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", 0x1000, 0x3, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xf, 0xfffa, r0, &(0x7f0000000240)="8b6ec8b46be5e8384564ff3892ac2148101ef08dd111672fc133bb3c1a5cab23abce9094783372d7efcff0778c4f39b8d68a2f1748f97b914ab91606bffd064d451db3f764d6f164a2687b4844bc12d4d5e616b20633d892", 0x58, 0x1f, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xa2, r6, &(0x7f0000000300)="27c90c3748c80744f054b4a0b9383d6e1d0657e7f6a09d2d3eb146925a68029c079c75c3f624b2ba011c2b3a46c621303209a53c571531371a75fe1726055c946ee5f722c33a823c0a4fda3e518d3d531f742e0d4b4b7cbacdd6303009c693741120da18c44e6a03948ea3f522f01eeeeeb1172ac17cde5b", 0x78, 0x401, 0x0, 0x0, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x8000, r2, &(0x7f00000003c0)="163df09957f15635db6a4754a345e9607459a2edd5a845a1f00e65132e08abdb98c2581c036c6bdd31a35641989261c32b3ab7df96159ab0efbe271583ff0e0ea790a61d82ff629211f36ee7bcc28f33d3756b9aa7c5b8ba8d700f67d5afe96718", 0x61, 0x1f, 0x0, 0x2, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x734cb9dc5033a4e2, 0x2, r9, &(0x7f00000004c0)="91de1524010932fec166bd94ae9f53a052c3a57f6e02e64d86cb236f1736efd0788b697c640213a445a9c2b3ff1760c121499684e000fbf3f5813bac7eb02199a803e67bff21a6338a2333667b972427c452024610be5ab69cf4953bc616ebc301a157d5da131fa0d4759c45ba66b7ae00f94884911193321e527bbed0", 0x7d, 0x8, 0x0, 0x5}]) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 759.449234][T11319] buffer_io_error: 124 callbacks suppressed [ 759.449247][T11319] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 759.481246][T11319] attempt to access beyond end of device [ 759.481246][T11319] loop1: rw=2049, want=24, limit=16 [ 759.492149][T11319] Buffer I/O error on dev loop1, logical block 23, lost async page write 11:14:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 759.528900][T11319] attempt to access beyond end of device [ 759.528900][T11319] loop1: rw=2049, want=28, limit=16 [ 759.559300][T11370] loop0: detected capacity change from 0 to 16 [ 759.562657][T11374] loop2: detected capacity change from 0 to 16 11:14:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) io_setup(0x7fffffff, &(0x7f00000001c0)=0x0) open(0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0}]) creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, [{{r4}, 0x9}, {{r3}, 0x1000}, {{}, 0x98}]}) [ 759.574797][T11371] loop4: detected capacity change from 0 to 264192 [ 759.602310][T11371] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 759.630806][T11371] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 759.641889][T11371] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x8000000}]) [ 759.656604][T11385] loop3: detected capacity change from 0 to 16 11:14:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x0, &(0x7f0000000600), 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x80, 0x8, 0x9, 0x7, 0x40, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x24c, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x20, 0x80, 0x8, 0x7, 0x7ff, 0x5, 0x3ff, 0x0, 0x6, 0x0, 0x6}, r0, 0xd, r0, 0xc) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x20) open(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x8682, 0x80) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x1200404, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client}, {@afid={'afid', 0x3d, 0x1}}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@subj_user={'subj_user', 0x3d, ')+))'}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '&\'\xb7/'}}]}}) mkdirat(r0, &(0x7f0000000440)='./bus\x00', 0x12) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 759.729794][T11403] loop1: detected capacity change from 0 to 16 [ 759.789276][T11412] loop3: detected capacity change from 0 to 264192 [ 759.804098][T11403] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 759.814094][T11412] FAT-fs (loop3): bogus number of reserved sectors [ 759.820623][T11412] FAT-fs (loop3): Can't find a valid FAT filesystem 11:14:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060003c000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 759.859177][T11403] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 759.881399][T11412] loop3: detected capacity change from 0 to 264192 [ 759.893339][T11412] FAT-fs (loop3): Unrecognized mount option "./bus" or missing value [ 759.914762][T11403] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 759.949120][T11428] loop4: detected capacity change from 0 to 264192 [ 759.953900][T11403] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 759.971278][T11428] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 759.995916][T11428] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 760.007104][T11428] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8d000000732e66610200020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) open(0x0, 0x0, 0x0) io_submit(r1, 0x20000094, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x2, 0x0, r0, &(0x7f0000000000), 0x16000}]) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 760.014286][T11403] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 760.053445][T11436] loop3: detected capacity change from 0 to 16 [ 760.099315][T11403] Buffer I/O error on dev loop1, logical block 22, lost async page write 11:14:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060003d000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 760.141526][T11403] Buffer I/O error on dev loop1, logical block 23, lost async page write 11:14:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) open(0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x8, 0x0, r0, &(0x7f0000000300)="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", 0x10c, 0x0, 0x0, 0x1}]) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 760.183684][T11445] loop4: detected capacity change from 0 to 264192 [ 760.202146][T11445] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 760.214098][T11454] loop2: detected capacity change from 0 to 16 11:14:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x8800000}]) [ 760.234333][T11445] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 760.245504][T11445] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 760.270955][T11462] loop3: detected capacity change from 0 to 16 11:14:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 760.358600][T11475] loop1: detected capacity change from 0 to 16 [ 760.387232][T11475] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 760.408398][T11482] loop2: detected capacity change from 0 to 16 11:14:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600027000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./bus\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES32]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) open(0x0, 0x0, 0x0) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) open(&(0x7f0000000240)='./file0\x00', 0x400, 0x172) creat(&(0x7f0000000040)='./bus\x00', 0x0) chmod(&(0x7f0000000080)='./bus\x00', 0x120) 11:14:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060003e000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x9000000}]) [ 760.507748][T11501] loop4: detected capacity change from 0 to 264192 [ 760.508101][T11499] loop3: detected capacity change from 0 to 16 [ 760.518981][T11508] loop2: detected capacity change from 0 to 16 [ 760.534586][T11512] loop0: detected capacity change from 0 to 264192 [ 760.544660][T11515] loop1: detected capacity change from 0 to 16 [ 760.555898][T11501] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 760.577418][T11512] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 760.592256][T11501] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 760.603690][T11501] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600048000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 760.648487][T11512] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz-executor.0: bad orphan inode 2441661457 [ 760.659821][T11512] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xa000000}]) 11:14:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) open(0x0, 0x0, 0x0) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 11:14:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) (fail_nth: 1) [ 760.776823][T11539] loop1: detected capacity change from 0 to 16 [ 760.813847][T11544] loop4: detected capacity change from 0 to 264192 [ 760.816516][T11554] loop3: detected capacity change from 0 to 16 11:14:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xb000000}]) [ 760.828675][T11558] loop2: detected capacity change from 0 to 16 [ 760.864684][T11562] loop0: detected capacity change from 0 to 16 [ 760.911505][T11562] FAULT_INJECTION: forcing a failure. [ 760.911505][T11562] name failslab, interval 1, probability 0, space 0, times 0 [ 760.924145][T11562] CPU: 1 PID: 11562 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 760.932974][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.943037][T11562] Call Trace: [ 760.946314][T11562] dump_stack_lvl+0xd6/0x122 [ 760.951013][T11562] dump_stack+0x11/0x1b [ 760.955180][T11562] should_fail+0x23c/0x250 [ 760.959602][T11562] __should_failslab+0x81/0x90 [ 760.964643][T11562] ? alloc_pipe_info+0xac/0x350 [ 760.969498][T11562] should_failslab+0x5/0x20 [ 760.974019][T11562] kmem_cache_alloc_trace+0x52/0x320 [ 760.979403][T11562] alloc_pipe_info+0xac/0x350 [ 760.984087][T11562] splice_direct_to_actor+0x5f7/0x650 [ 760.989522][T11562] ? security_file_permission+0x7c/0xa0 [ 760.995085][T11562] ? do_splice_direct+0x190/0x190 [ 761.000124][T11562] ? security_file_permission+0x87/0xa0 [ 761.005733][T11562] do_splice_direct+0x106/0x190 [ 761.010585][T11562] do_sendfile+0x63e/0xbb0 [ 761.015064][T11562] __x64_sys_sendfile64+0x102/0x140 [ 761.020364][T11562] do_syscall_64+0x44/0xa0 [ 761.024788][T11562] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 761.030836][T11562] RIP: 0033:0x7fe6c2455709 [ 761.035246][T11562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 761.054855][T11562] RSP: 002b:00007fe6c01cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 761.063270][T11562] RAX: ffffffffffffffda RBX: 00007fe6c2559f60 RCX: 00007fe6c2455709 [ 761.071228][T11562] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 761.079185][T11562] RBP: 00007fe6c01cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 761.087204][T11562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.095177][T11562] R13: 00007ffe5911184f R14: 00007fe6c01cd300 R15: 0000000000022000 11:14:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060004c000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 761.108971][T11544] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 761.134334][T11544] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 761.137950][T11581] loop1: detected capacity change from 0 to 16 [ 761.145414][T11544] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) open(0x0, 0x0, 0x0) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x30) 11:14:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) (fail_nth: 2) 11:14:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xf000000}]) [ 761.198829][T11589] loop2: detected capacity change from 0 to 16 [ 761.258084][T11601] loop4: detected capacity change from 0 to 264192 [ 761.275588][T11601] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 761.284717][T11615] loop3: detected capacity change from 0 to 16 [ 761.293980][T11616] loop0: detected capacity change from 0 to 16 [ 761.301170][T11609] loop2: detected capacity change from 0 to 16 [ 761.320533][T11616] FAULT_INJECTION: forcing a failure. [ 761.320533][T11616] name failslab, interval 1, probability 0, space 0, times 0 [ 761.333197][T11616] CPU: 0 PID: 11616 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 761.337234][T11601] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 761.341972][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.341984][T11616] Call Trace: [ 761.353027][T11601] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 761.363057][T11616] dump_stack_lvl+0xd6/0x122 [ 761.363081][T11616] dump_stack+0x11/0x1b [ 761.385575][T11616] should_fail+0x23c/0x250 [ 761.390154][T11616] ? kcalloc+0x32/0x40 [ 761.394229][T11616] __should_failslab+0x81/0x90 [ 761.398997][T11616] should_failslab+0x5/0x20 [ 761.403509][T11616] __kmalloc+0x6f/0x350 [ 761.407674][T11616] ? alloc_pipe_info+0xac/0x350 [ 761.412530][T11616] kcalloc+0x32/0x40 [ 761.416455][T11616] alloc_pipe_info+0x1be/0x350 [ 761.421296][T11616] splice_direct_to_actor+0x5f7/0x650 [ 761.426675][T11616] ? security_file_permission+0x7c/0xa0 [ 761.432301][T11616] ? do_splice_direct+0x190/0x190 [ 761.437342][T11616] ? security_file_permission+0x87/0xa0 [ 761.442894][T11616] do_splice_direct+0x106/0x190 [ 761.447807][T11616] do_sendfile+0x63e/0xbb0 [ 761.452234][T11616] __x64_sys_sendfile64+0x102/0x140 [ 761.457424][T11616] do_syscall_64+0x44/0xa0 [ 761.461861][T11616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 761.467792][T11616] RIP: 0033:0x7fe6c2455709 [ 761.472194][T11616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 761.492029][T11616] RSP: 002b:00007fe6c01cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 761.500474][T11616] RAX: ffffffffffffffda RBX: 00007fe6c2559f60 RCX: 00007fe6c2455709 [ 761.508514][T11616] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 11:14:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600060000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 761.516467][T11616] RBP: 00007fe6c01cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 761.524432][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.532423][T11616] R13: 00007ffe5911184f R14: 00007fe6c01cd300 R15: 0000000000022000 [ 761.560070][T11631] loop1: detected capacity change from 0 to 16 11:14:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600068000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 761.656320][T11644] loop4: detected capacity change from 0 to 264192 [ 761.688336][T11644] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 761.705366][T11644] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 761.716625][T11644] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 761.823191][T11653] loop3: detected capacity change from 0 to 16 11:14:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060006c000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 761.954028][T11664] loop2: detected capacity change from 0 to 16 11:14:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 762.009938][T11677] loop4: detected capacity change from 0 to 264192 [ 762.014569][T11678] loop3: detected capacity change from 0 to 16 [ 762.070649][T11677] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 762.115139][T11690] loop2: detected capacity change from 0 to 16 [ 762.121965][T11677] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 762.133052][T11677] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) (fail_nth: 3) [ 762.242762][T11698] loop0: detected capacity change from 0 to 16 [ 762.259686][T11698] FAULT_INJECTION: forcing a failure. [ 762.259686][T11698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.272897][T11698] CPU: 0 PID: 11698 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 762.281820][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.291869][T11698] Call Trace: [ 762.295144][T11698] dump_stack_lvl+0xd6/0x122 [ 762.299737][T11698] dump_stack+0x11/0x1b [ 762.303930][T11698] should_fail+0x23c/0x250 [ 762.308552][T11698] should_fail_usercopy+0x16/0x20 [ 762.313572][T11698] _copy_to_user+0x1c/0x90 [ 762.318004][T11698] simple_read_from_buffer+0xab/0x120 [ 762.323379][T11698] proc_fail_nth_read+0x10d/0x150 [ 762.328486][T11698] ? proc_fault_inject_write+0x230/0x230 [ 762.334127][T11698] vfs_read+0x1e6/0x750 [ 762.338292][T11698] ? do_sendfile+0x9c3/0xbb0 [ 762.342893][T11698] ? __fget_light+0x21b/0x260 [ 762.347659][T11698] ? __cond_resched+0x11/0x40 [ 762.352417][T11698] ksys_read+0xd9/0x190 [ 762.356580][T11698] __x64_sys_read+0x3e/0x50 [ 762.361089][T11698] do_syscall_64+0x44/0xa0 [ 762.365507][T11698] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 762.371407][T11698] RIP: 0033:0x7fe6c240848c [ 762.375841][T11698] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 762.395452][T11698] RSP: 002b:00007fe6c01cd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 762.403928][T11698] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe6c240848c [ 762.411898][T11698] RDX: 000000000000000f RSI: 00007fe6c01cd1e0 RDI: 0000000000000006 [ 762.419873][T11698] RBP: 00007fe6c01cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 762.427930][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:14:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600074000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 762.435908][T11698] R13: 00007ffe5911184f R14: 00007fe6c01cd300 R15: 0000000000022000 11:14:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xfffffff}]) 11:14:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 762.511295][T11707] loop4: detected capacity change from 0 to 264192 [ 762.529708][T11707] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 762.554946][T11707] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 762.566084][T11707] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 762.583811][T11718] loop3: detected capacity change from 0 to 16 [ 762.608958][T11726] loop1: detected capacity change from 0 to 16 [ 762.621133][T11728] loop2: detected capacity change from 0 to 16 11:14:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 11:14:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x10000000}]) [ 762.789415][T11745] loop3: detected capacity change from 0 to 16 [ 762.804875][T11746] loop4: detected capacity change from 0 to 264192 [ 762.825796][T11746] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 762.886500][T11764] loop2: detected capacity change from 0 to 16 [ 762.894954][T11763] loop1: detected capacity change from 0 to 16 [ 762.904448][T11746] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 762.915747][T11746] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 762.934037][T11766] loop0: detected capacity change from 0 to 16 11:14:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8) 11:14:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000fe000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 11:14:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x1d3f88ad}]) 11:14:31 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r5}, {}, {r4}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {r3}, {r4, r5}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}, {}, {r3, r5}, {}, {}, {}, {}, {r3}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {r3}, {r3}, {}, {}, {}, {}, {}, {r4}, {r3}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {0x0, r5}, {}, {}, {}, {0x0, r5}, {r3}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {}, {}, {}, {r3}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {r3}, {}, {}, {0x0, r5}, {r3}, {r4, r5}, {}, {r3}, {r3, r5}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r3}, {}, {r4}, {}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {}, {r4}, {r3}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r3}, {}, {}, {r3}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {0x0, r5}, {r4}, {r3}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {r4}, {}, {}, {}, {0x0, r5}, {r3}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {r3}, {r4}, {0x0, r5}, {}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {r4}, {r3}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000048fc0)={0x0, 0x0, "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", "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"}) r7 = syz_open_dev$sg(0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r11}, {}, {r10}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {r9}, {r10, r11}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}, {}, {r9, r11}, {}, {}, {}, {}, {r9}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {r9}, {r9}, {}, {}, {}, {}, {}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r10}, {}, {}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {r9}, {}, {}, {0x0, r11}, {}, {r9}, {0x0, r11}, {}, {}, {}, {}, {r9}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10, r11}, {r9}, {}, {}, {0x0, r11}, {r9}, {r10, r11}, {}, {r9}, {r9, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {r9}, {}, {r10}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {}, {r10}, {r9}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r9}, {r9}, {}, {}, {r9}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {r10}, {r9}, {}, {r9}, {}, {}, {r10}, {0x0, r11}, {r10, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {r10}, {}, {}, {}, {}, {r9}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {r9}, {r10}, {}, {}, {}, {r10}, {0x0, r11}, {0x0, r11}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {r10}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {}, {r10}, {r9}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000049fc0)={{0x0, 0xffff, 0x8, 0x5, 0x1d, 0x1, 0x57e, 0x0, 0xff, 0x8000, 0xfffffffd, 0x6, 0x2, 0x3ff, 0x8}}) r13 = syz_open_dev$sg(0x0, 0x0, 0x0) r14 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r17}, {}, {r16}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {r16, r17}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {r16}, {0x0, r17}, {0x0, r17}, {}, {}, {}, {}, {r15}, {r16, r17}, {}, {}, {r15, r17}, {}, {}, {0x0, r17}, {0x0, r17}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {r16}, {0x0, r17}, {}, {r15, r17}, {}, {}, {}, {}, {r15}, {}, {0x0, r17}, {}, {0x0, r17}, {}, {}, {0x0, r17}, {r16, r17}, {}, {0x0, r17}, {0x0, r17}, {}, {r15}, {r15}, {}, {}, {}, {}, {}, {r16}, {r15}, {}, {}, {}, {0x0, r17}, {r16}, {}, {}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {r15}, {}, {}, {0x0, r17}, {}, {r15}, {0x0, r17}, {}, {}, {}, {}, {r15}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16, r17}, {r15}, {}, {}, {0x0, r17}, {r15}, {r16, r17}, {}, {r15}, {r15, r17}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {0x0, r17}, {0x0, r17}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {r15}, {}, {r16}, {}, {}, {}, {0x0, r17}, {}, {}, {0x0, r17}, {}, {}, {r16}, {r15}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {r15}, {r15}, {}, {}, {r15}, {}, {}, {}, {r16}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {r16}, {r15}, {}, {r15}, {}, {}, {r16}, {0x0, r17}, {r16, r17}, {0x0, r17}, {}, {0x0, r17}, {}, {}, {r16}, {}, {}, {}, {}, {r15}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {0x0, r17}, {r15}, {r16}, {}, {}, {}, {r16}, {0x0, r17}, {0x0, r17}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15, r17}, {r16}, {}, {}, {}, {}, {}, {}, {}, {r15, r17}, {}, {}, {r16}, {r15}, {0x0, r17}, {}, {}, {}, {}, {}, {0x0, r17}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004afc0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r6}, {}, {}, {0x0, r11}, {r12, r17}], 0x2, "0091a6074e48dd"}) creat(&(0x7f0000000080)='./bus\x00', 0x18) r18 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r18, 0x0, 0x0) 11:14:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 763.067476][T11789] loop5: detected capacity change from 0 to 16 [ 763.076315][T11785] loop0: detected capacity change from 0 to 16 [ 763.080403][T11788] loop4: detected capacity change from 0 to 264192 [ 763.084853][T11792] loop3: detected capacity change from 0 to 16 [ 763.096842][T11788] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 763.106636][T11803] loop1: detected capacity change from 0 to 16 11:14:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1c0) 11:14:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600002010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 763.139665][T11788] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 763.150771][T11788] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 763.169890][T11821] loop2: detected capacity change from 0 to 16 11:14:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 11:14:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x20000000}]) 11:14:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 763.224991][T11839] loop5: detected capacity change from 0 to 16 [ 763.245514][T11837] loop0: detected capacity change from 0 to 16 11:14:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600020010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc001) 11:14:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40140, 0xd8) sendfile(r0, r1, 0x0, 0x0) [ 763.292323][T11857] loop2: detected capacity change from 0 to 16 [ 763.301403][T11856] loop3: detected capacity change from 0 to 16 [ 763.312522][T11858] loop1: detected capacity change from 0 to 16 [ 763.327743][T11868] loop4: detected capacity change from 0 to 264192 [ 763.353653][T11868] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 763.369680][T11868] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 763.380799][T11868] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060002f010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 763.402106][T11883] loop5: detected capacity change from 0 to 16 [ 763.412718][T11885] loop0: detected capacity change from 0 to 16 11:14:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x14) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x22000000}]) 11:14:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000b0010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000) 11:14:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 763.470691][T11893] loop3: detected capacity change from 0 to 16 [ 763.485823][T11895] loop2: detected capacity change from 0 to 16 11:14:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 763.522130][T11909] loop4: detected capacity change from 0 to 264192 [ 763.522223][T11918] loop1: detected capacity change from 0 to 16 [ 763.548275][T11917] loop5: detected capacity change from 0 to 16 [ 763.563418][T11933] loop3: detected capacity change from 0 to 16 11:14:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 763.566711][T11934] loop0: detected capacity change from 0 to 16 [ 763.587040][T11940] loop2: detected capacity change from 0 to 16 [ 763.609027][T11909] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000080)) 11:14:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 763.628936][T11909] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 763.640039][T11909] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000b1010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf0ff7f) 11:14:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x3f000000}]) 11:14:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') sync() r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) [ 763.682476][T11959] loop3: detected capacity change from 0 to 16 [ 763.728258][T11972] loop4: detected capacity change from 0 to 264192 [ 763.735533][T11973] loop2: detected capacity change from 0 to 16 [ 763.745232][T11972] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x3800, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) [ 763.782166][T11991] loop3: detected capacity change from 0 to 16 [ 763.788862][T11990] loop5: detected capacity change from 0 to 16 [ 763.793692][T11992] loop1: detected capacity change from 0 to 16 [ 763.798443][T11993] loop0: detected capacity change from 0 to 16 [ 763.808797][T11972] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 763.819897][T11972] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x40000000}]) 11:14:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') sync() r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 11:14:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000b4010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0010000) 11:14:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000e355a76a11a1be1800000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00fa8920b2c9fbd92500eb0000197c88fe00000000000000000000001b4a2cc85b2d446bf6c359e0ac924cc05339607084c7ab08a746534acd9ba7aee613184a60a59b93679fa379b885930f3ec8ef45f2c1cb0234f0264c02aa20f61c69f9735a5ba6b4e8afa4d89d81cdea3ceaee28"]) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x9, 0x2aa2, 0x0, 0x103, 0x2, "84690e26bcd8c33b"}) r2 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') rmdir(&(0x7f0000000180)='./file0\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x80) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x3) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x300, 0x68) signalfd(r5, &(0x7f00000001c0)={[0x7]}, 0x8) sendfile(r3, r4, 0x0, 0x0) [ 763.916330][T12017] loop5: detected capacity change from 0 to 16 [ 763.919451][T12019] loop0: detected capacity change from 0 to 16 11:14:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') sync() r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) [ 763.960122][T12033] loop1: detected capacity change from 0 to 16 [ 763.966675][T12021] loop3: detected capacity change from 0 to 16 [ 763.969331][T12039] loop2: detected capacity change from 0 to 16 11:14:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x7f010000}]) 11:14:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfeffffff) [ 764.017894][T12055] loop0: detected capacity change from 0 to 16 [ 764.046198][T12059] loop4: detected capacity change from 0 to 264192 [ 764.059414][T12066] loop3: detected capacity change from 0 to 16 11:14:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 764.138056][T12082] loop1: detected capacity change from 0 to 16 [ 764.144993][T12085] loop0: detected capacity change from 0 to 16 [ 764.151334][T12059] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 764.178788][T12059] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 764.181798][T12088] loop2: detected capacity change from 0 to 16 [ 764.189869][T12059] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000b5010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffffe) [ 764.237652][T12082] handle_bad_sector: 130 callbacks suppressed [ 764.237685][T12082] attempt to access beyond end of device [ 764.237685][T12082] loop1: rw=2049, want=28, limit=16 [ 764.263008][T12101] loop3: detected capacity change from 0 to 16 11:14:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xad883f1d}]) [ 764.324006][T12107] loop4: detected capacity change from 0 to 264192 [ 764.380710][T12119] loop0: detected capacity change from 0 to 16 [ 764.385500][T12126] loop2: detected capacity change from 0 to 16 [ 764.400929][T12107] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 764.402715][T12127] loop3: detected capacity change from 0 to 16 11:14:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000000000000) [ 764.435336][T12137] loop1: detected capacity change from 0 to 16 [ 764.465546][T12137] attempt to access beyond end of device [ 764.465546][T12137] loop1: rw=2049, want=18, limit=16 [ 764.490303][T12107] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 764.501373][T12107] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 764.530721][ T1267] attempt to access beyond end of device [ 764.530721][ T1267] loop1: rw=2049, want=18, limit=16 [ 764.541464][ T1267] buffer_io_error: 83 callbacks suppressed [ 764.541477][ T1267] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 764.593816][T12145] attempt to access beyond end of device [ 764.593816][T12145] loop1: rw=2049, want=27, limit=16 [ 764.624077][T12153] loop0: detected capacity change from 0 to 16 [ 764.631564][ T1267] attempt to access beyond end of device [ 764.631564][ T1267] loop1: rw=2049, want=19, limit=16 [ 764.642518][ T1267] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 764.655157][ T1267] attempt to access beyond end of device [ 764.655157][ T1267] loop1: rw=2049, want=20, limit=16 [ 764.665893][ T1267] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 764.684214][ T1267] attempt to access beyond end of device [ 764.684214][ T1267] loop1: rw=2049, want=21, limit=16 [ 764.694956][ T1267] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 764.705436][ T1267] attempt to access beyond end of device [ 764.705436][ T1267] loop1: rw=2049, want=22, limit=16 [ 764.716257][ T1267] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 764.729716][ T1267] attempt to access beyond end of device [ 764.729716][ T1267] loop1: rw=2049, want=23, limit=16 [ 764.740483][ T1267] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 764.749438][ T1267] attempt to access beyond end of device [ 764.749438][ T1267] loop1: rw=2049, want=24, limit=16 [ 764.760153][ T1267] Buffer I/O error on dev loop1, logical block 23, lost async page write 11:14:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000b6010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf0ff7f00000000) 11:14:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xf6ffffff}]) [ 764.914839][T12192] loop3: detected capacity change from 0 to 16 [ 764.920975][T12197] loop0: detected capacity change from 0 to 16 [ 764.924516][T12193] loop2: detected capacity change from 