 32 00:46:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:14 executing program 3: r0 = syz_io_uring_setup(0x677, &(0x7f0000000040), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 00:46:14 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000003c0)={0x0, [[0x2]]}) 00:46:14 executing program 2: request_key(&(0x7f0000000500)='rxrpc_s\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0) 00:46:14 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0xd) 00:46:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2774.459246][T32673] loop4: detected capacity change from 0 to 512 00:46:14 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x11, r0, 0x8000000) 00:46:14 executing program 3: r0 = io_uring_setup(0x33af, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0xd3bc], 0x2) [ 2774.504805][T32673] EXT4-fs (loop4): Ignoring removed bh option 00:46:14 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0xc0, 0x0) [ 2774.507200][T32673] EXT4-fs (loop4): inodes count not valid: 63 vs 32 00:46:14 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) [ 2774.666898][T32691] loop4: detected capacity change from 0 to 512 00:46:14 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0305615, &(0x7f0000000080)={"2baff57bfbf684d5eea86217681ac61f"}) 00:46:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2774.724812][T32691] EXT4-fs (loop4): Ignoring removed bh option [ 2774.741736][T32691] EXT4-fs (loop4): inodes count not valid: 8192 vs 32 00:46:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_timeval(r0, 0x1, 0x6, 0x0, &(0x7f0000000100)) 00:46:15 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000080)) 00:46:15 executing program 1: r0 = io_uring_setup(0x4fd8, &(0x7f0000000000)={0x0, 0x9355}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:46:15 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "56976a44bbfcebfadd8aeefec58e2bbdce5c0f41fd62ebceb2731eaf339586d51ff8186d43d5f05599b6fd5b7d7433a49e1b4f368960ad9f90b0e1eda0882d45"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000002180)={0x0, "56976a44bbfcebfadd8aeefec58e2bbdce5c0f41fd62ebceb2731eaf339586d51ff8186d43d5f05599b6fd5b7d7433a49e1b4f368960ad9f90b0e1eda0882d45"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) 00:46:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2775.380525][T32702] loop4: detected capacity change from 0 to 512 00:46:15 executing program 3: migrate_pages(0x0, 0x730, &(0x7f0000000200), &(0x7f0000000240)=0x5) 00:46:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) 00:46:15 executing program 1: socketpair(0x22, 0x0, 0x4, &(0x7f0000000000)) 00:46:15 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0189436, &(0x7f0000000080)={"2baff57bfbf684d5eea86217681ac61f"}) [ 2775.413152][T32702] EXT4-fs (loop4): Ignoring removed bh option [ 2775.418084][T32702] EXT4-fs (loop4): inodes count not valid: 2147483647 vs 32 00:46:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:15 executing program 1: syz_open_dev$usbfs(&(0x7f0000000100), 0x33, 0x1c3243) 00:46:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r0, 0x1}, 0x14}}, 0x0) 00:46:16 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, 0x0}, 0x20) 00:46:16 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 00:46:16 executing program 1: madvise(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff3000/0x2000)=nil, 0x2000, &(0x7f0000000c80)='team0\x00') 00:46:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2776.265695][T32730] loop4: detected capacity change from 0 to 512 00:46:16 executing program 5: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 2776.285922][T32730] EXT4-fs (loop4): Ignoring removed bh option [ 2776.287171][T32730] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (1) 00:46:16 executing program 2: clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={0x0, r0+10000000}, 0x0) 00:46:16 executing program 3: mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[]) 00:46:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x0, 0x0, 0x0, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) 00:46:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:16 executing program 5: syslog(0x3, &(0x7f0000000100)=""/192, 0xc0) [ 2776.392166][T32746] loop4: detected capacity change from 0 to 512 [ 2776.417508][T32746] EXT4-fs (loop4): Ignoring removed bh option [ 2776.419362][T32746] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 2776.429354][T32746] EXT4-fs (loop4): group descriptors corrupted! 00:46:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r2, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x52000) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x288000c, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x8}}}, 0x24}}, 0x0) 00:46:17 executing program 1: migrate_pages(0x0, 0x730, 0x0, &(0x7f0000000240)=0x5) 00:46:17 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x40010042, 0x0, 0x0) 00:46:17 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan0\x00'}) 00:46:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2777.189223][T32758] loop4: detected capacity change from 0 to 512 [ 2777.192362][T32762] 8021q: VLANs not supported on ipvlan0 [ 2777.211053][T32758] EXT4-fs (loop4): Ignoring removed bh option [ 2777.228565][T32758] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! 00:46:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000780), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000f80), 0xffffffffffffffff) 00:46:17 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) [ 2777.241130][T32758] EXT4-fs (loop4): group descriptors corrupted! 00:46:17 executing program 5: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000280)) 00:46:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[], 0x14}}, 0x0) 00:46:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3MuLW9UfAPDvvfPo69ffjLU++lCjVRx8zHSmVQu6UFHoQkHQRV2O07TUph3pjGBLsaNIXUrBvbgU/Atc6UbUleBW91Io0o1VECI3uXeaSZM46SSNNp8PXOac3JOe8733ftNzH0kAQ6sUEaMR8b+I+DkiJiIiaW5Qqv+5dvX8wh9Xzy8kUa2+/ltSa/f71fMLRdPifdvyylQakX6UxJ4W/S6dPXdyvlIpn8nrM8un3plZOnvuyROn5o+Xj5dPzx06dPDA7DNPzz3Vkzi3Z2Pd/f7i3l2H37z06sKRS299/2WSxx1NcfRKKUprt2WDR3rd2YBtbygnowMcCF0ZyfN/rJb/EzES13feRLz84UAHB/RVtVqtbmq/eqUK3MaSGPQIgMEo/qPPzn+L5RZNPf4VrrxQPwHK4r6WL/U1o5Hmbcaazm976d6IOLLy52fZEo3XIbb0qUMAYOh9nc1/nmg1/0vj7oZ2/8/vDU1GxB0RsSMi7oyInRFxV0St7T35fKajlbXVUtPqG+ef6eU11c3532e7CLKDbP73XH5va+38r5j9xeRIXttei38sOXaiUt6fb5OpGNuU1Wc79PHNSz990m5dqWH+ly1Z/8VcMB/H5dH6Bbrx4pWj88vzG427cOWDiN2jreJPVu8EJBGxKyJ2d/dP52cYF+LEY1/sbdfon+PvoAf3maqfRzxa3/8r0RR/Iel8f3Jmc1TK+2eKo+JGP/x48bU23Y9vKP4eyPb/1pbH/2r8k0nj/dql7vu4+MvHbc8puzj+V2XH/3jyRq1cJMV788vLZ2YjxpNXbnx97vp7i3rRPot/al/r/N8R17fEnojIDuL7IuL+iHggH/uDEfFQROzrEP93Lz789s3H319Z/Ee72v/dF0ZOfvtVu/7Xt/8P1kpT+Svr+fxb7wA3su0AAADgvyKtPQOfpNOr5TSdnq4/w78ztqaVxaXlx48tvnv6aP1Z+ckYS4srXRMN10Nn82vDRX2uqX4gv2786ciWWn16YbHSr3vqwPpsa5P/mV9HBj06oO98XwuGl/yH4SX/YXjJfxhe683/lT6PA7j1WuX/hYhrAxgKcIuZ/8Pwkv8wvOQ/DC/5D0Pppr/XX/w8Sps2Ow5v5BcDKuVifDf59t4V4q9qtWnV8138vsDtW4i03apq/tz4oEfY08Lm2yucvDCWp1mLVQP4MAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiDvwMAAP//JgDhog==") 00:46:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2, 0x0, &(0x7f0000000140)) [ 2777.392629][ T309] loop4: detected capacity change from 0 to 512 [ 2777.417789][ T309] EXT4-fs (loop4): Ignoring removed bh option [ 2777.421808][ T309] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4)! [ 2777.427768][ T309] EXT4-fs (loop4): group descriptors corrupted! 00:46:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r2, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x52000) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x288000c, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080), &(0x7f0000000280)=0x18) 00:46:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x15, 0x0, &(0x7f0000000b80)) 00:46:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000e40)={&(0x7f0000000d80), 0xc, &(0x7f0000000e00)={0x0}}, 0x0) 00:46:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x38}}, 0x0) 00:46:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH70lzWx1h/9oUarGPyRNGnVgh5UFHpQEPRQjzHdltptI00EW4qNIvUoBe/iUfAv8KQXUU+C13qXQpFerIKwMrsz6Wa7u2ab3a5mPx8Y8t6+t33vOzNv+2be7AYwsCYiYiQi7oiIyxExFhFJY4WJ2p/r187P/3nt/HwSlcqbvyfVen9cOz9fVC3ety3PTKYR6SdJ7GnS7uLZcyfnyuXSmTw/vXTqvenFs+eePnFq7njpeOn07KFDBw/MPPfs7DNdiXN71tfdHy7s3XX47Uuvzx+59M6PXyd53NEQR7dMxMTqfVnnsW431mfb69LJcB87QkeGImI4/wy4HGMxFDcO3li8+nFfOwf0VKVSqWxqXbxcATawJPrdA6A/iv/os+vfYrtNU4//hKsv1S6Asriv51utZDjSvM5Iw/VtN90fEUeW//oi26L+PsSWHjUIAAy8b7P5z1PN5n9p3FtX7858bWg8Iu6KiB0RcXdE7IyIeyKqde/L5zNtLa/OTjQU3zz/TK+sym7O/z7fQZBtZPO/F/K1rdXzv2L2F+NDeW57Nf6R5NiJcml/vk8mY2RTlp9p08Z3r/zyWauyibr5X7Zl7RdzwbwfV4ZrN+hGi1eOzi3NrTfuwtWPInYPN4s/WVkJSCJiV0Ts7uyfzq8wLsSJJ77a26rSv8ffRhfWmSpfRjxeO/7L0RB/IWm/Pjm9Ocql/dPFWXGzn36++EaL5kfXFX8XZMd/a9PzfyX+8aR+vXax8zYu/vppy2vKDs7/Fdn5P5q8VU0Xg+KDuaWlMzMRo8lrN78+e+O9Rb6on8U/ua/5+N8RN/bEnojITuIHIuLBiHgo7/vDEfFIROxrE/8PLz/67q3H31tZ/Ec7Ov6dJ4ZOfv9Nq/bXdvwPVlOT+Str+fxbawfXs+8AAADg/yKtPgOfpFMr6TSdmqo9w78ztqblhcWlJ48tvH/6aO1Z+fEYSYs7XWN190Nn8nvDRX62IX8gv2/8+dCWan5qfqHcqzV1YG22tRj/md+G+t07oOd8XwsGl/EPg8v4h8Fl/MPgWuv4X+5xP4Dbr9n4vxBxvQ9dAW4z838YXMY/DC7jHwaX8Q8D6Za/11/8PEqLOjsOr+cXA8qlon+3+PbuJeLvSqWh6MUOfl9g4yYibVVUyZ8b73cPu5rYvLHCyRMj+TBrUtSHDyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAe+CcAAP//Ijjhow==") [ 2778.104853][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 2778.106114][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 2778.136869][ T318] loop4: detected capacity change from 0 to 512 00:46:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x1e0c}}}, 0x24}}, 0x0) 00:46:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 00:46:18 executing program 3: bpf$BPF_BTF_LOAD(0xb, 0x0, 0x0) 00:46:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) [ 2778.154739][ T318] EXT4-fs (loop4): Ignoring removed bh option [ 2778.174854][ T318] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 2778.177146][ T318] EXT4-fs (loop4): group descriptors corrupted! 00:46:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@deltaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) [ 2778.307647][ T338] loop4: detected capacity change from 0 to 512 [ 2778.327743][ T338] EXT4-fs (loop4): Ignoring removed bh option [ 2778.329997][ T338] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 2778.332360][ T338] EXT4-fs (loop4): group descriptors corrupted! 00:46:18 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000080)) 00:46:18 executing program 5: bpf$BPF_BTF_LOAD(0x14, 0x0, 0x0) 00:46:18 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000014c0)) syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) socket(0x2b, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001640), 0xffffffffffffffff) 00:46:18 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x40000) 00:46:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r2, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x52000) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x288000c, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={0x0}}, 0x0) [ 2779.050885][ T344] loop4: detected capacity change from 0 to 512 00:46:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0xa}, 0x0) 00:46:19 executing program 1: socketpair(0x2a, 0x0, 0x0, &(0x7f0000001d00)) 00:46:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x18, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) [ 2779.114255][ T344] EXT4-fs (loop4): Ignoring removed bh option [ 2779.116135][ T344] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 2779.118591][ T344] EXT4-fs (loop4): group descriptors corrupted! 00:46:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}]}, &(0x7f00000000c0)=0x10) 00:46:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:19 executing program 1: bpf$MAP_CREATE(0xc, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:46:19 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x70, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) 00:46:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername(r0, &(0x7f0000000480), &(0x7f0000000500)=0x80) 00:46:19 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x40000) [ 2779.302496][ T374] loop4: detected capacity change from 0 to 512 [ 2779.318108][ T374] EXT4-fs (loop4): Ignoring removed bh option [ 2779.323048][ T374] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 2779.327587][ T374] EXT4-fs (loop4): group descriptors corrupted! 00:46:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x24, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) 00:46:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x10, 0x0, &(0x7f0000000b80)) 00:46:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0xf, 0x0, &(0x7f0000000b80)) 00:46:19 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8982, 0x0) 00:46:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2779.932873][ T383] loop4: detected capacity change from 0 to 512 00:46:19 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1, &(0x7f0000000180)=@raw=[@exit], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x10}, 0x80) 00:46:19 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x0) 00:46:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x10, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) 00:46:19 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000001480), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000014c0)) syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) socket(0x2b, 0x0, 0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000001640), 0xffffffffffffffff) [ 2780.000354][ T383] EXT4-fs (loop4): Ignoring removed bh option [ 2780.009250][ T383] EXT4-fs error (device loop4): __ext4_iget:4843: inode #2: block 13: comm syz-executor.4: invalid block [ 2780.016359][ T396] sctp: [Deprecated]: syz-executor.1 (pid 396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2780.016359][ T396] Use struct sctp_sack_info instead [ 2780.016823][ T383] EXT4-fs (loop4): Remounting filesystem read-only [ 2780.028788][ T383] EXT4-fs (loop4): get root inode failed [ 2780.032376][ T383] EXT4-fs (loop4): mount failed 00:46:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x0) 00:46:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x83, 0x0, &(0x7f0000000b80)) 00:46:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x10}, 0x10}}, 0x0) 00:46:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x971cfb54e954a2fb, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 00:46:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) 00:46:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x0) [ 2780.820971][ T411] loop4: detected capacity change from 0 to 512 00:46:20 executing program 1: bpf$BPF_BTF_LOAD(0x23, 0x0, 0x0) 00:46:20 executing program 3: socket$inet_sctp(0x10, 0x0, 0x84) [ 2780.858812][ T411] EXT4-fs (loop4): Ignoring removed bh option [ 2780.875833][ T411] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:46:20 executing program 5: socketpair(0x28, 0x0, 0x1, &(0x7f0000000780)) [ 2780.885798][ T411] EXT4-fs (loop4): Remounting filesystem read-only [ 2780.887150][ T411] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2780.890887][ T411] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:46:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x0) [ 2780.909965][ T411] EXT4-fs (loop4): 1 truncate cleaned up [ 2780.911955][ T411] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:20 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1a, 0x205}, 0x10) 00:46:20 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:46:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7, 0x0, &(0x7f0000000b80)) 00:46:21 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in, 0x0, 0x0, 0x20, 0x0, "1038de641af09470970187c8e804b92d5eca2044104b42a093318d33226c39fba032d2eb48626431221184593fb92520a337685de86db654d00af61eb568b426585319770ef0cc32f4c9e4ee1fb4ee70"}, 0xd8) 00:46:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x44004014) 00:46:21 executing program 2: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r0) 00:46:21 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0}}], 0x1, 0x24000845) 00:46:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x38, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}}, 0x0) [ 2781.816915][ T440] loop4: detected capacity change from 0 to 512 [ 2781.823593][ T440] EXT4-fs (loop4): Ignoring removed bh option 00:46:21 executing program 3: bpf$MAP_CREATE(0x3, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:46:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}}, 0x0) [ 2781.850627][ T440] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2781.868055][ T440] EXT4-fs (loop4): Remounting filesystem read-only [ 2781.869569][ T440] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:46:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), 0x4) 00:46:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 2781.898244][ T440] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2781.911917][ T440] EXT4-fs (loop4): 1 truncate cleaned up [ 2781.913306][ T440] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x12, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) 00:46:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000ac0), 0x4) 00:46:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7d, 0x0, &(0x7f0000000b80)) 00:46:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x1e, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) 00:46:22 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000014c0)) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 00:46:22 executing program 3: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000d80)={0x0, &(0x7f0000000c80)=""/201, 0x0, 0xc9}, 0x20) [ 2782.689493][ T471] loop4: detected capacity change from 0 to 512 [ 2782.709610][ T471] EXT4-fs (loop4): Ignoring removed bh option 00:46:22 executing program 1: socketpair(0x1, 0x80000, 0x9, &(0x7f0000000400)) 00:46:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x8}, 0x8) [ 2782.716042][ T471] EXT4-fs (loop4): bad geometry: block count 1024 exceeds size of device (256 blocks) 00:46:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=ANY=[], 0x68}, 0x0) 00:46:22 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@exit], &(0x7f0000000200)='GPL\x00', 0x6, 0xcd, &(0x7f0000000240)=""/205, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:23 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) 00:46:23 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8901, &(0x7f0000000000)={r1}) 00:46:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000780), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14}, 0x14}}, 0x0) 00:46:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0xf5, 0x6, 0x0, 0x1}, 0x48) [ 2783.563299][ T494] loop4: detected capacity change from 0 to 512 00:46:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x8}}}, 0x24}}, 0x0) 00:46:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:46:23 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x2041, 0x0, 0x0) [ 2783.592927][ T494] EXT4-fs (loop4): Ignoring removed bh option 00:46:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) [ 2783.648034][ T494] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2783.652465][ T494] EXT4-fs (loop4): Remounting filesystem read-only [ 2783.657716][ T494] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2783.664608][ T494] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2783.668015][ T494] EXT4-fs (loop4): 1 truncate cleaned up [ 2783.669302][ T494] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0xa, 0x0, &(0x7f0000000b80)) 00:46:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14}, 0x14}}, 0x0) 00:46:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) 00:46:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x40012000, 0x0) 00:46:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x0, 0x0, 0x0, 0x0, 0x74, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) [ 2783.956543][ T525] loop4: detected capacity change from 0 to 512 [ 2783.964157][ T525] EXT4-fs (loop4): Ignoring removed bh option [ 2783.970481][ T525] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2783.980816][ T525] EXT4-fs (loop4): Remounting filesystem read-only [ 2783.982385][ T525] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2783.988529][ T525] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2783.992160][ T525] EXT4-fs (loop4): 1 truncate cleaned up [ 2783.993543][ T525] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan4\x00'}) 00:46:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x13, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) 00:46:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000003c0)=0xfff, 0x4) 00:46:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x72, 0x0, &(0x7f0000000b80)) 00:46:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x9, 0xf7, 0x8, 0x1}, 0x48) 00:46:24 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x32) [ 2784.467369][ T536] loop4: detected capacity change from 0 to 512 [ 2784.487634][ T536] EXT4-fs (loop4): Ignoring removed bh option 00:46:24 executing program 5: bpf$BPF_BTF_LOAD(0x7, &(0x7f0000000d80)={0x0, &(0x7f0000000c80)=""/201, 0x0, 0xc9}, 0x20) [ 2784.511815][ T536] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2784.534350][ T536] EXT4-fs (loop4): Remounting filesystem read-only 00:46:24 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000080)='v', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) 00:46:24 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan0\x00'}) [ 2784.551406][ T536] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:46:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x9, 0x0, &(0x7f0000000b80)) [ 2784.610790][ T536] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2784.621901][ T536] EXT4-fs (loop4): 1 truncate cleaned up [ 2784.623274][ T536] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:24 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000340)) 00:46:24 executing program 2: bpf$BPF_BTF_LOAD(0x1a, 0x0, 0x0) 00:46:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x9, 0xf7, 0x4, 0x1}, 0x48) 00:46:25 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0}}], 0x1, 0x0) 00:46:25 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e2, &(0x7f0000000000)) 00:46:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000000280)=0x18) [ 2785.313370][ T564] loop4: detected capacity change from 0 to 512 [ 2785.345075][ T564] EXT4-fs (loop4): Ignoring removed bh option 00:46:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) 00:46:25 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) 00:46:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:46:25 executing program 5: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000700)='tasks\x00', 0x2, 0x0) [ 2785.366075][ T564] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2785.369356][ T564] EXT4-fs (loop4): Remounting filesystem read-only [ 2785.370669][ T564] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2785.380440][ T564] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2785.402890][ T564] EXT4-fs (loop4): 1 truncate cleaned up [ 2785.404234][ T564] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvbh59/fpLKOXRB2AoiIhH0qQFKsEBEEg9gIQEh3IMqVuVug1qgkSrigaEyhFV4o44IvEXcIILAk5IXOGOKlWoFwoSktHau6nj2iZu7Brqz0faesYz7sx3dyeZ3dk4gKFVyv5JIiYi4ueovybNFUr1l2tXzy/8cfX8QhLV6uu/JbV6v189v1BULT63Lc9MpRHpR0nsadHu0tlzJ+crlfKZPD+zfOqdmaWz5548cWr+ePl4+fTcoUMHD8w+8/TcUz2Jc3vW193vL+7ddfjNS68uHLn01vdfZv39X17eGEevlKK0dl82eKTXjQ3Y9oZ0MjrAjtCVkYjIDtdYbfxPxEhcP3gT8fKHA+0c0FfVarW6qX3xShW4jSUx6B4Ag1H8os+uf4vtFk09/hWuvFC/AMrivpZv9ZLRSPM6Y03Xt710b0QcWfnzs2yLxvsQW/rUIAAw9L7O5j9PtJr/pXF3Q73/52tDkxFxR0TsiIg7I2JnRNwVUat7Tz6f6WhlbbbUVHzj/DO9vCa7OX99tosgO8jmf8/la1tr53/F7C8mR/Lc9lr8Y8mxE5Xy/nyfTMXYpiw/26GNb1766ZN2ZaWG+V+2Ze0Xc8G8H5dH6zfoxot3js4vz2807sKVDyJ2j7aKP1ldCUgiYldE7O7uv86vMC7Eice+2Nuu0j/H30EP1pmqn0c8Wj/+K9EUfyHpvD45szkq5f0zxVlxox9+vPham+bHNxR/D2THf2vL8381/smkcb12qfs2Lv7ycdtryi7O/1XZ+T+evFFLF4Pivfnl5TOzEePJKze+P3f9s0W+qJ/FP7Wv9fjfEdf3xJ6IyE7i+yLi/oh4IO/7gxHxUETs6xD/dy8+/PbNx99fWfxHuzr+3SdGTn77Vbv213f8D9ZSU/k76/n5t94ObmTfAQAAwH9FWnsGPkmnV9NpOj1df4Z/Z2xNK4tLy48fW3z39NH6s/KTMZYWd7omGu6Hzub3hov8XFP+QH7f+NORLbX89MJipV9r6sD6bGsz/jO/jgy6d0Df+XstGF7GPwwv4x+Gl/EPw2u943+lz/0Abr1W4/9CxLUBdAW4xcz/YXgZ/zC8jH8YXsY/DKWb/rv+4utR2tTZcXgj3xhQKRf9u8mP9y4Rf1WrTUXPd/H9ArdvItJ2RdX8ufFB97Cnic23Vzh5YiwfZi2KBvDDCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA/+DgAA//8l8+Gi") 