0 to 16 [ 764.929760][T12199] loop1: detected capacity change from 0 to 16 [ 764.940985][T12198] loop4: detected capacity change from 0 to 264192 11:14:33 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc001000000000000) [ 764.978298][T12199] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 764.987562][T12198] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 765.006803][T12199] Buffer I/O error on dev loop1, logical block 18, lost async page write 11:14:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000b7010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 765.023102][T12198] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 765.026332][T12220] loop5: detected capacity change from 0 to 16 [ 765.034206][T12198] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 765.040482][T12199] Buffer I/O error on dev loop1, logical block 19, lost async page write 11:14:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 11:14:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfeffffff00000000) 11:14:33 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 765.102749][T12232] loop0: detected capacity change from 0 to 16 11:14:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xff0f0000}]) [ 765.150767][T12249] loop5: detected capacity change from 0 to 16 [ 765.154970][T12250] loop4: detected capacity change from 0 to 264192 [ 765.177009][T12257] loop0: detected capacity change from 0 to 16 [ 765.178262][T12258] loop2: detected capacity change from 0 to 16 11:14:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff00000000) [ 765.197883][T12250] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 765.218798][T12277] loop1: detected capacity change from 0 to 16 [ 765.219247][T12250] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 765.236022][T12250] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:34 executing program 3: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 11:14:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000e5010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 765.280314][T12294] loop0: detected capacity change from 0 to 16 11:14:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffffffffffff) 11:14:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xfffdffff}]) [ 765.349333][T12303] loop5: detected capacity change from 0 to 16 [ 765.356491][T12305] loop2: detected capacity change from 0 to 16 11:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() open(0x0, 0x0, 0x0) 11:14:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 11:14:34 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 765.409626][T12321] loop4: detected capacity change from 0 to 264192 [ 765.429455][T12327] loop1: detected capacity change from 0 to 16 [ 765.441763][T12321] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 765.447121][T12326] loop0: detected capacity change from 0 to 16 11:14:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000ea010f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x2800, 0x2) sendfile(r0, r1, 0x0, 0x0) 11:14:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xfffffdff}]) [ 765.489329][T12321] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 765.500415][T12321] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 765.512368][T12338] loop5: detected capacity change from 0 to 16 [ 765.519844][T12345] loop2: detected capacity change from 0 to 16 [ 765.528581][T12346] loop3: detected capacity change from 0 to 16 11:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() 11:14:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 11:14:34 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 765.599898][T12363] loop4: detected capacity change from 0 to 264192 [ 765.601526][T12365] loop1: detected capacity change from 0 to 16 [ 765.624786][T12367] loop0: detected capacity change from 0 to 16 [ 765.635193][T12363] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v1={0x1000000, [{0xfb, 0xfffffffd}]}, 0xc, 0x2) [ 765.639069][T12377] loop2: detected capacity change from 0 to 16 [ 765.647814][T12379] loop5: detected capacity change from 0 to 16 [ 765.665983][T12363] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 765.677303][T12363] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 765.686962][T12393] loop3: detected capacity change from 0 to 16 11:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() 11:14:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600001020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 11:14:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xffffff0f}]) 11:14:34 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3022c12, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000080)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 765.752918][T12399] loop0: detected capacity change from 0 to 16 [ 765.777219][T12409] loop5: detected capacity change from 0 to 16 [ 765.793140][T12415] loop4: detected capacity change from 0 to 264192 11:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') sync() [ 765.816457][T12415] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 765.822622][T12427] loop2: detected capacity change from 0 to 16 [ 765.831882][T12430] loop0: detected capacity change from 0 to 16 [ 765.838876][T12415] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 765.846017][T12439] loop3: detected capacity change from 0 to 16 [ 765.849970][T12415] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 11:14:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600004020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) sync() 11:14:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), 0x0, 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 765.871334][T12438] loop1: detected capacity change from 0 to 16 [ 765.874613][T12430] loop0: detected capacity change from 0 to 16 [ 765.909395][T12455] loop5: detected capacity change from 0 to 16 11:14:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xfffffff6}]) 11:14:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4b4, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3008852, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 765.960399][T12472] loop5: detected capacity change from 0 to 16 [ 765.973813][T12474] loop2: detected capacity change from 0 to 16 [ 765.987340][T12482] loop3: detected capacity change from 0 to 16 11:14:34 executing program 5: sync() 11:14:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xff0f0000}]) [ 766.004984][T12488] loop0: detected capacity change from 0 to 2 [ 766.005709][T12475] loop4: detected capacity change from 0 to 264192 [ 766.033744][T12475] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 766.036826][T12497] loop1: detected capacity change from 0 to 16 [ 766.044499][T12475] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), 0x0, 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 766.056928][T12488] loop0: detected capacity change from 0 to 2 [ 766.060676][T12475] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x10000000000}]) 11:14:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600015020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 766.124190][T12520] loop2: detected capacity change from 0 to 16 11:14:34 executing program 5: sync() 11:14:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x3008852, &(0x7f0000000080)=ANY=[@ANYRESDEC]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 766.176645][T12526] loop3: detected capacity change from 0 to 16 11:14:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), 0x0, 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 766.221895][T12544] loop4: detected capacity change from 0 to 264192 [ 766.224682][T12545] loop1: detected capacity change from 0 to 16 [ 766.249399][T12556] loop3: detected capacity change from 0 to 16 11:14:35 executing program 5: sync() (fail_nth: 1) [ 766.276577][T12559] loop5: detected capacity change from 0 to 16 [ 766.276763][T12544] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 766.292895][T12544] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 766.303993][T12544] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000008732e668b5a5aaa0101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060001a020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x800800000000}]) [ 766.369917][T12583] loop2: detected capacity change from 0 to 264192 [ 766.389322][T12583] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 766.400244][T12590] loop0: detected capacity change from 0 to 16 [ 766.423471][T12583] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz-executor.2: bad orphan inode 2441661457 [ 766.434657][T12583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 766.481829][T12602] FAULT_INJECTION: forcing a failure. [ 766.481829][T12602] name failslab, interval 1, probability 0, space 0, times 0 [ 766.494529][T12602] CPU: 1 PID: 12602 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 766.497709][T12606] loop1: detected capacity change from 0 to 16 [ 766.503789][T12602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.503802][T12602] Call Trace: [ 766.503809][T12602] dump_stack_lvl+0xd6/0x122 [ 766.503834][T12602] dump_stack+0x11/0x1b 11:14:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 766.525735][T12590] loop0: detected capacity change from 0 to 16 [ 766.527899][T12602] should_fail+0x23c/0x250 [ 766.542618][T12602] __should_failslab+0x81/0x90 [ 766.547388][T12602] should_failslab+0x5/0x20 [ 766.551893][T12602] kmem_cache_alloc_node+0x61/0x2c0 [ 766.557110][T12602] ? create_task_io_context+0x36/0x210 [ 766.562571][T12602] ? enqueue_entity+0x45b/0x630 [ 766.567425][T12602] create_task_io_context+0x36/0x210 [ 766.572788][T12602] submit_bio_checks+0x7c3/0x850 11:14:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 766.577728][T12602] ? __perf_event_task_sched_out+0xe6b/0xec0 [ 766.583715][T12602] ? __perf_event_task_sched_in+0x7e7/0x850 [ 766.589650][T12602] ? rb_erase+0x4bb/0x750 [ 766.594022][T12602] submit_bio_noacct+0x33/0x7d0 [ 766.598888][T12602] ? _raw_spin_lock_irqsave+0x38/0xa0 [ 766.604269][T12602] submit_bio+0x10c/0x190 [ 766.608611][T12602] submit_bio_wait+0x86/0xc0 [ 766.613198][T12602] blkdev_issue_flush+0x7f/0xa0 [ 766.618489][T12602] ? submit_bio_wait+0xc0/0xc0 [ 766.623254][T12602] ext4_sync_fs+0x252/0x320 [ 766.627759][T12602] ? ext4_put_super+0x910/0x910 [ 766.632617][T12602] sync_fs_one_sb+0x94/0xc0 [ 766.637130][T12602] iterate_supers+0x137/0x1f0 [ 766.641800][T12602] ? sync_inodes_one_sb+0x50/0x50 [ 766.646998][T12602] ksys_sync+0x77/0xe0 [ 766.651063][T12602] __do_sys_sync+0xa/0x10 [ 766.655489][T12602] do_syscall_64+0x44/0xa0 [ 766.659907][T12602] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 766.665887][T12602] RIP: 0033:0x7f3fd1c2c709 [ 766.670301][T12602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 766.689907][T12602] RSP: 002b:00007f3fcf9a4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 766.698322][T12602] RAX: ffffffffffffffda RBX: 00007f3fd1d30f60 RCX: 00007f3fd1c2c709 [ 766.706300][T12602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 766.714275][T12602] RBP: 00007f3fcf9a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.722304][T12602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:14:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x400000001000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x3a6000) sendfile(r0, r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000240)={{}, {0xfffffffffffffc00}, 0x1, 0x0, 0x0, &(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)="6a72f01e79ee21eacdd7b3fb13416524fac65f59988a6f0d41e861a6f553aa8f8639c173c34a85583e50d508eb1b4f83dc49b5a424181ffbdd250015fe3a6a8d9577547846966cc12e91e6d5e87542ca6427c0e97226cdd191657f6a89ad67b808afe440849f7663385ed72a97ac75dd657c712a373c38e3d2197bc61213be9e0eedb805877e60b55889508aa0cadd6415be76f98b095899a244dc576ad6a0dcabb2f818533fc387da3cfc1a43f53a159326324d4de26100f9525a85e04eb9852b9a86a117ba0fc879602ccc4ee65cb5f1946ec2fa19a8d4f8f7996932d60bf3bb6911ea106ab8a572998a", 0xeb, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1ef}) [ 766.730334][T12602] R13: 00007ffc957a1b2f R14: 00007f3fcf9a4300 R15: 0000000000022000 [ 766.749785][T12604] loop4: detected capacity change from 0 to 264192 11:14:35 executing program 5: sync() (fail_nth: 2) 11:14:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x1000000000000}]) [ 766.809843][T12634] loop0: detected capacity change from 0 to 264192 [ 766.821471][T12604] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 766.832550][T12626] loop2: detected capacity change from 0 to 264192 [ 766.858861][T12604] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 766.870450][T12604] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 766.885994][T12626] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 766.906823][T12626] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz-executor.2: bad orphan inode 2441661457 [ 766.917999][T12626] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 766.932316][T12633] FAULT_INJECTION: forcing a failure. [ 766.932316][T12633] name failslab, interval 1, probability 0, space 0, times 0 [ 766.945296][T12633] CPU: 1 PID: 12633 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 11:14:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600048020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 766.954056][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.964104][T12633] Call Trace: [ 766.967380][T12633] dump_stack_lvl+0xd6/0x122 [ 766.971968][T12633] dump_stack+0x11/0x1b [ 766.972983][T12652] loop1: detected capacity change from 0 to 16 [ 766.976120][T12633] should_fail+0x23c/0x250 [ 766.986673][T12633] ? mempool_alloc_slab+0x16/0x20 [ 766.991692][T12633] __should_failslab+0x81/0x90 [ 766.996470][T12633] should_failslab+0x5/0x20 [ 767.000973][T12633] kmem_cache_alloc+0x4f/0x300 [ 767.005734][T12633] mempool_alloc_slab+0x16/0x20 [ 767.011531][T12633] ? mempool_free+0x130/0x130 [ 767.016212][T12633] mempool_alloc+0x9d/0x310 [ 767.018792][T12655] FAT-fs (loop3): bogus number of reserved sectors [ 767.020736][T12633] ? try_to_wake_up+0x362/0x480 [ 767.020758][T12633] bio_alloc_bioset+0xcc/0x530 [ 767.020777][T12633] ? __test_set_page_writeback+0x500/0x570 [ 767.027355][T12655] FAT-fs (loop3): Can't find a valid FAT filesystem [ 767.032468][T12633] submit_bh_wbc+0x130/0x330 [ 767.054197][T12633] __block_write_full_page+0x648/0xa10 11:14:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 767.059697][T12633] ? mark_buffer_write_io_error+0x180/0x180 [ 767.065699][T12633] ? blkdev_fallocate+0x2e0/0x2e0 [ 767.070815][T12633] ? blkdev_fallocate+0x2e0/0x2e0 [ 767.076082][T12633] block_write_full_page+0x240/0x260 [ 767.081819][T12633] blkdev_writepage+0x20/0x30 [ 767.086623][T12633] __writepage+0x38/0xd0 [ 767.090896][T12633] write_cache_pages+0x50a/0x840 [ 767.096298][T12633] ? generic_writepages+0xc0/0xc0 [ 767.101327][T12633] generic_writepages+0x7c/0xc0 [ 767.107489][T12633] blkdev_writepages+0x19/0x20 [ 767.113235][T12633] ? blkdev_readpage+0x20/0x20 [ 767.118002][T12633] do_writepages+0x26b/0x3c0 [ 767.123366][T12633] ? blkdev_issue_flush+0x7f/0xa0 [ 767.129062][T12633] ? __list_del_entry_valid+0x54/0xc0 [ 767.134435][T12633] filemap_fdatawrite+0x154/0x180 [ 767.139446][T12633] fdatawrite_one_bdev+0x28/0x30 [ 767.144554][T12633] iterate_bdevs+0x1ea/0x2d0 [ 767.149129][T12633] ? sync_fs_one_sb+0xc0/0xc0 [ 767.153791][T12633] ksys_sync+0x85/0xe0 [ 767.157842][T12633] __do_sys_sync+0xa/0x10 [ 767.162226][T12633] do_syscall_64+0x44/0xa0 [ 767.166735][T12633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 767.177526][T12633] RIP: 0033:0x7f3fd1c2c709 [ 767.181930][T12633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.201598][T12633] RSP: 002b:00007f3fcf9a4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 767.209993][T12633] RAX: ffffffffffffffda RBX: 00007f3fd1d30f60 RCX: 00007f3fd1c2c709 [ 767.217965][T12633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 767.225940][T12633] RBP: 00007f3fcf9a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.233891][T12633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.241846][T12633] R13: 00007ffc957a1b2f R14: 00007f3fcf9a4300 R15: 0000000000022000 [ 767.288440][T12669] loop4: detected capacity change from 0 to 264192 [ 767.295295][T12664] loop2: detected capacity change from 0 to 264192 [ 767.313913][T12664] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 767.323421][T12669] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 767.351181][T12669] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 767.362364][T12669] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 767.383481][T12664] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz-executor.2: bad orphan inode 2441661457 11:14:36 executing program 5: sync() (fail_nth: 3) 11:14:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 767.394772][T12664] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 767.442026][T12685] FAULT_INJECTION: forcing a failure. [ 767.442026][T12685] name failslab, interval 1, probability 0, space 0, times 0 [ 767.454693][T12685] CPU: 1 PID: 12685 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 767.463469][T12685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.473564][T12685] Call Trace: [ 767.476837][T12685] dump_stack_lvl+0xd6/0x122 [ 767.481433][T12685] dump_stack+0x11/0x1b [ 767.485588][T12685] should_fail+0x23c/0x250 [ 767.489998][T12685] ? mempool_alloc_slab+0x16/0x20 [ 767.495069][T12685] __should_failslab+0x81/0x90 [ 767.499861][T12685] should_failslab+0x5/0x20 [ 767.504369][T12685] kmem_cache_alloc+0x4f/0x300 [ 767.509133][T12685] mempool_alloc_slab+0x16/0x20 [ 767.514236][T12685] ? mempool_free+0x130/0x130 [ 767.518907][T12685] mempool_alloc+0x9d/0x310 [ 767.523416][T12685] ? submit_bio_noacct+0x7ab/0x7d0 [ 767.528531][T12685] bio_alloc_bioset+0xcc/0x530 [ 767.533318][T12685] ? __test_set_page_writeback+0x500/0x570 [ 767.539147][T12685] submit_bh_wbc+0x130/0x330 [ 767.543816][T12685] __block_write_full_page+0x648/0xa10 [ 767.549282][T12685] ? mark_buffer_write_io_error+0x180/0x180 [ 767.555253][T12685] ? blkdev_fallocate+0x2e0/0x2e0 [ 767.560378][T12685] ? blkdev_fallocate+0x2e0/0x2e0 [ 767.565397][T12685] block_write_full_page+0x240/0x260 [ 767.570767][T12685] blkdev_writepage+0x20/0x30 [ 767.575443][T12685] __writepage+0x38/0xd0 [ 767.579723][T12685] write_cache_pages+0x50a/0x840 [ 767.584936][T12685] ? generic_writepages+0xc0/0xc0 [ 767.590034][T12685] generic_writepages+0x7c/0xc0 [ 767.594894][T12685] blkdev_writepages+0x19/0x20 [ 767.599658][T12685] ? blkdev_readpage+0x20/0x20 [ 767.604414][T12685] do_writepages+0x26b/0x3c0 [ 767.609032][T12685] ? blkdev_issue_flush+0x7f/0xa0 [ 767.614045][T12685] ? __list_del_entry_valid+0x54/0xc0 [ 767.619455][T12685] filemap_fdatawrite+0x154/0x180 [ 767.624625][T12685] fdatawrite_one_bdev+0x28/0x30 [ 767.629636][T12685] iterate_bdevs+0x1ea/0x2d0 [ 767.634212][T12685] ? sync_fs_one_sb+0xc0/0xc0 [ 767.638882][T12685] ksys_sync+0x85/0xe0 11:14:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) r3 = dup2(r1, r0) sendfile(r2, r3, &(0x7f0000000180)=0xffffffffffffffff, 0xffffffff) [ 767.642948][T12685] __do_sys_sync+0xa/0x10 [ 767.647273][T12685] do_syscall_64+0x44/0xa0 [ 767.651871][T12685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 767.657910][T12685] RIP: 0033:0x7f3fd1c2c709 [ 767.662342][T12685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.681961][T12685] RSP: 002b:00007f3fcf9a4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 11:14:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600049020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 767.690370][T12685] RAX: ffffffffffffffda RBX: 00007f3fd1d30f60 RCX: 00007f3fd1c2c709 [ 767.698365][T12685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 767.706331][T12685] RBP: 00007f3fcf9a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.714418][T12685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.722483][T12685] R13: 00007ffc957a1b2f R14: 00007f3fcf9a4300 R15: 0000000000022000 11:14:36 executing program 5: sync() (fail_nth: 4) 11:14:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 767.802010][T12693] loop4: detected capacity change from 0 to 264192 [ 767.815969][T12694] loop0: detected capacity change from 0 to 16 [ 767.823286][T12703] loop2: detected capacity change from 0 to 264192 11:14:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 767.849337][T12693] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 767.909177][T12711] FAT-fs (loop3): bogus number of reserved sectors [ 767.915716][T12711] FAT-fs (loop3): Can't find a valid FAT filesystem [ 767.960919][T12693] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 767.972151][T12693] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 767.985122][T12721] loop2: detected capacity change from 0 to 264192 [ 768.002793][T12708] FAULT_INJECTION: forcing a failure. [ 768.002793][T12708] name failslab, interval 1, probability 0, space 0, times 0 [ 768.015535][T12708] CPU: 1 PID: 12708 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 768.024302][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.034365][T12708] Call Trace: [ 768.037639][T12708] dump_stack_lvl+0xd6/0x122 [ 768.042235][T12708] dump_stack+0x11/0x1b [ 768.046421][T12708] should_fail+0x23c/0x250 [ 768.050822][T12708] ? mempool_alloc_slab+0x16/0x20 [ 768.055863][T12708] __should_failslab+0x81/0x90 [ 768.060865][T12708] should_failslab+0x5/0x20 [ 768.065421][T12708] kmem_cache_alloc+0x4f/0x300 [ 768.070416][T12708] mempool_alloc_slab+0x16/0x20 [ 768.075262][T12708] ? mempool_free+0x130/0x130 [ 768.080021][T12708] mempool_alloc+0x9d/0x310 [ 768.084508][T12708] bio_alloc_bioset+0xcc/0x530 [ 768.089271][T12708] ? __test_set_page_writeback+0x500/0x570 [ 768.095076][T12708] submit_bh_wbc+0x130/0x330 [ 768.099658][T12708] __block_write_full_page+0x648/0xa10 [ 768.105122][T12708] ? mark_buffer_write_io_error+0x180/0x180 [ 768.111066][T12708] ? blkdev_fallocate+0x2e0/0x2e0 [ 768.116112][T12708] ? blkdev_fallocate+0x2e0/0x2e0 [ 768.121196][T12708] block_write_full_page+0x240/0x260 [ 768.126510][T12708] blkdev_writepage+0x20/0x30 [ 768.131190][T12708] __writepage+0x38/0xd0 [ 768.135451][T12708] write_cache_pages+0x50a/0x840 [ 768.140388][T12708] ? generic_writepages+0xc0/0xc0 [ 768.145472][T12708] generic_writepages+0x7c/0xc0 [ 768.150320][T12708] blkdev_writepages+0x19/0x20 [ 768.155091][T12708] ? blkdev_readpage+0x20/0x20 [ 768.159877][T12708] do_writepages+0x26b/0x3c0 [ 768.164453][T12708] ? blkdev_issue_flush+0x7f/0xa0 [ 768.170592][T12708] ? __down_read_common+0x17e/0x540 [ 768.175857][T12708] filemap_fdatawrite+0x154/0x180 [ 768.181047][T12708] fdatawrite_one_bdev+0x28/0x30 [ 768.185981][T12708] iterate_bdevs+0x1ea/0x2d0 [ 768.190639][T12708] ? sync_fs_one_sb+0xc0/0xc0 [ 768.195518][T12708] ksys_sync+0x85/0xe0 [ 768.199587][T12708] __do_sys_sync+0xa/0x10 [ 768.203916][T12708] do_syscall_64+0x44/0xa0 [ 768.208349][T12708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 768.214417][T12708] RIP: 0033:0x7f3fd1c2c709 [ 768.218886][T12708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 768.238478][T12708] RSP: 002b:00007f3fcf9a4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 768.247049][T12708] RAX: ffffffffffffffda RBX: 00007f3fd1d30f60 RCX: 00007f3fd1c2c709 11:14:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x2000000000000}]) [ 768.255101][T12708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 768.263056][T12708] RBP: 00007f3fcf9a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 768.271017][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.278978][T12708] R13: 00007ffc957a1b2f R14: 00007f3fcf9a4300 R15: 0000000000022000 11:14:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060004a020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060004b020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:37 executing program 5: sync() (fail_nth: 5) 11:14:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 768.444469][T12745] loop4: detected capacity change from 0 to 264192 [ 768.446826][T12748] loop2: detected capacity change from 0 to 264192 [ 768.456430][T12753] FAT-fs (loop3): bogus number of reserved sectors [ 768.464215][T12753] FAT-fs (loop3): Can't find a valid FAT filesystem [ 768.472806][T12750] loop1: detected capacity change from 0 to 16 [ 768.481384][T12745] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 768.509450][T12745] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 768.520556][T12745] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 768.536339][T12747] FAULT_INJECTION: forcing a failure. [ 768.536339][T12747] name failslab, interval 1, probability 0, space 0, times 0 [ 768.549060][T12747] CPU: 0 PID: 12747 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 768.557826][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.567881][T12747] Call Trace: [ 768.571166][T12747] dump_stack_lvl+0xd6/0x122 [ 768.575760][T12747] dump_stack+0x11/0x1b [ 768.579943][T12747] should_fail+0x23c/0x250 [ 768.584471][T12747] ? mempool_alloc_slab+0x16/0x20 [ 768.589492][T12747] __should_failslab+0x81/0x90 [ 768.594332][T12747] should_failslab+0x5/0x20 [ 768.598954][T12747] kmem_cache_alloc+0x4f/0x300 [ 768.603771][T12747] mempool_alloc_slab+0x16/0x20 11:14:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) sendfile(r0, r1, 0x0, 0x0) 11:14:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060004e020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 768.608629][T12747] ? mempool_free+0x130/0x130 [ 768.613396][T12747] mempool_alloc+0x9d/0x310 [ 768.617941][T12747] ? submit_bio_noacct+0x7ab/0x7d0 [ 768.623053][T12747] bio_alloc_bioset+0xcc/0x530 [ 768.627820][T12747] ? __test_set_page_writeback+0x500/0x570 [ 768.633651][T12747] submit_bh_wbc+0x130/0x330 [ 768.638340][T12747] __block_write_full_page+0x648/0xa10 [ 768.643844][T12747] ? mark_buffer_write_io_error+0x180/0x180 [ 768.649823][T12747] ? blkdev_fallocate+0x2e0/0x2e0 [ 768.654828][T12747] ? blkdev_fallocate+0x2e0/0x2e0 [ 768.660055][T12747] block_write_full_page+0x240/0x260 [ 768.665585][T12747] blkdev_writepage+0x20/0x30 [ 768.670250][T12747] __writepage+0x38/0xd0 [ 768.674476][T12747] write_cache_pages+0x50a/0x840 [ 768.679408][T12747] ? generic_writepages+0xc0/0xc0 [ 768.684430][T12747] generic_writepages+0x7c/0xc0 [ 768.689268][T12747] blkdev_writepages+0x19/0x20 [ 768.694045][T12747] ? blkdev_readpage+0x20/0x20 [ 768.698811][T12747] do_writepages+0x26b/0x3c0 [ 768.703414][T12747] ? rcu_segcblist_enqueue+0x8e/0xa0 [ 768.708783][T12747] ? __down_read_common+0x17e/0x540 [ 768.713971][T12747] filemap_fdatawrite+0x154/0x180 [ 768.719026][T12747] fdatawrite_one_bdev+0x28/0x30 [ 768.723943][T12747] iterate_bdevs+0x1ea/0x2d0 [ 768.728525][T12747] ? sync_fs_one_sb+0xc0/0xc0 [ 768.733181][T12747] ksys_sync+0x85/0xe0 [ 768.737227][T12747] __do_sys_sync+0xa/0x10 [ 768.741594][T12747] do_syscall_64+0x44/0xa0 [ 768.746045][T12747] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 768.751958][T12747] RIP: 0033:0x7f3fd1c2c709 [ 768.756363][T12747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 768.775949][T12747] RSP: 002b:00007f3fcf9a4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 768.784421][T12747] RAX: ffffffffffffffda RBX: 00007f3fd1d30f60 RCX: 00007f3fd1c2c709 [ 768.792389][T12747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 768.800852][T12747] RBP: 00007f3fcf9a41d0 R08: 0000000000000000 R09: 0000000000000000 11:14:37 executing program 5: sync() (fail_nth: 6) [ 768.808905][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.816868][T12747] R13: 00007ffc957a1b2f R14: 00007f3fcf9a4300 R15: 0000000000022000 11:14:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 768.861824][T12778] loop2: detected capacity change from 0 to 264192 [ 768.881913][T12780] FAULT_INJECTION: forcing a failure. [ 768.881913][T12780] name failslab, interval 1, probability 0, space 0, times 0 [ 768.894649][T12780] CPU: 1 PID: 12780 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 768.903610][T12780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.913874][T12780] Call Trace: [ 768.917231][T12780] dump_stack_lvl+0xd6/0x122 [ 768.921909][T12780] dump_stack+0x11/0x1b [ 768.926069][T12780] should_fail+0x23c/0x250 [ 768.930565][T12780] ? mempool_alloc_slab+0x16/0x20 [ 768.935576][T12780] __should_failslab+0x81/0x90 [ 768.940340][T12780] should_failslab+0x5/0x20 [ 768.944839][T12780] kmem_cache_alloc+0x4f/0x300 [ 768.949587][T12780] mempool_alloc_slab+0x16/0x20 [ 768.954420][T12780] ? mempool_free+0x130/0x130 [ 768.959105][T12780] mempool_alloc+0x9d/0x310 [ 768.963649][T12780] ? submit_bio_noacct+0x7ab/0x7d0 [ 768.968761][T12780] bio_alloc_bioset+0xcc/0x530 [ 768.974575][T12780] ? __test_set_page_writeback+0x500/0x570 [ 768.980390][T12780] submit_bh_wbc+0x130/0x330 [ 768.984967][T12780] __block_write_full_page+0x648/0xa10 [ 768.990539][T12780] ? mark_buffer_write_io_error+0x180/0x180 [ 768.996680][T12780] ? blkdev_fallocate+0x2e0/0x2e0 [ 769.001871][T12780] ? blkdev_fallocate+0x2e0/0x2e0 [ 769.006877][T12780] block_write_full_page+0x240/0x260 [ 769.012202][T12780] blkdev_writepage+0x20/0x30 [ 769.016916][T12780] __writepage+0x38/0xd0 [ 769.021140][T12780] write_cache_pages+0x50a/0x840 [ 769.026061][T12780] ? generic_writepages+0xc0/0xc0 [ 769.031172][T12780] generic_writepages+0x7c/0xc0 [ 769.036006][T12780] blkdev_writepages+0x19/0x20 [ 769.040797][T12780] ? blkdev_readpage+0x20/0x20 [ 769.045540][T12780] do_writepages+0x26b/0x3c0 [ 769.050191][T12780] ? blkdev_issue_flush+0x7f/0xa0 [ 769.055204][T12780] ? __down_read_common+0x17e/0x540 [ 769.060395][T12780] filemap_fdatawrite+0x154/0x180 [ 769.065463][T12780] fdatawrite_one_bdev+0x28/0x30 [ 769.070398][T12780] iterate_bdevs+0x1ea/0x2d0 [ 769.075033][T12780] ? sync_fs_one_sb+0xc0/0xc0 [ 769.079694][T12780] ksys_sync+0x85/0xe0 [ 769.083741][T12780] __do_sys_sync+0xa/0x10 [ 769.088053][T12780] do_syscall_64+0x44/0xa0 [ 769.092460][T12780] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 769.098367][T12780] RIP: 0033:0x7f3fd1c2c709 [ 769.102773][T12780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 769.122374][T12780] RSP: 002b:00007f3fcf9a4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 769.130780][T12780] RAX: ffffffffffffffda RBX: 00007f3fd1d30f60 RCX: 00007f3fd1c2c709 [ 769.138738][T12780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 769.146693][T12780] RBP: 00007f3fcf9a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 769.154662][T12780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:14:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x4000000000000}]) 11:14:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 769.162625][T12780] R13: 00007ffc957a1b2f R14: 00007f3fcf9a4300 R15: 0000000000022000 [ 769.173799][T12790] FAT-fs (loop3): bogus number of reserved sectors [ 769.180325][T12790] FAT-fs (loop3): Can't find a valid FAT filesystem [ 769.197607][T12795] loop0: detected capacity change from 0 to 16 [ 769.208097][T12796] loop4: detected capacity change from 0 to 264192 11:14:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:38 executing program 5: sync() (fail_nth: 7) [ 769.256680][T12796] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 769.267947][T12796] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 769.275604][T12812] loop1: detected capacity change from 0 to 16 [ 769.279100][T12796] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 769.292894][T12814] loop2: detected capacity change from 0 to 264192 11:14:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060004f020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 769.306258][T12818] FAT-fs (loop3): bogus number of reserved sectors [ 769.312819][T12818] FAT-fs (loop3): Can't find a valid FAT filesystem [ 769.323986][T12812] handle_bad_sector: 100 callbacks suppressed [ 769.323999][T12812] attempt to access beyond end of device [ 769.323999][T12812] loop1: rw=2049, want=18, limit=16 [ 769.343856][T12812] attempt to access beyond end of device [ 769.343856][T12812] loop1: rw=2049, want=18, limit=16 11:14:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 769.355527][T12201] attempt to access beyond end of device [ 769.355527][T12201] loop1: rw=2049, want=27, limit=16 [ 769.364168][T12812] attempt to access beyond end of device [ 769.364168][T12812] loop1: rw=2049, want=19, limit=16 [ 769.401170][T12839] loop4: detected capacity change from 0 to 264192 [ 769.405315][T12841] loop0: detected capacity change from 0 to 16 [ 769.409434][T12845] loop2: detected capacity change from 0 to 272 [ 769.417470][T12812] attempt to access beyond end of device [ 769.417470][T12812] loop1: rw=2049, want=20, limit=16 [ 769.440067][T12812] attempt to access beyond end of device [ 769.440067][T12812] loop1: rw=2049, want=21, limit=16 [ 769.442872][T12845] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (68 blocks) [ 