00:46:25 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000080)='v', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @private}, 0x7ffffffff000) 00:46:25 executing program 2: socketpair(0x25, 0x1, 0x8001, &(0x7f0000000000)) 00:46:25 executing program 2: r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 00:46:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}, 0x0) 00:46:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @private}], 0x10) [ 2785.572989][ T589] loop4: detected capacity change from 0 to 512 [ 2785.584328][ T589] EXT4-fs (loop4): Ignoring removed bh option [ 2785.609111][ T589] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2785.620023][ T589] EXT4-fs (loop4): Remounting filesystem read-only [ 2785.632256][ T589] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2785.652128][ T589] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2785.671840][ T589] EXT4-fs (loop4): 1 truncate cleaned up [ 2785.673202][ T589] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:26 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x4) 00:46:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x1b, &(0x7f0000000b40), &(0x7f0000000b80)=0x8) 00:46:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x75, 0x0, &(0x7f0000000b80)) 00:46:26 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x4800, 0x0, &(0x7f0000000100)={0x2, 0x0, @private}, 0x10) 00:46:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x140f, 0x0, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x28}}, 0x0) 00:46:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000280)=0xfffffffa, 0x4) [ 2786.272254][ T607] loop4: detected capacity change from 0 to 512 [ 2786.291207][ T607] EXT4-fs (loop4): Ignoring removed bh option 00:46:26 executing program 5: bpf$MAP_CREATE(0x8, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:46:26 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x41d9010, r0, 0x0) [ 2786.312238][ T607] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2786.318779][ T607] EXT4-fs (loop4): Remounting filesystem read-only [ 2786.321449][ T607] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2786.329882][ T607] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2786.333460][ T607] EXT4-fs (loop4): 1 truncate cleaned up [ 2786.339227][ T607] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000005c0)=@generic) 00:46:26 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) 00:46:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:27 executing program 5: mlock(&(0x7f0000ff4000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/174) 00:46:27 executing program 1: add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 00:46:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0) 00:46:27 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @multicast2, 0xe, 0x8}}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000180)=@raw=[@exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x200, 0xc, &(0x7f0000000200)=""/12, 0x41000, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x1, 0x8, 0x5bc3}, 0x10}, 0x80) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000380)=""/118, 0x76}], 0x2, 0x5, 0x7) 00:46:27 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1, &(0x7f0000000180)=@raw=[@exit], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) 00:46:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2787.202739][ T634] loop4: detected capacity change from 0 to 512 00:46:27 executing program 3: bpf$BPF_BTF_LOAD(0x1e, &(0x7f0000000d80)={0x0, &(0x7f0000000c80)=""/201, 0x0, 0xc9}, 0x20) [ 2787.259385][ T634] EXT4-fs (loop4): Ignoring removed bh option 00:46:27 executing program 1: bpf$MAP_CREATE(0x2, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:46:27 executing program 2: bpf$MAP_CREATE(0x13, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 2787.287600][ T634] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2787.312480][ T634] EXT4-fs (loop4): Remounting filesystem read-only [ 2787.336612][ T634] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2787.361077][ T634] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2787.397062][ T634] EXT4-fs (loop4): 1 truncate cleaned up [ 2787.406658][ T634] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:28 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000180)=@raw=[@exit, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x200, 0xc, &(0x7f0000000200)=""/12, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 00:46:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 00:46:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x971cfb54e954a2fb, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x6}}}, 0x24}}, 0x0) 00:46:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x3, &(0x7f0000000800)=@framed, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:46:28 executing program 5: bpf$BPF_BTF_LOAD(0x4, 0x0, 0x0) [ 2788.085129][ T659] loop4: detected capacity change from 0 to 512 [ 2788.091481][ T659] EXT4-fs (loop4): Ignoring removed bh option 00:46:28 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x5, 0x0, 0x0) [ 2788.137905][ T659] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2788.141902][ T659] EXT4-fs (loop4): Remounting filesystem read-only [ 2788.143459][ T659] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2788.147454][ T659] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2788.175426][ T659] EXT4-fs (loop4): 1 truncate cleaned up [ 2788.178702][ T659] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:28 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, 0x0) 00:46:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x84, 0x0, &(0x7f0000000b80)) 00:46:28 executing program 2: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000008c0), 0x10) 00:46:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@hoplimit={{0x14}}], 0x18}, 0x0) 00:46:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12}, 0xb) 00:46:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:28 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000080)=0x1200, 0x4) 00:46:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 00:46:28 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000002c0), 0x1) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) 00:46:28 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) [ 2788.990697][ T690] loop4: detected capacity change from 0 to 512 00:46:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) 00:46:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) [ 2789.005434][ T690] EXT4-fs (loop4): Ignoring removed bh option [ 2789.011860][ T690] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2789.020693][ T690] EXT4-fs (loop4): Remounting filesystem read-only [ 2789.023324][ T690] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2789.030327][ T690] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:46:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x0, 0x0, 0xffffb4b6}, 0x48) [ 2789.085110][ T690] EXT4-fs (loop4): 1 truncate cleaned up [ 2789.086339][ T690] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:29 executing program 2: socket$inet6(0x2, 0x3, 0x60) 00:46:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:29 executing program 3: socket$inet6(0x2, 0x1, 0x0) 00:46:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x5}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:29 executing program 2: syz_emit_ethernet(0x20000f94, &(0x7f0000000f80)={@dev, @multicast, @val={@void}, {@generic={0x0, "e8bb"}}}, 0x0) [ 2789.252515][ T712] loop4: detected capacity change from 0 to 512 [ 2789.279400][ T712] EXT4-fs (loop4): Ignoring removed bh option [ 2789.293627][ T712] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2789.302833][ T712] EXT4-fs (loop4): Remounting filesystem read-only [ 2789.306860][ T712] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2789.320922][ T712] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2789.328431][ T712] EXT4-fs (loop4): 1 truncate cleaned up [ 2789.329729][ T712] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000280), 0x4) 00:46:29 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x185, 0xa2, &(0x7f0000000100)=""/162, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x13, 0x0, &(0x7f0000000b80)) 00:46:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0"], 0x4c}}, 0x0) 00:46:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH70lzWx1h/9oa62YvBH0qRVC3pQUehBQdBDPcZ0W2q3jTQRbCk2itSjFLyLR8G/wJNeRD0JXvUuhSK9WAVhZXZn0k26u2ab3a5mPx+Y5r19b/ved2Ze8mbe7AYwsErZP0nE/oj4JSLG6tmVFUr1H9evXZj789qFuSSq1Td+T2r1/rh2Ya6oWrxvW56ZSCPSj5PY06TdhXPnT81WKuWzeX5q8fS7Uwvnzj918vTsifKJ8pmZw4cPHZx+9pmZp7sS5/asr7s/mN+768hbl1+bO3r57R++yvp7R17eGEe3lKK0cl82eLTbjfXZ9oZ0MtzHjtCRoYjIDtdIbfyPxVDcOHhj8cpHfe0c0FPVarW6qXXxUhXYwJLodw+A/ij+0GfXv8V2m6Ye/wlXX6xfAGVxX8+3eslwpHmdkVXXt910f0QcXfrr82yLxvsQW3rUIAAw8L7J5j9PNpv/pXFvQ70787Wh8Yi4KyJ2RMTdEbEzIu6JqNW9L5/PtLW0MltaVXzz/DO9siK7Of/5XAdBtpHN/57P17ZWzv+K2V+MD+W57bX4R5LjJyvlA/k+mYiRTVl+uk0b377886etykoN879sy9ov5oJ5P64M12/QjRavHJtdnF1v3IWrH0bsHm4Wf7K8EpBExK6I2N3Zf51fYVyMk49/ubdVpX+Pv40urDNVv4h4rH78l2JV/IWk/frk1OaolA9MFWfFzX786dLrLZofXVf8XZAd/61Nz//l+MeTxvXahc7buPTrJy2vKTs4/5dl5/9o8mYtXQyK92cXF89OR4wmr978+syN9xb5on4W/8S+5uN/R9zYE3siIjuJH4iIByPiobzvD0fEIxGxr03837+0/51bj7+3sviPdXT8O08Mnfru61btr+34H6qlJvJX1vL7b60dXM++AwAAgP+LtPYMfJJOLqfTdHKy/gz/ztiaVuYXFp84Pv/emWP1Z+XHYyQt7nSNNdwPnc7vDRf5mVX5g/l948+GttTyk3PzlV6tqQNrs63F+M/8NtTv3gE95/NaMLiMfxhcxj8MLuMfBtdax/9Sj/sB3H7Nxv/FiOt96Apwm5n/w+Ay/mFwGf8wuIx/GEi3/Ln+4utRWtTZcWQ93xhQKRf9u8W3dy8Rf1erq4pe6OD7BTZuItJWRdX8ufF+97Cric0bK5w8MZIPsyZFffhlBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0AP/BAAA///WKOG3") [ 2789.884825][ T725] loop4: detected capacity change from 0 to 512 00:46:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:29 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:29 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[], 0x0) 00:46:29 executing program 2: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8995, &(0x7f0000000180)={'wg2\x00'}) [ 2789.931337][ T725] EXT4-fs (loop4): Ignoring removed bh option 00:46:29 executing program 1: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8932, &(0x7f0000000180)={'wg2\x00'}) [ 2789.956011][ T725] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2789.974165][ T725] EXT4-fs (loop4): Remounting filesystem read-only 00:46:29 executing program 2: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890b, &(0x7f0000000180)={'wg2\x00'}) [ 2790.035595][ T725] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2790.059151][ T725] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2790.090373][ T725] EXT4-fs (loop4): 1 truncate cleaned up [ 2790.091773][ T725] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:30 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd609ec83d00203a00fe59c2578f5d05903551d53bc3b4fb800000000000000000005c"], 0x0) 00:46:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) 00:46:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000240003"], 0x4c}}, 0x0) 00:46:30 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd609ec83d002004"], 0x0) 00:46:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:30 executing program 2: pselect6(0xa4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) [ 2790.796680][ T754] loop4: detected capacity change from 0 to 512 00:46:30 executing program 1: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x891a, &(0x7f0000000180)={'wg2\x00'}) 00:46:30 executing program 5: syz_emit_ethernet(0x11, &(0x7f0000000080)={@empty, @broadcast, @void, {@x25}}, 0x0) [ 2790.823243][ T754] EXT4-fs (loop4): Ignoring removed bh option 00:46:30 executing program 3: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8934, 0x0) [ 2790.852506][ T754] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2791.210692][ T754] EXT4-fs (loop4): Remounting filesystem read-only [ 2791.212638][ T754] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2791.239039][ T754] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2791.268563][ T754] EXT4-fs (loop4): 1 truncate cleaned up [ 2791.284999][ T754] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x3c, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}}, 0x0) 00:46:31 executing program 1: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8917, &(0x7f0000000180)={'wg2\x00'}) [ 2791.400698][ T774] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 00:46:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:31 executing program 3: syz_emit_ethernet(0x11a, &(0x7f00000000c0)={@empty, @dev, @val={@void}, {@ipv4={0x800, @gre={{0x31, 0x4, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@multicast1}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@local}, {@multicast1}, {@empty}, {@remote}, {@empty}]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@local}]}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@broadcast}, {@multicast2}, {@loopback}]}, @ssrr={0x89, 0x17, 0x0, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0x1f, 0x0, [@local, @private, @rand_addr, @dev, @multicast2, @empty, @local]}, @timestamp={0x44, 0x4}]}}}}}}, 0x0) 00:46:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)={0x80, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x58}]}, 0x80}}, 0x0) 00:46:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@cb_func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x9903, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2791.586067][ T787] loop4: detected capacity change from 0 to 512 [ 2791.595465][ T787] EXT4-fs (loop4): Ignoring removed bh option [ 2791.673209][ T787] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2791.942585][ T787] EXT4-fs (loop4): Remounting filesystem read-only [ 2791.952710][ T787] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2792.002736][ T787] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2792.007034][ T787] EXT4-fs (loop4): 1 truncate cleaned up [ 2792.008639][ T787] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:32 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="bb"], 0x0) 00:46:32 executing program 3: r0 = socket$inet6(0x2, 0x1, 0x0) close(r0) 00:46:32 executing program 5: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8931, &(0x7f0000000180)={'wg2\x00'}) 00:46:32 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b7984d", 0x10, 0x3a, 0x0, @local, @private2, {[], @ndisc_ra}}}}}, 0x0) 00:46:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:32 executing program 2: r0 = socket$inet6(0x2, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 00:46:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001900)=""/169, 0xa9}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003bc0)=""/136, 0x88}], 0x5, &(0x7f0000003d00)=""/232, 0xe8}, 0x2}], 0x6, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:32 executing program 2: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89b1, &(0x7f0000000180)={'wg2\x00'}) [ 2792.321835][ T810] loop4: detected capacity change from 0 to 512 00:46:32 executing program 1: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x890c, &(0x7f0000000180)={'wg2\x00'}) [ 2792.349023][ T810] EXT4-fs (loop4): Ignoring removed bh option 00:46:32 executing program 3: mq_unlink(&(0x7f0000000000)='\xf8\x9b\xab\xc34\xad\xcf4\x94\xb1\x9bc\xb71~NJ\xe2t\xc7_\xeef-h\xd7\xc2\xad\x95Xb=\xeerSx\x16}3#\x9f\xa8sm\xedK\x17j\xa7{\x8aj\"\xc3\xae\xe9)\xdaAv\x01\x90\x90\x9c\xf3!D~\xc2.,\x8er6\x03\xd2\x85\xe8\x14b{G\xa9\xad;\x86,v\x19\xce\xa3m\xfd\x1a\x8f\xbf\xd9\x01\a\x00\x00\x00\x93\xf6\x8fe\xe3p|\v\xf3$\xfa\x8df\x06\xe9\x80\x9a@\xd0\xe1\xaez\xe9\xfdJ\xeb\x17\x90\x99\x02\x17\\\n\xa0<8\xc4\xbd^\bm_x*\x9e \xa9\x10]\xfa)\xdb\xe8\x13\x9dG@\x0e \xe3\x93\x90\rOG\x0f\x02N\xc1Z\x17h@_\x10!') 00:46:33 executing program 5: io_setup(0x101, &(0x7f0000000140)) [ 2793.195591][ T810] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:46:33 executing program 2: syz_emit_ethernet(0x1e, &(0x7f0000000040)={@broadcast, @multicast, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "bba834a92f9837a3"}}}}, 0x0) 00:46:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:33 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd609ec83d02"], 0x0) [ 2793.214221][ T810] EXT4-fs (loop4): Remounting filesystem read-only [ 2793.220150][ T810] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:46:33 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@empty, @dev, @val={@void}, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty, {[@ssrr={0x89, 0x3}, @timestamp={0x44, 0x4}, @generic={0x0, 0x2}]}}}}}}, 0x0) 00:46:33 executing program 2: r0 = socket$inet6(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8930, &(0x7f0000000180)={'wg2\x00'}) [ 2793.244038][ T810] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2793.271167][ T810] EXT4-fs (loop4): 1 truncate cleaned up [ 2793.280968][ T810] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev}, @in={0x2, 0x4e22, @remote}], 0x20) 00:46:33 executing program 1: bpf$MAP_CREATE(0x16, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:46:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH70lzWx1h/9oa5WMfgjadKqBRVUFHpQEPRQjzHdltptI00EW4qNIvUoBe/iUfAv8KQXUU+CV71LoUgvVkFYmd2ZdJPurtlmt6vZzwemeW/f2773nZmXvJk3uwEMrFL2TxLxfET8EhFj9ezKCqX6j2tXz8/9efX8XBLV6hu/J7V6f1w9P1dULd63Lc9MpBHpx0nsadLuwtlzJ2crlfKZPD+1eOrdqYWz5548cWr2ePl4+fTMoUMHD0w/8/TMU12Jc3vW190fzO/ddfitS6/NHbn09g9fZf29LS9vjKNbSlFauS8bPNLtxvpse0M6Ge5jR+jIUERkh2ukNv7HYiiuH7yxeOWjvnYO6KlqtVrd1Lp4qQpsYEn0uwdAfxR/6LPr32K7RVOP/4QrL9YvgLK4r+VbvWQ40rzOyKrr2266NyKOLP31ebZF432ILT1qEAAYeN9k858nms3/0ri7od7t+drQeETcERE7IuLOiNgZEXdF1Orek89n2lpamS2tKr5x/pleXpHdnP98toMg28jmf8/la1sr53/F7C/Gh/Lc9lr8I8mxE5Xy/nyfTMTIpiw/3aaNb1/++dNWZaWG+V+2Ze0Xc8G8H5eH6zfoRotXjs4uzq437sKVDyN2DzeLP1leCUgiYldE7O7sv86vMC7Eice+3Nuq0r/H30YX1pmqX0Q8Wj/+S7Eq/kLSfn1yanNUyvunirPiRj/+dPH1Fs2Priv+LsiO/9am5/9y/ONJ43rtQudtXPz1k5bXlB2c/8uy8380ebOWLgbF+7OLi2emI0aTV298feb6e4t8UT+Lf2Jf8/G/I67viT0RkZ3E90XE/RHxQN73ByPioYjY1yb+7196+J2bj7+3sviPdnT8O08Mnfzu61btr+34H6ylJvJX1vL7b60dXM++AwAAgP+LtPYMfJJOLqfTdHKy/gz/ztiaVuYXFh8/Nv/e6aP1Z+XHYyQt7nSNNdwPnc7vDRf5mVX5A/l948+GttTyk3PzlV6tqQNrs63F+M/8NtTv3gE95/NaMLiMfxhcxj8MLuMfBtdax/9Sj/sB3HrNxv+FiGt96Apwi5n/w+Ay/mFwGf8wuIx/GEg3/bn+4utRWtTZcXg93xhQKRf9u8m3dy8Rf1erq4pe6OD7BTZuItJWRdX8ufF+97Cric0bK5w8MZIPsyZFffhlBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0AP/BAAA//93POHQ") 00:46:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 00:46:33 executing program 5: syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd609ec83d0020"], 0x0) 00:46:33 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040), 0xec8, 0x0) 00:46:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 00:46:33 executing program 1: fspick(0xffffffffffffffff, 0x0, 0x7) [ 2794.037093][ T851] loop4: detected capacity change from 0 to 512 [ 2794.048516][ T851] EXT4-fs (loop4): Ignoring removed bh option 00:46:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/snd_usb_audio', 0x200100, 0x0) 00:46:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:34 executing program 1: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x1, 0x1800}], 0x1, &(0x7f0000000080)) 00:46:34 executing program 5: pipe2(0x0, 0x100000) [ 2794.929499][ T851] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:46:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 2794.963776][ T851] EXT4-fs (loop4): Remounting filesystem read-only [ 2794.968198][ T851] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2794.989763][ T851] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2795.016005][ T851] EXT4-fs (loop4): 1 truncate cleaned up [ 2795.064287][ T851] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:35 executing program 1: sched_rr_get_interval(0x0, &(0x7f0000000300)) 00:46:35 executing program 3: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000140)=""/45) 00:46:35 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)=':\x00', &(0x7f0000000080)="da", 0x1) 00:46:35 executing program 2: io_setup(0x3ff, &(0x7f0000000a00)=0x0) io_cancel(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:46:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH70lzWx1h/9oa5WMfgjadKqBUVUFHpQEPRQjzHdltptI00EW4qNIvUoBe/iUfAv8KQXUU+CV71LoUgvVkFYmd2ZdJPurtlmt6vZzwemeW/f2773nZmXvJk3uwEMrFL2TxLxfET8EhFj9ezKCqX6j2tXz8/9efX8XBLV6hu/J7V6f1w9P1dULd63Lc9MpBHpx0nsadLuwtlzJ2crlfKZPD+1eOrdqYWz5548cWr2ePl4+fTMoUMHD0w/8/TMU12Jc3vW190fzO/ddfitS6/NHbn09g9fZf29LS9vjKNbSlFauS8bPNLtxvpse0M6Ge5jR+jIUERkh2ukNv7HYiiuH7yxeOWjvnYO6KlqtVrd1Lp4qQpsYEn0uwdAfxR/6LPr32K7RVOP/4QrL9YvgLK4r+VbvWQ40rzOyKrr2266NyKOLP31ebZF432ILT1qEAAYeN9k858nms3/0ri7od7t+drQeETcERE7IuLOiNgZEXdF1Orek89n2lpamS2tKr5x/pleXpHdnP98toMg28jmf8/la1sr53/F7C/Gh/Lc9lr8I8mxE5Xy/nyfTMTIpiw/3aaNb1/++dNWZaWG+V+2Ze0Xc8G8H5eH6zfoRotXjs4uzq437sKVDyN2DzeLP1leCUgiYldE7O7sv86vMC7Eice+3Nuq0r/H30YX1pmqX0Q8Wj/+S7Eq/kLSfn1yanNUyvunirPiRj/+dPH1Fs2Priv+LsiO/9am5/9y/ONJ43rtQudtXPz1k5bXlB2c/8uy8380ebOWLgbF+7OLi2emI0aTV298feb6e4t8UT+Lf2Jf8/G/I67viT0RkZ3E90XE/RHxQN73ByPioYjY1yb+7196+J2bj7+3sviPdnT8O08Mnfzu61btr+34H6ylJvJX1vL7b60dXM++AwAAgP+LtPYMfJJOLqfTdHKy/gz/ztiaVuYXFh8/Nv/e6aP1Z+XHYyQt7nSNNdwPnc7vDRf5mVX5A/l948+GttTyk3PzlV6tqQNrs63F+M/8NtTv3gE95/NaMLiMfxhcxj8MLuMfBtdax/9Sj/sB3HrNxv+FiGt96Apwi5n/w+Ay/mFwGf8wuIx/GEg3/bn+4utRWtTZcXg93xhQKRf9u8m3dy8Rf1erq4pe6OD7BTZuItJWRdX8ufF+97Cric0bK5w8MZIPsyZFffhlBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0AP/BAAA//9zcOHR") 00:46:35 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000800)) 00:46:35 executing program 3: mmap$usbmon(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8) 00:46:35 executing program 5: add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 00:46:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}, {{&(0x7f0000001680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)}], 0x1, &(0x7f0000001780)=""/248, 0xf8}, 0x8001}], 0x5, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:35 executing program 1: add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) 00:46:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[], 0x4bc}}, 0x0) 00:46:35 executing program 2: msgget$private(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) io_setup(0x4, &(0x7f00000005c0)=0x0) io_cancel(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x6, &(0x7f00000006c0)) io_destroy(r0) [ 2796.555234][ T903] loop4: detected capacity change from 0 to 512 00:46:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}, {{&(0x7f0000001380)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/72, 0x48}, {&(0x7f0000001480)=""/213, 0xd5}], 0x2, &(0x7f0000001640)=""/28, 0x1c}, 0x9}], 0x4, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:36 executing program 5: syz_open_dev$vcsa(&(0x7f0000005540), 0x0, 0x400001) [ 2796.594116][ T903] EXT4-fs (loop4): Ignoring removed bh option [ 2796.616177][ T903] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2796.622077][ T903] EXT4-fs (loop4): Remounting filesystem read-only [ 2796.623718][ T903] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:46:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) 00:46:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000740)={&(0x7f0000000180), 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) [ 2796.672706][ T903] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2796.679869][ T903] EXT4-fs (loop4): 1 truncate cleaned up [ 2796.681560][ T903] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:36 executing program 5: semop(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1) 00:46:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0xc0) 