769.457516][T12839] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = epoll_create(0x9) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x20}}, {@access_uid={'access', 0x3d, 0xee00}}, {@version_9p2000}], [{@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x2b}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) [ 769.493248][T12839] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 769.507782][T12812] attempt to access beyond end of device [ 769.507782][T12812] loop1: rw=2049, want=22, limit=16 [ 769.520423][T12812] attempt to access beyond end of device [ 769.520423][T12812] loop1: rw=2049, want=23, limit=16 11:14:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000d0020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 769.550824][T12812] attempt to access beyond end of device [ 769.550824][T12812] loop1: rw=2049, want=24, limit=16 [ 769.561555][T12812] buffer_io_error: 73 callbacks suppressed [ 769.561567][T12812] Buffer I/O error on dev loop1, logical block 23, lost async page write [ 769.595308][T12825] FAULT_INJECTION: forcing a failure. [ 769.595308][T12825] name failslab, interval 1, probability 0, space 0, times 0 [ 769.607328][T12864] loop0: detected capacity change from 0 to 16 [ 769.608065][T12825] CPU: 1 PID: 12825 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 769.618593][T12838] attempt to access beyond end of device [ 769.618593][T12838] loop1: rw=2049, want=28, limit=16 [ 769.622901][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.622914][T12825] Call Trace: [ 769.622921][T12825] dump_stack_lvl+0xd6/0x122 [ 769.622944][T12825] dump_stack+0x11/0x1b [ 769.638579][T12866] loop2: detected capacity change from 0 to 272 [ 769.643629][T12825] should_fail+0x23c/0x250 [ 769.643652][T12825] ? mempool_alloc_slab+0x16/0x20 [ 769.671303][T12825] __should_failslab+0x81/0x90 [ 769.676057][T12825] should_failslab+0x5/0x20 [ 769.680547][T12825] kmem_cache_alloc+0x4f/0x300 [ 769.685297][T12825] mempool_alloc_slab+0x16/0x20 [ 769.690133][T12825] ? mempool_free+0x130/0x130 [ 769.694795][T12825] mempool_alloc+0x9d/0x310 [ 769.699279][T12825] ? submit_bio_noacct+0x7ab/0x7d0 [ 769.704377][T12825] bio_alloc_bioset+0xcc/0x530 [ 769.709127][T12825] ? __test_set_page_writeback+0x500/0x570 [ 769.714917][T12825] submit_bh_wbc+0x130/0x330 [ 769.719491][T12825] __block_write_full_page+0x648/0xa10 [ 769.724936][T12825] ? mark_buffer_write_io_error+0x180/0x180 [ 769.730850][T12825] ? blkdev_fallocate+0x2e0/0x2e0 [ 769.735855][T12825] ? blkdev_fallocate+0x2e0/0x2e0 [ 769.740901][T12825] block_write_full_page+0x240/0x260 [ 769.746170][T12825] blkdev_writepage+0x20/0x30 [ 769.750837][T12825] __writepage+0x38/0xd0 [ 769.755061][T12825] write_cache_pages+0x50a/0x840 [ 769.759998][T12825] ? generic_writepages+0xc0/0xc0 [ 769.765009][T12825] generic_writepages+0x7c/0xc0 [ 769.769840][T12825] blkdev_writepages+0x19/0x20 [ 769.774585][T12825] ? blkdev_readpage+0x20/0x20 [ 769.779330][T12825] do_writepages+0x26b/0x3c0 [ 769.783901][T12825] ? blkdev_issue_flush+0x7f/0xa0 [ 769.788943][T12825] ? __list_del_entry_valid+0x54/0xc0 [ 769.794297][T12825] filemap_fdatawrite+0x154/0x180 [ 769.799309][T12825] fdatawrite_one_bdev+0x28/0x30 [ 769.804231][T12825] iterate_bdevs+0x1ea/0x2d0 [ 769.808817][T12825] ? sync_fs_one_sb+0xc0/0xc0 [ 769.813581][T12825] ksys_sync+0x85/0xe0 [ 769.817703][T12825] __do_sys_sync+0xa/0x10 [ 769.822045][T12825] do_syscall_64+0x44/0xa0 [ 769.826521][T12825] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 769.832400][T12825] RIP: 0033:0x7f3fd1c2c709 [ 769.836858][T12825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 769.856447][T12825] RSP: 002b:00007f3fcf9a4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 769.864839][T12825] RAX: ffffffffffffffda RBX: 00007f3fd1d30f60 RCX: 00007f3fd1c2c709 [ 769.872796][T12825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 769.880753][T12825] RBP: 00007f3fcf9a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 769.888704][T12825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:14:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 769.896737][T12825] R13: 00007ffc957a1b2f R14: 00007f3fcf9a4300 R15: 0000000000022000 11:14:38 executing program 5: sync() (fail_nth: 8) 11:14:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x6000000000000}]) [ 769.938171][T12866] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (68 blocks) [ 769.961118][T12882] loop4: detected capacity change from 0 to 264192 [ 769.987502][T12880] FAT-fs (loop3): bogus number of reserved sectors [ 769.993643][T12882] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 769.994152][T12880] FAT-fs (loop3): Can't find a valid FAT filesystem [ 770.007157][T12882] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000de020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 770.103275][T12899] loop1: detected capacity change from 0 to 16 [ 770.111206][T12900] loop2: detected capacity change from 0 to 272 [ 770.112184][T12889] FAULT_INJECTION: forcing a failure. [ 770.112184][T12889] name failslab, interval 1, probability 0, space 0, times 0 [ 770.123658][T12900] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (68 blocks) [ 770.130065][T12889] CPU: 1 PID: 12889 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 770.148135][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.158267][T12889] Call Trace: [ 770.161535][T12889] dump_stack_lvl+0xd6/0x122 [ 770.166198][T12889] dump_stack+0x11/0x1b [ 770.170358][T12889] should_fail+0x23c/0x250 [ 770.174835][T12889] ? mempool_alloc_slab+0x16/0x20 [ 770.179848][T12889] __should_failslab+0x81/0x90 [ 770.184603][T12889] should_failslab+0x5/0x20 [ 770.189120][T12889] kmem_cache_alloc+0x4f/0x300 [ 770.193873][T12889] mempool_alloc_slab+0x16/0x20 [ 770.198782][T12889] ? mempool_free+0x130/0x130 [ 770.203457][T12889] mempool_alloc+0x9d/0x310 [ 770.207973][T12889] ? submit_bio_noacct+0x7ab/0x7d0 [ 770.213081][T12889] bio_alloc_bioset+0xcc/0x530 [ 770.217841][T12889] ? __test_set_page_writeback+0x500/0x570 [ 770.223745][T12889] submit_bh_wbc+0x130/0x330 [ 770.228341][T12889] __block_write_full_page+0x648/0xa10 [ 770.233854][T12889] ? mark_buffer_write_io_error+0x180/0x180 [ 770.239742][T12889] ? blkdev_fallocate+0x2e0/0x2e0 [ 770.244810][T12889] ? blkdev_fallocate+0x2e0/0x2e0 [ 770.249844][T12889] block_write_full_page+0x240/0x260 [ 770.255130][T12889] blkdev_writepage+0x20/0x30 [ 770.259804][T12889] __writepage+0x38/0xd0 [ 770.264041][T12889] write_cache_pages+0x50a/0x840 [ 770.268978][T12889] ? generic_writepages+0xc0/0xc0 [ 770.274080][T12889] generic_writepages+0x7c/0xc0 [ 770.279032][T12889] blkdev_writepages+0x19/0x20 [ 770.283792][T12889] ? blkdev_readpage+0x20/0x20 [ 770.288551][T12889] do_writepages+0x26b/0x3c0 [ 770.293217][T12889] ? blkdev_issue_flush+0x7f/0xa0 [ 770.298242][T12889] ? __down_read_common+0x17e/0x540 [ 770.303437][T12889] filemap_fdatawrite+0x154/0x180 [ 770.308468][T12889] fdatawrite_one_bdev+0x28/0x30 [ 770.313425][T12889] iterate_bdevs+0x1ea/0x2d0 [ 770.318060][T12889] ? sync_fs_one_sb+0xc0/0xc0 [ 770.322735][T12889] ksys_sync+0x85/0xe0 [ 770.326802][T12889] __do_sys_sync+0xa/0x10 [ 770.331122][T12889] do_syscall_64+0x44/0xa0 [ 770.335543][T12889] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 770.341437][T12889] RIP: 0033:0x7f3fd1c2c709 [ 770.345931][T12889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 770.365535][T12889] RSP: 002b:00007f3fcf9a4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 770.373940][T12889] RAX: ffffffffffffffda RBX: 00007f3fd1d30f60 RCX: 00007f3fd1c2c709 [ 770.382083][T12889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 770.390119][T12889] RBP: 00007f3fcf9a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.398081][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.406077][T12889] R13: 00007ffc957a1b2f R14: 00007f3fcf9a4300 R15: 0000000000022000 [ 770.420081][T12899] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 770.436637][T12899] Buffer I/O error on dev loop1, logical block 18, lost async page write 11:14:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:39 executing program 5: sync() (fail_nth: 9) 11:14:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 770.461986][T12907] loop4: detected capacity change from 0 to 264192 [ 770.483781][T12899] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 770.504181][T12907] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 770.519795][T12899] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 770.523625][T12927] loop3: detected capacity change from 0 to 16 11:14:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 770.560684][T12907] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 770.581361][T12899] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 770.589869][T12899] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 770.604382][T12927] FAT-fs (loop3): bogus number of reserved sectors [ 770.610952][T12927] FAT-fs (loop3): Can't find a valid FAT filesystem [ 770.617475][T12899] Buffer I/O error on dev loop1, logical block 23, lost async page write 11:14:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x450000, 0x4e0260d5c3104531) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000030f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 11:14:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f00000000c0)) [ 770.654580][T12925] FAULT_INJECTION: forcing a failure. [ 770.654580][T12925] name failslab, interval 1, probability 0, space 0, times 0 [ 770.667213][T12925] CPU: 1 PID: 12925 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 770.676042][T12925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.686188][T12925] Call Trace: [ 770.689485][T12925] dump_stack_lvl+0xd6/0x122 [ 770.694123][T12925] dump_stack+0x11/0x1b [ 770.698280][T12925] should_fail+0x23c/0x250 [ 770.702694][T12925] ? mempool_alloc_slab+0x16/0x20 [ 770.707731][T12925] __should_failslab+0x81/0x90 [ 770.711882][T12945] loop2: detected capacity change from 0 to 264192 [ 770.712513][T12925] should_failslab+0x5/0x20 [ 770.723494][T12925] kmem_cache_alloc+0x4f/0x300 [ 770.728260][T12925] mempool_alloc_slab+0x16/0x20 [ 770.733127][T12925] ? mempool_free+0x130/0x130 [ 770.737797][T12925] mempool_alloc+0x9d/0x310 [ 770.742368][T12925] ? submit_bio_noacct+0x7ab/0x7d0 [ 770.747482][T12925] bio_alloc_bioset+0xcc/0x530 [ 770.752242][T12925] ? __test_set_page_writeback+0x500/0x570 [ 770.755386][T12945] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 770.758126][T12925] submit_bh_wbc+0x130/0x330 [ 770.758154][T12925] __block_write_full_page+0x648/0xa10 [ 770.770147][T12945] EXT4-fs (loop2): get root inode failed [ 770.774656][T12925] ? mark_buffer_write_io_error+0x180/0x180 [ 770.780136][T12945] EXT4-fs (loop2): mount failed [ 770.785744][T12925] ? blkdev_fallocate+0x2e0/0x2e0 [ 770.801483][T12925] ? blkdev_fallocate+0x2e0/0x2e0 [ 770.806492][T12925] block_write_full_page+0x240/0x260 [ 770.811792][T12925] blkdev_writepage+0x20/0x30 [ 770.816473][T12925] __writepage+0x38/0xd0 [ 770.820703][T12925] write_cache_pages+0x50a/0x840 [ 770.825625][T12925] ? generic_writepages+0xc0/0xc0 [ 770.831061][T12925] generic_writepages+0x7c/0xc0 [ 770.835892][T12925] blkdev_writepages+0x19/0x20 [ 770.840649][T12925] ? blkdev_readpage+0x20/0x20 [ 770.845483][T12925] do_writepages+0x26b/0x3c0 [ 770.850182][T12925] ? asm_common_interrupt+0x1e/0x40 [ 770.855376][T12925] ? __down_read_common+0x17e/0x540 [ 770.860610][T12925] filemap_fdatawrite+0x154/0x180 [ 770.865626][T12925] fdatawrite_one_bdev+0x28/0x30 [ 770.870568][T12925] iterate_bdevs+0x1ea/0x2d0 [ 770.875133][T12925] ? sync_fs_one_sb+0xc0/0xc0 [ 770.880065][T12925] ksys_sync+0x85/0xe0 [ 770.884111][T12925] __do_sys_sync+0xa/0x10 [ 770.888432][T12925] do_syscall_64+0x44/0xa0 [ 770.892912][T12925] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 770.898802][T12925] RIP: 0033:0x7f3fd1c2c709 [ 770.903215][T12925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 770.923006][T12925] RSP: 002b:00007f3fcf9a4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 770.931552][T12925] RAX: ffffffffffffffda RBX: 00007f3fd1d30f60 RCX: 00007f3fd1c2c709 [ 770.939594][T12925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 770.947678][T12925] RBP: 00007f3fcf9a41d0 R08: 0000000000000000 R09: 0000000000000000 11:14:39 executing program 5: sync() (fail_nth: 10) [ 770.955814][T12925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.963918][T12925] R13: 00007ffc957a1b2f R14: 00007f3fcf9a4300 R15: 0000000000022000 11:14:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x8000000000000}]) 11:14:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f00000000c0)) [ 771.016088][T12962] loop4: detected capacity change from 0 to 264192 [ 771.031054][T12964] loop0: detected capacity change from 0 to 16 [ 771.043971][T12968] loop3: detected capacity change from 0 to 16 [ 771.059989][T12968] FAT-fs (loop3): bogus number of reserved sectors 11:14:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x44601, 0x48) sendfile(r0, r1, 0x0, 0x0) [ 771.064570][T12981] loop2: detected capacity change from 0 to 264192 [ 771.066549][T12968] FAT-fs (loop3): Can't find a valid FAT filesystem [ 771.088069][T12962] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 771.114987][T12981] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 771.119026][T12987] loop1: detected capacity change from 0 to 16 [ 771.127122][T12981] EXT4-fs (loop2): get root inode failed [ 771.140524][T12981] EXT4-fs (loop2): mount failed [ 771.155260][T12962] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 771.189478][T12987] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 771.208783][T12969] FAULT_INJECTION: forcing a failure. [ 771.208783][T12969] name failslab, interval 1, probability 0, space 0, times 0 [ 771.221417][T12969] CPU: 1 PID: 12969 Comm: syz-executor.5 Not tainted 5.15.0-rc3-syzkaller #0 [ 771.230190][T12969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.232224][T13000] loop0: detected capacity change from 0 to 16 [ 771.240239][T12969] Call Trace: [ 771.240248][T12969] dump_stack_lvl+0xd6/0x122 [ 771.240272][T12969] dump_stack+0x11/0x1b [ 771.258383][T12969] should_fail+0x23c/0x250 [ 771.262796][T12969] ? mempool_alloc_slab+0x16/0x20 [ 771.267908][T12969] __should_failslab+0x81/0x90 [ 771.272704][T12969] should_failslab+0x5/0x20 [ 771.277204][T12969] kmem_cache_alloc+0x4f/0x300 [ 771.281957][T12969] mempool_alloc_slab+0x16/0x20 [ 771.286932][T12969] ? mempool_free+0x130/0x130 [ 771.291593][T12969] mempool_alloc+0x9d/0x310 [ 771.296084][T12969] bio_alloc_bioset+0xcc/0x530 [ 771.300924][T12969] ? __test_set_page_writeback+0x500/0x570 [ 771.306732][T12969] submit_bh_wbc+0x130/0x330 [ 771.311315][T12969] __block_write_full_page+0x648/0xa10 [ 771.316765][T12969] ? mark_buffer_write_io_error+0x180/0x180 [ 771.322650][T12969] ? blkdev_fallocate+0x2e0/0x2e0 [ 771.327714][T12969] ? blkdev_fallocate+0x2e0/0x2e0 [ 771.332808][T12969] block_write_full_page+0x240/0x260 [ 771.338091][T12969] blkdev_writepage+0x20/0x30 [ 771.342856][T12969] __writepage+0x38/0xd0 [ 771.347105][T12969] write_cache_pages+0x50a/0x840 [ 771.352027][T12969] ? generic_writepages+0xc0/0xc0 [ 771.357112][T12969] generic_writepages+0x7c/0xc0 [ 771.361946][T12969] blkdev_writepages+0x19/0x20 [ 771.366769][T12969] ? blkdev_readpage+0x20/0x20 [ 771.371538][T12969] do_writepages+0x26b/0x3c0 [ 771.376177][T12969] ? rcu_segcblist_enqueue+0x8e/0xa0 [ 771.381460][T12969] ? __down_read_common+0x17e/0x540 [ 771.386695][T12969] filemap_fdatawrite+0x154/0x180 [ 771.391795][T12969] fdatawrite_one_bdev+0x28/0x30 [ 771.396731][T12969] iterate_bdevs+0x1ea/0x2d0 [ 771.401304][T12969] ? sync_fs_one_sb+0xc0/0xc0 [ 771.405965][T12969] ksys_sync+0x85/0xe0 [ 771.410013][T12969] __do_sys_sync+0xa/0x10 [ 771.414328][T12969] do_syscall_64+0x44/0xa0 [ 771.418735][T12969] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 771.424668][T12969] RIP: 0033:0x7f3fd1c2c709 [ 771.429153][T12969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 771.449180][T12969] RSP: 002b:00007f3fcf9a4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 771.457574][T12969] RAX: ffffffffffffffda RBX: 00007f3fd1d30f60 RCX: 00007f3fd1c2c709 [ 771.465616][T12969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 771.473687][T12969] RBP: 00007f3fcf9a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 771.481641][T12969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 11:14:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f00000000c0)) [ 771.489614][T12969] R13: 00007ffc957a1b2f R14: 00007f3fcf9a4300 R15: 0000000000022000 [ 771.516095][T13008] loop2: detected capacity change from 0 to 264192 [ 771.519957][T12987] Buffer I/O error on dev loop1, logical block 18, lost async page write 11:14:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000ce030f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:40 executing program 5: sync() (fail_nth: 11) 11:14:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0x11080}], 0x0, &(0x7f00000000c0)) [ 771.546579][T13008] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 771.558649][T13008] EXT4-fs (loop2): get root inode failed [ 771.564339][T13008] EXT4-fs (loop2): mount failed 11:14:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x4, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xa000000000000}]) 11:14:40 executing program 5: sync() [ 771.631167][T13021] loop4: detected capacity change from 0 to 264192 [ 771.651603][T13033] loop3: detected capacity change from 0 to 16 [ 771.657229][T13031] loop2: detected capacity change from 0 to 264192 [ 771.659351][T13033] FAT-fs (loop3): bogus number of reserved sectors [ 771.670797][T13033] FAT-fs (loop3): Can't find a valid FAT filesystem [ 771.681274][T13029] loop0: detected capacity change from 0 to 16 [ 771.688812][T13031] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 771.700856][T13031] EXT4-fs (loop2): get root inode failed [ 771.706621][T13031] EXT4-fs (loop2): mount failed 11:14:40 executing program 0: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="53cc7ca0526bf92b06415ae8441969101a82c7ffbf62fc93bb9a668f0607ab28b008a800b910a343ae1a7c62", 0x2c}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f00000000c0)="fdee78f2fa9e25617d559da14e677d45240024e788cfb6adec56bae6644147ac", 0x20}, {&(0x7f0000000140)="55eae9e94b21720d064344cb59198a81386ced5cc53f03841fb6a6c37248", 0x1e}, {&(0x7f0000000180)="33c552ff977bf9152ba5b27594b739a9d43be608273a477226ca1501057d6fb2ec99490828c62ae27e15eac8245c046d75d5b3329fd6370ba2013aaae0e857983d584e0b6005dfb6a838b4", 0x4b}], 0x5, &(0x7f0000000300)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x17, 0x21, [@private=0xa010102, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @noop, @generic={0x83, 0xe, "5c9b00d0916db8948a873795"}, @noop, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x79, 0x1, 0x6, [{@empty, 0x4}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x13, 0x3, 0x9, [{@private=0xa010102}]}, @timestamp_addr={0x44, 0xc, 0xca, 0x1, 0x0, [{@rand_addr=0x64010102, 0xea0e}]}, @rr={0x7, 0xf, 0x42, [@dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101, @private=0xa010100]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffc1}}], 0xf8}, 0x4000) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x2, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x98, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000050) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl2\x00', r6, 0x0, 0x35, 0x20, 0x4, 0x3, @local, @mcast1, 0x7f56, 0x8, 0x0, 0x2}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a00)={0x1d4, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4004}, 0x40010) chdir(&(0x7f0000000040)='./file0\x00') r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x0) 11:14:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600002040f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 771.731831][T13050] loop1: detected capacity change from 0 to 16 [ 771.739633][T13021] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 771.756152][T13021] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:40 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./bus\x00', 0x20000, 0x30) dup2(r0, r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "15e78209046a3810", "f610fbf857225ee88c219a36411bb24b", "0c111408", "c1123f54055af28b"}, 0x28) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) sync() sync() 11:14:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xc000000000000}]) [ 771.842465][T13065] loop0: detected capacity change from 0 to 16 [ 771.856636][T13074] loop2: detected capacity change from 0 to 264192 [ 771.863097][T13076] loop3: detected capacity change from 0 to 16 [ 771.901761][T13076] FAT-fs (loop3): bogus number of reserved sectors [ 771.908304][T13076] FAT-fs (loop3): Can't find a valid FAT filesystem [ 771.916227][T13087] loop4: detected capacity change from 0 to 264192 [ 771.936371][T13074] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 771.948462][T13074] EXT4-fs (loop2): get root inode failed [ 771.954135][T13074] EXT4-fs (loop2): mount failed [ 771.971060][T13087] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 771.981671][T13098] loop1: detected capacity change from 0 to 16 11:14:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {0x0, 0x0, 0x11080}], 0x0, &(0x7f00000000c0)) [ 771.998247][T13087] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xe000000000000}]) 11:14:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600006040f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 772.087259][T13112] loop2: detected capacity change from 0 to 264192 [ 772.125330][T13117] loop3: detected capacity change from 0 to 16 [ 772.134568][T13112] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 772.146859][T13112] EXT4-fs (loop2): get root inode failed [ 772.152502][T13112] EXT4-fs (loop2): mount failed [ 772.207317][T13117] FAT-fs (loop3): bogus number of reserved sectors [ 772.213894][T13117] FAT-fs (loop3): Can't find a valid FAT filesystem 11:14:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040), 0x0, 0x11080}], 0x0, &(0x7f00000000c0)) [ 772.261364][T13125] loop1: detected capacity change from 0 to 16 [ 772.268173][T13129] loop4: detected capacity change from 0 to 264192 [ 772.343570][T13129] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 772.356723][T13129] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 772.431204][T13149] loop2: detected capacity change from 0 to 264192 [ 772.454507][T13149] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 772.466563][T13149] EXT4-fs (loop2): get root inode failed [ 772.470766][T13155] loop3: detected capacity change from 0 to 16 [ 772.472210][T13149] EXT4-fs (loop2): mount failed [ 772.522524][T13155] FAT-fs (loop3): bogus number of reserved sectors [ 772.529439][T13155] FAT-fs (loop3): Can't find a valid FAT filesystem [ 772.641367][T13095] loop0: detected capacity change from 0 to 16 11:14:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600010040f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040), 0x0, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:41 executing program 5: sync() creat(&(0x7f0000000000)='./file0\x00', 0x146) sync() 11:14:41 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}, {&(0x7f0000000080)="6face361cea9c7581dfcdd9d6e1f3d1a80fa45d53c53759a32556fa984d0dc4de14fbb241c0834c2480fa9396e565d872f2205c60aa850ee49810517a9979393a5891262c4de49f699b73e7bec7ff747a2b821076da9a618590fc2a025940f5e232115954b09083e17", 0x69, 0x3}], 0x3008852, &(0x7f00000001c0)=ANY=[]) creat(&(0x7f0000000340)='./file0/file0\x00', 0x80) chdir(&(0x7f0000000200)='./file0/file0\x00') chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000380)='./bus\x00', 0x100) r3 = open(&(0x7f0000000300)='./bus\x00', 0x42, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x20400) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000540)=0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0xd3, 0x5, &(0x7f0000000780)=[{&(0x7f0000000440)="4764e228a2171997f0ab6b19ea219067f1b4f80a5dfa90ffc8d067afb78f66626b8f2a81c068830b793cf7c288880e7d686b2ecaf6e586172de10aa1b3b72f", 0x3f, 0x2}, {&(0x7f0000000480)="0f58e8d5872d737bdf2c1f074f8f963416f12de9e05f7b003f35e2a95eb3dadac95e914f78d19bdd20216ffc177bddfc", 0x30, 0x6}, {&(0x7f00000004c0)="03aebe2d360883865e6afc726a050253cb859b5e22ef893b5fc1b1bb6cef003748fd234e289753673a05fad7b8e82e132e500d49a4ec5c15bad65ca2ed079c4e831422b81a540b24ecbd8173d2c26cbe35ea364c0434fc5d569241a6b72c5e1175978d4886d50d7cccf21ebba5ca085ac19eed582c5e8d3660e12483904ffd58", 0x80, 0x5}, {&(0x7f00000005c0)="31f82abb08fd71329fbe80f944699e02adfe3091dd45dd7cf4450a92a77c8cdedb06474d2d0656cac1f837086a26fd59835436f60ce52fcc289fa749e4f6dbc3f38e4c1d3595474226087765f1ff87a696e0470d39fd9354f675bcc58980775b35fb7b72b76568ac2daea6a7bb4d3c0f8079fc2e8fdf16326a4dd09702c92eb361b40760c6d4ec0aa6e9ebe6ae4f679a9ad4e8b57b581be9b36c61d7d6e8b206fc", 0xa1, 0x7fffffff}, {&(0x7f0000000680)="908a3631df7e2ea578eea12e354194680e4d3eb9c55284b64fb2e3326ff6e8aa1ee4df5a003999f660b1b5deb2cf08cc1ab7410a86c680ef9ff5fc9dfeb32dedb2d9f7e83db215a9534b6ec8718d96d62824939e64a49895c9696d53a1a2e52798e958c30d5ad3a9b8836a564174c8825fa912d0db63eb3a0da0e20bd4ad489e1f5f145b859cc779d361d6464a69a76e3dc0cad3810821c1f50befa14f8749d5a541c6989a5eca86f87241b134f6e29047bec9d4282abdb07837b9a5167e7586dcae", 0xc2, 0x1}], 0x1809000, &(0x7f0000000800)={[{@rodir}, {@shortname_lower}, {@utf8}, {@numtail}, {@utf8}], [{@fowner_gt={'fowner>', r5}}]}) sendfile(r4, r3, 0x0, 0x6) 11:14:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 772.765313][T13179] loop2: detected capacity change from 0 to 264192 [ 772.784230][T13180] loop4: detected capacity change from 0 to 264192 [ 772.809079][T13179] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 772.816223][T13194] loop3: detected capacity change from 0 to 16 [ 772.821693][T13179] EXT4-fs (loop2): get root inode failed [ 772.833535][T13179] EXT4-fs (loop2): mount failed [ 772.870852][T13194] FAT-fs (loop3): bogus number of reserved sectors [ 772.877536][T13194] FAT-fs (loop3): Can't find a valid FAT filesystem [ 772.889537][T13202] loop0: detected capacity change from 0 to 16 11:14:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040), 0x0, 0x11080}], 0x0, &(0x7f00000000c0)) [ 772.919039][T13180] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 772.940164][T13180] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000050f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:41 executing program 5: sync() sync() [ 773.032420][T13211] loop0: detected capacity change from 0 to 264192 [ 773.038321][T13213] loop2: detected capacity change from 0 to 264192 11:14:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x10000000000000}]) 11:14:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 773.088346][T13230] loop4: detected capacity change from 0 to 264192 [ 773.096297][T13213] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 773.108456][T13213] EXT4-fs (loop2): get root inode failed [ 773.114120][T13213] EXT4-fs (loop2): mount failed [ 773.132683][T13230] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f465", 0xf, 0x11080}], 0x0, &(0x7f00000000c0)) [ 773.158898][T13239] loop3: detected capacity change from 0 to 16 [ 773.167536][T13230] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 773.205721][T13239] FAT-fs (loop3): bogus number of reserved sectors [ 773.212290][T13239] FAT-fs (loop3): Can't find a valid FAT filesystem [ 773.234787][T13256] loop1: detected capacity change from 0 to 16 11:14:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000060f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 773.268419][T13261] loop2: detected capacity change from 0 to 264192 [ 773.315130][T13261] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 773.327481][T13261] EXT4-fs (loop2): get root inode failed [ 773.333139][T13261] EXT4-fs (loop2): mount failed 11:14:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x100000000000000}]) 11:14:42 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000007c0), 0x1ff, 0x105043) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sync() [ 773.360659][T13269] loop4: detected capacity change from 0 to 264192 [ 773.410699][T13269] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 773.413359][T13281] loop3: detected capacity change from 0 to 16 [ 773.426465][T13269] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 773.452727][T13281] FAT-fs (loop3): bogus number of reserved sectors [ 773.452743][T13281] FAT-fs (loop3): Can't find a valid FAT filesystem [ 773.487786][T13292] loop1: detected capacity change from 0 to 16 [ 773.649999][T13211] loop0: detected capacity change from 0 to 16 11:14:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/104, 0x68}, {&(0x7f0000000980)=""/182, 0xb6}], 0x2, &(0x7f0000000a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/190, 0xbe}, {&(0x7f0000000b80)=""/151, 0x97}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000dc0)=""/1, 0x1}, {&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f0000000e80)=""/119, 0x77}, {&(0x7f0000000f00)=""/148, 0x94}, {&(0x7f0000000fc0)=""/96, 0x60}, {&(0x7f0000001040)=""/213, 0xd5}, {&(0x7f0000001140)=""/226, 0xe2}], 0x7}}, {{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/166, 0xa6}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f00000026c0)=""/82, 0x52}, {&(0x7f0000002740)=""/200, 0xc8}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/97, 0x61}, {&(0x7f00000038c0)=""/90, 0x5a}], 0x5, &(0x7f00000039c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}], 0x5, 0x22002, &(0x7f0000003b80)={0x77359400}) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x7, 0x2, &(0x7f0000000300)=[{&(0x7f0000000180)="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", 0xfc, 0x90a}, {&(0x7f0000000280)="122037f16234df9c4337a92e254205ce3f921a29550d20bdaf89c6e506cd59d54f4f37bdeb00c4793e6033b3ac95519df80431a9f2d861d1", 0x38, 0x95}], 0x10000, &(0x7f00000003c0)={[{@session={'session', 0x3d, 0x51}}, {@dmode={'dmode', 0x3d, 0xea4}}, {@dmode={'dmode', 0x3d, 0x9}}, {@nojoliet}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@obj_type={'obj_type', 0x3d, '#{*\'@'}}, {@uid_gt={'uid>', r1}}, {@subj_type={'subj_type', 0x3d, '#{*\'@'}}]}) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) openat(r0, &(0x7f0000000080)='./bus\x00', 0x80, 0x20) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f00000005c0)=""/26, 0x1a}, {&(0x7f0000000740)=""/49, 0x31}, {&(0x7f0000000780)=""/28, 0x1c}, {&(0x7f00000007c0)=""/9, 0x9}], 0x6, 0x1, 0x5) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x0) open(&(0x7f0000000480)='./bus\x00', 0xb94dd785bbf5b0d3, 0x4) open(&(0x7f00000004c0)='./file1\x00', 0x410000, 0x90) 11:14:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600004060f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f465", 0xf, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:42 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) io_uring_setup(0x432e, &(0x7f0000000000)={0x0, 0xe5d4, 0x10, 0x2, 0x9e}) sync() 11:14:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x124000000000000}]) [ 773.704657][T13211] loop0: detected capacity change from 0 to 264192 [ 773.747205][T13325] loop1: detected capacity change from 0 to 16 [ 773.754394][T13328] loop2: detected capacity change from 0 to 264192 [ 773.759780][T13327] loop4: detected capacity change from 0 to 264192 [ 773.767438][T13330] loop3: detected capacity change from 0 to 16 [ 773.777168][T13328] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 773.789533][T13328] EXT4-fs (loop2): get root inode failed [ 773.795176][T13328] EXT4-fs (loop2): mount failed 11:14:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x200000000000000}]) [ 773.828893][T13330] FAT-fs (loop3): bogus number of reserved sectors [ 773.835465][T13330] FAT-fs (loop3): Can't find a valid FAT filesystem [ 773.843661][T13327] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 773.853759][T13327] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f465", 0xf, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000070f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:42 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) r2 = epoll_create(0x9) r3 = epoll_create(0x9) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000640)={0x90002014}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0xfff9, 0x80, 0x40, 0x1000}, {0x5, 0x1, 0x2, 0x150a}]}, 0x10) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000500)={0x3, 0x80, 0x1b, 0x6, 0x1, 0x5, 0x0, 0xbe, 0x31000, 0x19, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa01, 0x0, @perf_bp={&(0x7f00000004c0), 0xe}, 0x0, 0x5, 0x1, 0x1, 0x8000, 0x81, 0x1e34, 0x0, 0x8, 0x0, 0x8}, r0, 0x10, r0, 0x3) sendfile(r2, r4, &(0x7f0000000580)=0x7ff, 0x100) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0x7, 0x1, [0x1, 0x8, 0x400, 0x2ea1, 0x5], [0x1, 0x2, 0x8, 0x7, 0x4ddd, 0x10001, 0x2f81f5f2, 0x200, 0xec5, 0x8e4d, 0x0, 0x7fff, 0x1, 0x7, 0x80, 0x7f, 0x6, 0x9, 0xffff, 0xffffffff7fffffff, 0x9, 0x9, 0x7fff, 0x1000000000000000, 0x1, 0x401, 0x6, 0x7ff, 0x80000000, 0x78872805, 0x6, 0xb80, 0x7bc1a33f, 0xffffffffffff2ce9, 0x2, 0x8, 0x4, 0x6, 0x9, 0x0, 0x1ff, 0x40, 0xce, 0x5, 0x0, 0x9, 0xfffffffffffffffb, 0x6127, 0xe8, 0x3a1, 0x80000001, 0x10001, 0xffffffffffffffe1, 0x10001, 0x81, 0x3, 0x2, 0x7, 0xf17, 0x0, 0x0, 0x1, 0x2, 0xffffffff, 0x3f, 0x101, 0x4, 0xbb, 0x6, 0x800, 0x7f, 0x7, 0x2, 0x3, 0xfff, 0x97, 0x1, 0xffffffff, 0x1f, 0x2, 0x3, 0x2b7e, 0x5, 0x1ff, 0x3, 0x5, 0x100000000, 0x8001, 0x1, 0x218, 0x6, 0x6, 0x40, 0x10000, 0x6, 0x0, 0x0, 0x1b27, 0x7, 0x2, 0x0, 0x0, 0x2, 0x776, 0x8, 0x16e, 0x8, 0x200, 0xc62e, 0x4, 0x4, 0x401, 0x6, 0x6a4ebb63, 0x216a, 0x3f, 0x9c, 0x75, 0x3ff, 0x3ff, 0x4b2]}) sync() [ 773.936554][T13358] loop0: detected capacity change from 0 to 16 [ 773.963526][T13366] loop3: detected capacity change from 0 to 16 [ 773.975957][T13376] loop2: detected capacity change from 0 to 264192 11:14:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./bus\x00') r0 = creat(&(0x7f00000000c0)='./bus\x00', 0xd2) r1 = getegid() mount$tmpfs(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x210000, &(0x7f0000000300)={[{@nr_blocks={'nr_blocks', 0x3d, [0x74, 0x2d]}}, {@size={'size', 0x3d, [0x25, 0x38]}}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, r1}}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x70, 0x70]}}, {@huge_within_size}], [{@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@smackfshat={'smackfshat', 0x3d, '--]![*-@[#{[-'}}, {@measure}, {@appraise_type}]}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000080)='./bus\x00', 0x646403, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000140)={{0x0, 0x6, 0xff, 0x5, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0xe54, 0x1, 0x8, 0xffffffff, 0x2, 0x401, 0x100}, 0x18, [0x0, 0x0, 0x0]}) fcntl$setsig(r3, 0xa, 0x2) sendfile(r0, r2, 0x0, 0x0) [ 773.980342][T13375] loop1: detected capacity change from 0 to 16 [ 773.995926][T13366] FAT-fs (loop3): bogus number of reserved sectors [ 774.002517][T13366] FAT-fs (loop3): Can't find a valid FAT filesystem [ 774.021251][T13388] loop4: detected capacity change from 0 to 264192 [ 774.030151][T13376] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 774.043502][T13376] EXT4-fs (loop2): get root inode failed [ 774.049211][T13376] EXT4-fs (loop2): mount failed 11:14:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x204000000000000}]) [ 774.080371][T13388] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f0000", 0x16, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600086080f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 774.121411][T13388] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 774.134694][T13408] loop0: detected capacity change from 0 to 16 [ 774.158436][T13408] tmpfs: Bad value for 'nr_blocks' 11:14:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 774.196314][T13417] loop1: detected capacity change from 0 to 16 [ 774.221407][T13420] tmpfs: Bad value for 'nr_blocks' [ 774.237578][T13426] loop2: detected capacity change from 0 to 264192 11:14:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1000c2, 0x5) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x55, 0x6, 0x8, 0x0, 0x8fd7, 0x20041, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0xc641, 0xfffffffffffffffa, 0x0, 0x0, 0x3, 0x7, 0x8e0, 0x0, 0xffffd896, 0x0, 0x400}, 0xffffffffffffffff, 0x7, r1, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x0) [ 774.258496][T13433] loop3: detected capacity change from 0 to 16 [ 774.266343][T13427] loop4: detected capacity change from 0 to 264192 [ 774.278717][T13426] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 774.290769][T13426] EXT4-fs (loop2): get root inode failed [ 774.296473][T13426] EXT4-fs (loop2): mount failed [ 774.303887][T13433] FAT-fs (loop3): bogus number of reserved sectors [ 774.308651][T13427] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 774.310452][T13433] FAT-fs (loop3): Can't find a valid FAT filesystem [ 774.324920][T13427] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x300000000000000}]) 11:14:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f0000", 0x16, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600087080f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 774.458963][T13469] loop2: detected capacity change from 0 to 264192 [ 774.474149][T13468] loop1: detected capacity change from 0 to 16 [ 774.490211][T13469] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 774.502278][T13469] EXT4-fs (loop2): get root inode failed 11:14:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x120000000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 774.507972][T13469] EXT4-fs (loop2): mount failed [ 774.550166][T13480] loop4: detected capacity change from 0 to 264192 [ 774.565882][T13483] loop3: detected capacity change from 0 to 16 [ 774.566877][T13488] loop0: detected capacity change from 0 to 264192 [ 774.586583][T13468] handle_bad_sector: 93 callbacks suppressed [ 774.586597][T13468] attempt to access beyond end of device [ 774.586597][T13468] loop1: rw=2049, want=18, limit=16 [ 774.614209][T13483] FAT-fs (loop3): invalid media value (0x00) [ 774.620244][T13483] FAT-fs (loop3): Can't find a valid FAT filesystem [ 774.632235][T13488] loop0: detected capacity change from 0 to 264192 [ 774.634351][T13489] attempt to access beyond end of device [ 774.634351][T13489] loop1: rw=2049, want=18, limit=16 [ 774.649444][T13489] buffer_io_error: 54 callbacks suppressed [ 774.649457][T13489] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 774.680222][T13480] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 774.693756][T12201] attempt to access beyond end of device [ 774.693756][T12201] loop1: rw=1, want=27, limit=16 [ 774.752838][T13480] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 774.783636][T13489] attempt to access beyond end of device [ 774.783636][T13489] loop1: rw=2049, want=19, limit=16 [ 774.794362][T13489] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 774.810456][T13489] attempt to access beyond end of device [ 774.810456][T13489] loop1: rw=2049, want=20, limit=16 [ 774.821261][T13489] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 774.835813][T13489] attempt to access beyond end of device [ 774.835813][T13489] loop1: rw=2049, want=21, limit=16 [ 774.846573][T13489] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 774.855849][T13489] attempt to access beyond end of device [ 774.855849][T13489] loop1: rw=2049, want=22, limit=16 [ 774.866672][T13489] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 774.875894][T13489] attempt to access beyond end of device [ 774.875894][T13489] loop1: rw=2049, want=23, limit=16 [ 774.886687][T13489] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 774.895316][T13489] attempt to access beyond end of device [ 774.895316][T13489] loop1: rw=2049, want=24, limit=16 [ 774.906178][T13489] Buffer I/O error on dev loop1, logical block 23, lost async page write 11:14:43 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x8f) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x111) r2 = openat(r1, &(0x7f0000000080)='./bus\x00', 0x8080, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = dup2(r0, r2) close(r4) sendfile(r1, r3, 0x0, 0x0) 11:14:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f0000", 0x16, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600088080f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 774.937674][T13468] attempt to access beyond end of device [ 774.937674][T13468] loop1: rw=2049, want=28, limit=16 11:14:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x400000000000000}]) [ 774.999153][T13530] loop4: detected capacity change from 0 to 264192 [ 775.004611][T13528] loop0: detected capacity change from 0 to 16 [ 775.009208][T13532] loop2: detected capacity change from 0 to 264192 [ 775.018386][T13539] loop3: detected capacity change from 0 to 16 [ 775.043850][T13539] FAT-fs (loop3): invalid media value (0x00) [ 775.049876][T13539] FAT-fs (loop3): Can't find a valid FAT filesystem [ 775.075446][T13532] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 775.076225][T13530] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x1f, 0x3, &(0x7f0000000240)=[{&(0x7f0000000140)="03fc7c31a3f4c2990b1889624b7b67c4cea28f5a4a66df0c5540f4687c4d0f82645b2b7298374e1bac3f19cc1b76ea76d828d09f6ad27278072385b538cb4361e431cfa96a8c6e8d0783fcb78ba8965ed7f8dd905c9b7c7e6ea0851080ef10f6e3a3790ef215b6cd96684acbde317862e90e3dcdf3c4a91b3e6ccd754048d6c71cbc6b6e6160bee74145f5cb797101cf4a3aaa4a94666c23e06a51c1f78af5412a4be45b9c136edf95af5eeb9fd3d791d699be03c0d161565c482d58e5761817e86bdc2e150244df62c53588", 0xcc, 0x4}, {&(0x7f0000000300)="940b6670955c708ed0723070f3e064f4061ac76982a9458afaa294bcc0328d3370d2fa2c9362ed2d6ad977ddcf27d5fed0a1937771f14f47ead3ddb3bd42a680d02616436503ec2f07f9daf85d9c79c98f3f3d3aa9647ae6d865d3b0c2db4b3d30fd583db7600aff0a9cdf338ca16ed437d9925cae4b4895488c07322a74db48e6a76210e5ce547f7d7c40f5bf0d68d8a09fe71656499c434d0889af817807c5717be1875100744942ce31830433d6", 0xaf, 0x6}, {&(0x7f00000003c0)="86e0b44ca72d49a09450becf8f1288a75c0e47e592d3e8a1e569e848c049a5f25c08deae0095d50b869fc8b3e3bc253d0aa4c29ddb1c1b247d7cb073f904bccc11479cf1e8121048f02a0a56e52556c6eccff6bab3936b394761e16c455cf810b44cede84cfbe892fb6abc1136358d828955de2eff88ab3ba4397f865dcd289cc84b4b11ed63b35428564a7032f8780e762ec4c33f17a82ea1b0c4088d9a509b8676d4e16becfb8db58b3cdf6d9fd70c76bde46b6b3a6ada2a90cc2df4740ec57536e49192d9b2d99af8316da2d8409f78cb1b8e6dd33627f00debdb69fc1cfe58b6caf9e304c3629cc323", 0xeb, 0x100000001}], 0x3a00820, &(0x7f0000000640)={[{@fat=@uid={'uid', 0x3d, r1}}, {@dots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x100}}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@dots}, {@fat=@showexec}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffd03}}], [{@context={'context', 0x3d, 'staff_u'}}, {@appraise}]}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x230240, 0x0) sendfile(r0, r2, 0x0, 0x0) [ 775.087548][T13532] EXT4-fs (loop2): get root inode failed [ 775.102377][T13532] EXT4-fs (loop2): mount failed [ 775.133589][T13555] loop1: detected capacity change from 0 to 16 [ 775.137971][T13530] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 775.167172][T13555] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 775.204679][T13565] loop0: detected capacity change from 0 to 16 [ 775.214336][T13555] Buffer I/O error on dev loop1, logical block 18, lost async page write 11:14:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x1038c3, 0xb1) sendfile(r0, r1, 0x0, 0x0) 11:14:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000", 0x1a, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000090f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 775.283080][T13555] Buffer I/O error on dev loop1, logical block 19, lost async page write 11:14:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x500000000000000}]) [ 775.346501][T13582] loop0: detected capacity change from 0 to 16 [ 775.350810][T13585] loop2: detected capacity change from 0 to 264192 [ 775.354565][T13583] loop3: detected capacity change from 0 to 16 [ 775.369345][T13586] loop4: detected capacity change from 0 to 264192 [ 775.386997][T13585] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 775.399154][T13585] EXT4-fs (loop2): get root inode failed [ 775.404832][T13585] EXT4-fs (loop2): mount failed [ 775.411762][T13583] FAT-fs (loop3): invalid media value (0x00) [ 775.417887][T13583] FAT-fs (loop3): Can't find a valid FAT filesystem 11:14:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000", 0x1a, 0x11080}], 0x0, &(0x7f00000000c0)) [ 775.458901][T13606] loop1: detected capacity change from 0 to 16 [ 775.470662][T13586] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 775.499513][T13586] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 775.513829][T13615] loop2: detected capacity change from 0 to 264192 11:14:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) write$P9_RREADDIR(r2, &(0x7f0000000080)={0x47, 0x29, 0x2, {0x100, [{{0x8, 0x6, 0x3}, 0x4, 0x0, 0x7, './file0'}, {{0x1, 0x1, 0x6}, 0x94, 0x9, 0x5, './bus'}]}}, 0x47) sendfile(r0, r1, 0x0, 0x0) r4 = epoll_create(0x9) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) open(&(0x7f0000000140)='./bus\x00', 0xe8143, 0x1) 11:14:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x600000000000000}]) [ 775.579751][T13625] loop3: detected capacity change from 0 to 16 [ 775.588578][T13615] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 775.600665][T13615] EXT4-fs (loop2): get root inode failed [ 775.606310][T13615] EXT4-fs (loop2): mount failed [ 775.611793][T13625] FAT-fs (loop3): invalid media value (0x00) [ 775.617786][T13625] FAT-fs (loop3): Can't find a valid FAT filesystem 11:14:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000", 0x1a, 0x11080}], 0x0, &(0x7f00000000c0)) [ 775.664806][T13638] loop4: detected capacity change from 0 to 264192 [ 775.686056][T13637] loop0: detected capacity change from 0 to 16 [ 775.697833][T13638] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 775.717839][T13638] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 775.724496][T13648] loop1: detected capacity change from 0 to 16 [ 775.739706][T13653] loop2: detected capacity change from 0 to 264192 [ 775.776297][T13653] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 775.788349][T13653] EXT4-fs (loop2): get root inode failed [ 775.792086][T13660] loop3: detected capacity change from 0 to 16 [ 775.794009][T13653] EXT4-fs (loop2): mount failed 11:14:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000b0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f0000000000000400", 0x1c, 0x11080}], 0x0, &(0x7f00000000c0)) [ 775.863327][T13660] FAT-fs (loop3): invalid media value (0x00) [ 775.869349][T13660] FAT-fs (loop3): Can't find a valid FAT filesystem 11:14:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x604000000000000}]) [ 775.912588][T13676] loop2: detected capacity change from 0 to 264192 [ 775.946425][T13675] loop4: detected capacity change from 0 to 264192 11:14:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 775.977866][T13676] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 776.008350][T13692] loop1: detected capacity change from 0 to 16 [ 776.023257][T13676] EXT4-fs (loop2): mount failed [ 776.040159][T13675] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 776.060891][T13696] loop3: detected capacity change from 0 to 16 11:14:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f0000000000000400", 0x1c, 0x11080}], 0x0, &(0x7f00000000c0)) [ 776.116791][T13675] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 776.128194][T13696] FAT-fs (loop3): invalid media value (0x00) [ 776.134234][T13696] FAT-fs (loop3): Can't find a valid FAT filesystem 11:14:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x700000000000000}]) 11:14:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f0000000000000400", 0x1c, 0x11080}], 0x0, &(0x7f00000000c0)) [ 776.180069][T13709] loop2: detected capacity change from 0 to 264192 [ 776.199945][T13709] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 776.206939][T13709] EXT4-fs (loop2): mount failed [ 776.249064][T13717] loop1: detected capacity change from 0 to 16 [ 776.331569][T13730] loop2: detected capacity change from 0 to 264192 [ 776.374453][T13730] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 776.388604][T13730] EXT4-fs (loop2): mount failed 11:14:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008853, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x800000000000000}]) 11:14:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d}], 0x0, &(0x7f00000000c0)) [ 776.525126][T13748] loop1: detected capacity change from 0 to 16 [ 776.536002][T13753] loop3: detected capacity change from 0 to 16 [ 776.543311][T13754] loop2: detected capacity change from 0 to 264192 [ 776.551257][T13758] loop4: detected capacity change from 0 to 264192 [ 776.568156][T13753] FAT-fs (loop3): bogus number of FAT sectors [ 776.574268][T13753] FAT-fs (loop3): Can't find a valid FAT filesystem [ 776.600854][T13758] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 776.611474][T13754] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated 11:14:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x900000000000000}]) 11:14:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="380b588816620c852cd48b7583000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251400000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000000000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x800) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8000}]}, 0x38}}, 0x2400c895) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x40000000) sync() 11:14:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d}], 0x0, &(0x7f00000000c0)) [ 776.616704][T13773] loop0: detected capacity change from 0 to 264192 [ 776.623497][T13754] EXT4-fs (loop2): get root inode failed [ 776.635620][T13754] EXT4-fs (loop2): mount failed [ 776.644058][T13758] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000d0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = epoll_create(0x1) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000) creat(&(0x7f0000000080)='./bus\x00', 0x180) 11:14:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 776.728684][T13783] loop1: detected capacity change from 0 to 16 [ 776.749769][T13795] loop2: detected capacity change from 0 to 264192 [ 776.772841][T13808] loop3: detected capacity change from 0 to 16 11:14:45 executing program 5: sync() sync() [ 776.774795][T13807] loop0: detected capacity change from 0 to 16 [ 776.782824][T13812] loop4: detected capacity change from 0 to 264192 [ 776.795590][T13808] FAT-fs (loop3): bogus number of FAT sectors [ 776.801773][T13808] FAT-fs (loop3): Can't find a valid FAT filesystem [ 776.809506][T13795] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 776.821606][T13795] EXT4-fs (loop2): get root inode failed [ 776.827231][T13795] EXT4-fs (loop2): mount failed 11:14:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d}], 0x0, &(0x7f00000000c0)) 11:14:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xa00000000000000}]) 11:14:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 776.853383][T13812] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 776.873413][T13812] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:45 executing program 5: sync() sync() 11:14:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 776.910967][T13832] loop2: detected capacity change from 0 to 264192 [ 776.945451][T13846] loop1: detected capacity change from 0 to 16 [ 776.965172][T13852] loop3: detected capacity change from 0 to 16 [ 776.966050][T13832] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 776.983464][T13832] EXT4-fs (loop2): get root inode failed [ 776.989085][T13832] EXT4-fs (loop2): mount failed [ 776.995491][T13844] loop4: detected capacity change from 0 to 264192 [ 777.003825][T13852] FAT-fs (loop3): bogus number of FAT sectors 11:14:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:45 executing program 5: sync() r0 = epoll_create(0x9) r1 = epoll_create(0x9) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x80000000}) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x80000001}) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x20, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/26, 0x1a}], 0x1, 0x4, 0x8, 0x12) 11:14:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xb00000000000000}]) [ 777.009963][T13852] FAT-fs (loop3): Can't find a valid FAT filesystem [ 777.021131][T13844] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 777.032058][T13844] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 777.108492][T13874] loop2: detected capacity change from 0 to 264192 [ 777.130295][T13879] loop3: detected capacity change from 0 to 16 [ 777.143627][T13874] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 777.153484][T13874] EXT4-fs (loop2): group descriptors corrupted! [ 777.164305][T13887] loop1: detected capacity change from 0 to 16 11:14:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0x800000000}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x148) sendfile(r0, r1, 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$int_out(r1, 0x5460, &(0x7f00000000c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200087fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000100)="df", 0x1}], 0x1) sendto$inet(r3, 0x0, 0x0, 0x200400d5, 0x0, 0x0) r4 = epoll_create(0x9) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r2, r4], 0x2) 11:14:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xf00000000000000}]) [ 777.619086][T13912] loop3: detected capacity change from 0 to 16 [ 777.629645][T13917] loop2: detected capacity change from 0 to 264192 [ 777.637812][T13919] loop1: detected capacity change from 0 to 16 [ 777.643939][T13923] loop4: detected capacity change from 0 to 264192 11:14:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 777.664554][T13917] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 777.674354][T13917] EXT4-fs (loop2): group descriptors corrupted! [ 777.676938][T13935] loop0: detected capacity change from 0 to 8192 11:14:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600004100f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 777.715115][T13923] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 777.729491][T13923] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:14:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x1000000000000000}]) [ 777.780074][T13944] loop2: detected capacity change from 0 to 264192 [ 777.793083][T13958] loop4: detected capacity change from 0 to 264192 [ 777.795252][T13961] loop3: detected capacity change from 0 to 16 [ 777.807210][T13944] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 777.817136][T13944] EXT4-fs (loop2): group descriptors corrupted! 11:14:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 777.856629][T13958] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 777.875536][T13958] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 777.886311][T13971] loop1: detected capacity change from 0 to 16 11:14:46 executing program 5: sync() sync() sync() 11:14:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {0x0, 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600020100f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x2000000000000000}]) 11:14:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {0x0, 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 777.956307][T13983] loop2: detected capacity change from 0 to 264192 [ 777.966256][T13983] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 777.976545][T13983] EXT4-fs (loop2): group descriptors corrupted! [ 777.993758][T13991] loop4: detected capacity change from 0 to 264192 [ 778.033117][T13991] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 778.041106][T13998] loop3: detected capacity change from 0 to 16 [ 778.046091][T13991] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 778.084112][T14005] loop2: detected capacity change from 0 to 264192 [ 778.094134][T14005] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 778.103889][T14005] EXT4-fs (loop2): group descriptors corrupted! [ 778.113057][T14010] loop1: detected capacity change from 0 to 16 [ 778.505682][T13972] loop0: detected capacity change from 0 to 8192 11:14:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:47 executing program 5: sync() sync() 11:14:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000110f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {0x0, 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x2200000000000000}]) [ 778.594141][T14047] loop2: detected capacity change from 0 to 264192 [ 778.601207][T14048] loop3: detected capacity change from 0 to 16 [ 778.617108][T14047] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 778.622454][T14060] loop4: detected capacity change from 0 to 264192 [ 778.626869][T14047] EXT4-fs (loop2): group descriptors corrupted! [ 778.635595][T14061] loop1: detected capacity change from 0 to 16 [ 778.650793][T14059] loop0: detected capacity change from 0 to 16 11:14:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x100, 0x8, &(0x7f0000000780)=[{&(0x7f0000000140)="929cd8d749cae3886157790864901b84386f87aaf6f184c720a16bc38ed518e807e3a6624b8edc2b974d6834ce27e5ea04330824e3b9f72d3b86fe02b7743ba59126a64d37df929a47ede56e186ca3068020ceb67c75e65beca3274e93b5667b02ad6586a825dc2c3baa646e0347d71383fb757d4a7efba723fb2e627c6587107a9697cab10e6a616e5a8ea3cd4001f0cc86881d8479c417681ee20b63efa3535fcd97f56d279a7444f56f38df00f1c39e1613a82aaa7e0a7fe6c4e9ca4026b5073263c9ea8ef8e129a36bd201e14fbfb529965959a06405767550f7a42ee2529efbdaa33a975bff08a9eb0071433ffcae", 0xf1, 0x80}, {&(0x7f0000000300)="8bfd83aa93f857630802ce921cadca46a8d1b28238c590efc5a47a45be96189c401f74126bc18ba33c799155f6d4dc2197d27e97c88e40394e8bd5b3d71e0f86e08f9381c60059755dd41c4fe696d93ba8555885dce5fe05b7c7bf042a213ef2ac6813c33effa23d997bfffab00449dd53fca6d18753496af4a8d1077166af5f1b15f51c8f6e966278ca20c8031b217f96608ff7ed2923e88a671b", 0x9b, 0x3f}, {&(0x7f0000000240)="a5d1e451b1161f976a512f05eededb387ac9904e05929a4924c7079a547574cb834c7bda1e89727321f6755a93da99bbf13db69e096af0d309c3c404", 0x3c, 0x8}, {&(0x7f00000003c0)="6293331c6768e83fc5a1efbf7d9e87e99f06442ddfd2155c140fa97d593ec24ffea97a8f102e267e28360f80185ba6bca08180cbf341c342b2e69057c42c285f6fb673c95cc0c07e41a0d68f55761bffb5970df55e384645240a0f5d66f23099976649fbaddffad118b98f8315ba7a80b9e30c", 0x73, 0x7b}, {&(0x7f0000000440)="f5766e81d7dd0192a38c8c78b7fa10f92e48776e2ae8906d84c2d0a6b5a0e2d1beb98e36efcd4037ad3209b41794ea3cdb0794a29e865c8317f53ea11f824dd4cb9d7f4fc935c246ad5e88825a3e49bf494225f1b3082e8c05f356f45654819442b47d77f6d5aeb7767660716b0957bc4cde0648f05868086d1b45f1a4bd0f40", 0x80, 0x8001}, {&(0x7f00000004c0)="35781d53a8e808eca7ad24fc8017ade17ed10722d005df63d0fe548194736bc854170acc4deea96f1dddd862a7d3240e1bad0c43110050a7cd62d91f6a6b0fc4d56b66ae85e772a684e251f5c80f142d623735cf38440572a81417", 0x5b}, {&(0x7f0000000640)="f031247b529d62a0affd756eeb9403d0955c153c3a170d11dd89bbb19f8af67290716bd11eb9ba075d467b5846513aa528b8d66f2365efd31aaaa379e564599ff2", 0x41, 0xffffffff}, {&(0x7f00000006c0)="7ba3f30ecc418f94a7276c03db60090072a3ab6aaece794a75dad3b1b09b850690f5c671ce9c7a2ec3510dfe48e5638b2f08283c0a3c344753fb531b95fde76b9fa6b529dc25c08d81fe744cbb7468c0bb78310b883cc488044c072e4aef545eb58480b9f0aa484fa64e25adbe8cffd5139faf1732add7f501ac3e592c614d5a132ebd90", 0x84, 0x6}], 0x40000, &(0x7f0000000840)={[{@utf8}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, ')&'}}, {@uid_gt={'uid>', 0xee01}}, {@fowner_lt={'fowner<', 0xee00}}]}) fstat(r2, &(0x7f0000000900)) 11:14:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 778.702147][T14060] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 778.729362][T14060] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 778.743910][T14081] loop2: detected capacity change from 0 to 264192 11:14:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x3f00000000000000}]) 11:14:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000120f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:47 executing program 5: sync() sync() arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x23) [ 778.777250][T14081] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 778.787019][T14081] EXT4-fs (loop2): group descriptors corrupted! [ 778.815853][T14094] loop0: detected capacity change from 0 to 16 11:14:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x900, 0x130) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000000c0)=0x28) sendfile(r0, r1, 0x0, 0x0) [ 778.841903][T14100] loop3: detected capacity change from 0 to 16 [ 778.867815][T14118] loop4: detected capacity change from 0 to 264192 [ 778.869063][T14116] loop1: detected capacity change from 0 to 16 [ 778.881869][T14118] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 778.883010][T14117] loop2: detected capacity change from 0 to 264192 [ 778.892695][T14118] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 778.926122][T14117] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 778.935910][T14117] EXT4-fs (loop2): group descriptors corrupted! 11:14:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 778.938113][T14133] loop0: detected capacity change from 0 to 16 11:14:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000130f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat6\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2020000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@aname={'aname', 0x3d, 'h/'}}, {@access_uid={'access', 0x3d, 0xee01}}, {@version_9p2000}], [{@dont_appraise}]}}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x0) 11:14:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000140f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:47 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="c00b0010", @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sync() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x40, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x800) 11:14:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x4000000000000000}]) [ 779.060651][T14154] loop3: detected capacity change from 0 to 16 [ 779.060794][T14144] loop2: detected capacity change from 0 to 264192 [ 779.078837][T14161] loop4: detected capacity change from 0 to 264192 11:14:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 779.111898][T14161] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 779.116316][T14172] loop0: detected capacity change from 0 to 16 [ 779.131178][T14161] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 779.142314][T14144] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 779.152042][T14144] EXT4-fs (loop2): group descriptors corrupted! 