00:46:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:37 executing program 3: memfd_create(&(0x7f0000000180)='nl80211\x00', 0x4) 00:46:37 executing program 2: pipe2(0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x180000) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000001140), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000001280), 0xffffffffffffffff) 00:46:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x89e2, 0x0) 00:46:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @broadcast}}}], 0x20}, 0x0) 00:46:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x3f}]}) 00:46:37 executing program 3: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0), 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 00:46:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) 00:46:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:38 executing program 1: pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000040)={0xc3, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}}, 0xa0) 00:46:38 executing program 3: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x410080) 00:46:38 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_magicmouse', 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x21, 0x0, 0x0, &(0x7f00000004c0)) syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) [ 2798.175574][ T958] loop4: detected capacity change from 0 to 512 [ 2798.214078][ T958] EXT4-fs (loop4): Ignoring removed bh option [ 2798.281319][ T958] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2798.285712][ T958] EXT4-fs (loop4): Remounting filesystem read-only [ 2798.294686][ T958] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2798.322867][ T958] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:46:38 executing program 2: semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0x1, 0x1800}, {}], 0x2, &(0x7f0000000080)) 00:46:38 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x3bb720ff8aff5195) 00:46:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:38 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x100000001) [ 2798.343226][ T958] EXT4-fs (loop4): 1 truncate cleaned up [ 2798.344695][ T958] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:38 executing program 2: clock_getres(0x0, &(0x7f0000000100)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) io_setup(0x4, &(0x7f00000005c0)) io_setup(0x6, &(0x7f00000006c0)) 00:46:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_page_scan_activity={{0xc1c, 0x4}}}, 0x8) 00:46:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:38 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:46:38 executing program 5: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) 00:46:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/81, 0x51}, {&(0x7f0000001180)=""/194, 0xc2}], 0x2, &(0x7f0000001300)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:39 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/block/loop0', 0x80840, 0x0) 00:46:39 executing program 5: add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='Q', 0x1, 0xfffffffffffffff9) 00:46:39 executing program 3: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xf0ffffff7f0000) [ 2799.350874][ T994] loop4: detected capacity change from 0 to 512 [ 2799.358860][ T994] EXT4-fs (loop4): Ignoring removed bh option 00:46:39 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) syz_usbip_server_init(0x0) 00:46:40 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f0000000740)) 00:46:40 executing program 5: r0 = bpf$ITER_CREATE(0x3, 0x0, 0x0) sendmsg$TIPC_NL_NET_GET(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000010201"], 0x11c}}, 0x0) 00:46:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}], 0x2, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:40 executing program 1: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xfeffffff, 0xc1033, 0xffffffffffffffff, 0x0) [ 2800.225895][ T1009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2800.229046][ T994] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2800.248713][ T1016] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2800.250893][ T994] EXT4-fs (loop4): Remounting filesystem read-only [ 2800.252323][ T994] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2800.802952][ T994] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2801.104341][ T994] EXT4-fs (loop4): 1 truncate cleaned up [ 2801.105646][ T994] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x28}}, 0x0) 00:46:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891e, &(0x7f0000000680)={'gretap0\x00', 0x0}) 00:46:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}], 0x2, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x401c5820, 0x0) 00:46:41 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:46:41 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x208c80, 0x0) close(r0) 00:46:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:41 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_clone(0x50000080, &(0x7f0000000000)="e0", 0x1, &(0x7f00000000c0), 0x0, &(0x7f0000000140)="f062655d2a7c1c9078c481b8d037638cb5e439a7e87cde616081ac1b62af21fdd0b631c8cc51e85ec6face1e62aaddb3bdbece32b9b4e54a9197cf09ff43cdebc6de2f18e8ef3c60b773ccae58527f008290b5a4d6b40ec8e679cbaf254ab3374132c7bbcdc6c08fa9a95f77418465aeda38151d5d519aefdd1f56baea8b4e1096f185c39ff35ab7f9") 00:46:41 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) 00:46:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) [ 2801.672909][ T1045] loop4: detected capacity change from 0 to 512 00:46:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8929, &(0x7f0000000680)={'gretap0\x00', 0x0}) [ 2801.721362][ T1045] EXT4-fs (loop4): Ignoring removed bh option 00:46:41 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local, {[@ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2801.766657][ T1045] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2801.804649][ T1045] EXT4-fs (loop4): Remounting filesystem read-only [ 2801.822203][ T1045] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2801.853003][ T1045] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:46:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}], 0x2, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2801.879390][ T1045] EXT4-fs (loop4): 1 truncate cleaned up [ 2801.888901][ T1045] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:41 executing program 5: syz_emit_ethernet(0x12, &(0x7f0000000f80)={@dev, @multicast, @val={@void, {0x8035}}}, 0x0) 00:46:41 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd609ec83d00203a00fe8000000000000000000000000000000000000000aa"], 0x0) 00:46:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH70lzWx1h/9oUarGPyRNGnVgh5UFHpQEPRQjzFNS+22kSaCLcVGkXqUgnfxKPgXeNKLqCfBa71LoUgvVkEYmd2ZdJPurtlmt6vZzwemeW/f2773nZmXvJk3uwH0rbH8nyQiy7ILlyNipJZdWWGs9uP6tfOzf147P5tElr35e1Kt98e187Nl1fJ924rMeBqRfpLEngbtLpw9d3KmUpk7U+QnF0+9N7lw9tzTJ07NHJ87Pnd6+tChgwemnnt2+pmOxLk97+vuD+f37jr89qXXZ49ceufHr/P+3lGU18fRKWMxtnJf1nms04312Pa6dDLYw47QloGIyA/XUERcjpEYiBsHbyRe/binnQO6KsuybFPz4qUM2MCS6HUPgN4o/9Dn17/ldpumHv8JV1+qXQDlcV8vtlrJYKRFnaFV17eddH9EHFn664t8i/r7EFu61CAA0Pe+zec/TzWa/6Vxb129O4u1odGIuCsidkTE3RGxMyLuiajWva+Yz7S0tDI7tqr45vlnemVFdnPx8/k2gmwhn/+9UKxtrZz/lbO/GB0octur8Q8lx05U5vYX+2Q8hjbl+akWbXz3yi+fNSsbq5v/5VvefjkXLPpxZbB2g264fOXozOLMeuMuXf0oYvdgo/iT5ZWAJCJ2RcTu9v7r4grjQpx44qu9zSr9e/wtdGCdKfsy4vHa8V+KVfGXktbrk5ObozK3f7I8K272088X32jS/PC64u+A/PhvbXj+L8c/mtSv1y6038bFXz9tek3Zxvm/LD//h5O3qulyUHwws7h4ZipiOHnt5tenb7y3zJf18/jH9zUe/zvixp7YExH5SfxARDwYEQ8VfX84Ih6JiH0t4v/h5UffvfX4uyuP/2hbx7/9xMDJ779p1v7ajv/Bamq8eGUtv//W2sH17DsAAAD4v0irz8An6cRyOk0nJmrP8O+MrWllfmHxyWPz758+WntWfjSG0vJO10jd/dCp4t5wmZ9elT9Q3Df+fGBLNT8xO1/p1po6sDbbmoz/3G8Dve4d0HU+rwX9y/iH/mX8Q/8y/qF/rXX8L3W5H8Dt12j8X4i43oOuALeZ+T/0L+Mf+pfxD/3L+Ie+dMuf6y+/HqVJnR2H1/ONAZW5sn+3+PbOJeLvLFtV9GIb3y+wcRORNivKiufGe93DjiY2b6xwisRQMcwaFPXglxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAX/BMAAP//HtrlDw==") 00:46:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2802.812141][ T1070] loop4: detected capacity change from 0 to 512 00:46:42 executing program 5: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x7fff, 0x0) 00:46:42 executing program 3: syz_clone(0x44082000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:42 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000100200001, 0xffffffffffffffff}) [ 2802.839938][ T1070] EXT4-fs (loop4): Ignoring removed bh option 00:46:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd}, 0x48) 00:46:42 executing program 5: r0 = socket(0x11, 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 2802.921437][ T1070] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2802.925388][ T1070] EXT4-fs (loop4): Remounting filesystem read-only [ 2802.927589][ T1070] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2802.941293][ T1070] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2802.958282][ T1070] EXT4-fs (loop4): 1 truncate cleaned up [ 2802.959532][ T1070] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:42 executing program 1: socket$inet_sctp(0x2, 0x0, 0x84) syz_usb_connect$cdc_ecm(0x2, 0x52, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@obex={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff}) 00:46:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) 00:46:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x400, @any, 0x0, 0x2}, 0xe) 00:46:43 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x0, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) [ 2803.925488][ T1098] udc-core: couldn't find an available UDC or it's busy [ 2803.926852][ T1098] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 00:46:43 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) read$FUSE(r0, 0x0, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) [ 2803.964615][ T1102] udc-core: couldn't find an available UDC or it's busy [ 2803.972566][ T1102] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 00:46:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, 0x0}, 0x7f}], 0x3, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:44 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0, 0x2100}], 0x1, &(0x7f0000000200)={0x0, r1+10000000}, &(0x7f0000000240)={[0x8]}, 0x8) [ 2804.876694][ T1115] loop4: detected capacity change from 0 to 512 [ 2805.704113][ T1115] EXT4-fs (loop4): Ignoring removed bh option 00:46:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4000000000ce) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) ptrace(0x4207, r0) 00:46:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x1b, 0x0, &(0x7f0000000080)=0x700) [ 2806.176874][ T1115] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:46:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x2, 0x0, &(0x7f0000000080)=0x8) [ 2806.323457][ T1115] EXT4-fs (loop4): Remounting filesystem read-only [ 2806.324981][ T1115] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2806.328487][ T1115] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2806.355372][ T1115] EXT4-fs (loop4): 1 truncate cleaned up [ 2806.356689][ T1115] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x25, 0x0, &(0x7f0000000080)=0x700) 00:46:46 executing program 3: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0) mprotect(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x7) 00:46:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{&(0x7f0000000d40), 0x80, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/70, 0x46}, {&(0x7f0000000e40)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x3, &(0x7f0000001080)=""/107, 0x6b}, 0xffffff81}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:46 executing program 1: syz_clone(0x4404000, &(0x7f0000000000)="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", 0x5c0, &(0x7f0000001000), &(0x7f0000001040), 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) 00:46:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:46 executing program 2: socketpair(0x28, 0x0, 0x3f, &(0x7f0000000940)) 00:46:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005100)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000014c0)='\r', 0x1}, {&(0x7f0000001500)="df5c312ecc5119721f2b56af5ca2770a85a528aea431598b0d5527d07615ba797e1360fa1f9ccaef92770e2772", 0x2d}], 0x2}}], 0x1, 0x0) 00:46:46 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8141) 00:46:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYRES32], 0xd0}}, 0x0) 00:46:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 00:46:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2807.558181][ T1165] loop4: detected capacity change from 0 to 512 00:46:47 executing program 1: bpf$PROG_LOAD(0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 2807.573680][ T1165] EXT4-fs (loop4): Ignoring removed bh option 00:46:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0xbe, &(0x7f00000000c0)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:47 executing program 3: syz_usb_connect(0x0, 0x79, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xf9, 0xab, 0x93, 0x8, 0x5d9, 0xa225, 0xf86f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x50, 0xf5, 0x27, 0x0, [@generic={0xa, 0xb, "882983237c1bd868"}, @uac_control={{}, [@selector_unit={0x5, 0x24, 0x5, 0x2, 0x5}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x3, 0x3d, 0xdf, 0x4e, 0x0, [@uac_control], [{}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x6, 0x1, 0x81}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x0, 0x20, 0x8, 0xe1, 0x20}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x430}}]}) 00:46:47 executing program 2: bpf$PROG_LOAD(0xe, 0x0, 0x0) [ 2807.617634][ T1165] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:46:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040881) [ 2808.414213][ T1165] EXT4-fs (loop4): Remounting filesystem read-only [ 2808.415679][ T1165] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2808.421092][ T1165] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2808.428490][ T1165] EXT4-fs (loop4): 1 truncate cleaned up [ 2808.430923][ T1165] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2808.465688][ T1184] udc-core: couldn't find an available UDC or it's busy [ 2808.494001][ T1184] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 00:46:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/163, 0xa3}], 0x8, &(0x7f0000000d00)=""/35, 0x23}, 0x8001}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:48 executing program 5: bpf$PROG_LOAD(0x16, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:46:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x1) 00:46:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH70Z2ys9Ud/qKtVDP5ImrRqQQ8qCj0oCHqox5huS+22kSaCLcVGkXqUgnfxKPgXeNKLqCfBq96lUKQXqyCszO5Mukl312yz29Xs5wPTvLfvbd/7zsxL3ryZ3QAGVin7J4nYHhG/RERaz66sUKr/uH7twtyf1y7MJVGtvvF7Uqv3x7ULc0XV4n3b8sxEGpF+nMTeJu0unDt/arZSKZ/N81OLp9+dWjh3/qmTp2dPlE+Uz8wcPnzo4PSzz8w83ZU4x7K+7vlgft/uI29dfm3u6OW3f/gq6+/2vLwxjm4pRWnlvmzwaLcb67OxhnQy3MeO0JGhiMgO10ht/O+Iobhx8HbEKx/1tXNAT1Wr1eqm1sVLVWADS6LfPQD6o/hDn13/Ftttmnr8J1x9sX4BlMV9Pd/qJcO1tZDIr43GetT+fRFxdOmvz7MtGtchtvSoQQBg4H2TzX+ebDb/S+Oehnp31NaDI8Yj4s6I2BkRd0XEroi4O6JW9958PtPW0spsaVXxzfPP9MqK7Ob853MdBNlGNv97Pr+3tXL+V8z+Ynwoz43V4h9Jjp+slA/k+2QiRjZl+ek2bXz78s+ftiorNcz/si1rv5gL5v24MlxfoBstXjk2uzi73rgLVz+M2DPcLP5k+U5AEhG7I2JPZ/91foVxMU4+/uW+VpX+Pf42unCfqfpFxGP1478Uq+IvJO3vT05tjkr5wFRxVtzsx58uvd6i+dF1xd8F2fHf2vT8X45/PGm8X7vQeRuXfv2k5TVlB+f/suz8H03erKWLQfH+7OLi2emI0eTVm1+fufHeIl/Uz+Kf2N98/O+MG3tib0RkJ/H9EfFARDyY9/2hiHg4Iva3if/7lx5559bj760s/mMdHf/OE0Onvvu6VftrO/6HaqmJ/JW1/P5bawfXs+8AAADg/yKtPQOfpJPL6TSdnKw/w78rtqaV+YXFJ47Pv3fmWP1Z+fEYSYuVrh0N66HT+dpwkZ9ZlT+Yrxt/NrSllp+cm6/06p46sDbbWoz/zG9D/e4d0HM+rwWDy/iHwWX8w+Ay/mFwrXX8L/W4H8Dt12z8X4y43oeuALeZ+T8MLuMfBpfxD4PL+IeBdMuf6y++HqVFnZ1H1vONAZVy0b9bfHv3EvF3tbqq6IUOvl9g4yYibVVUzZ8b73cPu5rYvLHCyRMj+TBrUtSHX0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA98E8AAAD//2Mb4ZI=") 00:46:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00'}) 00:46:48 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 00:46:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) 00:46:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x50}, 0x0) [ 2809.448211][ T1208] loop4: detected capacity change from 0 to 512 00:46:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 00:46:49 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x40020000, &(0x7f0000000000)="c0fd024282133b9b51a1889ccdd9", 0xe, 0x0, 0x0, 0x0) 00:46:49 executing program 1: bpf$PROG_LOAD(0xa, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 2809.490519][ T1208] EXT4-fs (loop4): Ignoring removed bh option [ 2809.855638][ T1208] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2809.859071][ T1208] EXT4-fs (loop4): Remounting filesystem read-only [ 2809.860492][ T1208] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2809.873055][ T1208] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2809.881049][ T1208] EXT4-fs (loop4): 1 truncate cleaned up [ 2809.882401][ T1208] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x75}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x9f, &(0x7f00000002c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) quotactl(0xc0080000101, 0x0, 0x0, 0x0) 00:46:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="e58728bd7000fddbdf25170000007400018008000300030000001400020064756d6d79300000000000000000000008000100", @ANYRES32, @ANYBLOB="1400020070696d72656730000000000000000000080003000200000008000100", @ANYRES32, @ANYBLOB="140002000000000000000000000000000000000014000200050069663000000000000000000000004800018008000100", @ANYRES32, @ANYBLOB="140002006d616376746170300000000000000000140002007866726d300000000000000000000000140002"], 0xd0}, 0x1, 0x0, 0x0, 0x44000090}, 0x0) 00:46:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:50 executing program 1: io_setup(0x10000, &(0x7f0000000000)) clock_gettime(0x0, 0x0) [ 2810.252413][ T1231] loop4: detected capacity change from 0 to 512 00:46:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@func]}, &(0x7f0000000080)='GPL\x00', 0x7, 0xbe, &(0x7f00000000c0)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2810.288232][ T1231] EXT4-fs (loop4): Ignoring removed bh option [ 2810.302657][ T1231] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2810.311924][ T1231] EXT4-fs (loop4): Remounting filesystem read-only [ 2810.314423][ T1231] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2810.324153][ T1231] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2811.152608][ T1231] EXT4-fs (loop4): 1 truncate cleaned up [ 2811.153891][ T1231] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:51 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/ipc\x00') ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) 00:46:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0x4e21, @dev}, 0x10, 0x0}, 0x0) 00:46:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x75}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x9f, &(0x7f00000002c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) quotactl(0xc0080000101, 0x0, 0x0, 0x0) 00:46:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @dev}}}], 0x40}}], 0x1, 0x24040881) 00:46:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x75}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x9f, &(0x7f00000002c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) quotactl(0xc0080000101, 0x0, 0x0, 0x0) 00:46:51 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003500)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='%#*.\x00', &(0x7f0000000040)='./file0\x00', r1) 00:46:51 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:46:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:51 executing program 1: write$nbd(0xffffffffffffffff, 0x0, 0xba) 00:46:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001b40), &(0x7f0000001b80)=0x10) 00:46:51 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 00:46:51 executing program 2: syz_clone3(&(0x7f0000000280)={0x8000, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/114, 0x72, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 00:46:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x75}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x9f, &(0x7f00000002c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10) quotactl(0xc0080000101, 0x0, 0x0, 0x0) [ 2812.584651][ T1277] loop4: detected capacity change from 0 to 512 [ 2812.954025][ T1277] EXT4-fs (loop4): Ignoring removed bh option [ 2812.973690][ T1277] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2813.014205][ T1277] EXT4-fs (loop4): Remounting filesystem read-only [ 2813.016126][ T1277] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2813.019823][ T1277] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2813.058515][ T1277] EXT4-fs (loop4): 1 truncate cleaned up [ 2813.060370][ T1277] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvbuL0/Wt+pTz6AAwFEfFImrRAJTgAAqkHkJDgUI4hdatSt0FNkGhV0YBQOaJK3BFHJP4CTnBBwAmJa7mjShXqhYKEZLT2buqktokbu4b685G2mfGMO/Pd3UlmZ9cOYGiVs3+SiK0RcTkiSo3sygrlxo/r187P/XHt/FwStdobvyX1er9fOz9XVC3etyXPTKQR6cdJ7GnR7sLZcydnq9XKmTw/tXjq3amFs+eeOnFq9njleOX0zKFDBw9MP/vMzNM9iXNb1tfdH8zv3XX4rUuvzR259PYPX2X93ZqXN8fRK+Uor9yXTR7tdWMDtq0pnYwOsCN0ZSQiRvNxfzm2x0jcOHjb45WPBto5oK9qtVptQ/vipRpwB0ti0D0ABqP4Q59d/xbbbZp6/CtcfbFxAZTFfT3fGiWjkeZ1Squub3vpvog4svTn59kWzesQm/rUIAAw9L7J5j9Ptpr/pXFPU73/1deDI8Yj4v8RsSMi7oqInRFxd0S97r35fKajpZXZ8qrim+ef6ZUV2Y35z+e6CLKDbP73fH5va+X8r5j9xfhInttWj7+UHDtRrezP98lElDZk+ekObXz78s+ftisrN83/si1rv5gL5v24MtpYoBsrXjk6uzi73rgLVz+M2D3aKv5k+U5AEhG7ImJ3d/91foVxIU48/uXedpX+Of4OenCfqfZFxGON478Uq+IvJJ3vT05tjGpl/1RxVtzsx58uvt6m+bF1xd8D2fHf3PL8X45/PGm+X7vQfRsXf/mk7TVlF+f/suz8H0verKeLQfH+7OLimemIseTVm1+fufHeIl/Uz+Kf2Nd6/O+IG3tiT0RkJ/H9EfFARDyY9/2hiHg4IvZ1iP/7lx5559bj768s/qNdHf/uEyMnv/u6XftrO/4H66mJ/JW1/P5bawfXs+8AAADgvyKtPwOfpJPL6TSdnGw8w78zNqfV+YXFJ47Nv3f6aONZ+fEopcVK1/am9dDpfG24yM+syh/I140/G9lUz0/OzVf7dU8dWJstbcZ/5teRQfcO6Duf14LhZfzD8DL+YXgZ/zC81jr+l/rcD+D2azX+L0RcH0BXgNvM/B+Gl/EPw8v4h+Fl/MNQuuXP9Rdfj9Kmzo7D6/nGgGql6N8tvr13ifirVltV9EIX3y9w5yYibVdUy58bH3QPe5rYeGeFkydK+TBrUTSAX0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB98HcAAAD//1ef4ZU=") 00:46:53 executing program 2: semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000000)=""/14) 00:46:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000280)) 00:46:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:53 executing program 5: bpf$PROG_LOAD(0x11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:46:53 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) 00:46:53 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 00:46:53 executing program 3: r0 = msgget(0x0, 0x0) msgsnd(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="02"], 0x1008, 0xe4b99d584e6e397f) 00:46:53 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 00:46:53 executing program 3: mq_open(&(0x7f0000000000)='(%\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0xd2d, 0x0, 0x4}) 00:46:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)) 00:46:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) [ 2813.972550][ T1320] loop4: detected capacity change from 0 to 512 [ 2813.988361][ T1320] EXT4-fs (loop4): Ignoring removed bh option [ 2814.014931][ T1320] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2814.018178][ T1320] EXT4-fs (loop4): Remounting filesystem read-only [ 2814.019520][ T1320] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2814.042034][ T1320] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2814.054770][ T1320] EXT4-fs (loop4): 1 truncate cleaned up [ 2814.055932][ T1320] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x52000) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x288000c, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:54 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 00:46:54 executing program 3: r0 = semget(0x3, 0x0, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{}], 0x1, 0x0) 00:46:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 00:46:54 executing program 