11:14:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000150f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 779.166360][T14182] loop1: detected capacity change from 0 to 16 [ 779.174099][T14185] loop3: detected capacity change from 0 to 16 11:14:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0xffc}], 0x30008d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x67, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080), 0xc78) 11:14:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(0x0, 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x7f01000000000000}]) [ 779.265865][T14207] loop2: detected capacity change from 0 to 264192 11:14:48 executing program 5: sync() sync() [ 779.314082][T14226] loop0: detected capacity change from 0 to 15 [ 779.321750][T14207] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 779.331480][T14207] EXT4-fs (loop2): group descriptors corrupted! [ 779.340079][T14227] loop4: detected capacity change from 0 to 264192 [ 779.348638][T14233] loop3: detected capacity change from 0 to 16 [ 779.350291][T14230] loop1: detected capacity change from 0 to 16 [ 779.382736][T14227] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 779.403584][T14227] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 779.414670][T14227] EXT4-fs mount: 27 callbacks suppressed [ 779.414681][T14227] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600002150f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:48 executing program 5: r0 = socket$inet(0x2, 0x4, 0xfffffffe) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001000)={{0x0, 0x24b, 0x2c, 0x7, 0xffffffff, 0x81, 0x80, 0x8001, 0x3459, 0x7ff, 0xfffffc01, 0x10001, 0x8, 0x5, 0x200}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000000)={r1, 0x3}) sync() 11:14:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000300)=""/80, 0x50}], 0x4, &(0x7f00000003c0)=""/105, 0x69}, 0x9}], 0x1, 0x40000002, &(0x7f0000000480)={0x77359400}) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) 11:14:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xad883f1d00000000}]) 11:14:48 executing program 5: r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) r1 = epoll_create(0xff) r2 = dup2(r0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa1076e6cba0ed9a0}) fcntl$getflags(r0, 0x0) sync() [ 779.514482][T14261] loop2: detected capacity change from 0 to 264192 [ 779.541018][T14271] loop4: detected capacity change from 0 to 264192 [ 779.548246][T14273] loop3: detected capacity change from 0 to 16 [ 779.575669][T14271] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 779.584543][T14284] loop0: detected capacity change from 0 to 264192 [ 779.595204][T14261] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 779.604897][T14261] EXT4-fs (loop2): group descriptors corrupted! [ 779.611744][T14288] loop1: detected capacity change from 0 to 16 [ 779.620088][T14271] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 779.631201][T14271] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000080)='./bus\x00') chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000160f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 779.694064][T14288] handle_bad_sector: 172 callbacks suppressed [ 779.694078][T14288] attempt to access beyond end of device [ 779.694078][T14288] loop1: rw=2049, want=18, limit=16 [ 779.733337][T14308] loop2: detected capacity change from 0 to 264192 [ 779.742831][T14288] attempt to access beyond end of device [ 779.742831][T14288] loop1: rw=2049, want=18, limit=16 [ 779.753550][T14288] buffer_io_error: 118 callbacks suppressed [ 779.753563][T14288] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 779.767196][T14308] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 779.777596][T14308] EXT4-fs (loop2): group descriptors corrupted! [ 779.783039][T14313] loop0: detected capacity change from 0 to 16 11:14:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 779.786296][T14288] attempt to access beyond end of device [ 779.786296][T14288] loop1: rw=2049, want=19, limit=16 [ 779.800665][T14288] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 779.828876][T14326] loop4: detected capacity change from 0 to 264192 [ 779.835981][T14288] attempt to access beyond end of device [ 779.835981][T14288] loop1: rw=2049, want=20, limit=16 [ 779.840711][T14328] loop3: detected capacity change from 0 to 16 [ 779.846951][T14288] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 779.879421][T14326] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 779.886536][ T1267] attempt to access beyond end of device 11:14:48 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000000)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = epoll_create(0x9) epoll_wait(r2, &(0x7f0000000140)=[{}, {}], 0x2, 0x5) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) fallocate(r2, 0x0, 0x800, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x8080, 0xc0) openat(r0, &(0x7f00000000c0)='./bus\x00', 0x2, 0x110) sendfile(r1, r3, 0x0, 0x2) [ 779.886536][ T1267] loop1: rw=1, want=27, limit=16 [ 779.896488][T14288] attempt to access beyond end of device [ 779.896488][T14288] loop1: rw=2049, want=21, limit=16 [ 779.909646][T14288] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 779.919318][T14326] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 779.929977][T14339] loop2: detected capacity change from 0 to 264192 11:14:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000170f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 779.930405][T14326] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 779.953625][T14339] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 779.954242][T14288] attempt to access beyond end of device [ 779.954242][T14288] loop1: rw=2049, want=22, limit=16 [ 779.963314][T14339] EXT4-fs (loop2): group descriptors corrupted! [ 779.973951][T14288] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 779.983359][T14288] attempt to access beyond end of device [ 779.983359][T14288] loop1: rw=2049, want=23, limit=16 [ 779.999270][T14288] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 780.009772][T14288] attempt to access beyond end of device [ 780.009772][T14288] loop1: rw=2049, want=24, limit=16 [ 780.020504][T14288] Buffer I/O error on dev loop1, logical block 23, lost async page write 11:14:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 780.056745][T14348] loop0: detected capacity change from 0 to 16 [ 780.069739][T14288] attempt to access beyond end of device [ 780.069739][T14288] loop1: rw=2049, want=28, limit=16 11:14:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xf6ffffff00000000}]) [ 780.114363][T14361] loop3: detected capacity change from 0 to 16 [ 780.122012][T14365] loop4: detected capacity change from 0 to 264192 [ 780.125769][T14368] loop2: detected capacity change from 0 to 264192 11:14:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 780.168429][T14368] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 780.178191][T14368] EXT4-fs (loop2): group descriptors corrupted! [ 780.186806][T14365] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 780.221849][T14365] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 780.222743][T14382] loop1: detected capacity change from 0 to 16 [ 780.232980][T14365] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 780.264282][T14382] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 780.275013][T14381] loop2: detected capacity change from 0 to 264192 [ 780.278752][T14382] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 780.299576][T14382] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 780.315133][T14381] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 780.324815][T14381] EXT4-fs (loop2): group descriptors corrupted! 11:14:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000180f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 11:14:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xff0f000000000000}]) 11:14:49 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x28) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "b058522939fb87b9", "259ba71d7b413d0817705738ce531d5cfc02611f2b272edc4e63b86dc919b1dc", "e8814b5e", "05861e233bff184a"}, 0x38) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x200000) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000000c0)={{0x3b, @private=0xffff0000, 0x4e24, 0x3, 'rr\x00', 0x12, 0xfffffcb1, 0x4c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x4e20, 0x2, 0x6, 0xcd, 0x430}}, 0x44) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) r3 = epoll_create(0x9) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x22200) r4 = epoll_create(0x9) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) close(r4) sync() sync() [ 780.477083][T14414] loop3: detected capacity change from 0 to 16 [ 780.477487][T14410] loop2: detected capacity change from 0 to 264192 [ 780.487510][T14421] loop1: detected capacity change from 0 to 16 [ 780.495477][T14415] loop4: detected capacity change from 0 to 264192 11:14:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) [ 780.545291][T14410] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 780.555068][T14410] EXT4-fs (loop2): group descriptors corrupted! [ 780.562094][T14415] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 780.582609][T14415] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 780.593739][T14415] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 780.627423][T14443] loop3: detected capacity change from 0 to 16 11:14:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000600)=[{&(0x7f0000000140)="eb3c8f000000732e66617400020101000240008080f8016bd299feecc046edc5ffebe1d359a17c4ba52b05ba4ee0a05b981f48b4f78bd7ec63ecefb6e4f3cd0403058a21640100ee209896af377f7a8f71f43674336a59be739bb2976b5f76168805f182b0cd31dda4db98c6db52b5d7301b0c348e0000000000000000", 0x7d}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0xee42, 0xd8) creat(&(0x7f00000000c0)='./bus\x00', 0x3c) 11:14:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000190f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 11:14:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xfffdffff00000000}]) [ 780.905246][T14467] loop3: detected capacity change from 0 to 16 [ 780.905698][T14469] loop1: detected capacity change from 0 to 16 [ 780.916787][T14470] loop4: detected capacity change from 0 to 264192 [ 780.918428][T14468] loop2: detected capacity change from 0 to 264192 [ 780.941352][T14468] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 11:14:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 780.951034][T14468] EXT4-fs (loop2): group descriptors corrupted! [ 780.967550][T14488] loop0: detected capacity change from 0 to 16 [ 780.997626][T14470] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 781.007676][T14470] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 781.018826][T14470] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 781.024825][T14488] loop0: detected capacity change from 0 to 16 11:14:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xffffff0f00000000}]) 11:14:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 11:14:49 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r1 = memfd_create(&(0x7f0000000400)='\v\xa4J\fIJ\"!w\xe5\n\xfaU\xa9\r\x8b\xf7&d\xa0\xe3\x9dh$X\x14se\x1c\xf0\xdb(\x96}\x9e\x1d>2\xa7\xdf\xa0\xb1\xf28\xd12b\x1d!\xa4\x0f\x9b\xda\xd8)\x98\xfb\xc1\xf3X\xcf\xdf\xa9d(\x9b\xd6+\xd7-\x8a\xe5\x15T1\xc8[Er\x1dF(3\xedfpe7\xa8\xca:\xb1\x97\x94E\xab\xda\x10XvF#\xae\xc7]vO|\x819\xd2x`\x00\x00\x00\rad\xab\xe8j\xb8-\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000008, 0x11, r0, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)="bb", 0x1}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="2d13368a655ad4c3feaf02cde4b694d9becbad4e471fbf2ebb5e42e473bc94ae144c6ac91a7386a2863742b8d055b5d4f246807574fb6079e919ec7b73329fbb952f27a3e7352d05fdf28a0837fda7dd3bfd2015cb08fe03b47359d4fa7d47213fb94526273b2c3228f46d5022931f4e425b344912ab1b261802fbd1277028214f853c", 0x83}, {&(0x7f0000001040)="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", 0xf5c}], 0x2) symlink(&(0x7f0000001000)='./bus\x00', &(0x7f00000000c0)='./bus\x00') chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) write$binfmt_elf64(r4, &(0x7f0000001fc0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xa6, 0x4, 0x7, 0x7a, 0x3, 0x3e, 0x10000, 0x231, 0x40, 0x8, 0x3, 0xfffd, 0x38, 0x2, 0xbf, 0xc5e0}, [{0x0, 0x8001, 0x3, 0x2, 0x7, 0x100000000, 0x1, 0x7ff}, {0x60000000, 0x514ced75, 0x6d57, 0x3, 0xffffffffffffffff, 0xf73, 0x1ff, 0x100000000}], "a2f9700a0100"/36, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6d4) sendfile(r2, r3, 0x0, 0x0) [ 781.053707][T14494] loop2: detected capacity change from 0 to 264192 [ 781.070854][T14494] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 781.080545][T14494] EXT4-fs (loop2): group descriptors corrupted! [ 781.114225][T14514] loop0: detected capacity change from 0 to 16 [ 781.134447][T14520] loop1: detected capacity change from 0 to 16 [ 781.141054][T14521] loop4: detected capacity change from 0 to 264192 [ 781.161645][T14529] loop3: detected capacity change from 0 to 16 [ 781.175337][T14521] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 781.193056][T14521] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 781.204198][T14521] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:50 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sync() sync() r1 = epoll_create(0x9) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x400, 0xfff, 0x0, 0x0, 0x4, [{0x80, 0xff, 0x10000, '\x00', 0x300a}, {0x20, 0x5, 0x6f, '\x00', 0x2884}, {0x9, 0x42, 0x0, '\x00', 0x188}, {0x0, 0x7, 0x3, '\x00', 0x2084}]}) 11:14:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1) 11:14:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 11:14:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000021a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xffffffff00000000}]) [ 781.412414][T14569] loop0: detected capacity change from 0 to 16 [ 781.414596][T14564] loop4: detected capacity change from 0 to 264192 [ 781.421320][T14574] loop1: detected capacity change from 0 to 16 [ 781.432059][T14568] loop3: detected capacity change from 0 to 16 [ 781.443087][T14577] loop2: detected capacity change from 0 to 264192 11:14:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) connect(0xffffffffffffffff, &(0x7f0000000080)=@isdn={0x22, 0xf8, 0x6f, 0x38, 0x3f}, 0x80) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) [ 781.483141][T14577] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 781.492913][T14577] EXT4-fs (loop2): group descriptors corrupted! 11:14:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0xffffffffffffffff}]) [ 781.527326][T14564] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 781.537954][T14564] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 781.545300][T14594] loop0: detected capacity change from 0 to 16 [ 781.549401][T14564] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001b0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x60c9, 0x7, &(0x7f00000007c0)=[{&(0x7f0000000140)="0c2fb446b83a0febaed1dc1d679a81d4f6cb3f58633b4f97173cdbeedf082ca02848b2f6a015dd282a19b8c23ca8d82c0ddabaf7052b7aadf4c69138e72863a11e3284968e5e8322a92c961a84a516d1994356d69b53e1585c0ec4d5aaccdc409f3f240cf5d2eb5870ddb29ab86b76035b43b49df2362e7600be21290869198c5c47764ab20eea14fc9fb8c8d7be6ed08b450f4e088bcb268547f99f7382c8f864c8ac1b20b968043c413fa6613c1970ce4361787f421f4e09f245c771002d0b57716e965ea2b76e3294d503911c77ace4cbfacbfc7fee803fd781698d9e87622f0c63e338ed59ff420e", 0xea, 0xff3}, {&(0x7f0000000300)="10edc4c1a80df5cbd564b3ee1ad6b2f00dd6031231e40d156935f2a83fee1dc97f39cdd6d9daa52a79a76654f205126e4ecce217a4c3debed4d4f75b8377beb1b8f28d41300cabb2324775d9e6333b37aba193c67bf7947781b328a5d5fc9a7cb8c2dc4f91d1a9e9ac0a576361a30f5bb864bf2bfc2c27973a0e7064aca71a3afe3c2aab6fb5e56f961352d848ec286d1c0d16a316d52af4e6b2df004e951f879db048e2a08b3df8005c08d1e0d3f873233dc770c4d89641de8e87119abb41755da6c75ad612", 0xc6, 0x7fffffff}, {&(0x7f0000000400)="df005a3d35b52f3fd33ccca43da3157dc51cc48bd0873f88c68a8edf13741598f4b2aac73155ade1b41addbae06cb2dac5e0ee073399b74d55e698208c0b1255081956410a645c41dba6dd0a3d1d87ada594c5bc00ab7d6c5316e2a4148e2240ff142ceecaf6857a942b6b52919e289c5f8dc6e557118e135b3a80a4383f3ff74fbcafd3ca3d10904fcfc0f8819ebca98f78d4761026269890c7bd9e35d4894252b6c8ae8a206def11842edf4d2ea1fc729708fcd767d81b07a066af99ac5f9dbb4fdc6454c4277721176e3f5fb303e32d9996ba0b69a80e121c4954fd32d32baee620", 0xe3, 0x101}, {&(0x7f0000000240)="a11537a993c60596237f88ad410ebacf2751bfc8374848fe383789ac1cccd270cb6a6e58d6162fd13ef3d659473d", 0x2e, 0x5}, {&(0x7f0000000280)="d306d8886f40085f85f85e6a598463a17f7dd04d784e4c5437e3d51ea818cdfa7f49f24474d95dae91ff09eed06d8a", 0x2f}, {&(0x7f0000000640)="24b2dcd4e962ae8c1d0c474c33ef958080fe6f8d8f89df89ed3d7f02ac2da277ee0733b3ce819e010bd44de6c62765a2f32a83ce8ce7b72505083c81717bd833db66b383ae125850acb7657be6a8f5333b02c5b965dd23f152c18b849e8865c59768b8ea82d152410f4a3f7920a09a4697efdb97c133106b1156addd1d956170daaa698d482693ef3b8fcf2c5d3602fd1f8fc545ee29facd4fe471c36f64c3b72052ccf57a90452493", 0xa9}, {&(0x7f0000000700)="1fe74f7f1e7bce6cf9c67372f46ded1df8432f1fabb9b792dc75e42dd3e8141ecb3ffa1d56a796a4a2fce01ce87813ac3808bc8dca3f3d51f886df47ee95250e902ae3bff56fdae98e2aa047a3c956d83ab91c0026c3a9b44c8a2f876e5a7b3c7d617f80118c772c523ad0d31cbb2e1d460a8c4fa1039e777ea0e7463401da832c09e4ed943b3378c7ebc3541960deb3f7dac3a35b97f90d2d1f5f7e8cd6d81a0e8144bec1cc", 0xa6, 0x8}], 0x11200a, &(0x7f0000000900)={[{'vfat\x00'}, {}, {'vfat\x00'}], [{@context={'context', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r2}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}) [ 781.622478][T14610] loop2: detected capacity change from 0 to 264192 [ 781.629903][T14611] loop3: detected capacity change from 0 to 16 [ 781.641109][T14610] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 781.647017][T14619] loop1: detected capacity change from 0 to 16 [ 781.650872][T14610] EXT4-fs (loop2): group descriptors corrupted! [ 781.679765][T14626] loop4: detected capacity change from 0 to 264192 [ 781.701066][T14626] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 781.711144][T14632] loop0: detected capacity change from 0 to 16 [ 781.738867][T14626] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 781.749957][T14626] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:51 executing program 5: sync() sync() sync() 11:14:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f0000", 0x16, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x43) fallocate(r2, 0x48, 0x1b6, 0x3) 11:14:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 782.280029][T14668] loop4: detected capacity change from 0 to 264192 [ 782.288831][T14669] loop3: detected capacity change from 0 to 264192 [ 782.296892][T14668] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 782.297373][T14678] loop2: detected capacity change from 0 to 264192 [ 782.319132][T14673] loop1: detected capacity change from 0 to 16 [ 782.345735][T14668] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 782.356831][T14668] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 782.360255][T14682] loop0: detected capacity change from 0 to 16 [ 782.371101][T14678] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 782.383203][T14678] EXT4-fs (loop2): group descriptors corrupted! 11:14:51 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffee}]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r1, r0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x3d, &(0x7f0000000340)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a670057a74244a96187389fa2273b"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r4, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) gettid() 11:14:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001d0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 782.389611][T14669] EXT4-fs error (device loop3): ext4_fill_super:4810: inode #2: comm syz-executor.3: iget: root inode unallocated [ 782.401645][T14669] EXT4-fs (loop3): get root inode failed [ 782.407365][T14669] EXT4-fs (loop3): mount failed 11:14:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:51 executing program 5: sync() r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x222580, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) sync() [ 782.538330][T14706] loop0: detected capacity change from 0 to 16 [ 782.555917][T14717] loop3: detected capacity change from 0 to 16 [ 782.562752][T14718] loop4: detected capacity change from 0 to 264192 [ 782.590321][T14725] loop2: detected capacity change from 0 to 264192 [ 782.591518][T14717] FAT-fs (loop3): bogus number of reserved sectors [ 782.603486][T14717] FAT-fs (loop3): Can't find a valid FAT filesystem [ 782.628351][T14718] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 782.639628][T14718] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 782.650671][T14718] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:51 executing program 5: sync() sync() sync() sync() sync() sync() [ 782.752065][T14725] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 782.775520][T14725] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:51 executing program 3: sync() sync() sync() 11:14:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 782.873273][T14751] loop4: detected capacity change from 0 to 264192 [ 782.889905][T14761] loop2: detected capacity change from 0 to 264192 11:14:51 executing program 5: sync() sync() [ 782.963624][T14772] loop3: detected capacity change from 0 to 16 [ 782.970032][T14751] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 782.980675][T14761] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 783.024955][T14751] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 783.036017][T14751] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 783.047223][T14761] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 783.077051][T14772] FAT-fs (loop3): bogus number of reserved sectors [ 783.083650][T14772] FAT-fs (loop3): Can't find a valid FAT filesystem 11:14:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x2}]) [ 783.439806][T14797] loop1: detected capacity change from 0 to 16 11:14:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:54 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0x9, 0x0, 0x1}) sync() sync() sync() sync() 11:14:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x6000000000000}]) 11:14:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus/file0\x00', 0x444001, 0xc0) r2 = gettid() syz_open_procfs(r2, &(0x7f00000000c0)='net/ip_vs\x00') sendfile(r0, r1, 0x0, 0x0) 11:14:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x3}]) [ 785.512134][T14812] loop1: detected capacity change from 0 to 16 [ 785.514500][T14813] loop2: detected capacity change from 0 to 264192 [ 785.519000][T14814] loop3: detected capacity change from 0 to 16 [ 785.533676][T14816] loop4: detected capacity change from 0 to 264192 [ 785.575583][T14812] handle_bad_sector: 70 callbacks suppressed [ 785.575599][T14812] attempt to access beyond end of device [ 785.575599][T14812] loop1: rw=2049, want=18, limit=16 [ 785.598804][T14813] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 785.608285][T14816] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 785.619267][T14812] attempt to access beyond end of device [ 785.619267][T14812] loop1: rw=2049, want=18, limit=16 [ 785.630092][T14812] buffer_io_error: 46 callbacks suppressed [ 785.630104][T14812] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 785.636757][T14814] attempt to access beyond end of device [ 785.636757][T14814] loop3: rw=2049, want=18, limit=16 [ 785.648364][T14836] loop0: detected capacity change from 0 to 16 [ 785.661577][ T1119] attempt to access beyond end of device [ 785.661577][ T1119] loop1: rw=1, want=27, limit=16 [ 785.674063][T14813] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 785.674097][T14816] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 785.689005][T14840] attempt to access beyond end of device [ 785.689005][T14840] loop3: rw=2049, want=18, limit=16 [ 785.695637][T14816] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 785.716846][T14840] Buffer I/O error on dev loop3, logical block 17, lost async page write [ 785.733736][ T1119] attempt to access beyond end of device [ 785.733736][ T1119] loop3: rw=1, want=27, limit=16 [ 785.736086][T14840] attempt to access beyond end of device [ 785.736086][T14840] loop3: rw=2049, want=19, limit=16 [ 785.754870][T14840] Buffer I/O error on dev loop3, logical block 18, lost async page write 11:14:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000200f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = epoll_create(0x9) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x94, 0x8, 0x0, 0x12, 0x0, 0x20, 0x4, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffb1c2, 0x7}, 0x20, 0xfffffffffffffff9, 0xabc1, 0x8, 0x5, 0x0, 0x4, 0x0, 0x80000001, 0x0, 0x53e}, 0xffffffffffffffff, 0xe, r0, 0x1) fcntl$setlease(r3, 0x400, 0x0) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) fallocate(r2, 0x29, 0x7, 0x5) sendfile(r0, r1, 0x0, 0x0) [ 785.793705][T14812] attempt to access beyond end of device [ 785.793705][T14812] loop1: rw=2049, want=19, limit=16 [ 785.804488][T14812] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 785.807163][T14840] attempt to access beyond end of device [ 785.807163][T14840] loop3: rw=2049, want=20, limit=16 [ 785.823584][T14840] Buffer I/O error on dev loop3, logical block 19, lost async page write [ 785.853715][T14812] attempt to access beyond end of device [ 785.853715][T14812] loop1: rw=2049, want=20, limit=16 [ 785.864473][T14812] Buffer I/O error on dev loop1, logical block 19, lost async page write 11:14:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600001200f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 785.896707][T14812] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 785.903676][T14862] loop0: detected capacity change from 0 to 16 [ 785.907651][T14840] Buffer I/O error on dev loop3, logical block 20, lost async page write [ 785.920676][T14864] loop2: detected capacity change from 0 to 264192 [ 785.928086][T14812] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 785.945497][T14840] Buffer I/O error on dev loop3, logical block 21, lost async page write [ 785.971667][T14864] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 785.975657][T14872] loop4: detected capacity change from 0 to 264192 [ 785.981460][T14864] EXT4-fs (loop2): group descriptors corrupted! 11:14:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x4}]) 11:14:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 786.035149][T14872] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 786.051165][T14872] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 786.062276][T14872] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 786.112965][T14885] loop2: detected capacity change from 0 to 264192 11:14:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600010200f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 786.153998][T14895] loop1: detected capacity change from 0 to 16 [ 786.187995][T14885] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 786.197892][T14885] EXT4-fs (loop2): group descriptors corrupted! [ 786.225178][T14901] loop4: detected capacity change from 0 to 264192 [ 786.271067][T14901] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 786.342015][T14901] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 786.353373][T14901] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x5}]) 11:14:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:55 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000001480)=0x3, 0x6) r3 = epoll_create(0x9) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x100010, r3, 0xdd42a000) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001300)={'syztnl0\x00', &(0x7f0000001280)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x1, 0x5, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x700, 0x6, 0x2}}) sendmsg$inet6(r1, &(0x7f00000013c0)={&(0x7f0000000000)={0xa, 0x4e1e, 0x8, @rand_addr=' \x01\x00', 0x401}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000040)="16f81bca8519926c81d63eeefa9ea42414dc73747879476ed02ecfb6308a631f793a44a7fd0ed96342dd93ea9406777698cf3ed84d1965437428f6c1a3c9f50ed27b845b5b4eeb2a333fcb9c2efd5cbf9dc0041b4559435da51fce0ac03f0a5993fb12d49340553922192fb25acf305aa216eee71eba2ce6320f04fa61eddec26fbbb679d4b1ca96b807602ce4bbf0a5bebd7c7b3ca2e4f2b49521d3784b7f05e27fe12a16050e74842e5806dc934f4113149d4da7d52098a13b7073f74391d50ff9093316e53660630e453a0c41057fcc44fc6ad65e99fbb0d60eceb4b6b8a59804088cd35883a0fce03e387929a47b10ab", 0xf2}, {&(0x7f0000000140)="9fd0eb246d223f2aaec6d22a54606b5f734efa90566ac06749efcde0541ebc0da2cd86f832d78a92254234014302b1c7727257ef6fec7fd672f480327fdbeddbd4ae7e3f6a4a024c653f96f0e6c8dc5b90a227f9a10bb4a795c1ab95ae3d598b38f09c1367082ff0d1d27bbda6d44d7f4a66dfa98cf7e1f0192eda76dfdea2ae54b3b68ebfbb5217437007bb9c4506ebe45a72b359e46ca63ec5f19602abbdf2b530625add3e4a018967aaa3aa1ddc8aa94dc7744897c84b9a128fb0f9275c05cf35e01520bbe7ffaae728633a51384d1aad99bf8de7d40ba43d8718433a9d4a42465cc9fd23d3fbd547fc26a4d0fe621c3712f9558d04039601e212924b8946a3e011c6e172afe9c77e8dbba2dfa425f6263b7c215d3ca984e72accf6aead9b992f5c139e236f133c75bdc9d3063de350b6e87599835248685c0c5b7ef85b70379964818c0bf260c008247d86e49eae8caeb9b842e01e8275090782a4eb954ca3394d3b5fabcba09888d7a3b078c3721ea57273515603cd95f6e658311a4dc6c7b8370d7942286b5338a815bb86dbb188b7f59321a94f588fb908d6f974921f5028cf9aa91a87359c4d976d1a5d060bdee064a2257a6d475d48046ba7c66236ce06f2e74353580856f3a58ac3cdbb9d5a0857fa44d316b62f04893f51226ff37a01dfa9c48748c1ea67ac42cfbc0f4e15d8ff64292a088feb7b06baa31f0da1470eeca71a290650839be361f4bc618e541864401ee74f43390891a158f0867a458ec776ec9554803a5af724d629c492d2f9936b58d930b018bb4201c53edc9b7c4c66bf83673708010df410640acbb3f3d89544c0c5851b053b18d01f4d8c3d7e77d326db820acd4848345be3104b099a9dc9a4a62012158f66682cc26c86663fa49ea54adce92910c9f72a5ae3e1bf391ea8a7f9f8199a5fd36a28f0a862af6006f65fde24f6b59826aaee9fd6d023c2772170a55ec21df747e246aa73e93ffc7bf3ccab556b3e1ad906ab40f446ac9dadb07fde24447137306a8469667c0f50109717b596ea592637c02584580d544decb4388d302e8786dcfdaeee8cafc57e7832dca2742b91f7961eb0d77faab6ee0e82343fe275a062124cdc8851c130c3342d84fb05e6fa2a616bccf2913ea127df4e545dc0a0f9bec1723a5e737406d92fc3918f2bd505f815e2e7d2c4a0f8d28f45bc4d876bce0ae320865ced506f94059e77b770ae4c9a92f6bbafc4738363baf3f483172b8fb573142a0a90ace439f7b068c716344f8b4c303c32ff50d71c281937289d2551851d257522b55319599da034b2eb59d9a28451f10d8e57ee5e19bf393ffda76bbf9fa84eda3522735c10b3811c71fe5ba5cfeb93bf6ee507e46fee4522ae230034003137c58dbb0d65d4bb29c1079097a9e046250b451704c745a4b9c105ee7a132f0eb99a17775e7c1d865e531566cbd41e49180cf5988ea5e21a585610bc88dafc01c6773ab578bde1f5c58897ebcb94079d0faa44ee1c391b2e715711bc16feb4a1bdef6285b8a2078812dca5818b616a0441f66dc189ded893ecbb97bbc181fed08506df65e706be3660e654d8ee6aed441543be7ba487f845bd5e06b3e8552c344fac363fb9122b30df89d79865e9ac97eb54ce227eddcc620941f8c74c0bcd4ef57a0f9bcd2483e89d9f60a6265f7a2e8980ee6946f2eee260fa37075e14bb55713e99ccd665313f9abb4acaefb4f3fb8c5f253ebd1026b45aa22e868ec10dfcae0045d425ac831439210cd733c92c2b8b1aa74df52b0d7bb522dba1f06b140936ce6df5770bbea583ddb7ba87a0bd1ead8f6a3b3ad69e8d2cbc15325d12b764f48cf535950998aec6aec24ed662e0a742bbbde753266d60d4eacc0922fcfe8c077526533e2dd132e308426ae34dbfda2515fcb6d2a5563f16430b2d08675f19f3cea6333f0111b53661e628b257a0afa705b19553f689f376425bf53a01b6cacd6605ef3fd8b47d40c34500de49c1f926e1ead8679860808da02ad156275be6f55ec8d4fcaea15ef13516fdbf62edb420ba1b076d5c6a3f35250a2fb00980018a77d05dfd4b916599d0a984a2f10b770435b11d30905925c3b2e6d97f62c81e051c0b0978b4c18e7c70d67e12dbf14a2eae501df04ec5ba3dd6465d5d51efa24e416dc0a692cc422ea17bb44474bd0516c5255b5390caf8e58084237926490cf8e2b1dd974a891fa99dbb70d72dfe4a236271fd1904f8ddd174d1c283d793186ccf76ca4d27e19722dc7a64b2034224974c8c2b1b84d18af4e8f7bc7e125b78743d8d5a33f02bb5932ba9d60126b17726e86635d8221c6a0c461d6f03ae596626e2bb2a5335ec4f7c0e2e2789419ec675115421285b0726d5527f5cff93eb7ee88966a27a6e21735c3322b532c02c9ddd631f51b3d4418d1989f0d77fbd3273bbff1f020e2b93ca2589fdf9999e4e954449f375e4f6914ec49f8491d9ce255a233b756b2f5cc038af9a4a4cc22bfab472d33f8ae74516cacf75372389e02ae7c43e491d42733663599e7c6dbcd77f79223caab4b295742c3c66a8dac900c92e44b091fbc185d065b4304a74d76c21d56b1d216eeebeffe4c2d8244932e529ad4a693697a99c1931ffdd4c058cb0021f33131d6cf65aa396b9fd7e6ad0c70c79f204410436d92a5568aba37e5d3b310908de78c730d17d5771a95d07e9b98ba5031b1dfc3e71d0e218ce94f3d1e4559b22e3c90e50c095c0394817502488cea53c9c65934efa8eea2e17bd63a9be6d1093e4403947d1ae37b668602a1c91da1f6b83965f53c58a77ef00b2a32f1f6cda786d9573f9981f090c817e37fa50691cfb4938334e9973d21209a063db9ac74c3b0d13dc0390dc4ed9d96ba0731e12ef123aa83b3888a308ffe673f78576944aa1e046b67aacb36c8864cd2d773cd809f0f399a70043fb0efde5eb4acbd477ce64f6cdc28b1aab93179a0acad7a08b26f277279923b04c7c5598563625242f585b9b8727e56f575707463aa9567b525060a0d4c4fec29dd23834b2c2df8dcd223e1760959501d20fd5edcf1da4a74829ebbabc1012baf127f52c1a3534e803af0875193700374ea257e99118cb65fcc26b99ae16353257b89cb4adca5367ac65f2c9c78117208482d325d43b760537e14e213e732973864163603e6251cd080008d2b86f816f2f96bd0c70b551888693bc3397e8a8e5e79b183aa908799917de2d4f6b618e55bf482491659ff6c619afd5a2b08e4b25033982fb8e9e61a0bbef53328c5c107916bc91f0bef2b4b8ea504ac1e355e20d76d9f6855d67cbc5d21c53e3687e9e9192bfad8177c419f12f9a0ad961fd1e4c535a2e61e7cdf6d154fdfa31010ede3a7a1cf18cbcdf164f0bf496a4b9c99a1cd2b1f584b3f780d5f5758d0a55875973efda38e10e7bc3a8bc12d2d013221b656686402061a68ac67cb3470c28aace129eb30019764c1a5e954e193f0cc2d41a684e7fa4ef1dc9cd842fd68805a571d9c911b61a1e7d915fe09e6a34cdfe5b4175ed2e77a33276a70e3fbfc7e86f45a7cbf8ebc167271bdc730c1c26cef7e05252476552004299a724a8768641e7a93ea621e42f8bcd90473f547a93e2b95b1c40ed60e1f50f5e63d7ad9316dbf860f95dbaa1e325ab2f3bbf2773ea92df219af105bd4393ed11219263bde035dced0217835a75bc58b835e1cd668b16b7171164a4c94de4525fe03e6ba71eb5658dfa9a2d3499025beb08c16738a36d399781427a0264844256ab9aadd4dc5b33754d885a15c3b12a3459dfe56827b255cb5482ecc0232bd9503a772008a0929e3dc6f97d214aea394715ed6f2b6ea64c5b1b8ff34c564f9b704ab7f0eaa066f2322c726f94ba4e45991b1ee4d0ab4c04670fab014568ddfd0b5f821eb6cbca62ff2d514bdafd9448d9bfd1faf97bd7fb2a36cec12405f69c101f8c7b81355ecf2e2ff4aa31f66bcba7956a8f41259d771901f643d591fadf343dad311d4214fadae09e1413341c6b15954425ced289046be73bc01adf467779383cc8f92c59144f5131ae122ef9e57697b44f9655c9ddc1d59d2fbe037d36f1d0130f1dd1eca50dd65988362fedda18798f130d58ad008b91331c28c33763fba7f7159ac4ff7db3ae3ed46ac15638fa41fbe56eb7313e41eb277fe0732b7df0067532c9d1a550e75d142f6e37e845cb7fd582f96a9db1ea912127df0817e10b9b12e7a02c7d8486d6378080083666ea7b3e4d95a36a010e04dd67f447b2cf1b8e91abef2532a67857e9e4e253e4a0a6c77155eec9eee5c865b3916b3ba41e0e567318072226a60ec8eaceda9a5210fba56ea5ba8ef833e9977d744e201434992cc5411846ca0f51e212ad5ef40e8c3f15dc1865eb416f3c50cdcd8bb766931323d504ecb742cfab37df268182076153ec4458eec7233a67a29896011271928d9a3f2bd5d83c731c68f6825f49d10e7d30248ea2008b47c14ec4b96a2b3e4b3def26232ae8500dfae84bd4004e6e679fbace6bff2ca42018a4b3fc18feae68598ca4b9c5a3941f40586f81f49ccbe3b2d1d4dbbde089bd624b02dd7d5289482509ea7da0afcf2aab85be55c1e16303eacc034a8a0e661506c9503ae5044a8d118429132af1d7df4e975ff32ba672e628fb74f9d2a27bfdfbfa44aa070e2d34db1ee779f581682babc1e3d4dc5675eb33fcc59e87ad6e81c19dbc37252a36c25bb295584621802a5f5c07112e9c66ad50b71095ec654a321efde458153bf119ebc13392e32f4e409d8e9ba7ca20ff4053e41ece80c4b26c067af8042c781e1781e068c68e4d9652695c4cca8c6cde1928f72a81507250567413abcc135929064c2b6241d1b7fa66276062d7ee879753e08214f4f6b3edbcf435a966b446c5e89fdb83c7975941f4724953c52a11e325000edc3b0f8f8156f4de872d8572d3bdb3c6e1f1adaa859694bbd4390c6b2da1c1b51df8d54db05bbbdfa2e718f9455eaae1e29d0f898c19c3459dbbfb3c3d45cf0d6997cb5c2f19cb76163f67562462ed9d2d3ecb78f2625b0f2ab2e1f053f9b4b0a0e1e4923252bdcce8c3ddf338808745e365ca0432f557f91e3d405c90203e99ff2bfcb0228e2f3dc3fb59e06c813ce16200bb1e0cc28908e1c6acf9dc98e15c16225bd11516a6501f07e36f3e0e96c6fd25f1a66ac135f049d39f7e891abcef852355868080e9e6d09beba0a07745ed3843c81b82a13987c009c022e5681b2843c82c122737b6f52dee8e551baa77b68601ac388299f3d35c2ae8bca818d5e434728fbb94a8960be054d89ca470bf4039b1144b029dbeeb60e777578051eed85583f238f146e458753e644bb66b90e7d947e0255bab4307b4a2358760e419784de1cab3aaa4be7641b6b9aaa597d273c72f3a5f7b70713af70adc3339d734c279eb1e543555ae5eeca7056b3879029f2d4091b4bcded87b21a9a440f6224d8a906e73301939bea83303428aeaa2a567ad2a1cd48f71258e31efa2cbc7947cb1db35a2361c07bdcdb2e9d4da2eb8b6c8d60ba4c3fdc0d78a25fc5e585a720a5b6484d360282c5ef2276ffdd540e4cc5248cb44d5b1e0dcf0f8ff38514ef12f568324a8124da19e1ddfd645b23cd02a4fba27f87b53c4c5529cf70e8e956e8e968406c55fa58813ecd888a307d429f93dabc2bf260dfd04e2d56dc1b7b5cc68eac18a2464a276b169b87340a05dcd7c5019263bed9e19a7473063c6fb9e97eda5dccffbcee14fe1ec6d69e9fa6f00c09c40e43b0ba81cee113c6cc79dd0a5a5aeafd6bebcb6704f", 0x1000}, {&(0x7f0000001140)="7caff0ed9d15b42795a4eac9108297f813320cf92f2097028e420f78be7a633aa2ea9fa1032f289ff8004adc7e5b642f407fd0b9b00fff78864ced5be73ccd9845c62eb532aaefa6ad95997716e78094d928d3e26856aabb9ed616bb8dc04d02ef96d9e2b7eec12e88055580257c2f67cb8ef57f7dcc7e457b6664e01e", 0x7d}, {&(0x7f00000011c0)="dfa4ef8bd292563e43b4d5d7a980e38bd022cd7ae0969b8e1e7c91f915e55a80674d9d2c348bbb76ad2f20da795dbf77072c2191197e61004940a6f7e4d57dc00d612efab9f42d89a5a606dbfe72737896", 0x51}], 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="2400000000001d002900000032000000ff01000036a415616f5d28cb00000001", @ANYRES32=r4, @ANYBLOB="0000000030000000000000002900000037000000ff02000000000000040101c910ff020000000000000000000000000001000000"], 0x58}, 0x8000) sync() ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001400)={{0x96, 0x3}, {0x2, 0x5}, 0x6, 0x2, 0x40}) 11:14:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) (fail_nth: 1) 11:14:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000210f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 786.454684][T14931] loop2: detected capacity change from 0 to 264192 [ 786.458566][T14929] loop3: detected capacity change from 0 to 16 [ 786.467891][T14931] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 786.477677][T14931] EXT4-fs (loop2): group descriptors corrupted! [ 786.482474][T14937] loop4: detected capacity change from 0 to 264192 [ 786.521433][T14929] FAULT_INJECTION: forcing a failure. [ 786.521433][T14929] name failslab, interval 1, probability 0, space 0, times 0 [ 786.533926][T14947] loop1: detected capacity change from 0 to 16 [ 786.534087][T14929] CPU: 1 PID: 14929 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 786.548930][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.558980][T14929] Call Trace: [ 786.562341][T14929] dump_stack_lvl+0xd6/0x122 [ 786.566983][T14929] dump_stack+0x11/0x1b [ 786.571146][T14929] should_fail+0x23c/0x250 [ 786.575590][T14929] __should_failslab+0x81/0x90 [ 786.580655][T14929] ? alloc_pipe_info+0xac/0x350 [ 786.585534][T14929] should_failslab+0x5/0x20 [ 786.590063][T14929] kmem_cache_alloc_trace+0x52/0x320 [ 786.595383][T14929] alloc_pipe_info+0xac/0x350 [ 786.600074][T14929] splice_direct_to_actor+0x5f7/0x650 [ 786.605440][T14929] ? security_file_permission+0x7c/0xa0 [ 786.611038][T14929] ? do_splice_direct+0x190/0x190 [ 786.616046][T14929] ? security_file_permission+0x87/0xa0 [ 786.621614][T14929] do_splice_direct+0x106/0x190 [ 786.626480][T14929] do_sendfile+0x63e/0xbb0 [ 786.630887][T14929] __x64_sys_sendfile64+0x102/0x140 [ 786.636122][T14929] do_syscall_64+0x44/0xa0 [ 786.640524][T14929] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.646488][T14929] RIP: 0033:0x7ff700ba3709 [ 786.650887][T14929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:14:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) mkdirat(r3, &(0x7f0000000080)='./bus/file0\x00', 0x50) [ 786.670546][T14929] RSP: 002b:00007ff6fe91b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 786.678946][T14929] RAX: ffffffffffffffda RBX: 00007ff700ca7f60 RCX: 00007ff700ba3709 [ 786.686933][T14929] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 786.694884][T14929] RBP: 00007ff6fe91b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.702839][T14929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.710806][T14929] R13: 00007ffdafeab55f R14: 00007ff6fe91b300 R15: 0000000000022000 [ 786.747491][T14937] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 786.757810][T14959] loop2: detected capacity change from 0 to 264192 [ 786.766368][T14937] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 786.777435][T14937] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 786.793228][T14959] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 786.803017][T14959] EXT4-fs (loop2): group descriptors corrupted! 11:14:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) (fail_nth: 2) 11:14:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 786.849302][T14968] loop0: detected capacity change from 0 to 16 11:14:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000220f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 786.915989][T14981] loop3: detected capacity change from 0 to 16 [ 786.949806][T14981] FAULT_INJECTION: forcing a failure. [ 786.949806][T14981] name failslab, interval 1, probability 0, space 0, times 0 11:14:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000080)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 786.962711][T14981] CPU: 1 PID: 14981 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 786.971578][T14981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.981632][T14981] Call Trace: [ 786.984907][T14981] dump_stack_lvl+0xd6/0x122 [ 786.989498][T14981] dump_stack+0x11/0x1b [ 786.993679][T14981] should_fail+0x23c/0x250 [ 786.998150][T14981] ? kcalloc+0x32/0x40 [ 787.002217][T14981] __should_failslab+0x81/0x90 [ 787.006981][T14981] should_failslab+0x5/0x20 [ 787.011558][T14981] __kmalloc+0x6f/0x350 [ 787.015711][T14981] ? alloc_pipe_info+0xac/0x350 [ 787.020557][T14981] kcalloc+0x32/0x40 [ 787.024447][T14981] alloc_pipe_info+0x1be/0x350 [ 787.029274][T14981] splice_direct_to_actor+0x5f7/0x650 [ 787.034717][T14981] ? security_file_permission+0x7c/0xa0 [ 787.040268][T14981] ? do_splice_direct+0x190/0x190 [ 787.045469][T14981] ? security_file_permission+0x87/0xa0 [ 787.051023][T14981] do_splice_direct+0x106/0x190 [ 787.055894][T14981] do_sendfile+0x63e/0xbb0 [ 787.060358][T14981] __x64_sys_sendfile64+0x102/0x140 [ 787.065594][T14981] do_syscall_64+0x44/0xa0 [ 787.070013][T14981] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 787.075923][T14981] RIP: 0033:0x7ff700ba3709 [ 787.080453][T14981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 787.100103][T14981] RSP: 002b:00007ff6fe91b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 787.108714][T14981] RAX: ffffffffffffffda RBX: 00007ff700ca7f60 RCX: 00007ff700ba3709 [ 787.116692][T14981] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 787.124712][T14981] RBP: 00007ff6fe91b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.132677][T14981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.140766][T14981] R13: 00007ffdafeab55f R14: 00007ff6fe91b300 R15: 0000000000022000 [ 787.159583][T14987] loop2: detected capacity change from 0 to 264192 [ 787.172900][T14998] loop4: detected capacity change from 0 to 264192 [ 787.179665][T14987] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 787.189407][T14987] EXT4-fs (loop2): group descriptors corrupted! [ 787.202558][T14998] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 787.217106][T14998] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 787.228232][T14998] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 787.258385][T15006] loop0: detected capacity change from 0 to 16 [ 787.313416][T15009] loop2: detected capacity change from 0 to 264192 [ 787.375909][T15009] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 787.385690][T15009] EXT4-fs (loop2): group descriptors corrupted! 11:14:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x6}]) 11:14:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000230f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:56 executing program 0: r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000f, 0x20010, r0, 0x4733f000) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x46, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0x7fffff7f}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x400000, 0x1d0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x80) fdatasync(r2) creat(&(0x7f00000001c0)='./bus\x00', 0x150) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x0) 11:14:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:56 executing program 5: sync() sync() creat(&(0x7f0000000000)='./file0\x00', 0x40) 11:14:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) (fail_nth: 3) [ 787.575197][T15037] loop3: detected capacity change from 0 to 16 [ 787.579696][T15038] loop4: detected capacity change from 0 to 264192 [ 787.584861][T15041] loop2: detected capacity change from 0 to 264192 [ 787.601813][T15041] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 787.611501][T15041] EXT4-fs (loop2): group descriptors corrupted! 11:14:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 787.632991][T15056] loop1: detected capacity change from 0 to 16 [ 787.640137][T15038] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 787.659252][T15060] loop0: detected capacity change from 0 to 264192 [ 787.687399][T15064] FAULT_INJECTION: forcing a failure. [ 787.687399][T15064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.700502][T15064] CPU: 0 PID: 15064 Comm: syz-executor.3 Not tainted 5.15.0-rc3-syzkaller #0 [ 787.709261][T15064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.714861][T15038] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 787.719407][T15064] Call Trace: [ 787.719416][T15064] dump_stack_lvl+0xd6/0x122 [ 787.719439][T15064] dump_stack+0x11/0x1b [ 787.730481][T15038] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 787.733723][T15064] should_fail+0x23c/0x250 [ 787.757307][T15064] should_fail_usercopy+0x16/0x20 [ 787.762330][T15064] _copy_to_user+0x1c/0x90 [ 787.766736][T15064] simple_read_from_buffer+0xab/0x120 [ 787.772145][T15064] proc_fail_nth_read+0x10d/0x150 [ 787.777156][T15064] ? proc_fault_inject_write+0x230/0x230 [ 787.782907][T15064] vfs_read+0x1e6/0x750 [ 787.787047][T15064] ? do_sendfile+0x9c3/0xbb0 [ 787.791623][T15064] ? __fget_light+0x21b/0x260 [ 787.796296][T15064] ? __cond_resched+0x11/0x40 [ 787.800953][T15064] ksys_read+0xd9/0x190 [ 787.805124][T15064] __x64_sys_read+0x3e/0x50 [ 787.809641][T15064] do_syscall_64+0x44/0xa0 [ 787.814044][T15064] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 787.819977][T15064] RIP: 0033:0x7ff700b5648c [ 787.824375][T15064] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 787.844044][T15064] RSP: 002b:00007ff6fe8fa170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.852458][T15064] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff700b5648c [ 787.860409][T15064] RDX: 000000000000000f RSI: 00007ff6fe8fa1e0 RDI: 0000000000000006 [ 787.868361][T15064] RBP: 00007ff6fe8fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.876310][T15064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 11:14:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000240f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 787.884304][T15064] R13: 00007ffdafeab55f R14: 00007ff6fe8fa300 R15: 0000000000022000 [ 787.898183][T15070] loop2: detected capacity change from 0 to 264192 [ 787.917333][T15070] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 787.927007][T15070] EXT4-fs (loop2): group descriptors corrupted! 11:14:56 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff800000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sync() 11:14:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="0200000012", 0x5, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x7}]) [ 787.994337][T15087] loop4: detected capacity change from 0 to 264192 [ 787.999195][T15089] loop2: detected capacity change from 0 to 264192 [ 788.023218][T15087] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 788.048305][T15087] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 788.059388][T15087] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 788.073317][T15097] loop3: detected capacity change from 0 to 16 [ 788.086464][T15106] loop1: detected capacity change from 0 to 16 11:14:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000250f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 788.094891][T15089] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 788.104681][T15089] EXT4-fs (loop2): group descriptors corrupted! [ 788.190868][T15119] loop2: detected capacity change from 0 to 264192 [ 788.201063][T15119] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 788.210823][T15119] EXT4-fs (loop2): group descriptors corrupted! 11:14:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x8}]) 11:14:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1e0) 11:14:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000260f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:57 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x6, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0x20}, {0x0, 0x0, 0x1000}], 0x3008858, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT]) chdir(&(0x7f0000000040)='./file0\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x80000001, 0x581000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x2020000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c667363616368652c76657273696f6e3d397032303030a5e14b327874656e642c76657273696f6e3d3970323030302c63616368653d6e6f6e652c646562756723cf6251213d30783030303030303030303016cd1aee4dd7b33b09413030383030302c666f776e65723d990becd08eab69973f24d888bf1197dc1dd7c012e8aef6", @ANYRESDEC=r2, @ANYBLOB=',euid<', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000440)=0x8, 0x4) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) read(r6, &(0x7f0000000340)=""/120, 0x78) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x0) 11:14:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 788.410602][T15130] loop0: detected capacity change from 0 to 264192 [ 788.469304][T15142] loop2: detected capacity change from 0 to 264192 [ 788.469593][T15141] loop3: detected capacity change from 0 to 16 [ 788.484452][T15144] loop4: detected capacity change from 0 to 264192 [ 788.492435][T15143] loop1: detected capacity change from 0 to 16 [ 788.511996][T15142] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 788.521731][T15142] EXT4-fs (loop2): group descriptors corrupted! [ 788.529210][T15157] loop0: detected capacity change from 0 to 16 [ 788.568324][T15144] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000080)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="02000000120000", 0x7, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 788.628729][T15144] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 788.639787][T15144] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 788.666292][T15173] loop0: detected capacity change from 0 to 16 [ 788.713662][T15178] loop2: detected capacity change from 0 to 264192 [ 788.749186][T15178] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 788.758897][T15178] EXT4-fs (loop2): group descriptors corrupted! 11:14:57 executing program 5: sync() sync() 11:14:57 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240000200f801", 0x17}, {0x0, 0x0, 0x4}], 0x301a852, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000240)='./file0\x00', 0x2) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './bus', [{0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}], 0xa, "0e6e9ba22da0620e43de12f9d2277aaa0505e84dbbf5decf8f7e48928a9000d53a51c6702dd12d690c01afa04c5f1fe7cdfd148f526972ebe4c2267a0dac896a4eb5be9bfaa706abb7a25d33f95af3c89d410802600cbe38c86b1c6cbdfb787fc6fc542e16c529d14f48c4e0dcddd75062849f82407c8b0f0e32311614f1ad1f9c047b69d89f11b32e7e64f02811c7887fed2af80eac94958bdb4904e32172caa50787c3c711c6a3ede83d8e324e850aab37db4b83b9"}, 0xcb) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 11:14:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000270f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xe001) 11:14:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x9}]) 11:14:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 789.001689][T15214] loop4: detected capacity change from 0 to 264192 [ 789.009125][T15215] loop3: detected capacity change from 0 to 16 [ 789.013630][T15217] loop0: detected capacity change from 0 to 264192 [ 789.018459][T15221] loop1: detected capacity change from 0 to 16 [ 789.024178][T15223] loop2: detected capacity change from 0 to 264192 11:14:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x80800) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000140)={0x0, 0x6, 0x20}) [ 789.045211][T15214] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 789.090030][T15223] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 789.099753][T15223] EXT4-fs (loop2): group descriptors corrupted! [ 789.112580][T15214] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 789.123672][T15214] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:57 executing program 5: r0 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='%\xf1\'^\\\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\xde\x00', 0xfffffffffffffffb) sync() r1 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="47dc854385818afbdfa09ca31a64e9fe2eeb3ab4eaf5e0ba1340666f600ec3223ff2c270b6a9020e2ef994a7c64aafd0a9ae0496e4d6fe99616dacf4a5005bbe02b09b1ff88cd44645ef9a26ff487ed705f955726cc642ceb6611f0181b8eb4dc4a62df37c4c990fe176a60473680efd7aa0aec51a314f41dd6a82bf19eceff0d761ce5c040aaeab1dd48557be0cd0940bc4de65079700e8eb423e711bf3023119e9db614778c16e452ca8e3c600bedd423c80a60d993400b86a1b06230c3ee26c", 0xc1, r0) keyctl$unlink(0x9, r0, r1) 11:14:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) r1 = epoll_create(0x9) epoll_pwait(r1, &(0x7f0000000040), 0x0, 0x8468, 0x0, 0x0) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000240)=[{}], 0x1, 0x40, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x8) r4 = epoll_create(0x9) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="48000000160010002dbd7000ff07000035001a002b7888dd69eed47ed4a25200c7bd9e0a8d24735982530217e507c85653be4f5a421ca0cdae2e2bb7b5d20e8aec2eb960ce000000"], 0x48}, {&(0x7f00000003c0)={0x24, 0x29, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@nested={0xc, 0x62, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @fd}]}, @typed={0x8, 0x2f, 0x0, 0x0, @fd=r0}]}, 0x24}, {&(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0x1238}, {&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000300004002abd7000fbdbdf257172c379a1c4f0a57f995238fe28f6dd13a404be6a4dab4865061f4b19e1270f741f94c16f7a0d45bee387f0c74c453981488e8a2cd662cf38f6435b4bdada17e82a27c7f1aa7941c7adbc7f"], 0x6c}], 0x4, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee01}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r2, r3, r0, r4]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xf0, 0x20008000}, 0x840) r5 = socket(0x43665134711b343b, 0x1, 0x200) fsetxattr$trusted_overlay_nlink(r5, &(0x7f00000000c0), &(0x7f00000001c0)={'U-', 0x3}, 0x16, 0x1) dup3(0xffffffffffffffff, r0, 0x0) r6 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0x6}, {0x0, 0x0, 0x1000}, {&(0x7f0000001640)="97cfd93748f093c50f7209f767f638f3cb438008940cc4f122bd7f32abc27cad3ab106df93bc93fa44c2ee2dc2a4d30707c11a91c171a39a559f2b2e556cf2926ce7cab41b9331bb948c772bf32fc27306c9f03ed6d90fa1dd29207fedc72cb760d177d4fa299eb4f4a9f1fa885fa567ef16e7aed6c6abb60a8341988bd6f185751e57bbc2324c042a9b5427b470d366e8758961d88f3bd592d8b6c860b3c8fb09de94b5a1a7f52c3aea9fcaa080ce8619740a180b4a0539a89a07ec2051b159a8a75ca38ad9baa37ac884fd913d2a266c17f35b6ed50645d0be7af093b3d7b59b89a942712014814e74c7b49eccd34231b7e31fdc1cc49b0f6c2230941092496efe397f1d1b44f5500eaead69d5b503485f03d68dd30401fd0fc7be0727bf3669c370ecf43bad0e92c20ef8a7c0788a1bd6533480f5cad7d857bcc0553d4fd90df00fd687a04133189e32b6be55412de33358f88548fc3ebd442dc38b121790711a5942a848c5f46403a42e2b77327b6c1e6c727c00d5565651ddea557b2742a8f81947bb94ff742126f0ff930356b882c94c6d80ec049b4cef7b31048cc136eb87f8c9dd649f4907c4eecbb90dd2640085486c55b25a23aa9fdac8dc67084e74436d18c59fdf9015f29fea0d921c5761306b24b5517da78cb757b74c1647d55d47637614a1d2b7977d3753fff03f2af5d32358682b1a0736add26db69e8436d79757657a537261169d99160d10e9d8d66f1fda00f15efbd159517712ab9efd85c89cb82552122f77a16b1d8aca581d3e92e1505fa38bd3a5a3abdaf52efc720ec9531349b9d4cc02036a9977144b8b1ad3b9d4c06895122f9f55adace068d8fcbd6aa0e8190e0cb0c63b94bac306e3d3f222ee4f6d3ae7b1e3364ff0a7246d2c73feff2e0ffa1918447f9f8f29822f04c38adab95f2f55134c54456b8695c2a04c7e6701b2a79928c31b6e61c6ffc700dcc6cfa3ec067c732843dc92e5c43335775a4295f4674ecd9c9a622781cef7655cf243df7055e914578b2ac1fe189175b8eb2e570255a743e0de0c271f7d304be7a93c065076648f4e459707c7ec49098989c4ff5e5755f1d57772ed84259eabe1af63af808d1bfc1d89b967bf6a92803313a9b4ba95d9c45657e3b43cd20b1579230b8e2b98e2eef291fed06180f3a7e8d552717324da476d5749a6c8712e29f2e830300d55e4392533ffa9095db9895453d7ef055ee620de4cbf8262e4b138ff94f774ed1b0b1c778442bb7af96fa644de1629fc7bccaac0dbdd0f69323f437fa77ef5f9e6d371d505d4dcde028f1f139a117afb9247f34603139bacb379f5f84404b0fef064dd5587a681785670e2591e6f1868e16a7f17576f53c5613152a2e9d6436a4abda0aa86f0dd4fc477f07ea3add8dfe5760f04561f2e17b69b5ac1266c1a5c9ea297bf12e298e95568b743b086a0a59a7e297e19fea5da2cedcf52f5de77598202f4cc9d53daf6d399e218fa74028f10a20d9c08964c8316cbc2ec57c8fb326221911b0ea3f9fb11305378f038ad60e2305f264591ef108c76c7cb403d7d8c7b5a871ada0ee72bff48c581576384a36f6c81d23c401093e23429a82f54c84e00303f72555e6b215f6a79d4b8b94a861d92ad87950e0d1397380188953db9b5d02170569ad10c0cdc41089793f038c9c6e9d6db6e7ce827691d63d9e85a7a100ec2e749f3b0f40485af3760982c1dbf0aa02a19ea426a875c2a6304486ddc5250934eb566471777328da451a118e63d8463021f4a1519607ec83b7a585d0c0734f8c3644ac1a5c4d956e7d929271ec2f5c666b22e73a998b056457e125373a6220da76c5aace46a0e61642a948bd2dea84f9e8f2fc5d5a9ee38f5d45cdae5587825fa98c7c99565158b83ae1aafca50daa602702835c3762b5c17fcb4f68824c4717ea5be4d59db5996ff508f409cd5e16d30fe8dc7930dc9aa2974e507e411be6c890b8ca4007a2562673c52e40e5e28c4879755099b3d2c75e39de046e5e3690b843f8665708d073f20d6da07b1de8f188ec79f419a7d3a0633f1c7c4fe8eaeff0f0ada188646e1f372b7b0d85fd9f62fa033087612d8b5bdafcc580d1a38ca2618ae5ca5bd64f7036e411b726a581ffb532a9376b149b7760d4bcf9612cd11f63807f426f41cef9edcd58bd3599f4f283fc678e56e583dcf4e2bddda250f27d31cee59afec000992b063ee2bbc5410a224fedbae71459b60044e00d7f61d9c48fa257f0c149a20deb6998235b9cace882950b7f5e14b00704daa1b340b68f371651453c01e19dfe3a0c882549c22a2edf097a3632785c829e8f52e07991ed7d639ce5267bd66a6abc224e9e796f4b4cc0892a1d8281645e84ebf044d16717fb9df953b4f05ac6e80edd3d58da6c713c932cad07575fc03ce0a611458932c38173268d6876c99c5ff888a554c676efa30d24c4beaab687a0a9ca10b7826600a36a2f692739872422f926786a39337cb77adadbd69b9549cf98b047fd5273b798f51eefba0828d8bc00da03c0860d8b6e8d1a784dd4e5d395377c43006e36762367132766ce9f4077530e758fa9930b051ec0630c337482a6c97f8d1ca7d0ce85e588b46f226a4d33fb1a567e6157b809e67443b996d93625c580ef78f3ceec392ed73125cb9bba2e74977d239f7012f59239387fc59cf6f2462b31bf5fbbf2f495a4a4388ce35e72d537d8101e6426d756668932710ab9e9c801ffece3f0e1aae65cf5c373d3da1c996686ece9ef017812907cbfec63109857ca2ca5db16b39926ef0172a51cf93031f9aa1b02e749a6915bf3069943643ef746d91395d25da843b5ef04b65d0cae146ee851ad74e2491cdf8ff2db1c5e826cc73ad6b86fd4350b734132df7c194bdcf660b30b3b7530757f130951dbc94beb1d5643b960fd8c6f2acbf0a233050ac0a279c90e0da96026a79a989449fb2b74288f573336456c90048acee282e4c99adb26a3c229d083b88eb01f73cdd1be08b813c79b32771b9a65c6b2fb55c313e31e4e2502e8c160259655980b5f78af1132651f8481ed44b477c4373fc62621f8850ded84a0b61544735f9b5cd6a96eb7c5454781e828a689be675a8c1318955350254b7980e9743ff1cc43d823eadef73b19d7a3791617d967cc8e917a514aa4dfff767805459292a12533fb01af97bf94da23ace054bd3376827edcf3be206135d54282e12f2e216dd361961aab918a14b3c9c8b56080426084705da1f45d5f9a20053339ac6751a87a9892afb909e1ee4bf9e5decce85702d799d2fe3bc1c490721cca9913faa123d976a729e3aec4d15a0c2f0ea1038f8fcec42fc87cf451ec82b89aafedc0477bdb26642c527d79d2d8892779b2c592a848b8485c79d2881c8899d526a0f43602b39ba8cefafa90362eac5b890c38835d0d14375bd6dbad96c21eb28f970c05278407abc27cef9185a1a5ce5326ab9df8d281f5aa1a94891e33b6af49f21f2acd67fe23c248de2642c9191a65ba184b711797ef82525f76646eb947b67eb85101d7921b986ca775d69f5f226af9eb3746d9a227597474cf87a4e887d3c7bb13cca8f37996ed76226122b943748c157b17314745603734f810f19db8ca3d8310cf1070d36e4a4c278c4ffb2bf6d2c356532b2fb58bdffaf39bf94ed13f755e345a0960ed372d33089db407ff283157b090389fc3b3d8081dbd32f7711157bde30f82a9d07e4ad9bb8cc34b186ed4f93388aeaaa27d782f73ea85d3c49caa3834a5b1aa94019854ffde60320ac2a3102f020355ceadd9bbad19ff2cba04e932e01de5916e22774af43cedf554f7ec27009fe6668a908c07cac83963df9ed6ef3a5e18564fc758135c9ce5def916558c84e1805353f6e63bfc6467dc01ebc5efae911922f758316391db73e34b34fb23201549176831ba653c73c413ffe8804e6e96d23688c0c83c4a14df26d0b07a41697b173516923c30d657acac4a3ce8cc07376b097b204f2e7011f89516ded206eaed4db1eb34a8ef2c16f2b7f0718975648b97262155138f8fcdbfa63f25fcb8c4b6c8e6649b579e78dde036f91e4662c58401ceaa7f45621cc186fbbce1919a2e778fd04bd4dbaa73db920684c4d62691be21315a6b776a1dbfd46bb29175013b1c3f8498dfd35ce561fb2acb1ecd5443f878ba8fb25cae9cf7162e3b5b1878c2aee20569eb16c92786e578a542b82392ebb65a92ed1df5da934150ed92546997830650b2b9a9d02fd536bb05aa1a9b9f387d39224ef176621b10c3551e24493cabb5407ece33eefa63fa3662d230f05ab42cf4d9d5214beade29826726841e373128d7d09365415a8dcb8e60c2dfa51ed1794af75f705273af60c7020445244d1edf4a9bcd8fb592dedb405b85873318c27f695a57ec1ec5bb661522fa5cc0bc4e3dbe8fa5d9e31734b64789f6e100757dba427d421189ff9b9733ab7523b179f6db473ee1a44d731e6f4fc5fa74b2594ef8633e8610f326b3d6cdfd57883c79ccddd6cd2a567af6170eb5ab27efb96b347d1cbbc602dbfa9979ea430c767de47c984c6e57ca6a6bdffe973f83190b884548c283a4b4d255ead20dd77a3bebbc319668d80b1c91e0607705ed87ca991f492daa624b1e99be8007418db8ba399d929e4bd70c0a9e805147cac84e410467224d1372f609281be8694f2e5ef94190411ab79555ecfc041441f9113e15ce6c5f97689f28b6b1ee305cb494c64f5486af34cd41dd8b6cb6db7b72a2d7e3f3c55631c6a2cd31219116c2267546b8b74851e9d7ab04bd189289cf65fda348bb679e84c67f47d223f7f66b8707f4485a8b9cb2c0e4b982e7d1ac37e16084412af8e50046777e10246f6bb3761ea8016f9fa700d3a7e7753d1a197bd73f86dcfcb800f2ff3bd0a9e648b5cd3deb97d0b470241ae1b813548bb9dac062f8896f3c01f64b32bba3b9d73be2dbbb78d12d4783182594975f5f38bdf7e156c2bda0dda9dd72e0c45f752a51b4dc2997629905a55eddb67a35a8040ba9bad2504b0cfe32164d2e0e23aaa795a68f8315d0c713b35937b70e99cf20bef1510e81d6729c2d469bbd94b35bc78f55752f8b75a7ad4172a04a224908d69724eb625ebf61ee9d03d8671c3343fd87d79ed080c71120af8a96a094d6ac3b959b4d3508b647136b7556b3bcdc50a7f6bc1c369c81b18ffc80665569d4993ca1c374cc49d7a9672bf4e7aa20550c0687426349e5b5b88e49d83f9c140733a3034abc0f0ba5db1a220f105b3b83f63af8803e9ec19c47894ae5bf729515c3c11afefd4734cca856323a769833c99d5417410e7be82c4ae932dd3d7a246ff13ce59b3291a5fd8376867b7b642ab84275ec84b5eebe4aea1a9a77b4300b1aca6b41507a7751872bf43a227b897c8d01929d8583fdeed6c8f17aca52bb75c89e1677843dbf163edc5f690c1bbb6bc36c151b80ff3888bdc23ecdb3af63c8a1453c27f66b62b7561eb6f67f1d029540d2c766ae76791b08e90f812b5faf6326c1d45edf92671ec1cb8842ec9e19a69e0eb813feda6b8401f7d754862cec1999c864cc38a53d74a2502ddf83f9058e1096876d0e781992993c200650c22977bbb1c2d1f2b51611d9b98dd47baed2595528d4b9c5612155c46d237c0be6bb5ff8ac98c4c7e62c320a47af27cfac3eca7739cbb77685f54b8d1723e2e4fb5b41b6a17ef05f227f00394733de3323b4f8348450a899115139a75d232d875f234b9ff56c9f685be5658b47a22b8d76f000b4f103211e9e560f224b9c28551423acd108bb7", 0x1000, 0x6}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000200)=0x800) creat(&(0x7f0000000080)='./bus\x00', 0x62) 11:14:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf0ff7f) 11:14:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000280f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:58 executing program 5: sync() sync() 11:14:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xa}]) [ 789.194063][T15254] loop2: detected capacity change from 0 to 264192 [ 789.205859][T15254] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 789.215695][T15254] EXT4-fs (loop2): group descriptors corrupted! 11:14:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="0200000012000000", 0x8, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 789.274608][T15276] loop3: detected capacity change from 0 to 16 [ 789.289388][T15281] loop4: detected capacity change from 0 to 264192 [ 789.300819][T15283] loop2: detected capacity change from 0 to 264192 [ 789.310043][T15281] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 789.324476][T15283] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 789.334219][T15283] EXT4-fs (loop2): group descriptors corrupted! [ 789.345683][T15281] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 789.356775][T15281] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 789.371237][T15278] loop0: detected capacity change from 0 to 16 [ 789.385414][T15298] loop1: detected capacity change from 0 to 16 [ 789.411221][T15307] loop2: detected capacity change from 0 to 264192 11:14:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000290f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000) 11:14:58 executing program 5: sync() sync() [ 789.447542][T15307] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 789.457320][T15307] EXT4-fs (loop2): group descriptors corrupted! 