1: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x81000) 00:46:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 00:46:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000003340)) 00:46:54 executing program 5: mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8) 00:46:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r0, 0x0, &(0x7f00000001c0)) 00:46:54 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) 00:46:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_proto_private(r0, 0x0, 0x0) 00:46:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x52000) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x288000c, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:54 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) 00:46:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, &(0x7f0000000300)) 00:46:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 00:46:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) [ 2815.335677][ T1367] loop4: detected capacity change from 0 to 512 [ 2815.359386][ T1367] EXT4-fs (loop4): Ignoring removed bh option [ 2815.406439][ T1367] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2815.410756][ T1367] EXT4-fs (loop4): Remounting filesystem read-only [ 2815.418959][ T1367] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2815.435284][ T1367] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2815.449106][ T1367] EXT4-fs (loop4): 1 truncate cleaned up [ 2815.457209][ T1367] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) 00:46:55 executing program 5: semget(0x3, 0x0, 0x60) 00:46:55 executing program 2: statx(0xffffffffffffff9c, &(0x7f0000004800)='./file0\x00', 0x0, 0x0, 0x0) 00:46:55 executing program 1: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002) 00:46:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r3, &(0x7f0000000040), 0xfea0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x52000) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x288000c, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:55 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 00:46:55 executing program 1: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000100)=""/4096) 00:46:55 executing program 5: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) 00:46:55 executing program 2: r0 = semget(0x3, 0x0, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{}], 0x1, &(0x7f0000000400)) 00:46:56 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x81, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x400082, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000007d40), 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000007e00)={0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000c980)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f40)="41e474b835a97bdbd32194dbb860b777b506f9e6bf28627bd1bd7c31057986a03442de32543a6c6de72e7e04111933", 0x2f}], 0x1, &(0x7f0000001140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001180)="de808efec52f325607361f828dd41d49639f80c5e7c6596f91649eee828074ceae4474", 0x23}], 0x1, &(0x7f0000001480)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002700)=[{0x0}, {&(0x7f0000002600)="d74fe21a706aa411144a3729b95772553fa28e62a0b36cfa58624e884889deaaff2771b06aa8c061e82b5c9b021b76137c5c61eb275d71651d65948c879b33536026974e927822d4f051e9403fc7b3db02d310167645ebf0e89b380c24423185fc202dfe4082cc73a6cfe21fc4a0e1644071247839b6bf3538977a78deb6dc4fac2cb2c34eca01035898b6cc2e3ccc852d4a6b7e055eb2504669c81345f2af72741503d4250343092abea78ac06d1fab1410e379b963a1b50c9264815d449b7443a0305621", 0xc5}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000002740)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003980)=[{&(0x7f00000027c0)="26c73d057be691d10cfc08739fa3820a8655873f870c53f16b9ea2bc4f3c81b4ecafd52f82824a1ce3105c1e2687fc7a6fcc222128832e9f9ed42d6500e6992c94860df409f6463762d34ecc1d270df3ad5e07fdd2e05dab2d1c19966ce284875e618bd0c4125469ea1c3c116efdf6522f37b6d72d75be362a94f7ad014e52573cc5ffc5778a65c32100d12d8ac0e591f79b3e28a0b492eb9ff73d0b82afdd73b76ff5d3055fa70fc464579f2da21947284e6fad23b53c2a5b7e0435390ee24a9fe91def42efe9e9cc8e2c4241825874424231194ec74e37d86186c05875a98e62a2da519faf68f6", 0xe8}, {0x0}, {&(0x7f00000038c0)="1de6503f7e87766e39bbae3d516aaa152b49c5f03590f222f7cc0a582a24cf6e3eaef4bcaa2b07e6fb3c62b33237e2f9ff9cc8", 0x33}, {&(0x7f0000003900)="991fd545b7d48d4a14ab4d599dbd291adc1641518d33460dd2a468277e59bb317167c4f0f6bae699bc4fe787809e07c720f7f0bace5a36ea92aebcddeefeb2fffe95a99624cfe2300d099059e06d9036b25356083effef6ac35a11c6db1094bd", 0x60}], 0x4, 0x0, 0x0, 0xc0}}, {{&(0x7f00000039c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003a40), 0x0, &(0x7f0000003ac0)=[@cred={{0x1c}}], 0x20, 0x8000}}, {{&(0x7f0000003b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003c80)=[{0x0}, {&(0x7f0000003bc0)="6dcfb05332c34dfdd468d8ac50ca219299fa791e59cf384647da62b9b35a7489fbc954032f02b3e8dbb86cbbd96f0b5f8c7be2ebd0fa83006a4f11282dcb99bd18e88343fa4da0246222285a6fe140d18a58ce48f5386d7e1c153d7ac01f9f5a6e4fe7b77ef702184e3776f8ab80f1bb5e588c9897232d50c6cbc1a547bcf024c2e791360a984a7b61941c10512a4d0e85bc103f57920b3d10e6430c5f9c48408031742419f957a6f5db07094c8935", 0xaf}], 0x2, &(0x7f000000c000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}], 0x80, 0x44004}}, {{&(0x7f000000c140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000c3c0)=[{&(0x7f000000c1c0)="0d5c622b0fea1be25dc0c4540dbc87ca46a63dda9ea36873e0ad5738dc54c43fe564deba721df2641711c5a970c2c7f5ab040a36f6d41de0dd2c7d6378a972b54c1ac80332bf7fa829c35e", 0x4b}, {&(0x7f000000c240)}], 0x2}}, {{0x0, 0x0, &(0x7f000000c640)=[{0x0}, {0x0}, {&(0x7f000000c540)}, {&(0x7f000000c600)="1e195931fa18a452df45ef", 0xb}], 0x4, &(0x7f000000c8c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x4000050}}], 0x8, 0x34044050) 00:46:56 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000007d40), 0x1, 0x0) [ 2816.133703][ T1392] loop4: detected capacity change from 0 to 512 00:46:56 executing program 3: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000d00)='./binderfs/binder-control\x00', 0x0, 0x0) [ 2816.177963][ T1392] EXT4-fs (loop4): Ignoring removed bh option 00:46:56 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x400082, 0x0) 00:46:56 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000dc0)={0x1, &(0x7f0000000d80)=[{}]}) [ 2816.306774][ T1392] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2816.310160][ T1392] EXT4-fs (loop4): Remounting filesystem read-only [ 2816.311640][ T1392] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:46:56 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) dup(r0) [ 2816.355409][ T1392] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2816.391116][ T1392] EXT4-fs (loop4): 1 truncate cleaned up [ 2816.392438][ T1392] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTH40/WVjrT/6Q12tYvBH0qRVC3pQUehBQdBDPcZ0W2q3jTQRbCk2itSjFLyLR8G/wJNeRD0JXvUuhSK9WAVhZXZn0k26u2ab3a5mPx+Y5r19b/ved2Ze8ubN7AYwsErZP0nEtoj4JSLG6tmVFUr1H9evXZj789qFuSSq1Td+T2r1/rh2Ya6oWrxva56ZSCPSj5PY26TdhXPnT81WKuWzeX5q8fS7Uwvnzj918vTsifKJ8pmZw4cPHZx+9pmZp7sS5/asr3s+mN+3+8hbl1+bO3r57R++yvq7LS9vjKNbSlFauS8bPNrtxvpse0M6Ge5jR+jIUERkh2ukNv53xFDcOHg74pWP+to5oKeq1Wp1U+vipSqwgSXR7x4A/VH8oc+uf4vtNk09/hOuvli/AMrivp5v9ZLhSPM6I6uub7vpvog4uvTX59kWjesQm3vUIAAw8L7J5j9PNpv/pXFPQ707auvBEeMRcWdE7IyIuyJiV0TcHVGre28+n2lraWW2tKr45vlnemVFdiz/+VwHQbaRzf+ez+9trZz/FbO/GB/Kc9tr8Y8kx09WygfyfTIRI5uy/HSbNr59+edPW5WVGuZ/2Za1X8wF835cGa4v0I0WrxybXZxdb9yFqx9G7BluFn+yfCcgiYjdEbGns/86v8K4GCcf/3Jfq0r/Hn8bXbjPVP0i4rH68V+KVfEXkvb3J6fGolI+MFWcFTf78adLr7dofnRd8XdBdvy3ND3/l+MfTxrv1y503salXz9peU3Zwfm/LDv/R5M3a+liULw/u7h4djpiNHn15tdnbry3yBf1s/gn9jcf/zvjxp7YGxHZSXx/RDwQEQ/mfX8oIh6OiP1t4v/+pUfeufX4eyuL/1hHx7/zxNCp775u1f7ajv+hWmoif2Utv//W2sH17DsAAAD4v0hrz8An6eRyOk0nJ+vP8O+KLWllfmHxiePz7505Vn9WfjxG0mKla0fDeuh0vjZc5GdW5Q/m68afDW2u5Sfn5iu9uqcOrM3WFuM/89tQv3sH9JzPa8HgMv5hcBn/MLiMfxhcax3/Sz3uB3D7NRv/FyOu96ErwG1m/g+Dy/iHwWX8w+Ay/mEg3fLn+ouvR2lRZ+eR9XxjQKVc9O8W3969RPxdra4qeqGD7xfYuIlIWxVV8+fG+93DribGNlY4eWIkH2ZNivrwywgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAH/gkAAP//TCPhmA==") 00:46:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:56 executing program 3: getpgid(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_clone3(&(0x7f0000000940)={0x140000000, 0x0, &(0x7f0000000700), &(0x7f0000000740), {0xc}, &(0x7f0000000780)=""/200, 0xc8, 0x0, 0x0}, 0x58) 00:46:56 executing program 2: syz_usb_connect$cdc_ncm(0x3, 0x81, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010002020000402505a1a44000010203010902"], 0x0) 00:46:56 executing program 1: syz_clone3(&(0x7f0000000400)={0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 00:46:56 executing program 5: ioprio_set$pid(0x0, 0xffffffffffffffff, 0x2007) [ 2816.504475][ T1418] udc-core: couldn't find an available UDC or it's busy [ 2816.506019][ T1418] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 00:46:56 executing program 5: syz_clone3(&(0x7f0000000940)={0x140000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:57 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = getpgid(0xffffffffffffffff) gettid() socket$nl_route(0x10, 0x3, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000a80)={0xc, 0x0, &(0x7f0000000a00)=[@free_buffer], 0x1, 0x0, &(0x7f0000000a40)="dd"}) syz_clone3(&(0x7f0000000340)={0x80020200, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x33}, 0x0, 0x0, &(0x7f0000000200)=""/228, &(0x7f0000000300)=[r0, r0, r0, r0, r0, 0x0], 0x6}, 0x58) syz_clone3(&(0x7f0000000940)={0x140000000, &(0x7f00000006c0)=0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740), {0xc}, &(0x7f0000000780)=""/200, 0xc8, &(0x7f0000000880)=""/86, &(0x7f0000000900)=[0x0, r1, r1], 0x3}, 0x58) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:46:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000cc0)={0x28, r1, 0xd, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x28}}, 0x0) [ 2817.440551][ T1428] loop4: detected capacity change from 0 to 512 [ 2817.483929][ T1428] EXT4-fs (loop4): Ignoring removed bh option 00:46:58 executing program 3: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', 0x0, 0x0, 0x0) 00:46:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) [ 2818.318940][ T1428] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2818.326664][ T1428] EXT4-fs (loop4): Remounting filesystem read-only [ 2818.335176][ T1428] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2818.347038][ T1428] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2818.354501][ T1428] EXT4-fs (loop4): 1 truncate cleaned up [ 2818.362726][ T1428] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:46:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:46:58 executing program 2: mount$9p_fd(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0), 0x0, 0x0) 00:46:59 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000080), 0x10, &(0x7f00000000c0)={0x0}}, 0x0) 00:46:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:46:59 executing program 3: r0 = epoll_create1(0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 00:47:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xc, 0x8, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:02 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[], [{@obj_role={'obj_role', 0x3d, '\x87'}}, {@audit}]}) 00:47:02 executing program 2: syz_clone3(&(0x7f0000000640)={0x200000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:47:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x20f, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x48) 00:47:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0x8, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2822.147639][ T1502] loop4: detected capacity change from 0 to 512 00:47:02 executing program 3: syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@random="d01685cafffd", @link_local, @val={@void, {0x8847}}, {@mpls_mc={0x8848, {[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 2822.163147][ T1502] EXT4-fs (loop4): Ignoring removed bh option 00:47:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) 00:47:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2823.017741][ T1502] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2823.021392][ T1502] EXT4-fs (loop4): Remounting filesystem read-only [ 2823.022981][ T1502] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2823.032264][ T1513] binder: Unknown parameter 'obj_role' 00:47:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x2d) process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x100000000000007a, &(0x7f0000c22fa0)=[{&(0x7f0000000e00)=""/102400, 0xfffffcf3}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@remote, @in6=@private2}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) [ 2823.075967][ T1502] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:47:03 executing program 1: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getpgid(0xffffffffffffffff) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x0, 0x8, 0x1c28, 0x1}, 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_clone3(0x0, 0x0) syz_clone3(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x9) syz_clone3(&(0x7f0000000940)={0x140000000, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740), {0xc}, &(0x7f0000000780)=""/200, 0xc8, 0x0, 0x0}, 0x58) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 00:47:03 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x1b, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2823.086027][ T1502] EXT4-fs (loop4): 1 truncate cleaned up [ 2823.092978][ T1502] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) 00:47:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:04 executing program 3: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getpgid(0xffffffffffffffff) syz_clone3(0x0, 0x0) syz_clone3(&(0x7f0000000940)={0x140000000, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740), {0xc}, &(0x7f0000000780)=""/200, 0xc8, 0x0, 0x0}, 0x58) 00:47:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) [ 2824.937684][ T1549] loop4: detected capacity change from 0 to 512 [ 2824.957862][ T1549] EXT4-fs (loop4): Ignoring removed bh option [ 2824.976570][ T1549] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:47:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x2d) process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x100000000000007a, &(0x7f0000c22fa0)=[{&(0x7f0000000e00)=""/102400, 0xfffffcf3}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@remote, @in6=@private2}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) [ 2824.991692][ T1549] EXT4-fs (loop4): Remounting filesystem read-only [ 2824.993448][ T1549] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2825.738441][ T1549] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2825.818811][ T1549] EXT4-fs (loop4): 1 truncate cleaned up 00:47:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2825.820070][ T1549] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:05 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) 00:47:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2826.638769][ T1570] loop4: detected capacity change from 0 to 512 [ 2826.794340][ T1570] EXT4-fs (loop4): Ignoring removed bh option [ 2826.818347][ T1570] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2826.822633][ T1570] EXT4-fs (loop4): Remounting filesystem read-only [ 2826.824251][ T1570] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2826.834242][ T1570] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2826.844372][ T1570] EXT4-fs (loop4): 1 truncate cleaned up [ 2826.845761][ T1570] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:08 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xd7, &(0x7f0000000080)=""/215, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 00:47:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x2d) process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x100000000000007a, &(0x7f0000c22fa0)=[{&(0x7f0000000e00)=""/102400, 0xfffffcf3}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@remote, @in6=@private2}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) [ 2828.582292][ T1585] loop4: detected capacity change from 0 to 512 [ 2828.605818][ T1585] EXT4-fs (loop4): Ignoring removed bh option [ 2828.913970][ T1585] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2829.401263][ T1585] EXT4-fs (loop4): Remounting filesystem read-only [ 2829.422897][ T1585] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2829.433983][ T1585] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2829.441382][ T1585] EXT4-fs (loop4): 1 truncate cleaned up [ 2829.442696][ T1585] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:09 executing program 3: bpf$MAP_CREATE(0x4, &(0x7f0000000500), 0x48) 00:47:09 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000580)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}], 0x30}, 0x0) 00:47:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) 00:47:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x2d) process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x100000000000007a, &(0x7f0000c22fa0)=[{&(0x7f0000000e00)=""/102400, 0xfffffcf3}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@remote, @in6=@private2}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) [ 2829.942918][ T1616] loop4: detected capacity change from 0 to 512 00:47:09 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000340)="b9cd38706c56630b9995d63f37f54c3cc5247cac8caf0f44eaca6ffaaafd7531654625beb4cb79aaf5905da8411c87c4093e48f309ac12ef6854316904f584fc86b85b77c70d8bb7011270a9fd90fb581764d890e1f62e8a286af27d9815771a09dcafdb2cad428f8e1673c9f149c537a2c681a0eabe4d0064fc0a53121c82dcc4f18b59f323230bd73bcc65aec340c53dc8ad39dafeacd720795e6c880353f623183136f6735027736cfb8cf1dcea1acb5b7f62a4280b98a9056299", 0xbc}, {&(0x7f0000000400)="8ec0685e208a4068bfaafd965a6e98d3efca8cbb437b6f5e7657f57ad5b3273e1e384db594e195734b71dca675cef689499f5370c9cf7ad18118129fddb6d7ac8e143c376ad67e67ff2c3a52568c322a7f0aeae536f45be6a05e3b650af4d1c93a13cfc8e7df90fd5c7ffde390113eb87e2d03a1f51db4ae4e786bc894a9dc4aa63264998720ab6359d82a46079a28925d1228ffdc757e77387fb3", 0x9b}, {&(0x7f00000004c0)="1315a6dbd456dc7909a5b2aa06f398ef14afea680be4d707928af1314837bee1d43b6bc5cdd201bb8648fe7738dd21837cbe4d5768413bdd5e5e5dbf9b9579fa908d4508e1b6510da09ad1bb095c6ed360ecfc0d10", 0x55}, {&(0x7f0000000540)="ffdf7d3c6400f490f61fcb25c733f9911a3cf83b3eb1c0d3e7ebb2d0ff99959e1b84bf587b20ef48c4fbf7cbe0153b12392b46b91fbe72ed8ad3c20fe73bb8b2328673fab951dccd1b6fa4674eaddf1c62d640092412fcd6810050d5b2b38b7050feb77ab02d7572f2202c7a4b7ccb5e2ed985cf3e2933f9b922cfec869a1c2f286e95a75d6a37f6c61db9b870e54b2a4a996b32d98a11ce56f3e1a4be50dbca5781e38b884d907d1a009d96654515318dc998a3803c80818ff078db699845a90dc1dcaece75b152a9a1e21608784405b3df08496916606f2f449309f5e8", 0xde}, {&(0x7f0000000640)="7198483b2bc33bae87f4844b7af5d9bcec05fa17ae468fce950dfbb6616ce85a263728dd093666b82faec0ca846b416a59d3a05f70d7305d5ccd8e668c70c13f5417f7e816d139325374b623f6bdadd0517b32a8a3945c4451edd3b5fbe196919ccf6fc5b767784f24c274ab75fc21105311b36278fbd96376de3c3a3e786cd8a551af679b6af25057b47713d1ebd926e5df4cedfc9f521967ef2303941c1fcef7a800a1c041459896d9a69915ae58669244130f5c9671481caaebe3efef3610808dc6197ae84c3360e7b26df863aa933e617388e5cc8d60ab12db4ee37319d2", 0xe0}, {&(0x7f0000000740)="51cfb5ec4a239a55260fcaa94395e18711274edb99b13c0ba8658a6d048f5587c0a2951319deb6a71e9cc37900bdeba1ededd5c92f4777093436e300bd94f3988508e08fc68d76e137212739ba", 0x4d}, {&(0x7f00000007c0)="71dc806f43d9b32a7f17dcd482a63731febc2f72c6d6565d1cac9451789061b891b9d1db96a027d4a22003ce861d269aeb21fe5f77f542179dd8d367e3fb2cd8412f664414f46c6b1cfb53fb018d9075b35709f2f92f9ca66f34d092a9d0e19061286e51dd0227b411a870065de53d5b6ddc45634e1133d0393fa6564a15b1c7bf14adcc195aa5c0e252c7e0ded98cfe64ec2ab2e1ed84f999c30c510c508ab2d91650694d84359a65f969b4a94ab911a1fe58bfae8d255d581a41a2f2", 0xbd}, {&(0x7f0000000880)="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", 0xa0d}], 0x8}, 0x0) [ 2829.986460][ T1616] EXT4-fs (loop4): Ignoring removed bh option 00:47:10 executing program 5: socketpair(0x28, 0x0, 0xc0, &(0x7f0000000040)) 00:47:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:10 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000340)="b9cd38706c56630b9995d63f37f54c3cc5247cac8caf0f44eaca6ffaaafd7531654625beb4cb79aaf5905da8411c87c4093e48f309ac12ef6854316904f584fc86b85b77c70d8bb7011270a9fd90fb581764d890e1f62e8a286af27d9815771a09dcafdb2cad428f8e1673c9f149c537a2c681a0eabe4d0064fc0a53121c82dcc4f18b59f323230bd73bcc65aec340c53dc8ad39dafeacd720795e6c880353f623183136f6735027736cfb8cf1dcea1acb5b7f62a4280b98a9056299", 0xbc}, {&(0x7f0000000400)="8ec0685e208a4068bfaafd965a6e98d3efca8cbb437b6f5e7657f57ad5b3273e1e384db594e195734b71dca675cef689499f5370c9cf7ad18118129fddb6d7ac8e143c376ad67e67ff2c3a52568c322a7f0aeae536f45be6a05e3b650af4d1c93a13cfc8e7df90fd5c7ffde390113eb87e2d03a1f51db4ae4e786bc894a9dc4aa63264998720ab6359d82a46079a28925d1228ffdc757e77387fb3", 0x9b}, {&(0x7f00000004c0)="1315a6dbd456dc7909a5b2aa06f398ef14afea680be4d707928af1314837bee1d43b6bc5cdd201bb8648fe7738dd21837cbe4d5768413bdd5e5e5dbf9b9579fa908d4508e1b6510da09ad1bb095c6ed360ecfc0d10d94dd41fb8785bcb1bb1f12ac922", 0x63}, {&(0x7f0000000540)="ffdf7d3c6400f490f61fcb25c733f9911a3cf83b3eb1c0d3e7ebb2d0ff99959e1b84bf587b20ef48c4fbf7cbe0153b12392b46b91fbe72ed8ad3c20fe73bb8b2328673fab951dccd1b6fa4674eaddf1c62d640092412fcd6810050d5b2b38b7050feb77ab02d7572f2202c7a4b7ccb5e2ed985cf3e2933f9b922cfec869a1c2f286e95a75d6a37f6c61db9b870e54b2a4a996b32d98a11ce56f3e1a4be50dbca5781e38b884d907d1a009d96654515318dc998a3803c80818ff078db699845a90dc1dcaece75b152a9a1e21608784405b3df08496916606f2f449309f5e8", 0xde}, {&(0x7f0000000640)="7198483b2bc33bae87f4844b7af5d9bcec05fa17ae468fce950dfbb6616ce85a263728dd093666b82faec0ca846b416a59d3a05f70d7305d5ccd8e668c70c13f5417f7e816d139325374b623f6bdadd0517b32a8a3945c4451edd3b5fbe196919ccf6fc5b767784f24c274ab75fc21105311b36278fbd96376de3c3a3e786cd8a551af679b6af25057b47713d1ebd926e5df4cedfc9f521967ef2303941c1fcef7a800a1c041459896d9a69915ae58669244130f5c9671481caaebe3efef3610808dc6197ae84c3360e7b26df863aa933e617388e5cc8d60ab12db4ee37319d2", 0xe0}, {&(0x7f0000000740)="51cfb5ec4a239a55260fcaa94395e18711274edb99b13c0ba8658a6d048f5587c0a2951319deb6a71e9cc37900bdeba1ededd5c92f4777093436e300bd94f3988508e08fc68d76e137212739ba", 0x4d}, {&(0x7f00000007c0)="71dc806f43d9b32a7f17dcd482a63731febc2f72c6d6565d1cac9451789061b891b9d1db96a027d4a22003ce861d269aeb21fe5f77f542179dd8d367e3fb2cd8412f664414f46c6b1cfb53fb018d9075b35709f2f92f9ca66f34d092a9d0e19061286e51dd0227b411a870065de53d5b6ddc45634e1133d0393fa6564a15b1c7bf14adcc195aa5c0e252c7e0ded98cfe64ec2ab2e1ed84f999c30c510c508ab2d91650694d84359a65f969b4a94ab911a1fe58bfae8d255d581a41a2f2", 0xbd}, {&(0x7f0000000880)="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", 0x9ff}], 0x8}, 0x0) [ 2830.844635][ T1616] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:47:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1, &(0x7f0000000180)=@raw=[@exit], &(0x7f00000001c0)='GPL\x00', 0x5, 0xf9, &(0x7f0000000200)=""/249, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2830.858792][ T1616] EXT4-fs (loop4): Remounting filesystem read-only [ 2830.860140][ T1616] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2830.866124][ T1616] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2830.869708][ T1616] EXT4-fs (loop4): 1 truncate cleaned up [ 2830.870998][ T1616] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:10 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 00:47:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxtr/dEf6moVgz+SJq1a0IOKQg8Kgh7qMabbUrttpIlgS7FRpB6l4F08Cv4FnvQi6knwqncpFOnFKggrszuTbtLdNdvsdrX7+cA07+172/e+M/OSN/NmN4ChVc7+SSK2RsQvETHeyK6sUG78uHb1/NyfV8/PJVGrvfF7Uq/3x9Xzc0XV4n1b8sxEGpF+nMSeFu0unD13crZarZzJ81OLp96dWjh77qkTp2aPV45XTs8cOnTwwPSzz8w83ZM4t2V93f3B/N5dh9+69NrckUtv//BV1t+teXlzHL1SjvLKfdnk0V43NmDbmtLJ6AA7QldGIiI7XKX6+N8eI3H94G2PVz4aaOeAvqrVarUN7YuXasBtLIlB9wAYjOIPfXb9W2y3aOrxn3DlxcYFUBb3tXxrlIxGmtcprbq+7aX7IuLI0l+fZ1s034fY1KcGAYCh9002/3my1fwvjXua6t1Rvx/cWB+6MyJ2RMRdEbEzIu6OqNe9N5/PdLS0MlteVXzj/DO9vCK7Mf/5XBdBdpDN/57P17ZWzv+K2V+Mj+S5bfX4S8mxE9XK/nyfTERpQ5af7tDGty///Gm7snLT/C/bsvaLuWDej8ujjRt0Y8UrR2cXZ9cbd+HKhxG7R1vFnyyvBCQRsSsidnf3X+dXGBfixONf7m1X6d/j76AH60y1LyIeaxz/pVgVfyHpvD45tTGqlf1TxVlxox9/uvh6m+bH1hV/D2THf3PL8385/vGkeb12ofs2Lv76Sdtryi7O/2XZ+T+WvFlPF4Pi/dnFxTPTEWPJqze+PnP9vUW+qJ/FP7Gv9fjfEdf3xJ6IyE7i+yPigYh4MO/7QxHxcETs6xD/9y898s7Nx99fWfxHuzr+3SdGTn73dbv213b8D9ZTE/kra/n9t9YOrmffAQAAwP9FWn8GPkknl9NpOjnZeIZ/Z2xOq/MLi08cm3/v9NHGs/LjUUqLO13bm+6HTuf3hov8zKr8gfy+8Wcjm+r5ybn5ar/W1IG12dJm/Gd+Gxl074C+83ktGF7GPwwv4x+Gl/EPw2ut43+pz/0Abr1W4/9CxLUBdAW4xcz/YXgZ/zC8jH8YXsY/DKWb/lx/8fUobersOLyebwyoVor+3eTbe5eIv2u1VUUvdPH9ArdvItJ2RbX8ufFB97CniY23Vzh5opQPsxZFA/hlBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Af/BAAA//8tg+Gg") 00:47:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:11 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0x3, &(0x7f0000002100)=@framed, &(0x7f0000002180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002200), 0x8, 0x10, 0x0}, 0x80) 00:47:11 executing program 3: bpf$MAP_CREATE(0xd, &(0x7f0000000500), 0x48) 00:47:11 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0xd8) [ 2831.884309][ T1658] loop4: detected capacity change from 0 to 512 00:47:11 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, ';`'}}, {0x0, 0x0}]}) 00:47:11 executing program 1: ppoll(&(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x2000000000000139, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0), 0x8) [ 2831.893364][ T1658] EXT4-fs (loop4): Ignoring removed bh option 00:47:11 executing program 2: memfd_create(&(0x7f00000053c0)='\'-]^.\xb9!$\x00', 0x0) 00:47:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:12 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 2832.725713][ T1658] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2832.730158][ T1675] udc-core: couldn't find an available UDC or it's busy [ 2832.732895][ T1675] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 00:47:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) [ 2832.754062][ T1658] EXT4-fs (loop4): Remounting filesystem read-only [ 2832.755660][ T1658] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:47:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)}, 0x80) [ 2832.768311][ T1658] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2832.788764][ T1658] EXT4-fs (loop4): 1 truncate cleaned up [ 2832.793517][ T1658] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:13 executing program 2: syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff}}, [{}]}}}]}}]}}, 0x0) 00:47:13 executing program 1: clock_gettime(0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x1}, &(0x7f00000000c0)={0x5}, 0x0, 0x0) 00:47:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/98, &(0x7f0000000140)=0xfffffc53) 00:47:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2833.686608][ T1692] udc-core: couldn't find an available UDC or it's busy 00:47:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) 00:47:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x801}, 0x14}}, 0x0) [ 2833.705488][ T1692] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 00:47:13 executing program 5: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20000020) 00:47:13 executing program 1: r0 = syz_clone(0x48000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="e5ccd7163d95730497d300739eb6d525cf2529ff54acbcdeaabdf2dcbbf6435fbccc31cfd2c1bb877c452c711bb854488c1a75ec7fe2959c7d0e05a46cf5056558") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)=':/+\x00'}, 0x30) 00:47:13 executing program 3: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1}) [ 2834.587727][ T1702] loop4: detected capacity change from 0 to 512 00:47:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2834.624091][ T1702] EXT4-fs (loop4): Ignoring removed bh option 00:47:14 executing program 2: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffe63) [ 2834.708711][ T1702] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2834.712089][ T1702] EXT4-fs (loop4): Remounting filesystem read-only [ 2834.714362][ T1702] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2835.220537][ T1702] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2835.539993][ T1702] EXT4-fs (loop4): 1 truncate cleaned up [ 2835.541375][ T1702] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 00:47:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000380)={0x0, 0x3938700}, 0x0, 0x0) 00:47:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:15 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) io_setup(0x9, &(0x7f0000000940)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000001340)=[{}], 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 00:47:15 executing program 3: getresuid(&(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)) 00:47:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:15 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x630802, 0x0) 00:47:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 00:47:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) 00:47:16 executing program 1: r0 = inotify_init1(0x0) fcntl$lock(r0, 0x40e, &(0x7f0000000240)) [ 2836.607067][ T1746] loop4: detected capacity change from 0 to 512 00:47:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_timeval(r0, 0x1, 0x1, &(0x7f0000000000), 0x10) 00:47:16 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x400a01, 0x0) [ 2836.641292][ T1746] EXT4-fs (loop4): Ignoring removed bh option 00:47:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000240)=@raw=[@map_idx], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:17 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001fc0)={@map}, 0x10) [ 2837.492274][ T1746] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2837.525499][ T1746] EXT4-fs (loop4): Remounting filesystem read-only [ 2837.527015][ T1746] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2837.551754][ T1746] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:47:17 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ac0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001f80), 0x4000, 0x0) [ 2837.576776][ T1746] EXT4-fs (loop4): 1 truncate cleaned up [ 2837.577999][ T1746] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:18 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000002e00)) 00:47:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x1, &(0x7f0000001500)=@raw=[@ldst], &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000100)="0408882d5176f180c874de2d880658068e546008e5cdcd55756e6ee2270a03ec7e2dcee1ab870ff8a169d964d05a539df65a03b7d545803366e2d4a8cd25de2b8930e616c3ae0e17ce1c2e4e781aa18386e145c15b32a56880473126d50b39177e2fe51b8f78291adfe2f02e8342", 0x6e}, {&(0x7f0000000040)="8b7732"}], 0x17, &(0x7f00000000c0)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) 00:47:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:18 executing program 1: recvmsg$unix(0xffffffffffffffff, 0x0, 0x80002061) 00:47:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000100)=""/134, 0x26, 0x86, 0x1}, 0x20) 00:47:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x0, 0x0, 0xffffffc1}, 0x48) 00:47:18 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) 00:47:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x8, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x95}]}, &(0x7f0000002b40)='GPL\x00', 0x2, 0xef, &(0x7f0000002b80)=""/239, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:18 executing program 2: bpf$OBJ_GET_MAP(0xe, &(0x7f0000000c40)={0x0, 0x0, 0x8}, 0x10) 00:47:18 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000100)=""/134, 0x27, 0x86, 0x1}, 0x20) 00:47:18 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000300)=@raw=[@func], &(0x7f0000000000)='GPL\x00', 0x7, 0x8b, &(0x7f0000000180)=""/139, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2838.628467][ T1792] loop4: detected capacity change from 0 to 512 00:47:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0xa}]}, &(0x7f0000002b40)='GPL\x00', 0x2, 0xef, &(0x7f0000002b80)=""/239, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:19 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0xffffffffffffffcd) [ 2839.477450][ T1792] EXT4-fs (loop4): Ignoring removed bh option 00:47:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x100) [ 2839.526888][ T1792] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2839.530235][ T1792] EXT4-fs (loop4): Remounting filesystem read-only [ 2839.531731][ T1792] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2839.545149][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 2839.546564][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 2839.558038][ T1792] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2840.093093][ T1792] EXT4-fs (loop4): 1 truncate cleaned up [ 2840.236845][ T1792] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0x803e}, {&(0x7f0000000100)="b7", 0x1}], 0x2, &(0x7f00000005c0)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 00:47:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000100)="b7", 0x33fe0}], 0x2, &(0x7f00000005c0)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 00:47:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='GPL\x00', 0x7, 0x8b, &(0x7f0000000180)=""/139, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:20 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) 00:47:20 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000100)=@framed={{}, [@generic]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x8b, &(0x7f0000000180)=""/139, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:20 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20440, 0x0) 00:47:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2841.370055][ T1838] loop4: detected capacity change from 0 to 512 [ 2841.375247][ T1838] EXT4-fs (loop4): Ignoring removed bh option 00:47:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000540), 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 00:47:21 executing program 2: syz_open_dev$vcsn(&(0x7f0000000540), 0x0, 0x807350b42ccf669f) 00:47:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x70bd25}, 0x14}}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000001f00)) 00:47:21 executing program 1: socketpair(0x18, 0x0, 0x78c, &(0x7f0000002ec0)) [ 2841.426893][ T1838] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2842.130593][ T1838] EXT4-fs (loop4): Remounting filesystem read-only [ 2842.286007][ T1838] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2842.289339][ T1838] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2842.292540][ T1838] EXT4-fs (loop4): 1 truncate cleaned up [ 2842.293771][ T1838] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:22 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 00:47:22 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000540), 0x1, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 00:47:22 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x7, 0xbe, &(0x7f00000000c0)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:22 executing program 2: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001340)='cpu.pressure\x00', 0x2, 0x0) syz_clone3(&(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000026c0)=[0x0], 0x1}, 0x58) 00:47:22 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x46) 00:47:22 executing program 5: syz_clone3(&(0x7f0000001240)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0xffffffffffffffff], 0x1}, 0x58) syz_clone3(&(0x7f0000002700)={0x20281000, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0), {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2842.496164][ T1866] loop4: detected capacity change from 0 to 512 00:47:23 executing program 3: io_setup(0x53ce, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x9]}, 0x8}) pselect6(0x40, &(0x7f0000000340)={0x7fff, 0x0, 0x0, 0x8000000000000000}, &(0x7f0000000380)={0x20, 0x0, 0x9, 0x0, 0x800000000000000, 0x800, 0xff, 0x800}, &(0x7f00000003c0)={0xfffffffffffffffe, 0x0, 0x0, 0x200, 0x0, 0x5}, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={[0x3ff]}, 0x8}) timerfd_create(0x2, 0x0) 00:47:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2843.284630][ T1866] EXT4-fs (loop4): Ignoring removed bh option 00:47:23 executing program 1: syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000180)=""/84, 0x54, 0x0, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) syz_clone3(&(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:47:23 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000d40), 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) [ 2843.374649][ T1866] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2843.380065][ T1866] EXT4-fs (loop4): Remounting filesystem read-only [ 2843.381579][ T1866] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2843.882934][ T1866] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:47:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2844.238934][ T1866] EXT4-fs (loop4): 1 truncate cleaned up [ 2844.240291][ T1866] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:24 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x0, 0x0, &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:24 executing program 2: syz_open_dev$audion(&(0x7f0000000d40), 0x0, 0x2240) 00:47:24 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 00:47:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxtr/dEf6moVgz+SJq1a0IOKQg8Kgh7qMabbUrttpIlgS7FRpB6l4F08Cv4FnvQi6knwqncpFOnFKggrszuTbtLdNdvsdrX7+cA07+2b7XvfmXnJm/dmN4ChVc7+SSK2RsQvEXFPI7tyh3Ljx7Wr5+f+vHp+Lola7Y3fk/p+f1w9P1fsWrxvS56ZSCPSj5PY06LehbPnTs5Wq5UzeX5q8dS7Uwtnzz114tTs8crxyumZQ4cOHph+9pmZp3sS57asrbs/mN+76/Bbl16bO3Lp7R++ytq7NS9vjqNXylFeeSybPNrrygZsW1M6GR1gQ+jKSERkp6tU7//bYySun7zt8cpHA20c0Fe1Wq22oX3xUg24jSUx6BYAg1H8oc/uf4vtFg09/hOuvNi4AcrivpZvjZLRSPN9Sqvub3vpvog4svTX59kWzfMQm/pUIQAw9L7Jxj9Pthr/pfW1oMId9fngiPGIuDMidkTEXRGxMyLuzteN7s3HMx0trcyWVxXfOP5ML6/Ibsx/PtdFkB1k47/n87WtleO/YvQX4yN5bls9/lJy7ES1sj8/JhNR2pDlpzvU8e3LP3/arqzcNP7Ltqz+YiyYt+PyaGOCbqx45ejs4ux64y5c+TBi92ir+JPllYAkInZFxO7u/uv8DuNCnHj8y73tdvr3+DvowTpT7YuIxxrnfylWxV9IOq9PTm2MamX/VHFV3OjHny6+3qb6sXXF3wPZ+d/c8vpfjn88aV6vXei+jou/ftL2nrKL639Zdv2PJW/W00WneH92cfHMdMRY8uqNr89cf2+RL/bP4p/Y17r/74jrR2JPRGQX8f0R8UBEPJi3/aGIeDgi9nWI//uXHnnn5uPvryz+o12d/+4TIye/+7pd/Ws7/wfrqYn8lbX8/ltrA9dz7AAAAOD/Iq0/A5+kk8vpNJ2cbDzDvzM2p9X5hcUnjs2/d/po41n58SilxUzX9qb50Ol8brjIz6zKH8jnjT8b2VTPT87NV/u1pg6szZY2/T/z28igWwf0nc9rwfDS/2F46f8wvPR/GF5r7f9LfW4HcOu16v8XIq4NoCnALWb8D8NL/4fhpf/D8NL/YSjd9Of6i69HabPPjsPr+caAaqVo302+vXeJ+LtWW1X0QhffL3D7JiJtV1TLnxsfdAt7mth4e4WTJ0p5N2tRNIBfRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3wTwAAAP//Fovhpg==") 00:47:24 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 00:47:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 00:47:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:25 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x2040, 0x100) 00:47:25 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x220, 0x0) [ 2845.268711][ T1917] loop4: detected capacity change from 0 to 512 [ 2845.277628][ T1917] EXT4-fs (loop4): Ignoring removed bh option 00:47:25 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) [ 2845.295910][ T1917] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2845.300683][ T1917] EXT4-fs (loop4): Remounting filesystem read-only 00:47:25 executing program 5: mq_open(&(0x7f0000000100)='o\x00', 0xc0, 0x0, 0x0) [ 2845.305688][ T1917] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2845.311450][ T1917] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2845.324729][ T1917] EXT4-fs (loop4): 1 truncate cleaned up [ 2845.326178][ T1917] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:26 executing program 2: mq_open(&(0x7f00000001c0)='%%\xfe)@\x00', 0x40, 0x122, &(0x7f0000000200)) 00:47:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:26 executing program 3: eventfd2(0x0, 0xce3a914040bfbd4a) 00:47:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:26 executing program 1: clock_gettime(0x6, &(0x7f00000003c0)) 00:47:26 executing program 3: pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x4}, 0x0, 0x0, 0x0) 00:47:27 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1c802, 0x0) 00:47:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:27 executing program 5: mq_open(&(0x7f0000000100)='o\x00', 0xc0, 0x0, 0x0) 00:47:27 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0xa0) [ 2847.231382][ T1954] loop4: detected capacity change from 0 to 512 00:47:27 executing program 2: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) [ 2847.246351][ T1954] EXT4-fs (loop4): Ignoring removed bh option 00:47:28 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0)) 00:47:28 executing program 5: mq_open(&(0x7f0000000100)='o\x00', 0xc0, 0x0, 0x0) [ 2848.140376][ T1954] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2848.143669][ T1954] EXT4-fs (loop4): Remounting filesystem read-only [ 2848.147247][ T1954] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2848.215125][ T1954] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2848.219861][ T1954] EXT4-fs (loop4): 1 truncate cleaned up [ 2848.221044][ T1954] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:28 executing program 1: migrate_pages(0x0, 0x0, &(0x7f00000014c0), 0x0) 00:47:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:28 executing program 3: syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./mnt\x00', 0x10, &(0x7f0000000000)=ANY=[], 0x1, 0x7e64, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8}, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000007fc0)={0x0, 0x80000}) 00:47:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) readv(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/56, 0x38}], 0x300) 00:47:28 executing program 5: mq_open(&(0x7f0000000100)='o\x00', 0xc0, 0x0, 0x0) 00:47:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 00:47:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000080), 0x88) 00:47:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2849.285408][ T1998] loop4: detected capacity change from 0 to 512 [ 2849.298225][ T1998] EXT4-fs (loop4): Ignoring removed bh option 00:47:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8) 00:47:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt(r0, 0x0, 0x5, &(0x7f0000000040)=""/224, &(0x7f0000000140)=0xe0) 00:47:29 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="91978eb1e64d66937a149786c2f64a163894e5872fc4cde7b628f5cdd648a14ffa6e6a58dfc28b2d4ee471009589d9f4347bdab12889638e623b86c1f6065139a682d80cc847cd570ac2660f1a02a0bea428c2da41f2d14cc037b747dd3b3be8800788cdfe4cb5971594b5f81e9e3a4be9a964707ce87abef39f115ba89a8b7471dbb5dbbc174c51e19186065fe3b3a6f45501eed8af571edd450ed9049ba39af0070d8c5a633f7fac0aded6b3ded1607766215baa497780228a1c4b66123132d22215b4e4be005a82acca75ab845cee10d532fa84827a96ac355d9540ea82d0098d6bc7", 0xe4}, {&(0x7f0000000740)="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", 0x71d}], 0x2f024fe6978323fa}, 0x0) [ 2850.200427][ T1998] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2850.211042][ T1998] EXT4-fs (loop4): Remounting filesystem read-only [ 2850.212555][ T1998] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2850.296393][ T1998] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2850.304127][ T1998] EXT4-fs (loop4): 1 truncate cleaned up [ 2850.305309][ T1998] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:30 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 00:47:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000980), &(0x7f00000009c0)=0x18) 00:47:31 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000001780), 0x200, 0x0) 00:47:31 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 00:47:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000000c0)={0x0, 0x220}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 00:47:31 executing program 2: fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xee00, 0x400) 00:47:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2851.541101][ T2041] loop4: detected capacity change from 0 to 512 [ 2851.554850][ T2041] EXT4-fs (loop4): Ignoring removed bh option 00:47:31 executing program 1: setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 00:47:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) [ 2852.412904][ T2041] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2852.426145][ T2041] EXT4-fs (loop4): Remounting filesystem read-only 00:47:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2852.438608][ T2041] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:47:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4000801) [ 2852.484525][ T2041] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2852.493352][ T2041] EXT4-fs (loop4): 1 truncate cleaned up 00:47:32 executing program 5: semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000000)=""/34) [ 2852.523386][ T2041] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:47:32 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) flock(r0, 0x1) 00:47:32 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) 00:47:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxtr/dEf6moVgz+SJq1a0IOKQg8Kgh7qMabbUrttpIlgS7FRpB6l4F08Cv4FnvQi6knwqncpFOnFKggrszuTbtLdNdvsdrX7+cA07+17y3vfmXnbN/NmN4ChVc7+SSK2RsQvEbG7kV1Zodz4c+3q+bk/r56fS6JWe+P3pF7vj6vn54qqxfu25JmJNCL9OIk9LdpdOHvu5Gy1WjmT56cWT707tXD23FMnTs0erxyvnJ45dOjggelnn5l5uidxbsv6uvuD+b27Dr916bW5I5fe/uGrrL9b8/LmOHqlHOWV+7LJo71ubMC2NaWT0QF2hK6MRER2uEr18b89RuL6wdser3w00M4BfVWr1Wob2hcv1YDbWBKD7gEwGMV/9Nn1b7HdoqnHf8KVFxsXQFnc1/KtUTIaaV6ntOr6tpfui4gjS399nm3RfB9iU58aBACG3jfZ/OfJVvO/NO5pqndH/X5wxHhE3BkROyLirojYGRF3R9Tr3pvPZzpaWpktryq+cf6ZXl6R3Zj/fa6LIDvI5n/P52tbK+d/xewvxkfy3LZ6/KXk2IlqZX++TyaitCHLT3do49uXf/60XVm5af6XbVn7xVww78fl0cYNurHilaOzi7Prjbtw5cOI3aOt4k+WVwKSiNiVrw12Ib/CuBAnHv9yb7tK/x5/Bz1YZ6p9EfFY4/gvxar4C0nn9cmpjVGt7J8qzoob/fjTxdfbND+2rvh7IDv+m1ue/8vxjyfN67UL3bdx8ddP2l5TdnH+L8vO/7HkzXq6GBTvzy4unpmOGEtevfH1mevvLfJF/Sz+iX2tx/+OuL4n9kREdhLfHxEPRMSDed8fioiHI2Jfh/i/f+mRd24+/v7K4j/a1fHvPjFy8ruv27W/tuN/sJ6ayF9Zy+ffWju4nn0HAAAA/xdp/Rn4JJ1cTqfp5GTjGf6dsTmtzi8sPnFs/r3TRxvPyo9HKS3udG1vuh86nd8bLvIzq/IH8vvGn41squcn5+ar/VpTB9ZmS5vxn/ltZNC9A/rO97VgeBn/MLyMfxhexj8Mr7WO/6U+9wO49VqN/wsR1wbQFeAWM/+H4WX8w/Ay/mF4Gf8wlG76e/3Fz6O0qbPj8Hp+MaBaKfp3k2/vXSL+rtVWFb3Qxe8L3L6JSNsV1fLnxgfdw54mNt5e4eSJUj7MWhQN4MMIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgD/4JAAD//wc74ao=") 00:47:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:33 executing program 3: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/113) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 00:47:33 executing program 5: getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) 00:47:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) close(r0) 00:47:33 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000001780)={@local, @remote, @val, {@ipv4}}, 0x0) [ 2853.563352][ T2084] loop4: detected capacity change from 0 to 512 [ 2853.579121][ T2084] EXT4-fs (loop4): Ignoring removed bh option 00:47:33 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv4}}, 0x0) 00:47:34 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1410, 0xffffffffffffffff, 0x0) 00:47:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2854.458341][ T2084] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2854.461696][ T2084] EXT4-fs (loop4): Remounting filesystem read-only [ 2854.463184][ T2084] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:47:34 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) read(r0, &(0x7f00000002c0)=""/245, 0xf5) execve(0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) [ 2854.497667][ T2084] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2854.504762][ T2084] EXT4-fs (loop4): 1 truncate cleaned up [ 2854.509036][ T2084] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:34 executing program 2: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 00:47:34 executing program 3: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 