11:14:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 789.545343][T15330] loop4: detected capacity change from 0 to 264192 [ 789.555784][T15332] loop3: detected capacity change from 0 to 16 [ 789.563519][T15337] loop2: detected capacity change from 0 to 264192 [ 789.584191][T15337] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 11:14:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xb}]) [ 789.593949][T15337] EXT4-fs (loop2): group descriptors corrupted! [ 789.637345][T15330] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 789.651532][T15349] loop1: detected capacity change from 0 to 16 [ 789.656776][T15330] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 789.668793][T15330] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x20, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r2, 0x400, 0x2) open(&(0x7f0000000100)='./bus\x00', 0x40, 0x179) 11:14:58 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x16c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4f3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0x9, 0x80000001, 0x20f, 0x0, 0x80000000, 0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xff, 0x1, 0x7]}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x35d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x400}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7fffffff, 0x9, 0x2, 0x1]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x503}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x800, 0x5, 0x7, 0x7, 0x7f, 0x401]}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1, 0x1]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xe00000, 0x7fffffff]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x62f3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xf6d}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2ec, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4c01}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "312b4a7a4b69b6698bde3639167ec4405b831df21eee749b92"}}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdd3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "f0c52cf0e5e7081bf7c3fd581dc6f78ea0fd94de95c41d69b045ac955dad817700a2f6ce"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "0442f0d30a3ba4884c503ddd39fd0aa62af7ed0503"}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "be86c2022004d6411a6cda13acf83df63301c15554b6c1e719e0c32d25"}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sync() 11:14:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) 11:14:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xc}]) [ 790.116101][T15374] loop0: detected capacity change from 0 to 16 [ 790.152721][T15389] loop1: detected capacity change from 0 to 16 [ 790.156952][T15388] loop3: detected capacity change from 0 to 16 [ 790.166241][T15392] loop4: detected capacity change from 0 to 264192 [ 790.169796][T15387] loop0: detected capacity change from 0 to 16 [ 790.173651][T15393] loop2: detected capacity change from 0 to 264192 11:14:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}, {0x20, 'vfat\x00'}], 0xa, "a4af23af06c797ae6f7074f1ec2331d6401601f71c38df977633693a5ea72c03075d927cf9ac3c7d16108ab3cf448f1373922d322bfad0f4bafd218b8b3cdc2ebce0b87511f3d57b8f18f1394760729e0d8be152b2c1fdc5ca6d7747d4ebe34fc4321524b67a68"}, 0x84) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) [ 790.217658][T15393] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 790.223367][T15387] loop0: detected capacity change from 0 to 16 [ 790.227444][T15393] EXT4-fs (loop2): group descriptors corrupted! [ 790.242681][T15392] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 790.282060][T15392] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 790.293244][T15392] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xe0010000) 11:14:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002b0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:59 executing program 5: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="35d25fbcadec91e2c80b63d084c0d2b9e53e0f714ef0f54e3aa94632f4cd2a1698083d66cd132a322759f1db5c5b6667d5265a353ae40a54e2b63c01a28e812698e97c3888b2dc73f110a6a29ae8393f08c4e99b", @ANYRES16=r0, @ANYBLOB="00022bbd7000fddbdf250300000006000a004e21000008000b00", @ANYRES32=0x0, @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x9) sync() sync() sync() sync() sync() [ 790.335401][T15430] loop2: detected capacity change from 0 to 264192 [ 790.350231][T15431] loop0: detected capacity change from 0 to 16 11:14:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xe}]) [ 790.403084][T15430] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 790.417956][T15449] loop4: detected capacity change from 0 to 264192 [ 790.427994][T15453] loop3: detected capacity change from 0 to 16 [ 790.448124][T15449] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 790.467161][T15449] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 790.477110][T15463] loop1: detected capacity change from 0 to 16 [ 790.478387][T15449] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:14:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfeffffff) 11:14:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:59 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x35, 0xcc, 0x65, 0x36, 0x63, 0x61, 0x33, 0x39, 0x37, 0x32, 0x31, 0x32, 0x32, 0x66, 0x37, 0x34]}, &(0x7f00000006c0)={0x0, "b61e9281e8dc60690a98761feaa64dd9eb8da6b9fe800f49bdc0ee84e8b21ea916bc184401e6b218718a7e56a38faaf847f358c685e69f2806cabc38fd5c3dbc", 0x12}, 0x48, r0) keyctl$search(0xa, 0x0, &(0x7f0000000740)='user\x00', &(0x7f0000000780)={'syz', 0x0}, r0) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='id:ab\xe5923312e') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/239, 0xef}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/117, 0x75}, {&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/218, 0xda}], 0x7, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x122) keyctl$chown(0x4, r0, 0xee00, r2) [ 790.569457][T15478] loop2: detected capacity change from 0 to 264192 [ 790.601591][T15477] loop4: detected capacity change from 0 to 264192 11:14:59 executing program 5: sync() clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x2f, &(0x7f0000000140)="8de208f1679d9126a25750cb070000006083f3cf09690f0800000076751e3811ac9d0ddb00000000000027b236630a"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) sync() sync() [ 790.618161][T15478] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 790.622206][T15463] handle_bad_sector: 107 callbacks suppressed [ 790.622219][T15463] attempt to access beyond end of device [ 790.622219][T15463] loop1: rw=2049, want=184, limit=16 [ 790.633914][T15491] loop3: detected capacity change from 0 to 16 [ 790.652334][T15477] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:14:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 790.701144][T15463] attempt to access beyond end of device [ 790.701144][T15463] loop1: rw=2049, want=185, limit=16 [ 790.704970][T15477] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 790.724199][T15477] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 790.764241][T15510] loop2: detected capacity change from 0 to 264192 [ 790.773196][T15510] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:14:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffffffe) 11:14:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002d0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:14:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0xe3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:14:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xf}]) [ 791.183391][T15534] loop2: detected capacity change from 0 to 264192 [ 791.185723][T15533] loop1: detected capacity change from 0 to 16 [ 791.190626][T15536] loop3: detected capacity change from 0 to 16 [ 791.199541][T15535] loop4: detected capacity change from 0 to 264192 [ 791.217034][T15534] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 791.224280][T15549] loop0: detected capacity change from 0 to 16 [ 791.252300][T15535] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 791.282237][T15533] attempt to access beyond end of device [ 791.282237][T15533] loop1: rw=2049, want=18, limit=16 11:15:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) lseek(r0, 0x1000, 0x2) setuid(r3) fchownat(r1, &(0x7f0000000080)='./bus\x00', r3, 0xee01, 0x800) 11:15:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 791.297876][T15535] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 791.309024][T15535] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 791.323904][T15533] attempt to access beyond end of device [ 791.323904][T15533] loop1: rw=2049, want=18, limit=16 [ 791.334905][T15533] buffer_io_error: 67 callbacks suppressed [ 791.334918][T15533] Buffer I/O error on dev loop1, logical block 17, lost async page write 11:15:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 791.360446][T15533] attempt to access beyond end of device [ 791.360446][T15533] loop1: rw=2049, want=19, limit=16 [ 791.371334][T15533] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 791.382341][ T1267] attempt to access beyond end of device [ 791.382341][ T1267] loop1: rw=1, want=27, limit=16 [ 791.382721][T15569] loop2: detected capacity change from 0 to 264192 [ 791.404572][T15569] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 791.404654][T15571] loop0: detected capacity change from 0 to 16 [ 791.412091][T15533] attempt to access beyond end of device [ 791.412091][T15533] loop1: rw=2049, want=20, limit=16 [ 791.428639][T15533] Buffer I/O error on dev loop1, logical block 19, lost async page write 11:15:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x80000, 0x0) sendfile(r0, r1, 0x0, 0x0) execveat(r0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='#\x00', &(0x7f0000000440)='fO\xe3\x1f\xab\xbd\x99\xac2\x85Y\x8b\xa7v\x8c\xc6\xcdd\xb6\xcf\xcfYH\x98\xd6', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='vfat\x00'], &(0x7f0000000400)=[&(0x7f0000000300)='vfat\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='vfat\x00', &(0x7f0000000180)='\v\x95:\xd9\x1bc\x91S\xa6t\x7f\xbc\x9eI\xc9'], 0x400) [ 791.463153][T15583] loop4: detected capacity change from 0 to 264192 [ 791.484346][T15533] attempt to access beyond end of device [ 791.484346][T15533] loop1: rw=2049, want=21, limit=16 [ 791.495079][T15533] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 791.504354][T15533] attempt to access beyond end of device [ 791.504354][T15533] loop1: rw=2049, want=22, limit=16 [ 791.515136][T15533] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 791.515220][T15583] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 791.524557][T15533] attempt to access beyond end of device [ 791.524557][T15533] loop1: rw=2049, want=23, limit=16 [ 791.543616][T15533] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 791.549455][T15593] loop2: detected capacity change from 0 to 264192 [ 791.552949][T15533] Buffer I/O error on dev loop1, logical block 23, lost async page write [ 791.583385][T15583] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 791.594628][T15583] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 791.599370][T15593] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 791.621422][T15602] loop0: detected capacity change from 0 to 16 11:15:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf0ff7f00000000) 11:15:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x10}]) 11:15:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) statx(r0, &(0x7f00000001c0)='./bus\x00', 0x100, 0x7ff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x42000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@msize={'msize', 0x3d, 0x7f}}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '}^@%*\x13\''}}], [{@seclabel}, {@context={'context', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x35, 0x33, 0x63, 0x62, 0x39, 0x61, 0x36], 0x2d, [0x31, 0x66, 0x30, 0x38], 0x2d, [0x31, 0x39, 0x65, 0x33], 0x2d, [0x32, 0x35, 0x61, 0x65], 0x2d, [0x34, 0x64, 0x35, 0x30, 0x39, 0x31, 0x63, 0x64]}}}, {@dont_appraise}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@permit_directio}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@uid_lt={'uid<', r3}}]}}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) 11:15:02 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0xcc) 11:15:02 executing program 5: sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() [ 793.712350][T15624] loop2: detected capacity change from 0 to 264192 [ 793.720532][T15628] loop3: detected capacity change from 0 to 16 [ 793.727180][T15632] loop4: detected capacity change from 0 to 264192 [ 793.729551][T15623] loop0: detected capacity change from 0 to 16 [ 793.734841][T15624] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 793.743896][T15625] loop1: detected capacity change from 0 to 16 11:15:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 793.805140][T15632] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 793.828919][T15625] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 793.828909][T15632] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:02 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x94) r2 = fspick(r0, &(0x7f0000000180)='./bus\x00', 0x1) r3 = geteuid() mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c706f73697861636c2c6163636573733d636c69656e742c63616368653d6d6d61702c6163636573733d616e79ce64666c747569643d", @ANYRESHEX=0x0, @ANYBLOB=',loose,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB=',fsuuid=8444c894-e3d3-c5f0-a1f6-\nbda93fb,appraise,\x00']) chdir(&(0x7f0000000040)='./file0\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3, 0x40, 0xff, 0x1, 0x0, 0x5, 0xa1000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xc20, 0x2001}, 0x4a22, 0xffffffff, 0x1, 0x9, 0x8, 0x5, 0x7, 0x0, 0x5, 0x0, 0x401}, 0x0, 0x9, 0xffffffffffffffff, 0xd) 11:15:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000012f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 793.846432][T15625] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 793.848403][T15632] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 793.852542][T12201] Buffer I/O error on dev loop0, logical block 19, lost async page write [ 793.894239][T15659] loop2: detected capacity change from 0 to 264192 11:15:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000000000000) [ 793.910466][T15659] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:15:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 793.978468][T15675] loop0: detected capacity change from 0 to 16 [ 793.991869][T15678] loop4: detected capacity change from 0 to 264192 [ 793.999831][T15676] loop3: detected capacity change from 0 to 16 [ 794.003792][T15675] 9pnet: Insufficient options for proto=fd 11:15:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000140)={{'\x00', 0x2}, {0xfffffffffffffffb}, 0x30, 0x0, 0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./bus\x00', &(0x7f0000000300)="a4af1cc3e68ce743017e7e05f2ec7d15aba723aad86d958b7cbf10f6559d4f4aeb9536255f18462f1779187504a729117e6eb56c5f7b51cbe29c0a44b690d4df1158b321418ba24014b32b42b82b96b4ba62c29e22c89c419dd76c19ca1f8ba0d1198e34438221686adbd54566bd02fdac3bab34e37934339c6ad088145847509bc81f951eb70a1e368a27921bb7939483894c716f578b4dbfdc96ecdaf1bc0793362c4984e93f958e0738bd7a43839cb22016f41c41f056f4e38bf7a2b273d5d8066927630d991ce2afc897f575ceab946054e699870047e9af64bd0082c3ebd3d1cdc9c562eb93d99cd1d4887a2f40f15264bdba98af13f97326ad64a216b139b96c016cb7438bfd3690983901794d3ad2e8fbe7cdc59f8585a41c2f028b9c4a6710333cf041b51a655435342bebb7469ca90f4a9e530da689b611c062e1115d09121ae00a6cc3a48f6dbc1a5ae7f6f0e1596daaec49a680fab9f4b50134b036d610759b72f7a3e179e641231a13f91e6b7993bdcc0803a4a5ef7a8389837903ea271f8c0bf1000f4bffe51b81302323a8ac04c6b3a7eddce477ac693f31f2cb64a634d7189bebc2c1598c99310f50eac5d1d020eeecd4facd36f5a0278aec24399ba781d3eeabdaf231edea733fcff9c87f2c2f9d67154532ec7b24314aefc5", 0x1e1, 0x0, &(0x7f0000000640)={0x2, 0x1a4, {0x1, 0xc, 0xfa, "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", 0x9d, "e43abb9e9f6dc40733b7c6cd78112aa99bb3223fd69d994e3afe514e5dfe0e5baa3afcf390cca81d9fb1fc7676c9600784ed08b9a05d889e3dd2e9366e77e550b4557ea8a4d6db24d7802cfe4b0dc5aa8fec94ee3614e4f8f3c3dc5af25822d4088f71b0451bf58740c3e0c295f226aa4dcd382268ab0d19f0c090658541f88d058c63a553091f3807651b195e8e078d0dbf31b5d0c91b2fae6ccf6047"}, 0x8c, "bcd924e618d9b726a467ca2aab9b3864db770011a3a833cedb5603bdf80bfbd3379106a17c630ad6a9105ee65124d54474dad90f74b659fcdb310db12ac266039e3bf4173bb1a870fe3dbf1df04ce30cb7e15b45fcfd9f4a9625361c282050effa8a12b715d7169095c87654e783451e24508b279882171a2e4764aa92311e4602c2369fe4002f2a327f494f"}, 0x23c}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = epoll_create(0x9) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000001c0)={0x40000008}) [ 794.050596][T15678] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 794.059166][T15694] loop2: detected capacity change from 0 to 264192 [ 794.074439][T15678] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 794.085811][T15678] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x22}]) 11:15:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001", 0x1d, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000300f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 794.104534][T15694] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 794.130763][T15703] loop0: detected capacity change from 0 to 16 11:15:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xe001000000000000) 11:15:03 executing program 5: sync() sync() r0 = epoll_create(0x9) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x2, 0x0, 0x0) sync() fcntl$dupfd(0xffffffffffffffff, 0x0, r0) [ 794.189163][T15716] loop2: detected capacity change from 0 to 264192 [ 794.209056][T15718] loop1: detected capacity change from 0 to 16 [ 794.226301][T15716] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 794.227748][T15729] loop4: detected capacity change from 0 to 264192 [ 794.261117][T15739] loop3: detected capacity change from 0 to 16 11:15:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001", 0x1d, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfeffffff00000000) [ 794.309389][T15729] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 794.329333][T15729] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 794.340807][T15729] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:03 executing program 5: sync() 11:15:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000310f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 794.401266][T15760] loop2: detected capacity change from 0 to 264192 [ 794.414234][T15760] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:15:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001", 0x1d, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:03 executing program 5: sync() sync() sync() [ 794.445000][T15771] loop3: detected capacity change from 0 to 16 [ 794.458942][T15776] loop4: detected capacity change from 0 to 264192 [ 794.490335][T15781] loop2: detected capacity change from 0 to 264192 [ 794.506465][T15776] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 794.508030][T15781] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 794.537274][T15776] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 794.548507][T15776] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000", 0x2c, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x124}]) 11:15:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000320f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) r3 = epoll_create(0x9) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = epoll_create(0x9) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) lseek(r2, 0x1200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffa) getdents(r2, &(0x7f0000000140)=""/146, 0x92) 11:15:03 executing program 5: sync() sync() sync() sync() bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sync() sync() sync() sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x101, 0x20008000, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010102}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x101) sync() sync() 11:15:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff00000000) [ 794.994009][T15821] loop3: detected capacity change from 0 to 16 [ 795.000630][T15822] loop1: detected capacity change from 0 to 16 [ 795.004337][T15826] loop4: detected capacity change from 0 to 264192 [ 795.007326][T15827] loop2: detected capacity change from 0 to 264192 [ 795.048540][T15841] loop0: detected capacity change from 0 to 16 [ 795.057694][T15827] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:15:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000", 0x2c, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000330f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 795.091072][T15826] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 795.114588][T15826] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 795.125735][T15826] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffffffffffff) [ 795.185036][T15858] loop2: detected capacity change from 0 to 264192 [ 795.203449][T15858] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 795.219903][T15864] loop4: detected capacity change from 0 to 264192 11:15:04 executing program 5: capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x9, 0x1, 0x40000, 0x2, 0x100007, 0x9}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ec0a9c0c0f97111c5de2c725ea7df86dc54aaf8aba0d15a2d673dcb4e54e5a45a85e5d0f0e90d8d91f41cadb3043becd4cd7331285942703f49f014b3924dc14aa6ffa1fc544b5f035cb13f6a390e51a6a168dbcd042e94c5159b911e9805285c7caa3ba5f5ff1127fbb32332b344126fe6736ba630db268babd016acf9bf1258079860bb815a6be881a07c906be6ac5dc1e58e63a15e9084253bd8870b39b49c3de07d423024fb94eb56f1ba576c51c55d531f562359d2f682acbac7be09736ee7ef0ac863d4482cd6ace8ff9", 0xcd}], 0x1, 0x5) sync() getsockname(r0, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000004c0)=0x80) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000500)) r4 = epoll_create(0x9) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000540)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r8) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r10) sendmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000280)="7da414f5146ee32610bfa3dd632baf850e779f83bc938670515957f28771d37e6d1f256c2f8707dce33cd6201562bc2ae180588356c4e0ff7e7ac78a72ac6af74858af218a7d4a843e6fe86f342a35b88c5ac024fb", 0x55}, {&(0x7f0000000300)="722877d8204bd9a4bcbc15eeda7c49ca1148b6cff2cfddd1592925ca38c2ea0d96550c1356819b30aaf683a98a7345bfb4f725da5552dfeecd5a075d644dd497c7c621e3de057f16996b5895998871dfc750803a40f631cc1b8abe5ab99819ac355746a42e2dd92dff03f9b53ccb3a0557a62c7761d6d33b713c9ad49039c20290a566d64e681d0024654ca7adb50b0b7cd5c85794bb7dcd25e3477bc2d992919ee989432f411646e2a80a7108bc59f93e7cee5871eda0515f51c09f25cf72ea604d42cbd64627ecd3fb0ae5ccbc46fe8dced5af38c8bea519b266031f11f42d78287f6b4d00f593ac54", 0xea}], 0x2, &(0x7f0000000600)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r2, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r10}}}], 0xc0, 0x40}, 0x40000cc) 11:15:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000", 0x2c, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 795.235486][T15871] loop3: detected capacity change from 0 to 16 [ 795.276936][T15883] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure [ 795.301750][T15864] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 795.308480][T15888] loop2: detected capacity change from 0 to 264192 11:15:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x17f}]) 11:15:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000340f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f465", 0x33, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = epoll_create(0x9) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 795.312534][T15864] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 795.328472][T15864] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 795.353664][T15888] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 795.409377][T15899] loop1: detected capacity change from 0 to 16 [ 795.438637][T15909] loop2: detected capacity change from 0 to 264192 [ 795.450093][T15900] loop4: detected capacity change from 0 to 264192 [ 795.469021][T15920] loop3: detected capacity change from 0 to 16 [ 795.475251][T15909] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 795.524323][T15900] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 795.534580][T15900] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 795.545678][T15900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x204}]) 11:15:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f465", 0x33, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:04 executing program 0: getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x901, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:15:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000350f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 795.942788][T15940] loop2: detected capacity change from 0 to 264192 [ 795.947847][T15943] loop1: detected capacity change from 0 to 16 [ 795.955609][T15944] loop4: detected capacity change from 0 to 264192 [ 795.965663][T15940] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:15:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f465", 0x33, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ff", 0x37, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 795.988072][T15943] handle_bad_sector: 68 callbacks suppressed [ 795.988087][T15943] attempt to access beyond end of device [ 795.988087][T15943] loop1: rw=2049, want=18, limit=16 [ 796.007430][T15957] loop0: detected capacity change from 0 to 16 [ 796.044793][T15964] attempt to access beyond end of device [ 796.044793][T15964] loop1: rw=2049, want=18, limit=16 [ 796.055791][T15944] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 796.055809][T15964] attempt to access beyond end of device [ 796.055809][T15964] loop1: rw=2049, want=19, limit=16 [ 796.079661][T15964] attempt to access beyond end of device [ 796.079661][T15964] loop1: rw=2049, want=20, limit=16 [ 796.090456][T15964] attempt to access beyond end of device [ 796.090456][T15964] loop1: rw=2049, want=21, limit=16 [ 796.101502][T15964] attempt to access beyond end of device [ 796.101502][T15964] loop1: rw=2049, want=22, limit=16 [ 796.106857][T15944] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 796.112278][T15964] attempt to access beyond end of device [ 796.112278][T15964] loop1: rw=2049, want=23, limit=16 [ 796.123487][T15944] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 796.134183][T15964] attempt to access beyond end of device [ 796.134183][T15964] loop1: rw=2049, want=24, limit=16 [ 796.155843][T15964] attempt to access beyond end of device [ 796.155843][T15964] loop1: rw=2049, want=27, limit=16 [ 796.167613][T15972] loop2: detected capacity change from 0 to 264192 [ 796.179403][T12201] attempt to access beyond end of device [ 796.179403][T12201] loop1: rw=2049, want=32, limit=16 [ 796.190719][T15972] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:15:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4008090) sync() 11:15:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') sendfile(r0, r1, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x20) 11:15:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000360f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ff", 0x37, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x300}]) [ 796.281356][T15990] loop0: detected capacity change from 0 to 16 [ 796.296479][T15991] loop4: detected capacity change from 0 to 264192 [ 796.331574][T16006] loop2: detected capacity change from 0 to 264192 [ 796.350425][T15991] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 796.362951][T15991] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:05 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup(r0) sync() r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 11:15:05 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./bus\x00', 0x0, 0x21, &(0x7f0000000240)=[{&(0x7f0000000080)="ebcaf9000000732e66617400020101000240008080f80144e82164ff224217f70d4854b5aa3e08ea712f815dad07dad7367b0cbd335016912b23aee05e2ca1c857863ec6407e5d2048c4bbf7bdba75868118ea5bc65c10e322a9dea043e6b6b010b7a656fa44589b5bb98fab4e91c16d57bf4cc193dff32ddfaaa65f4800", 0x17}, {0x0, 0x0, 0x400001000}, {&(0x7f0000000140)="fcc6d0e5708639e65e1d8b9f947ba76b9067341c0accbd0a628648e4d1a6d4eb729d19fbb61104b1888acc63cdc865a2e5c9af02d8cdf800ec6d7cdb874c8407c6225a28dc7e7ebac9466f7f6a351ee4a154ba3fd2f14742b377a6ad0c10c40b10b0dfbbada9ed25c7c9d896e2c484052b95a05819986d5bf5168d426c71560fd68c879a44377bf1299dc79c291c4983cc781bb0e590a49a2594aeed45fd76bb0428a6f99bfe7a1ccd500ac043c23149b48cc8f120584a9690129ccd66ed7931187fc1d5249206a758ecb2d7c506ed0425f07318"}], 0x300a852, &(0x7f0000000180)=ANY=[]) openat(r0, &(0x7f00000002c0)='./bus\x00', 0x1, 0x80) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 11:15:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000370f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 796.374016][T15991] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 796.375109][T16017] loop1: detected capacity change from 0 to 16 [ 796.389728][T16006] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:15:05 executing program 5: r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000180)={0x10}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x144080, 0x21) epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0xffff9d82) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x20}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x28}], 0x3, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x1]}, 0x8) sync() 11:15:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ff", 0x37, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 796.450673][T16025] loop0: detected capacity change from 0 to 4112 [ 796.463083][T16017] buffer_io_error: 39 callbacks suppressed [ 796.463093][T16017] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 796.466563][T16026] loop4: detected capacity change from 0 to 264192 [ 796.471985][T16017] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 796.488278][T16036] loop2: detected capacity change from 0 to 264192 [ 796.506044][T16044] loop3: detected capacity change from 0 to 16 [ 796.514401][T16025] loop0: detected capacity change from 0 to 4112 [ 796.521108][T16026] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 796.542373][T16017] Buffer I/O error on dev loop1, logical block 19, lost async page write 11:15:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 796.550955][T16036] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 796.559967][T16026] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 796.571074][T16026] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000380f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x800, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 796.607822][T16017] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 796.622703][T16017] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 796.638973][T16017] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 796.658634][T16017] Buffer I/O error on dev loop1, logical block 23, lost async page write [ 796.688225][T16071] loop2: detected capacity change from 0 to 264192 11:15:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:15:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x402}]) [ 796.706978][T16072] loop4: detected capacity change from 0 to 264192 [ 796.721449][T16074] loop0: detected capacity change from 0 to 16 [ 796.747766][T16071] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:15:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x600000, 0x80) sendfile(r0, r1, 0x0, 0x0) ftruncate(r0, 0x1) [ 796.778223][T16072] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 796.799716][T16072] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 796.808653][T16092] loop3: detected capacity change from 0 to 16 [ 796.810800][T16072] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000390f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x8) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x20c0, 0x0) write(r2, &(0x7f0000000640)="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", 0x1000) sendfile(r0, r1, 0x0, 0x0) [ 796.853231][T16105] loop1: detected capacity change from 0 to 16 [ 796.867857][T16104] loop2: detected capacity change from 0 to 264192 [ 796.878545][T16104] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 796.885488][T16110] loop0: detected capacity change from 0 to 16 11:15:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53", 0x39, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 796.906682][T16105] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 796.920851][T16105] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 796.929505][T16105] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 796.949446][T16119] loop4: detected capacity change from 0 to 264192 [ 796.952809][T16125] loop3: detected capacity change from 0 to 16 [ 796.970490][T16134] loop2: detected capacity change from 0 to 264192 [ 796.979225][T16119] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 796.990062][T16134] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 796.998208][T16119] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 797.009262][T16119] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x5) sync() 11:15:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:15:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000003a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2, 0xcd48}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:15:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x406}]) [ 797.399986][T16170] loop2: detected capacity change from 0 to 264192 [ 797.407126][T16172] loop3: detected capacity change from 0 to 16 [ 797.413281][T16171] loop4: detected capacity change from 0 to 264192 [ 797.418038][T16175] loop1: detected capacity change from 0 to 16 [ 797.427011][T16170] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 797.439686][T16179] loop0: detected capacity change from 0 to 16 11:15:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 797.456247][T16171] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 797.491871][T16171] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000003b0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000000c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0xd5e}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 797.503052][T16171] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 797.532323][T16199] loop2: detected capacity change from 0 to 264192 [ 797.540824][T16199] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:15:06 executing program 5: sync() sync() sync() sync() sync() sync() sync() 11:15:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x500}]) [ 797.637943][T16220] loop4: detected capacity change from 0 to 264192 11:15:06 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) splice(r1, &(0x7f0000000200)=0x20, r2, &(0x7f0000000240)=0x3, 0x7fff, 0x4) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000655f73"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff0000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}]}]}, 0x60}}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r6) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002200000a000001c69ef80535ba9e00080077ec00000000"], 0x24}}, 0x0) r8 = pidfd_getfd(r4, r0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x30, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x0) [ 797.682016][T16231] loop2: detected capacity change from 0 to 264192 [ 797.690254][T16232] loop3: detected capacity change from 0 to 16 [ 797.719923][T16232] FAT-fs (loop3): bogus number of reserved sectors [ 797.721342][T16240] loop0: detected capacity change from 0 to 16 [ 797.726739][T16232] FAT-fs (loop3): Can't find a valid FAT filesystem [ 797.743583][T16248] loop1: detected capacity change from 0 to 16 [ 797.751838][T16220] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 797.759988][T16231] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:15:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, 0x0) 11:15:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000003c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 797.776214][T16220] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 