00:47:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M+LG1UcAPDvzP7ob7vW+qM/1GgVF3/sdrdVC3pQUehBQdBDPa7btNSmXemuYEuxq0g9SsG7eBT8CzzpRdST4FXvUijSi1UQIpPMbLNpEjfdpNHm84HZvJf3knnfmXnZN28mCWBolbI/ScTWiPglIvbUs6srlOoP166en//z6vn5JKrVN35PavX+uHp+vqhavG5LnplMI9KPk9p7Nls8e+7kXKVSPpPnp5dOvTu9ePbcUydOzR0vHy+fnj106OCBmWefmX26J3Fuy9q6+4OFvbsOv3Xptfkjl97+4ausvVvz8sY4eqUUpdXbssGjvV7ZgG1rSCejA2wIXRmJiGx3jdX6//YYies7b3u88tFAGwf0VbVarW5oX7xcBW5jSQy6BcBgFP/os/PfYrlFQ4//hCsv1k+Asriv5Uu9ZDTSvM5Y0/ltL90XEUeW//o8W6JxHmJTn1YIAAy9b7Lxz5Otxn9p3NNQ747afHDERETcGRE7IuKuiNgZEXdH1Orem49nOlpenS01Fd84/kwvr8puzB+f6yLIDrLx3/P5ta3V479i9BcTI3luWy3+seTYiUp5f75NJmNsQ5af6bCOb1/++dN2ZaWG8V+2ZOsvxoJ5Oy6P1ifoxotnjs4tza037sKVDyN2j7aKP1m5EpBExK6I2N3dW+dnGBfixONf7m1X6d/j76AH15mqX0Q8Vt//y9EUfyHpfH1yemNUyvuni6PiRj/+dPH1NqsfX1f8PZDt/80tj/+V+CeSxuu1i92v4+Kvn7Q9p+zi+F+RHf/jyZu1dNEp3p9bWjozEzGevHrj87PXX1vki/pZ/JP7Wvf/HXF9S+yJiOwgvj8iHoiIB/O2PxQRD0fEvg7xf//SI+/cfPz9lcV/tKv9331i5OR3X7db/9r2/8FaajJ/Zi2ff2tt4Hq2HQAAAPxfpLV74JN0aiWdplNT9Xv4d8bmtLKwuPTEsYX3Th+t3ys/EWNpMdO1vWE+dCafGy7ys035A/m88Wcjm2r5qfmFSr+uqQNrs6VN/8/8NjLo1gF95/taMLz0fxhe+j8ML/0fhtda+/9yn9sB3Hqt+v+FiGsDaApwixn/w/DS/2F46f8wvPR/GEo3/b3+4udR2tTZcXg9vxhQKRftu8mX9y4Rf1erTUUvdPH7ArdvItJ2RdX8vvFBt7CniY23Vzh5YizvZi2KBvBhBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Af/BAAA//8DZ+Gr") 00:47:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:35 executing program 1: getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 00:47:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001840)={&(0x7f0000000240)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000280)="03", 0x1}], 0x1}, 0x0) 00:47:35 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0xa, 0xffffffffffffffff) 00:47:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 00:47:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000001c0), 0x4) 00:47:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000f00)={&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000e00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:47:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:36 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 00:47:36 executing program 2: setitimer(0x0, &(0x7f0000000080)={{}, {0xfffffffeffffffff}}, 0x0) [ 2856.452878][ T2137] loop4: detected capacity change from 0 to 512 00:47:36 executing program 5: getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) [ 2857.336129][ T2137] EXT4-fs (loop4): Ignoring removed bh option [ 2857.383677][ T2137] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2857.387849][ T2137] EXT4-fs (loop4): Remounting filesystem read-only [ 2857.389325][ T2137] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2857.405740][ T2137] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2857.414387][ T2137] EXT4-fs (loop4): 1 truncate cleaned up [ 2857.415629][ T2137] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:37 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockname$inet(r0, 0x0, &(0x7f00000000c0)=0xffffffffffffffd1) 00:47:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:37 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000000)) 00:47:37 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) connect$inet(r0, &(0x7f0000000080), 0xc) 00:47:37 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, 0x2f) 00:47:37 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x31, 0x0, 0x0) 00:47:37 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x11, 0x0, 0x2f) 00:47:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x2, 0x0, 0x83be}, 0x48) 00:47:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x94, r2, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x77, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void, [{0xdd, 0x6, "f1d2a4d740dc"}]}}]}, 0x94}}, 0x0) 00:47:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059965340450c3061887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00090100000012"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2858.487075][ T2181] loop4: detected capacity change from 0 to 512 [ 2858.510105][ T2183] udc-core: couldn't find an available UDC or it's busy [ 2858.517091][ T2183] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2858.521639][ T2181] EXT4-fs (loop4): Ignoring removed bh option [ 2859.382969][ T2181] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2859.388456][ T2181] EXT4-fs (loop4): Remounting filesystem read-only [ 2859.389736][ T2181] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2859.417915][ T2181] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2859.428244][ T2181] EXT4-fs (loop4): 1 truncate cleaned up [ 2859.436439][ T2181] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:39 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x35, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 00:47:39 executing program 2: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}, @input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:47:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x94, r2, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x77, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void, [{0xdd, 0x6, "f1d2a4d740dc"}]}}]}, 0x94}}, 0x0) [ 2859.522216][ T2196] udc-core: couldn't find an available UDC or it's busy 00:47:39 executing program 1: r0 = socket(0x1d, 0x2, 0x7) setsockopt$inet6_mreq(r0, 0x6b, 0x3, 0x0, 0x4) [ 2859.531127][ T2196] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 00:47:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:39 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$ptp(r0, &(0x7f0000000000)=""/214, 0xd6) 00:47:39 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) 00:47:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x94, r2, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x77, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void, [{0xdd, 0x6, "f1d2a4d740dc"}]}}]}, 0x94}}, 0x0) 00:47:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x3a, 0x0, 0x0) 00:47:40 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x891b, &(0x7f0000000000)) [ 2860.503678][ T2210] loop4: detected capacity change from 0 to 512 [ 2860.968464][ T2210] EXT4-fs (loop4): Ignoring removed bh option [ 2861.368155][ T2210] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2861.371486][ T2210] EXT4-fs (loop4): Remounting filesystem read-only [ 2861.372918][ T2210] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2861.386147][ T2210] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2861.394659][ T2210] EXT4-fs (loop4): 1 truncate cleaned up [ 2861.395940][ T2210] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x3c, 0x0, 0x0) 00:47:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x94, r2, 0x1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x77, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @from_mac}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void, [{0xdd, 0x6, "f1d2a4d740dc"}]}}]}, 0x94}}, 0x0) 00:47:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) 00:47:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}, {&(0x7f0000000140)}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r1, 0x311}, 0x14}}, 0x0) 00:47:41 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x21, 0x0, 0x0) 00:47:41 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x4c, 0x0, 0x0) 00:47:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4}}}, 0x1c}}, 0x0) [ 2861.835101][ T2238] loop4: detected capacity change from 0 to 512 [ 2861.878968][ T2238] EXT4-fs (loop4): Ignoring removed bh option 00:47:41 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xf4240) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x3edc, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) r2 = syz_io_uring_setup(0x3edc, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"b479619c2e200482d16beee460f9b5ae", 0x0, 0x0, {0xfffffffffffffffc, 0x9}, {0x7fffffff, 0x8}, 0x1, [0x87, 0x7, 0x0, 0x8, 0x81, 0x3ff, 0x7, 0xd3e, 0x0, 0x580a, 0x1, 0x8000000000000001, 0x4, 0x6, 0x7, 0x2]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002840)='\x00U', 0x2}, {&(0x7f00000028c0)="5702d2789f4a4ae29e79d77e6cee67ad86b9a4457a3143d35c79a8ba9601ba28ff80fb6daae7b6fb15ce7935415084c86556ec391ec6ab32d820086eaf6e3c2f9d0ce169872a41440686b7fca90cbc7812ee391c2d43de9bdd5f721b93cdafcb762547fc56610c692dfd55f524cb750fa00ab83c2bd6220e6a42a0bcb4f91b7c762a638cde885d01c455468ecf06aadaefc797b796a7d8815dd25d92ad87c0ff06daeff60ad15dbdd3a5dbdfdfbe29d677c96c98ab83645beda285f20ea41eb5c069086055cc6c8ffab5335718effedfd6a5bf", 0xd3}, {&(0x7f00000029c0)="e75f945288adad05ae5b2eab8bade76d2c3522496cdb11ac0d687ebbf4c586633d170bacaadf4c0eeca69daa6514a9371c2c844495e76417f9ccf4c9c8160771d5f074b042e5799e49b8e1a3e81b5168255b822829a63a385ba1d9f0b04be4e5d95fb5079f1a2600ea8b791aea45d12eb58cfb61a103f076a89d267011689d6f8eb672e29828595c17fa4d74efd231fadefba2911af96c3c8c9b", 0x9a}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000002800)="fd4c4f854f485fc6e26e03cbca533cca78ec7209c9e2896cd6ae62215fac0230534067bb7ba646129109badf64e069c7afc92bb5546b21", 0x37}], 0x5}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @empty}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000002d00)="92", 0x1}], 0x1}}], 0x2, 0x4000040) recvfrom$llc(r5, &(0x7f0000000bc0)=""/167, 0xa7, 0x80000000, &(0x7f0000000c80)={0x1a, 0x309, 0x9, 0x5, 0x5, 0x7, @broadcast}, 0x10) sendmmsg(r6, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002280)="2ca22f8a15dfddf8293a22be0f8988aaffdb221adab35006e6d48f42558fcdd8f8bec0d6857900c95dc8acc5e7d09046e7d6e1b7d611953022f5a92b927b4b194ecce463bb4f853c6b617f8cfefd015423d999a60cdb8e331da5b31e3df24a3d86d48327b5788a516d85b41efa903ae12c27d5ef545415161d3dfe7cf0433c1d0aeb2e544f7d43440c09e96f3ad2e519463e35f91145750d4557ac684fc36fcbf421bfb42b4aa43a96a3e85a0dc31357c5fb4441533e409bf1f1add37a2c0a22a9556539c89dcce38d0578980721a0c7148c55a2f237f8827c30e14415de7a70d8925e2915d844", 0xe7}, {&(0x7f0000002380)="aff897d96278c5a4790da48e7032b3fc6e9f8d67c323d6ebbf71559228e72d9a9d4953300386d3102f031a2877633fe6d7494d0dea92323225bca6c308d3425c1639fc2fc1e5a2eae25e11d49df8d0e654e8ac857278df96caf9", 0x5a}, {&(0x7f0000002b00)="617ce018a66f1ff8bfbbaa114e37cee2a4a2272970fcf141d816a42503ea93a76208e8f14449af5475bc520dac01512db82e493e7c8054bfac6fb46af0bb1bc18be068a352d9a5f74c125fa349da05a3279f57180963df59c72870787b1657722e7262d1e83a8db40e8c08bed2475b4ff19140c18dfdde3dde1e2b3f0113fd485ffc2ecd50be87a9cd51816f981bec61c66267c717833ee9332cc6c4a9dd68c52c6f7cc401395f8432221837d181e8970f6a9625031b5a43e975909a4cf02e6f6e5d3f5543a2b0c6df2f8a0e8b11e5405b76514472ec9991cd63d0097c54f7e7f7b747cd573af4a6050055c08a7e160a698a4aef60bd", 0xf6}, {&(0x7f0000002500)="e417bd76ce4e643945321bd20e226ece611731be928bab16246924ad7b3366f83c7e062562eb34262e14c60cdec4e539f9849c41b339be00b63a998e37982b47d416884d337c289326011b8a80da0f254c119a51c69dd2989c7699c54783ba89c85d79f215be695e772493836be26c58c42ac59b55affd7f090096ee8eedacf201d74644a7cb83056a1c912f13b1fc376e58", 0x92}, {&(0x7f00000025c0)="e8ed9cb41245eb8dbc0399108e9f7a844940b144a6acd4206dad240511e00be71262d771e4890a58e6", 0x29}, {&(0x7f0000002600)="91e32bf2409cc35a0fd0bca703b551ac88e719483470c2ad9ddb47344f84410c3aadb7e0761e09f84335d277643199ef03981e09aa99da2eb0c94a871c38bce47bc5991ddd3f2041cf0363ba6c26ce6c468f821a485c08c7b565cfcf7dc2fb35253b07aa52fc00a94d505147197dba284004da3592ee4f4fa57806f2b60d3347e417ce73d9f565c3be0ddcea4ed2287696fb2a3716db3a68c4faeb71d5c2bbabbf8a7ae8909775b98fd815a560292aa9c11d359c270ca02d5ac935ab945369490502db407bb2e712b1639fd77f31f6a1554c0297b577845697d5bf79512d7d8cd849c887ea74cd0557641e7a840815f8b4d8798028", 0xf5}, {&(0x7f0000002700)="5cb00fb47a34d6947e", 0x9}], 0x7, &(0x7f0000005980)=ANY=[@ANYBLOB="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"], 0x1590}}], 0x1, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f00000007c0)={r7, 0x6, 0x6}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000016c0)={0x12, 0x6, {0x8, @usage=0x6, 0x0, 0xffffffffffffffb1, 0xffffffffffffffff, 0x8, 0x400, 0x100000004, 0x40a, @struct={0x2000000}, 0x3ff, 0x2, [0x7fffffffffffffff, 0x400, 0x8001, 0xf213, 0x7f, 0x7]}, {0x1f, @usage, 0x0, 0x7, 0xc9, 0x0, 0x0, 0x3, 0x4cc, @usage=0x5, 0xfffffff7, 0x3, [0x6, 0x3, 0x4, 0x8002, 0x7]}, {0x3, @usage=0x7fff, r7, 0x1, 0x9, 0x400, 0x3, 0x5, 0x18, @struct={0x4, 0x4}, 0x8, 0xd, [0x100000000, 0xfffffffffffffffc, 0x9a54, 0x7, 0x9]}, {0x9, 0x4, 0x8}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={r7, 0x0, 0x4}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000280)={{}, 0x0, 0xa, @unused=[0x80000001, 0x101, 0x1, 0x7ed], @devid=r7}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001280)={r7, "1c3172333544fbb3958e7ba5dfa30119"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000040)={0x2, 0x4, {0x8000000000000001, @usage=0x10001, 0x0, 0x4, 0x0, 0x9, 0x2, 0x9e, 0x0, @usage=0x100000000, 0xa5, 0x6, [0x2, 0x1, 0x0, 0x0, 0x9, 0xf8]}, {0x7, @struct={0x6, 0x1}, r7, 0x8, 0x7, 0xfffffffffffffff9, 0x6, 0xff, 0x400, @struct={0x9668, 0x5}, 0x7, 0x6, [0x3a, 0x10000, 0x60000000000, 0x3, 0x5, 0x101]}, {0x71, @usage=0x14451a5a, 0x0, 0x5, 0x4, 0x81, 0x10001, 0x5, 0x8, @usage=0x3, 0x7c, 0x7fffffff, [0x1, 0x8000000000000000, 0x4, 0xfff, 0x3, 0x4]}, {0x0, 0x2, 0x2}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000440)={r7, 0x5, 0x1000000010000000}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000140)={r7, 0x5, 0x5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000680)={r7, 0x400, 0x5}) [ 2861.926270][ T2238] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:47:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2861.968639][ T2238] EXT4-fs (loop4): Remounting filesystem read-only [ 2861.970291][ T2238] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2862.020164][ T2238] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:47:42 executing program 2: r0 = socket(0x1d, 0x2, 0x7) setsockopt$inet6_mreq(r0, 0x6b, 0x3, 0x0, 0x0) [ 2862.050414][ T2238] EXT4-fs (loop4): 1 truncate cleaned up [ 2862.061872][ T2238] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:42 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x16, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 00:47:42 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, 0x0) 00:47:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}, {&(0x7f0000000140)}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:47:42 executing program 1: clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f0000000540)={r0, r1+10000000}, 0x0) 00:47:42 executing program 3: setpriority(0x0, 0x0, 0x2) 00:47:42 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x80c00) [ 2862.319457][ T2267] loop4: detected capacity change from 0 to 512 [ 2863.149833][ T2267] EXT4-fs (loop4): Ignoring removed bh option 00:47:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}, {&(0x7f0000000140)}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2863.218765][ T2267] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2863.222225][ T2267] EXT4-fs (loop4): Remounting filesystem read-only [ 2863.223790][ T2267] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2863.270880][ T2267] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:47:43 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000600), 0x0, 0x0) 00:47:43 executing program 2: umount2(&(0x7f0000000000)='./file0\x00', 0x0) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) 00:47:43 executing program 3: futex(&(0x7f0000000400), 0x5, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0) 00:47:43 executing program 5: syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x3800042, &(0x7f0000000240)={[{@uid_ignore}, {@uid_forget}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@uid_forget}, {@shortad}, {@dmode={'dmode', 0x3d, 0x3}}]}, 0x1, 0xbf2, &(0x7f0000000c40)="$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") [ 2863.295662][ T2267] EXT4-fs (loop4): 1 truncate cleaned up [ 2863.302750][ T2267] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:43 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000680), 0x0, 0x40) 00:47:43 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00006ab000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock2(&(0x7f0000a7b000/0x4000)=nil, 0x4000, 0x1) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) 00:47:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3MuLHEUYAPCvex95mzXGRx7qaBQXH7vZTdSAHlQUclAQ9BCP62YSYiZZya5gQjCrSDxKwLt4FPwLPOlF1JPgVe8SCJKLURBGeqZ7MzuZGXeyMxnN/H7Q2aqpmlR93V271dU9E8DQKmX/JBFbI+KXPJ80VyjVf1y7en7+z6vn55OoVt/4PanV++Pq+fmiavG+LXlmMo1IP05iT4t2F8+eOzlXqZTP5PnppVPvTi+ePffUiVNzx8vHy6dnDx06eGDm2Wdmn+5JnNuyvu7+YGHvrsNvXXpt/silt3/4Kuvv1ry8MY5eKUVp9b5s8GivGxuwbQ3pZHSAHaErIxGRHa6x2vjfHiNx/eBtj1c+GmjngL6qVqvVDe2Ll6vAbSyJQfcAGIziD312/Vtst2jq8Z9w5cX6BVAW97V8q5eMRprXGWu6vu2l+yLiyPJfn2dbNK5DbOpTgwDA0Psmm/882Wr+l8Y9DfXuqK0HR0xExJ0RsSMi7oqInRFxd0St7r35fKaj5dXZUlPxjfPP9PKq7Mb853NdBNlBNv97Pr+3tXr+V8z+YmIkz22rxT+WHDtRKe/P98lkjG3I8jMd2vj25Z8/bVdWapj/ZVvWfjEXzPtxebS+QDdevHJ0bmluvXEXrnwYsXu0VfzJyp2AJCJ2RcTu7v7r/ArjQpx4/Mu97Sr9e/wd9OA+U/WLiMfqx385muIvJJ3vT05vjEp5/3RxVtzox58uvt6m+fF1xd8D2fHf3PL8X4l/Imm8X7vYfRsXf/2k7TVlF+f/iuz8H0/erKWLQfH+3NLSmZmI8eTVG1+fvf7eIl/Uz+Kf3Nd6/O+I63tiT0RkJ/H9EfFARDyY9/2hiHg4IvZ1iP/7lx555+bj768s/qNdHf/uEyMnv/u6XftrO/4Ha6nJ/JW1/P5bawfXs+8AAADg/yKtPQOfpFMr6TSdmqo/w78zNqeVhcWlJ44tvHf6aP1Z+YkYS4uVru0N66Ez+dpwkZ9tyh/I140/G9lUy0/NL1T6dU8dWJstbcZ/5reRQfcO6Duf14LhZfzD8DL+YXgZ/zC81jr+l/vcD+DWazX+L0RcG0BXgFvM/B+Gl/EPw8v4h+Fl/MNQuunP9Rdfj9Kmzo7D6/nGgEq56N9Nvr13ifi7Wm0qeqGL7xe4fRORtiuq5s+ND7qHPU1svL3CyRNj+TBrUTSAX0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB98E8AAAD///A04bA=") 00:47:44 executing program 2: ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRESHEX], 0x100000530) 00:47:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:44 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/loop0', 0x80800, 0x0) [ 2864.278990][ T2304] loop5: detected capacity change from 0 to 2048 [ 2864.294206][ T2304] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2865.135398][ T2304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 00:47:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000001100)=""/202, 0x26, 0xca, 0x1}, 0x20) [ 2865.166292][ T2317] loop4: detected capacity change from 0 to 512 00:47:45 executing program 2: clock_gettime(0x0, 0x0) clock_gettime(0x7, &(0x7f00000002c0)) 00:47:45 executing program 5: syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x3800042, &(0x7f0000000240)={[{@uid_ignore}, {@uid_forget}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@uid_forget}, {@shortad}, {@dmode={'dmode', 0x3d, 0x3}}]}, 0x1, 0xbf2, &(0x7f0000000c40)="$eJzs3U9sHNd9B/DfG5IiZbcVEzuK3cbFpi1SmbFc/YupWIW7qmm2AWSZCMXcAnBFrtSFqSVBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokW1dILn4UOTUE9HCRlD0wBYBcgoYzOxbcilRlmyKEml/Pjb13Z19b+a9N+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/cvHU6fSoWwEAPEyXJ7966oz7PwB8olzx//8AAAAAAAAAAAAAAHDQpSjiiUixcHkjTVfvO4Yutdo3b02Nje9e7WiqavZV5cufodNnzp770guj57v5wfUftKfjtckrF2svz99YWGwuLTVna1Pt1sz8bPO+97DX+rcbqQagduP1m7PXri3Vzjx/dsfHt4bfH3z8+PCF0WdPPtMtOzU2Pj7ZU6Z/4CMf/Q53m+FxJIo4GSme+95PUiMiitj7WNzju7PfjladGKk6MTU2XnVkrtVoL5cfTnQHooio9VSqd8foIZyLPalHrJTNLxs8UnZvcqGx2Lg616xNNBaXW8ut+fZE6rS27E8tijifIlYjYn3wzt0NRBH9keI7xzbS1Yjo647DF6uJwXdvR7GPfbwPZTtrAxGrxSE4ZwfYYBTxaqT46TtFzJRjln/iCxGvlvmDiLfKfCkilV+McxHv7fI94nDqjyL+ojz/FzbSbHU96F5XLn2t9pX2tfmest3ryqG/PzxMB/zaNBRFNKor/kb66L/ZAQAAAAAAAAAAAAAAAOBBOxpFPB0pXvmPP67mFUc1L/3YhdE/GP7l3jnjT91jP2XZ5yNipbi/OblH8hTiiTSR0iOeS/xJNhRF/Eme//etR90YAAAAAAAAAAAAAAAAAACAT7QifhwpXnz3RFqN3jXFW+3rtSuNq3OdVWG7a/9210zf3NzcrKVO1nNO51zJuZpzLed6zihy/Zz1nNM5V3Ku5lzLuZ4z+nL9nPWc0zlXcq7mXMu5njP6c/2c9ZzTOVdyruZcy7meMw7I2r0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8nRRTx80jx7W9spEgRUY+Yjk6uDT7q1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApcFUxPcjRe0P61vb+iMiVf92nCh/ORf1I2V+OuqjZb4U9Ys5G1X217/1CNrP3gykIn4UKQaH3t464fn8D3TebX0N4q1vbr/71f5O9nU/HH5/8PHjxy6Mjv/6U3d7nXZrwMilVvvmrdrU2Pj4ZM/m/nz0T/dsG87HLR5M14mIpTfefL0xN9dc9MILL7zYevGor0w8DOX9/71I8Tvv/mf3ht+9//9S593WHT5+9qfb9/8Xb9/RPt3/n+jZ9mL+3chAf8TQ8o2FgeMRQ0tvvHmydaNxvXm92T536tSXR0e/fPbUwJGIoWutuWbPqz0PFQAAAAAAAAAAAAAAAMDDlYr4vUjR+NFGqkXErWq+1vCF0WdPPtMXfdV8qx3ztl6bvHKx9vL8jYXF5tJSc7Y21W7NzM827/dwQ9V0r6mx8X3pzD0d3ef2Hx16eX7hjcXW9T9a3vXzx4YuXl1aXmzM7P5xHI0iot67ZaRq8NTYeNXouVajXVWd2HUy3Yc3kIr4r0gxc66WPp+35fl/t8/w3zH/f+X2He3T/L9P9Wwrj5lSET+LFL/9l0/F56t2PhZ3jFku97eRYuT853K5OFKW67ah81yBzszAsuz/RYp//PnOst35kE9slz193wN7SJTn/1ik+P6ffzd+I2/b+fyH3c//Y7fvaJ/O/5M92x7b8byCPXedfP5PRoqXnng7fjNv+6Dnf3SfvXEiF956Psc+nf/P9Gwbzsf9rQfTdQAAAAAAAAAAgENtIBXxd5HimfH+9ELedj9//2/29h3t09//+mzPttmHtF7RngcVAAAAAA6IgVTEjyPF9eW3t+ZQ75z/3TP/83e353+Opds+rf6c71eq5wY8yD//6zWcjzu9924DAAAAAAAAAAAAAAAAAADAgZJSES/k9dSn77Ge+lqkeOV/nsvl0vGyXHcd+OHq16HL8+2TF+fm5mcay42rc83a5EJjplnWfTJSbPzN53LdolpfvbvefGeN9+212Bcjxfjfd8t21mLvrk3+5HbZ02XZT0WK//6HnWW761h/ZrvsmbLsX0eKr//z7mWPb5c9W5b9bqT44ddr3bKPlWW7z0f97HbZ52fm5+54FCoAAAAAAAAAAAAAAAAAAAB8WAOpiD+LFP97Y3VrLn9e/3+g523lrW/2rPd/m1vVOv/D1fr/d3v9Udb/H34w3QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEMlRRFvRoqFyxtpbbB83zF0qdW+eWtqbHz3akdTVbOvKl/+DJ0+c/bcl14YPd/ND67/oD0dr01euVh7ef7GwmJzaak5W5tqt2bmZ5v3vYe91t8euo6RagBqN16/OXvt2lLtzPNnd3x8a/j9wcePD18YffbkM92yU2Pj45M9ZfoHPsTRP1Tjth2JIv4qUjz3vZ+kfxmMKGLvY3GP785+O1p1YqTqxNTYeNWRuVajvVx+ONEdiCKi1lOp3h2jh3Au9qQesVI2v2zwSNm9yYXGYuPqXLM20Vhcbi235tsTqdPasj+1KOJ8iliNiPXBO3c3EEW8Him+c2wj/etgRF93HL54efKrp87cvR3FPvbxPpTtrA1ErBaH4JwdYINRxD9Fip++cyL+bTCiPzo/8YWIV8v8QcRbZb4UkcovxrmI93b5HnE49UcR/1+e/wsb6Z3B8nrQva5c+lrtK+1r8z1lu9eVQ39/eJgO+LVpKIr4YXXF30j/7r9rAAAAAAAAAAAAAAAAgAOkiF+LFC++eyJV84O35hS32tdrVxpX5zrT+rpz/7pzpjc3NzdrqZP1nNM5V3Ku5lzLuZ4zilw/Zz3ndM6VnKs513Ku54y+XD9nPed0zpWcqznXcq7njP5cP2c953TOlZyrOddyrueMAzJ3DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfPsbG2lzsLO+9HR0cs16oB97vwgAAP//1k7+eg==") [ 2865.202753][ T2317] EXT4-fs (loop4): Ignoring removed bh option [ 2865.256115][ T2317] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2865.268507][ T2317] EXT4-fs (loop4): Remounting filesystem read-only [ 2865.270014][ T2317] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:47:45 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000d80)) 00:47:45 executing program 1: futex(&(0x7f0000000800), 0x8, 0x0, 0x0, 0x0, 0x0) [ 2865.471933][ T2317] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2866.097793][ T2317] EXT4-fs (loop4): 1 truncate cleaned up [ 2866.099076][ T2317] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:47 executing program 3: nanosleep(&(0x7f0000000240)={0xfffffffffffffff8}, 0x0) 00:47:47 executing program 5: syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x3800042, &(0x7f0000000240)={[{@uid_ignore}, {@uid_forget}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@uid_forget}, {@shortad}, {@dmode={'dmode', 0x3d, 0x3}}]}, 0x1, 0xbf2, &(0x7f0000000c40)="$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") 00:47:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:47 executing program 1: mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) 00:47:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0) 00:47:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2867.130636][ T2350] loop4: detected capacity change from 0 to 512 00:47:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000440), 0x98) [ 2867.146674][ T2350] EXT4-fs (loop4): Ignoring removed bh option 00:47:47 executing program 1: pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/154, 0x9a}], 0x1) [ 2867.150520][ T2352] loop5: detected capacity change from 0 to 2048 [ 2867.169311][ T2352] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2867.176152][ T2352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2867.558508][ T2350] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:47:47 executing program 3: syz_emit_ethernet(0x14, &(0x7f0000000f80)={@dev, @multicast, @val={@void}, {@generic={0x8848, "e8bb"}}}, 0x0) 00:47:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2868.021758][ T2350] EXT4-fs (loop4): Remounting filesystem read-only [ 2868.023113][ T2350] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) 00:47:48 executing program 5: syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd609ec83d00203a00ff"], 0x0) [ 2868.050372][ T2350] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2868.060255][ T2350] EXT4-fs (loop4): 1 truncate cleaned up [ 2868.061610][ T2350] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxtr/dEf6moVgz+SJq1a0IOKQg8Kgh7qMabbUrttpIlgS7FRpB6l4F08Cv4FnvQi6knwqncpFOnFKggrszuTbtLdNdvsdrX7+cA07+172/e+M/OSN/NmN4ChVc7+SSK2RsQvEfFwI7uyQrnx49rV83N/Xj0/l0St9sbvSb3eH1fPzxVVi/dtyTMTaUT6cRJ7WrS7cPbcydlqtXImz08tnnp3auHsuadOnJo9XjleOT1z6NDBA9PPPjPzdE/i3Jb1dfcH83t3HX7r0mtzRy69/cNXWX+35uXNcfRKOcor92WTR3vd2IBta0onowPsCF0ZiYjscJXq4397jMT1g7c9XvlooJ0D+qpWq9U2tC9eqgG3sSQG3QNgMIo/9Nn1b7HdoqnHf8KVFxsXQFnc1/KtUTIaaV6ntOr6tpfui4gjS399nm3RfB9iU58aBACG3jfZ/OfJVvO/NO5pqndH/X5wxHhE3BkROyLirojYGRF3R9Tr3pvPZzpaWpktryq+cf6ZXl6R3Zj/fK6LIDvI5n/P52tbK+d/xewvxkfy3LZ6/KXk2IlqZX++TyaitCHLT3do49uXf/60XVm5af6XbVn7xVww78fl0cYNurHilaOzi7Prjbtw5cOI3aOt4k+WVwKSiNgVEbu7+6/zK4wLceLxL/e2q/Tv8XfQg3Wm2hcRjzWO/1Ksir+QdF6fnNoY1cr+qeKsuNGPP118vU3zY+uKvwey47+55fm/HP940rxeu9B9Gxd//aTtNWUX5/+y7PwfS96sp4tB8f7s4uKZ6Yix5NUbX5+5/t4iX9TP4p/Y13r874jre2JPRGQn8f0R8UBEPJj3/aF8zXxfh/i/f+mRd24+/v7K4j/a1fHvPjFy8ruv27W/tuN/sJ6ayF9Zy++/tXZwPfsOAAAA/i/S+jPwSTq5nE7TycnGM/w7Y3NanV9YfOLY/HunjzaelR+PUlrc6dredD90Or83XORnVuUP5PeNPxvZVM9Pzs1X+7WmDqzNljbjP/PbyKB7B/Sdz2vB8DL+YXgZ/zC8jH8YXmsd/0t97gdw67Ua/xcirg2gK8AtZv4Pw8v4h+Fl/MPwMv5hKN305/qLr0dpU2fH4fV8Y0C1UvTvJt/eu0T8XautKnqhi+8XuH0TkbYrquXPjQ+6hz1NbLy9wskTpXyYtSgawC8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPvgnAAD//+iM4bI=") 00:47:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2868.122995][ T2374] loop2: detected capacity change from 0 to 512 [ 2868.153002][ T2374] EXT4-fs (loop2): Ignoring removed bh option 00:47:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2870.529159][ T2390] loop3: detected capacity change from 0 to 512 00:47:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}, {&(0x7f0000000140)}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2870.568039][ T2390] EXT4-fs (loop3): Ignoring removed bh option [ 2870.571839][ T2374] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4278190080 (level 0) 00:47:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2870.582862][ T2374] EXT4-fs (loop2): Remounting filesystem read-only [ 2870.594070][ T2374] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1) [ 2871.084852][ T2374] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 8388607 (level 2) 00:47:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2871.440984][ T2374] EXT4-fs (loop2): 1 truncate cleaned up [ 2871.442315][ T2374] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2871.448882][ T2390] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 4278190080 (level 0) [ 2871.468849][ T2390] EXT4-fs (loop3): Remounting filesystem read-only [ 2871.476124][ T2390] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 2871.488453][ T2408] loop4: detected capacity change from 0 to 512 [ 2871.493619][ T2390] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 8388607 (level 2) [ 2871.494174][ T2408] EXT4-fs (loop4): Ignoring removed bh option 00:47:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2873.845886][ T2390] EXT4-fs (loop3): 1 truncate cleaned up [ 2873.847278][ T2390] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2873.909489][ T2408] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2873.943294][ T2408] EXT4-fs (loop4): Remounting filesystem read-only [ 2873.949069][ T2408] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2874.915104][ T2408] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2874.926633][ T2408] EXT4-fs (loop4): 1 truncate cleaned up [ 2874.927904][ T2408] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}, {&(0x7f0000000140)}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2875.771761][ T2445] loop2: detected capacity change from 0 to 512 [ 2875.777635][ T2445] EXT4-fs (loop2): Ignoring removed bh option [ 2875.823804][ T2445] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4278190080 (level 0) [ 2875.846034][ T2445] EXT4-fs (loop2): Remounting filesystem read-only [ 2875.856725][ T2445] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1) [ 2875.878232][ T2445] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 8388607 (level 2) [ 2875.900011][ T2445] EXT4-fs (loop2): 1 truncate cleaned up [ 2875.906706][ T2445] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x1}, {0x0}, {&(0x7f0000000140)}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxtr/dEf6moVgz+SJq1a0IOKQg8Kgh7qMabbUrttpIlgS7FRpB6l4F08Cv4FnvQi6knwqncpFOnFKggrszuTbtLdNdvsdrX7+cA07+172/e+M/OSN/NmN4ChVc7+SSK2RsQvEbG3kV1Zodz4ce3q+bk/r56fS6JWe+P3pF7vj6vn54qqxfu25JmJNCL9OIk9LdpdOHvu5Gy1WjmT56cWT707tXD23FMnTs0erxyvnJ45dOjggelnn5l5uidxbsv6uvuD+b27Dr916bW5I5fe/uGrrL9b8/LmOHqlHOWV+7LJo71ubMC2NaWT0QF2hK6MRER2uEr18b89RuL6wdser3w00M4BfVWr1Wob2hcv1YDbWBKD7gEwGMUf+uz6t9hu0dTjP+HKi40LoCzua/nWKBmNNK9TWnV920v3RcSRpb8+z7Zovg+xqU8NAgBD75ts/vNkq/lfGvc01bujfj84Yjwi7oyIHRFxV0TsjIi7I+p1783nMx0trcyWVxXfOP9ML6/Ibsx/PtdFkB1k87/n87WtlfO/YvYX4yN5bls9/lJy7ES1sj/fJxNR2pDlpzu08e3LP3/arqzcNP/Ltqz9Yi6Y9+PyaOMG3VjxytHZxdn1xl248mHE7tFW8SfLKwFJROyKiN3d/df5FcaFOPH4l3vbVfr3+DvowTpT7YuIxxrHfylWxV9IOq9PTm2MamX/VHFW3OjHny6+3qb5sXXF3wPZ8d/c8vxfjn88aV6vXei+jYu/ftL2mrKL839Zdv6PJW/W08WgeH92cfHMdMRY8uqNr89cf2+RL+pn8U/saz3+d8T1PbEnXxu/PyIeiIgH874/FBEPR8S+DvF//9Ij79x8/P2VxX+0q+PffWLk5Hdft2t/bcf/YD01kb+ylt9/a+3gevYdAAAA/F+k9Wfgk3RyOZ2mk5ONZ/h3xua0Or+w+MSx+fdOH208Kz8epbS407W96X7odH5vuMjPrMofyO8bfzayqZ6fnJuv9mtNHVibLW3Gf+a3kUH3Dug7n9eC4WX8w/Ay/mF4Gf8wvNY6/pf63A/g1ms1/i9EXBtAV4BbzPwfhpfxD8PL+IfhZfzDULrpz/UXX4/Sps6Ow+v5xoBqpejfTb69d4n4u1ZbVfRCF98vcPsmIm1XVMufGx90D3ua2Hh7hZMnSvkwa1E0gF9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAffBPAAAA////hOGs") [ 2877.130414][ T2460] loop2: detected capacity change from 0 to 512 [ 2877.152438][ T2460] EXT4-fs (loop2): Ignoring removed bh option 00:47:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2877.176570][ T2466] loop5: detected capacity change from 0 to 512 [ 2877.178392][ T2465] loop3: detected capacity change from 0 to 512 [ 2877.188335][ T2466] EXT4-fs (loop5): Ignoring removed bh option [ 2877.200033][ T2465] EXT4-fs (loop3): Ignoring removed bh option [ 2877.205516][ T2460] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4278190080 (level 0) [ 2877.208929][ T2460] EXT4-fs (loop2): Remounting filesystem read-only [ 2877.210433][ T2460] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1) [ 2877.218650][ T2466] EXT4-fs error (device loop5): ext4_free_branches:1022: inode #13: comm syz-executor.5: invalid indirect mapped block 4278190080 (level 0) [ 2877.222045][ T2469] loop1: detected capacity change from 0 to 512 [ 2877.225924][ T2465] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 4278190080 (level 0) [ 2877.229405][ T2460] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 8388607 (level 2) [ 2877.240148][ T2466] EXT4-fs (loop5): Remounting filesystem read-only [ 2877.244010][ T2466] EXT4-fs error (device loop5): ext4_free_branches:1022: inode #13: comm syz-executor.5: invalid indirect mapped block 4294967295 (level 1) [ 2877.244490][ T2460] EXT4-fs (loop2): 1 truncate cleaned up [ 2877.249980][ T2465] EXT4-fs (loop3): Remounting filesystem read-only [ 2877.252494][ T2469] EXT4-fs (loop1): Ignoring removed bh option [ 2877.253049][ T2465] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 2877.265071][ T2466] EXT4-fs error (device loop5): ext4_free_branches:1022: inode #13: comm syz-executor.5: invalid indirect mapped block 8388607 (level 2) [ 2877.268552][ T2460] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2877.275416][ T2469] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4278190080 (level 0) [ 2877.281203][ T2466] EXT4-fs (loop5): 1 truncate cleaned up [ 2877.282776][ T2469] EXT4-fs (loop1): Remounting filesystem read-only [ 2877.284773][ T2465] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 8388607 (level 2) [ 2877.286885][ T2466] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2877.291282][ T2469] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1) [ 2877.300107][ T2469] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 8388607 (level 2) [ 2877.305314][ T2465] EXT4-fs (loop3): 1 truncate cleaned up [ 2877.306521][ T2465] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2877.311687][ T2469] EXT4-fs (loop1): 1 truncate cleaned up [ 2877.315732][ T2469] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:47:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:47:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:47:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2878.093743][ T2476] loop2: detected capacity change from 0 to 512 [ 2878.095365][ T2480] loop4: detected capacity change from 0 to 512 [ 2878.101287][ T2479] loop5: detected capacity change from 0 to 512 [ 2878.109448][ T2480] EXT4-fs (loop4): Ignoring removed bh option [ 2878.115084][ T2476] EXT4-fs (loop2): Ignoring removed bh option [ 2878.121964][ T2480] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2878.139448][ T2479] EXT4-fs (loop5): Ignoring removed bh option [ 2878.142906][ T2480] EXT4-fs (loop4): Remounting filesystem read-only [ 2881.787118][ T2476] EXT4-fs: failed to create workqueue [ 2881.789386][ T2476] EXT4-fs (loop2): mount failed [ 2881.810166][ T2479] EXT4-fs: failed to create workqueue [ 2881.815567][ T2480] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2881.827873][ T2479] EXT4-fs (loop5): mount failed [ 2881.830756][ T2480] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2881.842340][ T2480] EXT4-fs (loop4): 1 truncate cleaned up [ 2881.850247][ T2480] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:48:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxtr/dEf6moVgz+SJq1a0IOKQg8Kgh7qMabbUrttpIlgS7FRpB6l4F08Cv4FnvQi6knwqncpFOnFKggrszuTbtLdNdvsdrX7+cA07+172/e+M/OSN/NmN4ChVc7+SSK2RsQvEbGrkV1Zodz4ce3q+bk/r56fS6JWe+P3pF7vj6vn54qqxfu25JmJNCL9OIk9LdpdOHvu5Gy1WjmT56cWT707tXD23FMnTs0erxyvnJ45dOjggelnn5l5uidxbsv6uvuD+b27Dr916bW5I5fe/uGrrL9b8/LmOHqlHOWV+7LJo71ubMC2NaWT0QF2hK6MRER2uEr18b89RuL6wdser3w00M4BfVWr1Wob2hcv1YDbWBKD7gEwGMUf+uz6t9hu0dTjP+HKi40LoCzua/nWKBmNNK9TWnV920v3RcSRpb8+z7Zovg+xqU8NAgBD75ts/vNkq/lfGvc01bujfj84Yjwi7oyIHRFxV0TsjIi7I+p1783nMx0trcyWVxXfOP9ML6/Ibsx/PtdFkB1k87/n87WtlfO/YvYX4yN5bls9/lJy7ES1sj/fJxNR2pDlpzu08e3LP3/arqzcNP/Ltqz9Yi6Y9+PyaOMG3VjxytHZxdn1xl248mHE7tFW8SfLKwFJvi64u7v/Or/CuBAnHv9yb7tK/x5/Bz1YZ6p9EfFY4/gvxar4C0nn9cmpjVGt7J8qzoob/fjTxdfbND+2rvh7IDv+m1ue/8vxjyfN67UL3bdx8ddP2l5TdnH+L8vO/7HkzXq6GBTvzy4unpmOGEtevfH1mevvLfJF/Sz+iX2tx/+OuL4n9kREdhLfHxEPRMSDed8fioiHI2Jfh/i/f+mRd24+/v7K4j/a1fHvPjFy8ruv27W/tuN/sJ6ayF9Zy++/tXZwPfsOAAAA/i/S+jPwSTq5nE7TycnGM/w7Y3NanV9YfOLY/HunjzaelR+PUlrc6dredD90Or83XORnVuUP5PeNPxvZVM9Pzs1X+7WmDqzNljbjP/PbyKB7B/Sdz2vB8DL+YXgZ/zC8jH8YXmsd/0t97gdw67Ua/xcirg2gK8AtZv4Pw8v4h+Fl/MPwMv5hKN305/qLr0dpU2fH4fV8Y0C1UvTvJt/eu0T8XautKnqhi+8XuH0TkbYrquXPjQ+6hz1NbLy9wskTpXyYtSgawC8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPvgnAAD//wsP4ak=") 00:48:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxtr/dEf6moVgz+SJq1a0IOKQg8Kgh7qMabbUrttpIlgS7FRpB6l4F08Cv4FnvQi6knwqncpFOnFKggrszuTbtLdNdvsdrX7+cA07+172/e+M/OSN/NmN4ChVc7+SSK2RsQvEXF3I7uyQrnx49rV83N/Xj0/l0St9sbvSb3eH1fPzxVVi/dtyTMTaUT6cRJ7WrS7cPbcydlqtXImz08tnnp3auHsuadOnJo9XjleOT1z6NDBA9PPPjPzdE/i3Jb1dfcH83t3HX7r0mtzRy69/cNXWX+35uXNcfRKOcor92WTR3vd2IBta0onowPsCF0ZiYjscJXq4397jMT1g7c9XvlooJ0D+qpWq9U2tC9eqgG3sSQG3QNgMIo/9Nn1b7HdoqnHf8KVFxsXQFnc1/KtUTIaaV6ntOr6tpfui4gjS399nm3RfB9iU58aBACG3jfZ/OfJVvO/NO5pqndH/X5wxHhE3BkROyLirojYma8ZZXXvzeczHS2tzJZXFd84/0wvr8huzH8+10WQHWTzv+fzta2V879i9hfjI3luWz3+UnLsRLWyP98nE1HakOWnO7Tx7cs/f9qurNw0/8u2rP1iLpj34/Jo4wbdWPHK0dnF2fXGXbjyYcTu0VbxJ8srAUlE7IqI3d391/kVxoU48fiXe9tV+vf4O+jBOlPti4jHGsd/KVbFX0g6r09ObYxqZf9UcVbc6MefLr7epvmxdcXfA9nx39zy/F+OfzxpXq9d6L6Ni79+0vaasovzf1l2/o8lb9bTxaB4f3Zx8cx0xFjy6o2vz1x/b5Ev6mfxT+xrPf53xPU9sScispP4/oh4ICIezPv+UEQ8HBH7OsT//UuPvHPz8fdXFv/Rro5/94mRk9993a79tR3/g/XURP7KWn7/rbWD69l3AAAA8H+R1p+BT9LJ5XSaTk42nuHfGZvT6vzC4hPH5t87fbTxrPx4lNLiTtf2pvuh0/m94SI/syp/IL9v/NnIpnp+cm6+2q81dWBttrQZ/5nfRgbdO6DvfF4LhpfxD8PL+IfhZfzD8Frr+F/qcz+AW6/V+L8QcW0AXQFuMfN/GF7GPwwv4x+Gl/EPQ+mmP9dffD1Kmzo7Dq/nGwOqlaJ/N/n23iXi71ptVdELXXy/wO2biLRdUS1/bnzQPexpYuPtFU6eKOXDrEXRAH4ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9ME/AQAA//8aX+Gl") [ 2883.107588][ T2524] loop3: detected capacity change from 0 to 512 [ 2883.142993][ T2524] EXT4-fs (loop3): Ignoring removed bh option 00:48:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2884.199235][ T2524] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 4278190080 (level 0) 00:48:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2884.224776][ T2524] EXT4-fs (loop3): Remounting filesystem read-only [ 2884.226176][ T2524] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 2884.229563][ T2524] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 8388607 (level 2) [ 2884.270423][ T2524] EXT4-fs (loop3): 1 truncate cleaned up [ 2884.560398][ T2524] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2885.098449][ T2546] loop5: detected capacity change from 0 to 512 [ 2885.116715][ T2538] loop4: detected capacity change from 0 to 512 [ 2885.121279][ T2538] EXT4-fs (loop4): Ignoring removed bh option [ 2885.124445][ T2546] EXT4-fs (loop5): Ignoring removed bh option 00:48:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2885.149718][ T2551] loop1: detected capacity change from 0 to 512 [ 2885.158056][ T2548] loop2: detected capacity change from 0 to 512 [ 2885.166692][ T2538] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2885.167741][ T2548] EXT4-fs (loop2): Ignoring removed bh option [ 2885.172939][ T2546] EXT4-fs error (device loop5): ext4_free_branches:1022: inode #13: comm syz-executor.5: invalid indirect mapped block 4278190080 (level 0) 00:48:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2885.183759][ T2538] EXT4-fs (loop4): Remounting filesystem read-only [ 2885.186848][ T2551] EXT4-fs (loop1): Ignoring removed bh option [ 2885.190844][ T2546] EXT4-fs (loop5): Remounting filesystem read-only [ 2885.190983][ T2548] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4278190080 (level 0) [ 2885.192459][ T2546] EXT4-fs error (device loop5): ext4_free_branches:1022: inode #13: comm syz-executor.5: invalid indirect mapped block 4294967295 (level 1) [ 2885.201760][ T2548] EXT4-fs (loop2): Remounting filesystem read-only [ 2885.202387][ T2538] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2885.205656][ T2548] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1) [ 2885.211845][ T2548] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 8388607 (level 2) [ 2885.216836][ T2548] EXT4-fs (loop2): 1 truncate cleaned up [ 2885.216836][ T2551] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4278190080 (level 0) [ 2885.218280][ T2548] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2885.225230][ T2546] EXT4-fs error (device loop5): ext4_free_branches:1022: inode #13: comm syz-executor.5: invalid indirect mapped block 8388607 (level 2) [ 2885.235008][ T2551] EXT4-fs (loop1): Remounting filesystem read-only [ 2885.236978][ T2546] EXT4-fs (loop5): 1 truncate cleaned up [ 2885.238629][ T2546] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2885.394232][ T2538] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2885.692717][ T2551] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1) [ 2885.857231][ T2538] EXT4-fs (loop4): 1 truncate cleaned up [ 2885.969584][ T2538] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2886.030752][ T2551] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 8388607 (level 2) 00:48:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2886.056958][ T2551] EXT4-fs (loop1): 1 truncate cleaned up 00:48:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2886.058182][ T2551] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:48:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3MtrXNUfAPDvvXn0/Wt+tT76UEerGHwkTVq1oAsrCl0oCLqoy5hOS+20kSaCLcVGkbqUgntxKfgXuNKNqCvBre6lUKQbqyCM3Jl700kyM2aamY5mPh+4zTlzzvSc7733JOfec2cCGFil7J8kYntE/BwRT9azyyuU6j9u3rg0+8eNS7NJVKuv/5bU6v1+49JsUbV437Y8M55GpB8lsa9Ju/MXLp6ZqVTK5/P85MLZdybnL1x86vTZmVPlU+Vz00eOHD409ewz0093Jc4dWV/3vj+3f8+xN6++Onv86lvff5n1d3te3hhHt5SitHxfNni024312Y6GdDLcx47QkaGIyA7XSG3874yhuHXwdsbLH/a1c0BPVavV6qbWxYtVYANLot89APqj+EOfXf8W2x2aevwrXD9avwDK4r6Zb/WS4UjzOiMrrm+76b6IOL7452fZFo33Ibb0qEEAYOB9fbS+6LN6/pfGPQ31/le7HxwxFhH/j4hdEXFXROyOiLsjanXvzeczbS0uz5ZWFK+ef6bXlmU35z+f6yDINrL53/P52tby+V8x+4uxoTy3oxb/SHLydKV8MN8n4zGyKctPtWnjm5d++qRVWalh/pdtWfvFXDDvx7Xh+g260eKVEzMLM+uNu3D9g4i9w83iT5ZWApKI2BMRezv7r/MrjMtx+vEv9req9M/xt9GFdabq5xGP1Y//YqyIv5C0X5+c3ByV8sHJ4qxY7Ycfr7zWovnRdcXfBdnx39r0/F+KfyxpXK+d77yNK7983PKasoPzf0l2/o8mb9TSxaB4b2Zh4fxUxGjyyurXp2+9t8gX9bP4xw80H/+74tae2BcR2Ul8f0Q8EBEP5n1/KCIejogDbeL/7sVH3r79+Hsri/9ER8e/88TQmW+/atX+2o7/4VpqPH9lLb//1trB9ew7AAAA+K9Ia8/AJ+nEUjpNJybqz/Dvjq1pZW5+4YmTc++eO1F/Vn4sRtLiTtfOhvuhU/m94SI/vSJ/KL9v/OnQllp+Ynau0qs1dWBttrUY/5lfh/rdO6DnfF4LBpfxD4PL+IfBZfzD4Frr+F/scT+AO6/Z+L8ccbMPXQHuMPN/GFzGPwwu4x8Gl/EPA+m2P9dffD1Kizq7jq3nGwMq5aJ/t/n27iXir2p1RdELHXy/wMZNRNqqqJo/N97vHnY1sXljhZMnRvJh1qSoD7+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuDvAAAA///CROG8") 00:48:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2890.910723][ T2597] loop2: detected capacity change from 0 to 512 00:48:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2891.760822][ T2597] EXT4-fs (loop2): Ignoring removed bh option 00:48:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2891.800235][ T2597] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4278190080 (level 0) 00:48:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2894.231585][ T2597] EXT4-fs (loop2): Remounting filesystem read-only [ 2894.254134][ T2597] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1) [ 2894.269594][ T2621] loop5: detected capacity change from 0 to 512 [ 2895.092621][ T2597] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 8388607 (level 2) [ 2895.107297][ T2597] EXT4-fs (loop2): 1 truncate cleaned up 00:48:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2895.142178][ T2597] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:48:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxtr/dEf6moVgz+SJq1a0IOKQg8Kgh7qMabbUrttpIlgS7FRpB6l4F08Cv4FnvQi6knwqncpFOnFKggrszuTbtLdNdvsdrX7+cA07+172/e+M/OSN/NmN4ChVc7+SSK2RsQvEXFXI7uyQrnx49rV83N/Xj0/l0St9sbvSb3eH1fPzxVVi/dtyTMTaUT6cRJ7WrS7cPbcydlqtXImz08tnnp3auHsuadOnJo9XjleOT1z6NDBA9PPPjPzdE/i3Jb1dfcH83t3HX7r0mtzRy69/cNXWX+35uXNcfRKOcor92WTR3vd2IBta0onowPsCF0ZiYjscJXq4397jMT1g7c9XvlooJ0D+qpWq9U2tC9eqgG3sSQG3QNgMIo/9Nn1b7HdoqnHf8KVFxsXQFnc1/KtUTIaaV6ntOr6tpfui4gjS399nm3RfB9iU58aBACG3jfZ/OfJVvO/NO5pqndH/X5wxHhE3BkRO/K1op0RcXdEve69+Xymo6WV2fKq4hvnn+nlFdmN+c/nugiyg2z+93y+trVy/lfM/mJ8JM9tq8dfSo6dqFb25/tkIkobsvx0hza+ffnnT9uVlZvmf9mWtV/MBfN+XB5t3KAbK145Ors4u964C1c+jNg92ir+ZHklIImIXRGxu7v/Or/CuBAnHv9yb7tK/x5/Bz1YZ6p9EfFY4/gvxar4C0nn9cmpjVGt7J8qzoob/fjTxdfbND+2rvh7IDv+m1ue/8vxjyfN67UL3bdx8ddP2l5TdnH+L8vO/7HkzXq6GBTvzy4unpmOGEtevfH1mevvLfJF/Sz+iX2tx/+OuL4n9kREdhLfHxEPRMSDed8fioiHI2Jfh/i/f+mRd24+/v7K4j/a1fHvPjFy8ruv27W/tuN/sJ6ayF9Zy++/tXZwPfsOAAAA/i/S+jPwSTq5nE7TycnGM/w7Y3NanV9YfOLY/HunjzaelR+PUlrc6dredD90Or83XORnVuUP5PeNPxvZVM9Pzs1X+7WmDqzNljbjP/PbyKB7B/Sdz2vB8DL+YXgZ/zC8jH8YXmsd/0t97gdw67Ua/xcirg2gK8AtZv4Pw8v4h+Fl/MPwMv5hKN305/qLr0dpU2fH4fV8Y0C1UvTvJt/eu0T8XautKnqhi+8XuH0TkbYrquXPjQ+6hz1NbLy9wskTpXyYtSgawC8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPvgnAAD//yIH4aM=") 00:48:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2896.080066][ T2637] loop4: detected capacity change from 0 to 512 [ 2896.108583][ T2637] EXT4-fs (loop4): Ignoring removed bh option 00:48:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2898.450105][ T2642] loop1: detected capacity change from 0 to 512 00:48:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2898.473250][ T2637] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) [ 2898.485224][ T2637] EXT4-fs (loop4): Remounting filesystem read-only 00:48:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2898.514326][ T2637] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2898.525112][ T2637] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) [ 2898.527393][ T2642] EXT4-fs (loop1): Ignoring removed bh option [ 2898.531960][ T2637] EXT4-fs (loop4): 1 truncate cleaned up [ 2898.539815][ T2637] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2898.560248][ T2642] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4278190080 (level 0) [ 2901.004922][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 2901.006295][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 00:48:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2901.070840][ T2642] EXT4-fs (loop1): Remounting filesystem read-only [ 2901.084349][ T2642] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1) 00:48:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxtr/dEf6moVgz+SJq1a0IOKQg8Kgh7qMabbUrttpIlgS7FRpB6l4F08Cv4FnvQi6knwqncpFOnFKggrszuTbtLdNdvsdrX7+cA07+172/e+M/OSN29mN4ChVc7+SSK2RsQvETHVyK6sUG78uHb1/NyfV8/PJVGrvfF7Uq/3x9Xzc0XV4n1b8sxEGpF+nMSeFu0unD13crZarZzJ81OLp96dWjh77qkTp2aPV45XTs8cOnTwwPSzz8w83ZM4t2V93f3B/N5dh9+69NrckUtv//BV1t+teXlzHL1SjvLKfdnk0V43NmDbmtLJ6AA7QldGIiI7XKX6+N8eI3H94G2PVz4aaOeAvqrVarUN7YuXasBtLIlB9wAYjOIPfXb9W2y3aOrxn3DlxcYFUBb3tXxrlIxGmtcprbq+7aX7IuLI0l+fZ1s0r0Ns6lODAMDQ+yab/zzZav6Xxj1N9e6orwdHjEfEnRGxIyLuioidEXF3RL3uvfl8pqOlldnyquIb55/p5RXZjfnP57oIsoNs/vd8fm9r5fyvmP3F+Eie21aPv5QcO1Gt7M/3yUSUNmT56Q5tfPvyz5+2Kys3zf+yLWu/mAvm/bg82ligGyteOTq7OLveuAtXPozYPdoq/mT5TkASEbsiYnd3/3V+hXEhTjz+5d52lf49/g56cJ+p9kXEY43jvxSr4i8kne9PTm2MamX/VHFW3OjHny6+3qb5sXXF3wPZ8d/c8vxfjn88ab5fu9B9Gxd//aTtNWUX5/+y7PwfS96sp4tB8f7s4uKZ6Yix5NUbX5+5/t4iX9TP4p/Y13r874jre2JPRGQn8f0R8UBEPJj3/aGIeDgi9nWI//uXHnnn5uPvryz+o10d/+4TIye/+7pd+2s7/gfrqYn8lbX8/ltrB9ez7wAAAOD/Iq0/A5+kk8vpNJ2cbDzDvzM2p9X5hcUnjs2/d/po41n58SilxUrX9qb10Ol8bbjIz6zKH8jXjT8b2VTPT87NV/t1Tx1Ymy1txn/mt5FB9w7oO5/XguFl/MPwMv5heBn/MLzWOv6X+twP4NZrNf4vRFwbQFeAW8z8H4aX8Q/Dy/iH4WX8w1C66c/1F1+P0qbOjsPr+caAaqXo302+vXeJ+LtWW1X0QhffL3D7JiJtV1TLnxsfdA97mth4e4WTJ0r5MGtRNIBfRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3wTwAAAP//tsjhvw==") [ 2901.139503][ T2642] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 8388607 (level 2) 00:48:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2901.180883][ T2642] EXT4-fs (loop1): 1 truncate cleaned up [ 2901.182203][ T2642] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:48:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2908.751252][ T2729] loop2: detected capacity change from 0 to 512 00:48:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2908.816672][ T2730] loop1: detected capacity change from 0 to 512 [ 2908.835487][ T2730] EXT4-fs (loop1): Ignoring removed bh option [ 2908.836930][ T2729] EXT4-fs (loop2): Ignoring removed bh option [ 2908.860450][ T2729] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4278190080 (level 0) [ 2908.864228][ T2730] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4278190080 (level 0) [ 2908.869282][ T2729] EXT4-fs (loop2): Remounting filesystem read-only [ 2908.879851][ T2730] EXT4-fs (loop1): Remounting filesystem read-only [ 2908.882861][ T2729] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1) [ 2908.893861][ T2730] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1) [ 2912.165941][ T2729] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 8388607 (level 2) [ 2912.173185][ T2741] loop4: detected capacity change from 0 to 512 [ 2912.180045][ T2741] EXT4-fs (loop4): Ignoring removed bh option 00:48:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2912.205416][ T2729] EXT4-fs (loop2): 1 truncate cleaned up [ 2912.206831][ T2729] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2912.210372][ T2730] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 8388607 (level 2) [ 2912.223592][ T2730] EXT4-fs (loop1): 1 truncate cleaned up [ 2912.227917][ T2730] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2912.238606][ T2741] EXT4-fs: failed to create workqueue [ 2912.248451][ T2741] EXT4-fs (loop4): mount failed 00:48:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3M9rHFUcAPDvTLLpbxtr/dEf6moVgz+SJq1a0IOKQg8Kgh7qMabbUrttpIlgS7FRpB6l4F08Cv4FnvQi6knwqncpFOnFKggrszuTbtLdNdvsdrX7+cA07+172/e+M/OSN/NmN4ChVc7+SSK2RsQvETHeyK6sUG78uHb1/NyfV8/PJVGrvfF7Uq/3x9Xzc0XV4n1b8sxEGpF+nMSeFu0unD13crZarZzJ81OLp96dWjh77qkTp2aPV45XTs8cOnTwwPSzz8w83ZM4t2V93f3B/N5dh9+69NrckUtv//BV1t+teXlzHL1SjvLKfdnk0V43NmDbmtLJ6AA7QldGIiI7XKX6+N8eI3H94G2PVz4aaOeAvqrVarUN7YuXasBtLIlB9wAYjOIPfXb9W2y3aOrxn3DlxcYFUBb3tXxrlIxGmtcprbq+7aX7IuLI0l+fZ1s034fY1KcGAYCh9002/3my1fwvjXua6t1Rvx/cWB+6MyJ2RMRdEbEzIu6OqNe9N5/PdLS0MlteVXzj/DO9vCK7Mf/5XBdBdpDN/57P17ZWzv+K2V+Mj+S5bfX4S8mxE9XK/nyfTERpQ5af7tDGty///Gm7snLT/C/bsvaLuWDej8ujjRt0Y8UrR2cXZ9cbd+HKhxG7R1vFnyyvBCQRsSsidnf3X+dXGBfixONf7m1X6d/j76AH60y1LyIeaxz/pVgVfyHpvD45tTGqlf1TxVlxox9/uvh6m+bH1hV/D2THf3PL8385/vGkeb12ofs2Lv76Sdtryi7O/2XZ+T+WvFlPF4Pi/dnFxTPTEWPJqze+PnP9vUW+qJ/FP7Gv9fjfEdf3xJ6IyE7i+yPigYh4MO/7QxHxcETs6xD/9y898s7Nx99fWfxHuzr+3SdGTn73dbv213b8D9ZTE/kra/n9t9YOrmffAQAAwP9FWn8GPkknl9NpOjnZeIZ/Z2xOq/MLi08cm3/v9NHGs/LjUUqLO13bm+6HTuf3hov8zKr8gfy+8Wcjm+r5ybn5ar/W1IG12dJm/Gd+Gxl074C+83ktGF7GPwwv4x+Gl/EPw2ut43+pz/0Abr1W4/9CxLUBdAW4xcz/YXgZ/zC8jH8YXsY/DKWb/lx/8fUobersOLyebwyoVor+3eTbe5eIv2u1VUUvdPH9ArdvItJ2RbX8ufFB97CniY23Vzh5opQPsxZFA/hlBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Af/BAAA//8tg+Gg") 00:48:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2922.341145][ T2847] loop5: detected capacity change from 0 to 512 [ 2922.382275][ T2847] EXT4-fs (loop5): Ignoring removed bh option 00:48:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2922.439433][ T2850] loop3: detected capacity change from 0 to 512 [ 2922.448169][ T2848] loop4: detected capacity change from 0 to 512 [ 2922.451361][ T2850] EXT4-fs (loop3): Ignoring removed bh option [ 2922.469603][ T2847] EXT4-fs error (device loop5): ext4_free_branches:1022: inode #13: comm syz-executor.5: invalid indirect mapped block 4278190080 (level 0) [ 2922.473983][ T2847] EXT4-fs (loop5): Remounting filesystem read-only [ 2922.475523][ T2847] EXT4-fs error (device loop5): ext4_free_branches:1022: inode #13: comm syz-executor.5: invalid indirect mapped block 4294967295 (level 1) [ 2922.485336][ T2850] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 4278190080 (level 0) [ 2922.486031][ T2858] loop1: detected capacity change from 0 to 512 [ 2922.488745][ T2847] EXT4-fs error (device loop5): ext4_free_branches:1022: inode #13: comm syz-executor.5: invalid indirect mapped block 8388607 (level 2) [ 2922.494669][ T2858] EXT4-fs (loop1): Ignoring removed bh option [ 2922.502063][ T2858] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4278190080 (level 0) [ 2922.504069][ T2850] EXT4-fs (loop3): Remounting filesystem read-only [ 2922.505786][ T2858] EXT4-fs (loop1): Remounting filesystem read-only [ 2922.507184][ T2850] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 2922.508312][ T2858] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1) [ 2922.514542][ T2848] EXT4-fs (loop4): Ignoring removed bh option [ 2922.520806][ T2858] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 8388607 (level 2) [ 2922.548583][ T2850] EXT4-fs error (device loop3): ext4_free_branches:1022: inode #13: comm syz-executor.3: invalid indirect mapped block 8388607 (level 2) [ 2925.377585][ T2847] EXT4-fs (loop5): 1 truncate cleaned up [ 2925.391771][ T2848] EXT4-fs: failed to create workqueue [ 2925.393307][ T2848] EXT4-fs (loop4): mount failed 00:48:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2925.417868][ T2847] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2925.424851][ T2850] EXT4-fs (loop3): 1 truncate cleaned up [ 2925.433075][ T2850] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2925.467989][ T2858] EXT4-fs (loop1): 1 truncate cleaned up 00:48:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2925.490597][ T2858] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:48:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvbuL0/Wt+pTz6AAwFEfFImrSUSnAABFIPICHBoRxD6lalboOaINGqogGhckSVuCOOSPwFnOCCgBMSV7ijShXqhYKEZLT2buqktokbu4b685G2mfGMO/Pd3UlmZ9cOYGiVs3+SiK0R8XNEHGpkV1YoN35cv3Zh7o9rF+aSqNVe/y2p1/v92oW5omrxvi15ZiKNSD9KYk+LdhfOnT81W61Wzub5qcXT70wtnDv/1MnTsycqJypnZg4fPnhg+plDM0/3JM5tWV93vz+/d9eRNy+/Onf08lvff5n1d2te3hxHr5SjvHJfNnm0140N2LamdDI6wI7QlZGIyA5XqT7+t8dI3Dh42+PlDwfaOaCvarVabUP74qUacAdLYtA9AAaj+EOfXf8W222aevwrXH2hcQGUxX093xolo5HmdUqrrm976b6IOLr052fZFs3rEJv61CAAMPS+zuY/T7aa/6VxT1O9/9XXgyPGI+L/EbEjIu6KiJ0RcXdEve69+Xymo6WV2fKq4pvnn+mVFdmN+c9nuwiyg2z+91x+b2vl/K+Y/cX4SJ7bVo+/lBw/Wa3sz/fJRJQ2ZPnpDm1889JPn7QrKzfN/7Ita7+YC+b9uDLaWKAbK145Nrs4u964C1c/iNg92ir+ZPlOQBIRuyJid3f/dX6FcTFOPv7F3naV/jn+Dnpwn6n2ecRjjeO/FKviLySd709ObYxqZf9UcVbc7IcfL73WpvmxdcXfA9nx39zy/F+Ofzxpvl+70H0bl375uO01ZRfn/7Ls/B9L3qini0Hx3uzi4tnpiLHklZtfn7nx3iJf1M/in9jXevzviBt7Yk9EZCfx/RHxQEQ8mPf9oYh4OCL2dYj/uxcfefvW4++vLP5jXR3/7hMjp779ql37azv+B+upifyVtfz+W2sH17PvAAAA4L8irT8Dn6STy+k0nZxsPMO/Mzan1fmFxSeOz7975ljjWfnxKKXFStf2pvXQ6XxtuMjPrMofyNeNPx3ZVM9Pzs1X+3VPHVibLW3Gf+bXkUH3Dug7n9eC4WX8w/Ay/mF4Gf8wvNY6/pf63A/g9ms1/i9GXB9AV4DbzPwfhpfxD8PL+IfhZfzDULrlz/UXX4/Sps6OI+v5xoBqpejfLb69d4n4q1ZbVfR8F98vcOcmIm1XVMufGx90D3ua2HhnhZMnSvkwa1E0gF9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAffB3AAAA//+b/OHG") 00:48:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2928.739831][ T2906] loop3: detected capacity change from 0 to 512 00:48:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2928.779825][ T2906] EXT4-fs (loop3): Ignoring removed bh option 00:48:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2932.397627][ T2906] EXT4-fs: error -4 creating inode table initialization thread [ 2932.399964][ T2906] EXT4-fs (loop3): mount failed 00:48:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:55 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:48:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2937.659512][ T2947] loop3: detected capacity change from 0 to 512 [ 2937.705455][ T2973] loop4: detected capacity change from 0 to 512 00:48:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:48:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2937.801574][ T2973] EXT4-fs (loop4): Ignoring removed bh option 00:48:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000780)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2938.975585][ C1] ------------[ cut here ]------------ [ 2938.975628][ C1] [ 2938.975630][ C1] ====================================================== [ 2938.975634][ C1] WARNING: possible circular locking dependency detected [ 2938.975638][ C1] 5.15.104-syzkaller #0 Not tainted [ 2938.975645][ C1] ------------------------------------------------------ [ 2938.975648][ C1] syz-executor.2/2990 is trying to acquire lock: [ 2938.975655][ C1] ffff80001496f498 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x28/0xd8 [ 2938.975684][ C1] [ 2938.975684][ C1] but task is already holding lock: [ 2938.975687][ C1] ffff80001507f098 (depot_lock){-.-.}-{2:2}, at: stack_depot_save+0x204/0x4a0 [ 2938.975711][ C1] [ 2938.975711][ C1] which lock already depends on the new lock. [ 2938.975711][ C1] [ 2938.975714][ C1] [ 2938.975714][ C1] the existing dependency chain (in reverse order) is: [ 2938.975718][ C1] [ 2938.975718][ C1] -> #3 (depot_lock){-.-.}-{2:2}: [ 2938.975731][ C1] _raw_spin_lock_irqsave+0xc4/0x14c [ 2938.975742][ C1] stack_depot_save+0x204/0x4a0 [ 2938.975752][ C1] kasan_save_stack+0x54/0x68 [ 2938.975761][ C1] kasan_record_aux_stack+0xd4/0x11c [ 2938.975771][ C1] irq_work_queue_on+0xcc/0x224 [ 2938.975782][ C1] tell_cpu_to_push+0x1d8/0x408 [ 2938.975791][ C1] balance_rt+0x268/0x354 [ 2938.975798][ C1] __schedule+0x714/0x1e38 [ 2938.975808][ C1] do_task_dead+0xcc/0xd0 [ 2938.975817][ C1] do_exit+0x14c8/0x2134 [ 2938.975827][ C1] do_group_exit+0x110/0x268 [ 2938.975836][ C1] get_signal+0x634/0x1550 [ 2938.975846][ C1] do_notify_resume+0x3d0/0x32b8 [ 2938.975857][ C1] el0_svc+0xfc/0x1f0 [ 2938.975867][ C1] el0t_64_sync_handler+0x84/0xe4 [ 2938.975876][ C1] el0t_64_sync+0x1a0/0x1a4 [ 2938.975885][ C1] [ 2938.975885][ C1] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 2938.975898][ C1] _raw_spin_lock_nested+0xb4/0x110 [ 2938.975907][ C1] raw_spin_rq_lock_nested+0x2c/0x44 [ 2938.975916][ C1] task_fork_fair+0x7c/0x23c [ 2938.975926][ C1] sched_cgroup_fork+0x334/0x3d8 [ 2938.975936][ C1] copy_process+0x24d4/0x3750 [ 2938.975946][ C1] kernel_clone+0x1d8/0xa58 [ 2938.975955][ C1] kernel_thread+0x148/0x1bc [ 2938.975965][ C1] rest_init+0x2c/0x38c [ 2938.975974][ C1] arch_call_rest_init+0x14/0x20 [ 2938.975984][ C1] start_kernel+0x440/0x600 [ 2938.975992][ C1] __primary_switched+0xa8/0xb0 [ 2938.976000][ C1] [ 2938.976000][ C1] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 2938.976013][ C1] _raw_spin_lock_irqsave+0xc4/0x14c [ 2938.976023][ C1] try_to_wake_up+0xb0/0xc2c [ 2938.976031][ C1] wake_up_process+0x18/0x24 [ 2938.976040][ C1] __up+0x11c/0x148 [ 2938.976048][ C1] up+0x90/0xb0 [ 2938.976055][ C1] __up_console_sem+0x8c/0x100 [ 2938.976065][ C1] console_unlock+0x1160/0x1394 [ 2938.976074][ C1] vprintk_emit+0x13c/0x218 [ 2938.976084][ C1] vprintk_default+0xa0/0xe4 [ 2938.976093][ C1] vprintk+0x218/0x2f0 [ 2938.976102][ C1] _printk+0xdc/0x128 [ 2938.976110][ C1] hfsplus_brec_find+0x428/0x4a0 [ 2938.976119][ C1] __hfsplus_ext_cache_extent+0x1e8/0xa84 [ 2938.976128][ C1] hfsplus_file_truncate+0x408/0x9cc [ 2938.976137][ C1] hfsplus_setattr+0x18c/0x25c [ 2938.976144][ C1] notify_change+0xac4/0xd60 [ 2938.976153][ C1] do_truncate+0x1c0/0x28c [ 2938.976162][ C1] path_openat+0x20e8/0x26f0 [ 2938.976172][ C1] do_filp_open+0x1a8/0x3b4 [ 2938.976181][ C1] do_sys_openat2+0x128/0x3d8 [ 2938.976190][ C1] __arm64_sys_openat+0x1f0/0x240 [ 2938.976208][ C1] invoke_syscall+0x98/0x2b8 [ 2938.976218][ C1] el0_svc_common+0x138/0x258 [ 2938.976227][ C1] do_el0_svc+0x58/0x14c [ 2938.976236][ C1] el0_svc+0x7c/0x1f0 [ 2938.976245][ C1] el0t_64_sync_handler+0x84/0xe4 [ 2938.976254][ C1] el0t_64_sync+0x1a0/0x1a4 [ 2938.976261][ C1] [ 2938.976261][ C1] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 2938.976274][ C1] __lock_acquire+0x32cc/0x7620 [ 2938.976283][ C1] lock_acquire+0x240/0x77c [ 2938.976292][ C1] _raw_spin_lock_irqsave+0xc4/0x14c [ 2938.976301][ C1] down_trylock+0x28/0xd8 [ 2938.976308][ C1] __down_trylock_console_sem+0x80/0x144 [ 2938.976318][ C1] console_trylock+0xb8/0x1f8 [ 2938.976327][ C1] console_trylock_spinning+0x1c/0x280 [ 2938.976337][ C1] vprintk_emit+0x120/0x218 [ 2938.976346][ C1] vprintk_default+0xa0/0xe4 [ 2938.976355][ C1] vprintk+0x218/0x2f0 [ 2938.976364][ C1] _printk+0xdc/0x128 [ 2938.976371][ C1] __warn_printk+0xb4/0x134 [ 2938.976379][ C1] stack_depot_save+0x490/0x4a0 [ 2938.976388][ C1] kasan_save_stack+0x54/0x68 [ 2938.976396][ C1] kasan_record_aux_stack+0xd4/0x11c [ 2938.976405][ C1] irq_work_queue_on+0xcc/0x224 [ 2938.976415][ C1] rto_push_irq_work_func+0x13c/0x340 [ 2938.976423][ C1] irq_work_single+0xbc/0x1e4 [ 2938.976432][ C1] flush_smp_call_function_queue+0x510/0x8c4 [ 2938.976443][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 2938.976452][ C1] ipi_handler+0x15c/0x7d4 [ 2938.976462][ C1] handle_percpu_devid_irq+0x29c/0x7fc [ 2938.976471][ C1] handle_domain_irq+0xec/0x178 [ 2938.976479][ C1] gic_handle_irq+0x78/0x1c8 [ 2938.976489][ C1] call_on_irq_stack+0x2c/0x54 [ 2938.976498][ C1] do_interrupt_handler+0x74/0x94 [ 2938.976507][ C1] el1_interrupt+0x30/0x58 [ 2938.976515][ C1] el1h_64_irq_handler+0x18/0x24 [ 2938.976525][ C1] el1h_64_irq+0x78/0x7c [ 2938.976532][ C1] __sanitizer_cov_trace_const_cmp1+0xb8/0xc0 [ 2938.976543][ C1] tomoyo_path_number_perm+0x38c/0x6b0 [ 2938.976553][ C1] tomoyo_path_mknod+0x168/0x1b0 [ 2938.976563][ C1] security_path_mknod+0xf8/0x14c [ 2938.976572][ C1] path_openat+0x9c4/0x26f0 [ 2938.976581][ C1] do_filp_open+0x1a8/0x3b4 [ 2938.976590][ C1] do_sys_openat2+0x128/0x3d8 [ 2938.976598][ C1] __arm64_sys_openat+0x1f0/0x240 [ 2938.976607][ C1] invoke_syscall+0x98/0x2b8 [ 2938.976616][ C1] el0_svc_common+0x138/0x258 [ 2938.976625][ C1] do_el0_svc+0x58/0x14c [ 2938.976634][ C1] el0_svc+0x7c/0x1f0 [ 2938.976642][ C1] el0t_64_sync_handler+0x84/0xe4 [ 2938.976652][ C1] el0t_64_sync+0x1a0/0x1a4 [ 2938.976659][ C1] [ 2938.976659][ C1] other info that might help us debug this: [ 2938.976659][ C1] [ 2938.976663][ C1] Chain exists of: [ 2938.976663][ C1] (console_sem).lock --> &rq->__lock --> depot_lock [ 2938.976663][ C1] [ 2938.976677][ C1] Possible unsafe locking scenario: [ 2938.976677][ C1] [ 2938.976680][ C1] CPU0 CPU1 [ 2938.976683][ C1] ---- ---- [ 2938.976686][ C1] lock(depot_lock); [ 2938.976691][ C1] lock(&rq->__lock); [ 2938.976698][ C1] lock(depot_lock); [ 2938.976705][ C1] lock((console_sem).lock); [ 2938.976710][ C1] [ 2938.976710][ C1] *** DEADLOCK *** [ 2938.976710][ C1] [ 2938.976713][ C1] 4 locks held by syz-executor.2/2990: [ 2938.976719][ C1] #0: ffff0000d481c460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 2938.976745][ C1] #1: ffff00012285a1d8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: path_openat+0x63c/0x26f0 [ 2938.976771][ C1] #2: ffff800014ffaab8 (tomoyo_ss){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c [ 2938.976794][ C1] #3: ffff80001507f098 (depot_lock){-.-.}-{2:2}, at: stack_depot_save+0x204/0x4a0 [ 2938.976818][ C1] [ 2938.976818][ C1] stack backtrace: [ 2938.976821][ C1] CPU: 1 PID: 2990 Comm: syz-executor.2 Not tainted 5.15.104-syzkaller #0 [ 2938.976831][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 2938.976838][ C1] Call trace: [ 2938.976840][ C1] dump_backtrace+0x0/0x530 [ 2938.976850][ C1] show_stack+0x2c/0x3c [ 2938.976859][ C1] dump_stack_lvl+0x108/0x170 [ 2938.976868][ C1] dump_stack+0x1c/0x58 [ 2938.976876][ C1] print_circular_bug+0x150/0x1b8 [ 2938.976886][ C1] check_noncircular+0x2cc/0x378 [ 2938.976895][ C1] __lock_acquire+0x32cc/0x7620 [ 2938.976904][ C1] lock_acquire+0x240/0x77c [ 2938.976913][ C1] _raw_spin_lock_irqsave+0xc4/0x14c [ 2938.976922][ C1] down_trylock+0x28/0xd8 [ 2938.976930][ C1] __down_trylock_console_sem+0x80/0x144 [ 2938.976940][ C1] console_trylock+0xb8/0x1f8 [ 2938.976949][ C1] console_trylock_spinning+0x1c/0x280 [ 2938.976959][ C1] vprintk_emit+0x120/0x218 [ 2938.976968][ C1] vprintk_default+0xa0/0xe4 [ 2938.976977][ C1] vprintk+0x218/0x2f0 [ 2938.976986][ C1] _printk+0xdc/0x128 [ 2938.976993][ C1] __warn_printk+0xb4/0x134 [ 2938.977001][ C1] stack_depot_save+0x490/0x4a0 [ 2938.977010][ C1] kasan_save_stack+0x54/0x68 [ 2938.977018][ C1] kasan_record_aux_stack+0xd4/0x11c [ 2938.977027][ C1] irq_work_queue_on+0xcc/0x224 [ 2938.977037][ C1] rto_push_irq_work_func+0x13c/0x340 [ 2938.977045][ C1] irq_work_single+0xbc/0x1e4 [ 2938.977054][ C1] flush_smp_call_function_queue+0x510/0x8c4 [ 2938.977063][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 2938.977073][ C1] ipi_handler+0x15c/0x7d4 [ 2938.977082][ C1] handle_percpu_devid_irq+0x29c/0x7fc [ 2938.977091][ C1] handle_domain_irq+0xec/0x178 [ 2938.977099][ C1] gic_handle_irq+0x78/0x1c8 [ 2938.977108][ C1] call_on_irq_stack+0x2c/0x54 [ 2938.977117][ C1] do_interrupt_handler+0x74/0x94 [ 2938.977126][ C1] el1_interrupt+0x30/0x58 [ 2938.977135][ C1] el1h_64_irq_handler+0x18/0x24 [ 2938.977144][ C1] el1h_64_irq+0x78/0x7c [ 2938.977151][ C1] __sanitizer_cov_trace_const_cmp1+0xb8/0xc0 [ 2938.977161][ C1] tomoyo_path_number_perm+0x38c/0x6b0 [ 2938.977170][ C1] tomoyo_path_mknod+0x168/0x1b0 [ 2938.977180][ C1] security_path_mknod+0xf8/0x14c [ 2938.977188][ C1] path_openat+0x9c4/0x26f0 [ 2938.977205][ C1] do_filp_open+0x1a8/0x3b4 [ 2938.977214][ C1] do_sys_openat2+0x128/0x3d8 [ 2938.977222][ C1] __arm64_sys_openat+0x1f0/0x240 [ 2938.977231][ C1] invoke_syscall+0x98/0x2b8 [ 2938.977241][ C1] el0_svc_common+0x138/0x258 [ 2938.977250][ C1] do_el0_svc+0x58/0x14c [ 2938.977259][ C1] el0_svc+0x7c/0x1f0 [ 2938.977267][ C1] el0t_64_sync_handler+0x84/0xe4 [ 2938.977277][ C1] el0t_64_sync+0x1a0/0x1a4 [ 2939.187401][ C1] Stack depot reached limit capacity [ 2939.187646][ C1] WARNING: CPU: 1 PID: 2990 at lib/stackdepot.c:114 stack_depot_save+0x494/0x4a0 [ 2939.190707][ C1] Modules linked in: [ 2939.191554][ C1] CPU: 1 PID: 2990 Comm: syz-executor.2 Not tainted 5.15.104-syzkaller #0 [ 2939.193366][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 2939.195477][ C1] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2939.197077][ C1] pc : stack_depot_save+0x494/0x4a0 [ 2939.198248][ C1] lr : stack_depot_save+0x490/0x4a0 [ 2939.199300][ C1] sp : ffff800008017a90 [ 2939.200170][ C1] x29: ffff800008017aa0 x28: 0000000000000110 x27: 00000000000000c0 [ 2939.201994][ C1] x26: 0000000000000000 x25: 0000000000075627 x24: ffff0001b3000000 [ 2939.203656][ C1] x23: 0000000028475627 x22: 00000000000000f0 x21: 0000000000000000 [ 2939.205326][ C1] x20: 000000000000001e x19: ffff800008017b00 x18: 0000000000010002 [ 2939.207059][ C1] x17: ff808000083335b8 x16: ffff80001193d804 x15: ffff8000083335b8 [ 2939.208728][ C1] x14: 00000000ffffffff x13: ffffffffffffffff x12: 0000000000000000 [ 2939.210428][ C1] x11: ff8080000832b060 x10: 0000000000010001 x9 : ebb9a7e11aa69a00 [ 2939.212132][ C1] x8 : ebb9a7e11aa69a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 2939.213904][ C1] x5 : ffff8000080171f8 x4 : ffff80001499f940 x3 : ffff800008549a30 [ 2939.215629][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000022 [ 2939.217347][ C1] Call trace: [ 2939.218037][ C1] stack_depot_save+0x494/0x4a0 [ 2939.219142][ C1] kasan_save_stack+0x54/0x68 [ 2939.220118][ C1] kasan_record_aux_stack+0xd4/0x11c [ 2939.221222][ C1] irq_work_queue_on+0xcc/0x224 [ 2939.222189][ C1] rto_push_irq_work_func+0x13c/0x340 [ 2939.223400][ C1] irq_work_single+0xbc/0x1e4 [ 2939.224422][ C1] flush_smp_call_function_queue+0x510/0x8c4 [ 2939.225776][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 2939.227267][ C1] ipi_handler+0x15c/0x7d4 [ 2939.228208][ C1] handle_percpu_devid_irq+0x29c/0x7fc [ 2939.229321][ C1] handle_domain_irq+0xec/0x178 [ 2939.230267][ C1] gic_handle_irq+0x78/0x1c8 [ 2939.231236][ C1] call_on_irq_stack+0x2c/0x54 [ 2939.232207][ C1] do_interrupt_handler+0x74/0x94 [ 2939.233189][ C1] el1_interrupt+0x30/0x58 [ 2939.234158][ C1] el1h_64_irq_handler+0x18/0x24 [ 2939.235187][ C1] el1h_64_irq+0x78/0x7c [ 2939.236045][ C1] __sanitizer_cov_trace_const_cmp1+0xb8/0xc0 [ 2939.237379][ C1] tomoyo_path_number_perm+0x38c/0x6b0 [ 2939.238524][ C1] tomoyo_path_mknod+0x168/0x1b0 [ 2939.239568][ C1] security_path_mknod+0xf8/0x14c [ 2939.240606][ C1] path_openat+0x9c4/0x26f0 [ 2939.241620][ C1] do_filp_open+0x1a8/0x3b4 [ 2939.242546][ C1] do_sys_openat2+0x128/0x3d8 [ 2939.243525][ C1] __arm64_sys_openat+0x1f0/0x240 [ 2939.244596][ C1] invoke_syscall+0x98/0x2b8 [ 2939.245532][ C1] el0_svc_common+0x138/0x258 [ 2939.246518][ C1] do_el0_svc+0x58/0x14c [ 2939.247445][ C1] el0_svc+0x7c/0x1f0 [ 2939.248279][ C1] el0t_64_sync_handler+0x84/0xe4 [ 2939.249342][ C1] el0t_64_sync+0x1a0/0x1a4 [ 2939.250269][ C1] irq event stamp: 7110 [ 2939.251218][ C1] hardirqs last enabled at (7109): [] exit_to_kernel_mode+0x100/0x178 [ 2939.253261][ C1] hardirqs last disabled at (7110): [] enter_el1_irq_or_nmi+0x10/0x1c [ 2939.255429][ C1] softirqs last enabled at (6876): [] local_bh_enable+0x10/0x34 [ 2939.257515][ C1] softirqs last disabled at (6874): [] local_bh_disable+0x10/0x34 [ 2939.259409][ C1] ---[ end trace 83c7a5534da13efd ]--- [ 2939.489008][ T2982] loop1: detected capacity change from 0 to 512 [ 2939.514300][ T2973] EXT4-fs: error -4 creating inode table initialization thread [ 2939.522626][ T2973] EXT4-fs (loop4): mount failed [ 2939.533935][ T2982] EXT4-fs (loop1): Ignoring removed bh option 00:48:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2939.558103][ T2982] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4278190080 (level 0) 00:49:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:49:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2940.854136][ T2982] EXT4-fs (loop1): Remounting filesystem read-only [ 2940.855720][ T2982] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1) [ 2940.865829][ T2982] EXT4-fs error (device loop1): ext4_free_branches:1022: inode #13: comm syz-executor.1: invalid indirect mapped block 8388607 (level 2) [ 2940.895785][ T2982] EXT4-fs (loop1): 1 truncate cleaned up [ 2940.908391][ T3020] loop2: detected capacity change from 0 to 512 [ 2940.909331][ T2982] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. [ 2940.930597][ T3020] EXT4-fs (loop2): Ignoring removed bh option 00:49:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") [ 2940.949959][ T3020] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4278190080 (level 0) [ 2940.955111][ T3020] EXT4-fs (loop2): Remounting filesystem read-only [ 2940.960857][ T3020] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1) [ 2941.688956][ T3020] EXT4-fs error (device loop2): ext4_free_branches:1022: inode #13: comm syz-executor.2: invalid indirect mapped block 8388607 (level 2) 00:49:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:49:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000780)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2941.720662][ T3020] EXT4-fs (loop2): 1 truncate cleaned up [ 2941.721917][ T3020] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:49:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:49:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000780)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:49:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000780)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2943.049640][ T3047] loop4: detected capacity change from 0 to 512 [ 2943.104369][ T3047] EXT4-fs (loop4): Ignoring removed bh option [ 2943.123602][ T3047] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4278190080 (level 0) 00:49:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, &(0x7f0000000780)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2943.654036][ T3047] EXT4-fs (loop4): Remounting filesystem read-only [ 2943.655430][ T3047] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 2943.678699][ T3047] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #13: comm syz-executor.4: invalid indirect mapped block 8388607 (level 2) 00:49:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000780)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2943.690169][ T3047] EXT4-fs (loop4): 1 truncate cleaned up [ 2943.705374][ T3047] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bh,usrquota,acl,errors=remount-ro,barrier=0x00000000000000000. Quota mode: writeback. 00:49:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000780)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:49:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:49:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4c40, &(0x7f0000000080)={[{@grpquota}, {@bh}, {@usrquota}, {@acl}, {@errors_remount}, {@barrier_val, 0x30}]}, 0x2, 0x472, &(0x7f0000000940)="$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") 00:49:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000780)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:49:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000780)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) 00:49:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x220842, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) writev(r3, &(0x7f0000000000), 0x0) socket(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x2020}) write$cgroup_int(r4, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0}, {&(0x7f0000000140)="d9", 0x1}], 0x2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x288000c, r4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='\x00', &(0x7f0000000480), 0x2000000, 0x0) [ 2945.657321][ T3092] loop5: detected capacity change from 0 to 512 [ 2945.669213][ T3092] EXT4-fs (loop5): Ignoring removed bh option [ 2945.671342][ T3090] loop4: detected capacity change from 0 to 512