797.787304][T16220] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 797.801479][T16232] loop3: detected capacity change from 0 to 16 11:15:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) sendfile(r0, r1, 0x0, 0x0) 11:15:06 executing program 5: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x2, 0x2, 0x6, 0x5, 0x3, 0x3, 0x6, 0x35b, 0x40, 0x24e, 0xabf4, 0xdd83, 0x38, 0x1, 0x1, 0x8, 0x4}, [{0x6, 0x9, 0x0, 0x8, 0x40, 0x8, 0x7, 0xffff}], "aa1e875ad2f00c9af5168378ab6cf38bc2ca934a63fafffac2eead42168420d108f587ec216a6ff1da2c5021db14a8f3ed461e833193d7e2", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b0) sync() clone3(&(0x7f0000000b40)={0x8800300, &(0x7f00000008c0)=0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940), {0x1f}, &(0x7f0000000980)=""/95, 0x5f, &(0x7f0000000a00)=""/229, &(0x7f0000000b00)=[0xffffffffffffffff], 0x1}, 0x58) r1 = epoll_create(0x9) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000bc0), &(0x7f0000000c00), 0x2, 0x1) fsync(r0) [ 797.832297][T16263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16263 comm=syz-executor.0 [ 797.833014][T16232] FAT-fs (loop3): bogus number of reserved sectors [ 797.851990][T16232] FAT-fs (loop3): Can't find a valid FAT filesystem 11:15:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, 0x0) [ 797.889614][T16265] loop2: detected capacity change from 0 to 264192 [ 797.908614][T16278] loop4: detected capacity change from 0 to 264192 [ 797.930237][T16288] loop0: detected capacity change from 0 to 16 11:15:06 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r1 = epoll_create(0x9) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x8, 0xfffffffffffffe00) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x140) sync() r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendfile(r2, r3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'wg2\x00', {0x2, 0x0, @multicast2}}) 11:15:06 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) dup2(r0, r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x10002000}) sendfile(r1, r3, 0x0, 0x0) [ 797.957749][T16278] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 797.968135][T16278] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 797.979220][T16278] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000003d0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 798.002867][T16298] loop3: detected capacity change from 0 to 16 11:15:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, 0x0) 11:15:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x600}]) [ 798.046565][T16300] loop2: detected capacity change from 0 to 264192 [ 798.084365][T16315] loop0: detected capacity change from 0 to 16 11:15:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000003e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 798.153671][T16328] loop1: detected capacity change from 0 to 16 [ 798.154750][T16331] loop4: detected capacity change from 0 to 264192 [ 798.177216][T16331] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 798.188423][T16331] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000003f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 798.199505][T16331] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 798.241235][T16341] loop2: detected capacity change from 0 to 264192 11:15:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x124}]) 11:15:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x604}]) [ 798.312114][T16356] loop4: detected capacity change from 0 to 264192 [ 798.319903][T16349] loop2: detected capacity change from 0 to 16 [ 798.328030][T16356] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 798.340170][T16356] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 798.351258][T16356] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000400f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 798.412109][T16367] loop1: detected capacity change from 0 to 16 [ 798.447812][T16374] loop4: detected capacity change from 0 to 264192 [ 798.478410][T16374] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 798.489978][T16374] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 798.501057][T16374] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000480f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x124}]) [ 798.808728][T16402] loop2: detected capacity change from 0 to 16 [ 798.822369][T16406] loop4: detected capacity change from 0 to 264192 [ 798.845333][T16406] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 798.856073][T16406] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 798.867161][T16406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x700}]) [ 798.931252][T16423] loop1: detected capacity change from 0 to 16 11:15:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="cf0000c5a3afb3aaa2e2af60653c9e080407b619a8"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(0x0, 0x20, &(0x7f00000002c0)={0x29, 0xfffffffd, 0xaaee}) sendfile(r0, r1, 0x0, 0x0) r3 = epoll_create(0x9) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) fsetxattr$security_capability(r3, &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0x7, 0x1000}, {0x40, 0x5}]}, 0x14, 0x0) 11:15:07 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) fstatfs(r0, &(0x7f0000000080)=""/245) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @local, @loopback={0xfe800000070001a2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20d20002, r3}) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@flushsa={0x50, 0x1c, 0x200, 0x70bd2d, 0x25dfdbfb, {0x2b}, [@XFRMA_IF_ID={0x8, 0x1f, r3}, @coaddr={0x14, 0xe, @in=@multicast1}, @replay_thresh={0x8}, @replay_thresh={0x8, 0xb, 0x40}, @extra_flags={0x8}, @replay_thresh={0x8, 0xb, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x20004800) lseek(r0, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'vlan1\x00', {0xd985}, 0x90f0}) sync() 11:15:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = epoll_create(0x9) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) fallocate(r3, 0x1, 0xf13, 0x1) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffa) getdents(r4, &(0x7f0000000080), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x88000, 0x101) lseek(r4, 0x6, 0x4) sendfile(r0, r1, 0x0, 0x0) 11:15:07 executing program 2: sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 11:15:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600002480f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 799.009621][T16439] loop4: detected capacity change from 0 to 264192 [ 799.017538][T16440] loop3: detected capacity change from 0 to 16 [ 799.051220][T16439] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 799.087728][T16439] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600002490f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 799.098862][T16439] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 799.123259][T16464] loop0: detected capacity change from 0 to 16 11:15:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x900}]) [ 799.229586][T16472] loop4: detected capacity change from 0 to 264192 [ 799.247978][T16472] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 799.270768][T16483] loop1: detected capacity change from 0 to 16 [ 799.284712][T16472] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 799.295823][T16472] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x10}]) 11:15:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000024a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 799.421346][T16489] loop2: detected capacity change from 0 to 16 11:15:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xa00}]) 11:15:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xe}]) 11:15:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000024b0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 799.511412][T16503] loop4: detected capacity change from 0 to 264192 [ 799.522346][T16503] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 799.532908][T16503] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 799.544012][T16503] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 799.611654][T16513] loop1: detected capacity change from 0 to 16 [ 799.620167][T16520] loop2: detected capacity change from 0 to 16 [ 799.667317][T16529] loop4: detected capacity change from 0 to 264192 [ 799.748542][T16529] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 799.798030][T16529] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 799.809194][T16529] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xb00}]) 11:15:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000004c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:10 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0x4}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:15:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xc}]) 11:15:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:15:10 executing program 5: sync() sync() [ 802.080629][T16574] loop1: detected capacity change from 0 to 16 [ 802.090254][T16573] loop2: detected capacity change from 0 to 16 [ 802.096107][T16574] handle_bad_sector: 142 callbacks suppressed [ 802.096120][T16574] attempt to access beyond end of device [ 802.096120][T16574] loop1: rw=2049, want=18, limit=16 [ 802.104642][T16575] loop4: detected capacity change from 0 to 264192 [ 802.116521][T16574] attempt to access beyond end of device [ 802.116521][T16574] loop1: rw=2049, want=18, limit=16 [ 802.121078][T16581] loop3: detected capacity change from 0 to 16 [ 802.130372][T16574] buffer_io_error: 81 callbacks suppressed [ 802.130383][T16574] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 802.152749][ T3048] attempt to access beyond end of device [ 802.152749][ T3048] loop1: rw=1, want=27, limit=16 [ 802.158677][T16574] attempt to access beyond end of device [ 802.158677][T16574] loop1: rw=2049, want=19, limit=16 [ 802.174164][T16574] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 802.190120][T16579] loop0: detected capacity change from 0 to 16 [ 802.213104][T16575] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x610202, 0x20) r2 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x6, 0x2, &(0x7f0000000300)=[{&(0x7f0000000180)="44d534d63e48ba55e734bb", 0xb, 0x2}, {&(0x7f00000001c0)="28aaea540604503652edff832dc67d058e241002ac290f8689554073ed21cce1e9677b3cc9f6a3e1e749d9083d2ad4915080b3ffcb597f96149ed157ac9f02669de5b69b8d84eeac02340fe479be98574a4b9256927646dc2e5f53d9ce44c8a7b08c5a9e97b6a3f674f0d02e0cd8056ba993a304680a90ee17dc894609f20d0343378fc0eac9213205b1cbaeeba9ff06259f81f0bc77131fd71728cef55e4d4f731d681f3b2a5f546f701d5dcb239e22feebef8438e346a3ec6c175cdf4e0a8cda7c73aa48ba641b7369bd7eb2864139eb05a9d5b853a3477b58ca62fe15652d0db59e6ebff91454fea8adc076", 0xed}], 0x1105004, &(0x7f0000000340)={[{@nodots}, {@fat=@quiet}, {@fat=@time_offset={'time_offset', 0x3d, 0x2dd}}], [{@smackfsdef}, {@subj_role}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x34, 0x30, 0x66, 0x36, 0x36, 0xe561605b2f640806, 0x64], 0x2d, [0x65, 0x33, 0x38, 0x2fdb77e6356bfda1], 0x2d, [0x32, 0x39, 0x64, 0x61], 0x2d, [0x0, 0x30, 0x61, 0x34], 0x2d, [0x32, 0x62, 0x63, 0x30, 0x62, 0x63, 0x35, 0x53]}}}, {@audit}]}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = syz_mount_image$nfs4(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', 0x3ff, 0x4, &(0x7f0000000880)=[{&(0x7f00000004c0)="80444ff714eb4ac308fd41ec8489aa27a7aa6019d75470f633190e2324eae29d8354b8870408a24eaa47320665b68015922feedf025069ebf897831545be71da59457d2b56fedfde36d377296b2f6077771ae218d288bbb5c9978409b7a3b263", 0x60, 0x2}, {&(0x7f0000000640)="c42b0133085e892ce9172681d3b3d82b8c05ab88ddf2ebe141295bcc8c99003eefe743fedf2230d726254802697116626b48de00bf03c1ed7fcfeaccc8a25539cff20381db66b17eac52ff90d20815e737e681c70e648f7cc50510582439592bf45c6676463495f828c4d694f0171a9eaad070eaae1e4f716b074e14d60d4641b1882ce5d0a88fd0b26d44a84bb1a168fdeac803bacc7db44ef76446355a89bac409769c354e0a8101", 0xa9, 0x800}, {&(0x7f0000000700)="82ad0927a49578e00b2aa15f52bcf747cca3914770ad6b6b1ba5f9429df41fc071659ad6dbd38b0af4fec47fc09f5cef2d3ae0e1c9a45b232419cf33745d7c41373bc389412c3adde770053949e91971b3ee5a273c486b05753fe69059b2501fd3962e4aaba31d95998e5bf568530a024c2799146658ac4889f1f2c2067038337c26773ec9f912c0c6a97a0990dd48d460a0a5d5cd770faa2cd2aec176bd3ba45a8bb659db18272d27", 0xa9, 0x3}, {&(0x7f00000007c0)="897518af3bac8059080c7589b2e124932ec829684181053fa2885b0c512edcaafebc3568214f914c94320f5b449c3c44dfb88bf16422f7fbf0278d9785a01f7dd09153666fcb42361fca87f06b30d478c5b90e0c50254ac22e8b36939785f2e060f5fd91a1ba8443f356f39f383f45c71945754fcbcc483cc3e54876691e55a71ff72129cafaccdaac222612a21b4a71b7b7e783c92a249f731b2dbb7e38657a8323bf4d3369d3e53e014759", 0xac, 0x9}], 0x100001, &(0x7f0000000b00)={[{']:%,)'}, {'!@%-[$@&*'}, {}, {'smackfsdef'}, {')'}, {}, {'{-],$^'}, {'.\'[+:^g@&{\xb2@\xd9\xa6\x00\x00\xc0\x83zK\xc3aM\xfbn\xc9\xc9UQA\xc3\x89jd\x12\xaevn\x00(\xc8\x17\xee\x06.\xb8!y7\x88Rpbe\xb0\xe1\xb5\x00\t\xb2'}], [{@subj_type={'subj_type', 0x3d, '(@%'}}, {@dont_appraise}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nodots'}}, {@obj_type={'obj_type', 0x3d, 'fsuuid'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, '@'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x5f, 0x39, 0x36, 0x34, 0x63, 0x39, 0x65], 0x2d, [0x64, 0x31, 0x63, 0x64], 0x2d, [0x61, 0x31, 0x63, 0x63], 0x2d, [0x39, 0x66, 0x37, 0x65], 0x2d, [0x37, 0x31, 0x65, 0x0, 0x1, 0x32, 0x36, 0x62]}}}, {@appraise_type}, {@hash}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000540)={@id={0x2, 0x0, @d}}) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = epoll_create(0x9) epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x74e9, 0x2, [{0x3, 0x17d9, 0x7, '\x00', 0x802}, {0xa1, 0x9, 0x2e372abd, '\x00', 0x180}]}) sendfile(r3, r5, 0x0, 0x8400fffffffa) renameat(r2, &(0x7f00000003c0)='./bus\x00', r3, &(0x7f0000000400)='./bus\x00') [ 802.248097][T16581] FAT-fs (loop3): invalid media value (0x40) [ 802.254149][T16581] FAT-fs (loop3): Can't find a valid FAT filesystem [ 802.275869][T16575] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 802.287017][T16575] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 802.299418][T16574] attempt to access beyond end of device [ 802.299418][T16574] loop1: rw=2049, want=20, limit=16 [ 802.310177][T16574] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 802.318712][T16574] attempt to access beyond end of device [ 802.318712][T16574] loop1: rw=2049, want=21, limit=16 [ 802.329428][T16574] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 802.338179][T16574] attempt to access beyond end of device [ 802.338179][T16574] loop1: rw=2049, want=22, limit=16 [ 802.348961][T16574] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 802.352034][T16609] loop0: detected capacity change from 0 to 16 [ 802.358095][T16574] attempt to access beyond end of device [ 802.358095][T16574] loop1: rw=2049, want=23, limit=16 [ 802.374380][T16574] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 802.384172][T16574] attempt to access beyond end of device [ 802.384172][T16574] loop1: rw=2049, want=24, limit=16 11:15:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000024e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 802.394920][T16574] Buffer I/O error on dev loop1, logical block 23, lost async page write [ 802.410369][T16574] attempt to access beyond end of device [ 802.410369][T16574] loop1: rw=2049, want=32, limit=16 [ 802.421410][T16581] loop3: detected capacity change from 0 to 16 [ 802.430148][T16581] FAT-fs (loop3): invalid media value (0x40) [ 802.436197][T16581] FAT-fs (loop3): Can't find a valid FAT filesystem 11:15:11 executing program 5: sync() sync() sync() 11:15:11 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 802.525088][T16632] loop4: detected capacity change from 0 to 264192 [ 802.544671][T16632] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 802.557753][T16632] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xc00}]) [ 802.568917][T16632] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 802.582599][T16639] loop3: detected capacity change from 0 to 16 11:15:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000024f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:11 executing program 5: r0 = epoll_create(0x9) r1 = epoll_create(0x9) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) epoll_pwait(r2, &(0x7f0000000240)=[{}], 0x1, 0x846b, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) sync() sync() [ 802.676826][T16649] loop1: detected capacity change from 0 to 16 [ 802.689578][T16650] loop4: detected capacity change from 0 to 264192 11:15:11 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) lchown(&(0x7f0000000080)='./bus\x00', r1, 0xee01) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000640)={{r0}, "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"}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) [ 802.731148][T16649] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 802.750612][T16649] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 802.759157][T16650] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 802.787652][T16650] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 802.798743][T16650] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 802.806567][T16667] loop3: detected capacity change from 0 to 16 [ 802.830991][T16649] Buffer I/O error on dev loop1, logical block 19, lost async page write 11:15:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000600f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sync() sendfile(r0, r1, 0x0, 0x0) close(r0) [ 802.970604][T16676] loop4: detected capacity change from 0 to 264192 [ 803.009483][T16687] loop3: detected capacity change from 0 to 16 [ 803.018050][T16676] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 803.052435][T16676] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:11 executing program 2: sync() sync() 11:15:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xe00}]) [ 803.063560][T16676] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 803.117514][T16701] loop1: detected capacity change from 0 to 16 11:15:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000640)) sendfile(r0, r1, 0x0, 0x0) 11:15:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000680f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = epoll_create(0x9) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/24, 0x18}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2) close(r3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r4) r5 = socket(0x10, 0x2, 0x0) r6 = accept4$unix(r0, 0x0, &(0x7f0000000240), 0x80800) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="3a0000000200"/40]}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r7) fchown(r1, r4, r7) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r8, 0x0, 0x0) 11:15:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xf00}]) 11:15:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xb}]) [ 803.250818][T16729] loop3: detected capacity change from 0 to 16 [ 803.254836][T16728] loop4: detected capacity change from 0 to 264192 [ 803.283612][T16733] loop0: detected capacity change from 0 to 16 [ 803.304689][T16745] loop1: detected capacity change from 0 to 16 [ 803.316295][T16728] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 803.331208][T16750] loop2: detected capacity change from 0 to 16 11:15:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000006c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 803.351509][T16728] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 803.362599][T16728] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 803.443876][T16769] loop4: detected capacity change from 0 to 264192 [ 803.453498][T16769] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 803.472071][T16769] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 803.483115][T16769] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:12 executing program 5: sync() sync() 11:15:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xa}]) 11:15:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x2000}]) 11:15:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000740f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 803.665742][T16797] loop4: detected capacity change from 0 to 264192 [ 803.672631][T16800] loop1: detected capacity change from 0 to 16 [ 803.685029][T16797] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 803.686396][T16805] loop2: detected capacity change from 0 to 16 [ 803.695434][T16797] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000007a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 803.711457][T16797] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:12 executing program 5: sync() sync() [ 803.813045][T16822] loop4: detected capacity change from 0 to 264192 [ 803.823464][T16822] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 803.833445][T16822] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 803.844515][T16822] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x0) 11:15:12 executing program 5: sync() sync() sync() 11:15:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x2200}]) 11:15:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600008860f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 1) 11:15:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x100410, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@access_client}, {@msize={'msize', 0x3d, 0x3}}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@access_user}, {@noextend}, {@cache_fscache}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}}) [ 804.131658][T16860] FAULT_INJECTION: forcing a failure. [ 804.131658][T16860] name failslab, interval 1, probability 0, space 0, times 0 [ 804.132933][T16858] loop4: detected capacity change from 0 to 264192 [ 804.144321][T16860] CPU: 0 PID: 16860 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 804.153054][T16859] loop1: detected capacity change from 0 to 16 [ 804.159547][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.175744][T16860] Call Trace: [ 804.179010][T16860] dump_stack_lvl+0xd6/0x122 [ 804.183656][T16860] dump_stack+0x11/0x1b [ 804.187838][T16860] should_fail+0x23c/0x250 [ 804.192242][T16860] ? __se_sys_memfd_create+0xfb/0x390 [ 804.197597][T16860] __should_failslab+0x81/0x90 [ 804.202498][T16860] should_failslab+0x5/0x20 [ 804.207045][T16860] __kmalloc+0x6f/0x350 [ 804.211181][T16860] ? strnlen_user+0x137/0x1c0 [ 804.215846][T16860] __se_sys_memfd_create+0xfb/0x390 [ 804.221030][T16860] __x64_sys_memfd_create+0x2d/0x40 [ 804.226207][T16860] do_syscall_64+0x44/0xa0 [ 804.230682][T16860] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 804.236569][T16860] RIP: 0033:0x7f0ae3e38709 [ 804.240968][T16860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 804.260566][T16860] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 804.269055][T16860] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f0ae3e38709 [ 804.277007][T16860] RDX: 0000000000022100 RSI: 0000000000000000 RDI: 00007f0ae3e91e76 [ 804.284958][T16860] RBP: 0000000000000003 R08: 0000000000011080 R09: ffffffffffffffff [ 804.293028][T16860] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 804.301048][T16860] R13: 0000000020000100 R14: 0000000008100000 R15: 00000000200000c0 [ 804.322929][T16857] loop0: detected capacity change from 0 to 16 [ 804.345950][T16881] loop3: detected capacity change from 0 to 16 [ 804.353609][T16858] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 804.367220][T16858] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 804.378357][T16858] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600008870f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:13 executing program 5: ioperm(0x7f, 0x3, 0x20) ioperm(0x36facf030000000, 0xfffffffffffffffe, 0x8000) ioperm(0xd0, 0x6, 0x5) ioperm(0x2, 0x0, 0x8) ioperm(0x101, 0x7, 0x10000) sync() ioperm(0x1000, 0x3, 0xfffffffffffffffd) [ 804.392057][T16867] loop0: detected capacity change from 0 to 16 11:15:13 executing program 0: r0 = epoll_create(0x9) r1 = epoll_create(0x9) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x8}) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) epoll_wait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0x401) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x6}], 0x3288c92, &(0x7f0000000080)=ANY=[@ANYRES16=r0]) chdir(&(0x7f0000000040)='./file0\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) 11:15:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 2) 11:15:13 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() fallocate(r0, 0x14, 0x4, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x7) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8) 11:15:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x2401}]) [ 804.496384][T16904] FAULT_INJECTION: forcing a failure. [ 804.496384][T16904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.509504][T16904] CPU: 0 PID: 16904 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 804.518264][T16904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.528354][T16904] Call Trace: [ 804.531615][T16904] dump_stack_lvl+0xd6/0x122 [ 804.536185][T16904] dump_stack+0x11/0x1b [ 804.540407][T16904] should_fail+0x23c/0x250 [ 804.544799][T16904] should_fail_usercopy+0x16/0x20 [ 804.549799][T16904] _copy_from_user+0x1c/0xd0 [ 804.554372][T16904] __se_sys_memfd_create+0x137/0x390 [ 804.559670][T16904] __x64_sys_memfd_create+0x2d/0x40 [ 804.564845][T16904] do_syscall_64+0x44/0xa0 [ 804.569255][T16904] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 804.575223][T16904] RIP: 0033:0x7f0ae3e38709 [ 804.579650][T16904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 804.599354][T16904] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 804.607744][T16904] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f0ae3e38709 [ 804.615700][T16904] RDX: 0000000000022100 RSI: 0000000000000000 RDI: 00007f0ae3e91e76 [ 804.624009][T16904] RBP: 0000000000000003 R08: 0000000000011080 R09: ffffffffffffffff [ 804.631955][T16904] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 11:15:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 3) [ 804.639919][T16904] R13: 0000000020000100 R14: 0000000008100000 R15: 00000000200000c0 [ 804.669197][T16900] loop4: detected capacity change from 0 to 264192 [ 804.673805][T16914] FAULT_INJECTION: forcing a failure. [ 804.673805][T16914] name failslab, interval 1, probability 0, space 0, times 0 [ 804.688362][T16914] CPU: 1 PID: 16914 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 804.697177][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.707214][T16914] Call Trace: [ 804.710474][T16914] dump_stack_lvl+0xd6/0x122 [ 804.715051][T16914] dump_stack+0x11/0x1b [ 804.719194][T16914] should_fail+0x23c/0x250 [ 804.723627][T16914] ? shmem_alloc_inode+0x22/0x30 [ 804.728574][T16914] __should_failslab+0x81/0x90 [ 804.733406][T16914] ? shmem_match+0xa0/0xa0 [ 804.738007][T16914] should_failslab+0x5/0x20 [ 804.742505][T16914] kmem_cache_alloc+0x4f/0x300 [ 804.747426][T16914] ? shmem_match+0xa0/0xa0 [ 804.751829][T16914] shmem_alloc_inode+0x22/0x30 [ 804.756635][T16914] new_inode_pseudo+0x38/0x1c0 [ 804.761414][T16914] new_inode+0x21/0x120 [ 804.765614][T16914] shmem_get_inode+0xb7/0x4a0 [ 804.770295][T16914] __shmem_file_setup+0xf1/0x1d0 [ 804.775290][T16914] shmem_file_setup+0x37/0x40 [ 804.780018][T16914] __se_sys_memfd_create+0x1eb/0x390 [ 804.785366][T16914] __x64_sys_memfd_create+0x2d/0x40 [ 804.790546][T16914] do_syscall_64+0x44/0xa0 [ 804.794950][T16914] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 804.800831][T16914] RIP: 0033:0x7f0ae3e38709 [ 804.805229][T16914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 804.824865][T16914] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 804.833317][T16914] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f0ae3e38709 [ 804.841279][T16914] RDX: 0000000000022100 RSI: 0000000000000000 RDI: 00007f0ae3e91e76 [ 804.850043][T16914] RBP: 0000000000000003 R08: 0000000000011080 R09: ffffffffffffffff [ 804.857994][T16914] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 11:15:13 executing program 5: sync() sync() sync() [ 804.865943][T16914] R13: 0000000020000100 R14: 0000000008100000 R15: 00000000200000c0 [ 804.907915][T16900] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 804.934641][T16934] loop3: detected capacity change from 0 to 16 [ 804.938822][T16900] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 804.950619][T16936] loop1: detected capacity change from 0 to 16 11:15:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 4) 11:15:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600008880f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 804.951866][T16900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 804.994486][T16944] FAULT_INJECTION: forcing a failure. [ 804.994486][T16944] name failslab, interval 1, probability 0, space 0, times 0 11:15:13 executing program 5: sync() sync() sync() sync() sync() sync() sync() sync() sync() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) sync() sync() sync() [ 805.007117][T16944] CPU: 1 PID: 16944 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 805.015913][T16944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.025961][T16944] Call Trace: [ 805.029286][T16944] dump_stack_lvl+0xd6/0x122 [ 805.033911][T16944] dump_stack+0x11/0x1b [ 805.038064][T16944] should_fail+0x23c/0x250 [ 805.042482][T16944] ? security_inode_alloc+0x30/0x180 [ 805.047770][T16944] __should_failslab+0x81/0x90 [ 805.052562][T16944] should_failslab+0x5/0x20 [ 805.057072][T16944] kmem_cache_alloc+0x4f/0x300 [ 805.061858][T16944] security_inode_alloc+0x30/0x180 [ 805.067048][T16944] inode_init_always+0x20b/0x430 [ 805.071990][T16944] ? shmem_match+0xa0/0xa0 [ 805.076399][T16944] new_inode_pseudo+0x73/0x1c0 [ 805.081219][T16944] new_inode+0x21/0x120 [ 805.085379][T16944] shmem_get_inode+0xb7/0x4a0 [ 805.090053][T16944] __shmem_file_setup+0xf1/0x1d0 [ 805.095026][T16944] shmem_file_setup+0x37/0x40 [ 805.099691][T16944] __se_sys_memfd_create+0x1eb/0x390 [ 805.104964][T16944] __x64_sys_memfd_create+0x2d/0x40 [ 805.110191][T16944] do_syscall_64+0x44/0xa0 [ 805.114597][T16944] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 805.120594][T16944] RIP: 0033:0x7f0ae3e38709 [ 805.125103][T16944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 805.144691][T16944] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 11:15:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 5) [ 805.153081][T16944] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f0ae3e38709 [ 805.161101][T16944] RDX: 0000000000022100 RSI: 0000000000000000 RDI: 00007f0ae3e91e76 [ 805.169052][T16944] RBP: 0000000000000003 R08: 0000000000011080 R09: ffffffffffffffff [ 805.177004][T16944] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 805.185058][T16944] R13: 0000000020000100 R14: 0000000008100000 R15: 00000000200000c0 11:15:14 executing program 5: sync() sync() sync() sync() sync() sync() sync() sync() sync() getpgrp(0x0) [ 805.235656][T16961] loop4: detected capacity change from 0 to 264192 [ 805.244852][T16961] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 805.263020][T16967] FAULT_INJECTION: forcing a failure. [ 805.263020][T16967] name failslab, interval 1, probability 0, space 0, times 0 [ 805.275688][T16967] CPU: 0 PID: 16967 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 805.284489][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.294539][T16967] Call Trace: [ 805.297914][T16967] dump_stack_lvl+0xd6/0x122 [ 805.302508][T16967] dump_stack+0x11/0x1b [ 805.306652][T16967] should_fail+0x23c/0x250 [ 805.311054][T16967] ? __d_alloc+0x36/0x370 [ 805.315461][T16967] __should_failslab+0x81/0x90 [ 805.320214][T16967] should_failslab+0x5/0x20 [ 805.324711][T16967] kmem_cache_alloc+0x4f/0x300 [ 805.329460][T16967] ? security_inode_alloc+0x138/0x180 [ 805.334820][T16967] ? __init_rwsem+0x59/0x70 [ 805.339336][T16967] __d_alloc+0x36/0x370 [ 805.343741][T16967] d_alloc_pseudo+0x1a/0x50 [ 805.348299][T16967] alloc_file_pseudo+0x77/0x150 [ 805.353138][T16967] __shmem_file_setup+0x14c/0x1d0 [ 805.358163][T16967] shmem_file_setup+0x37/0x40 [ 805.362828][T16967] __se_sys_memfd_create+0x1eb/0x390 [ 805.368099][T16967] __x64_sys_memfd_create+0x2d/0x40 [ 805.373433][T16967] do_syscall_64+0x44/0xa0 [ 805.377842][T16967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 805.383726][T16967] RIP: 0033:0x7f0ae3e38709 [ 805.388148][T16967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 805.407925][T16967] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 805.416439][T16967] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f0ae3e38709 [ 805.424394][T16967] RDX: 0000000000022100 RSI: 0000000000000000 RDI: 00007f0ae3e91e76 11:15:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x3f00}]) [ 805.432457][T16967] RBP: 0000000000000003 R08: 0000000000011080 R09: ffffffffffffffff [ 805.440410][T16967] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 805.448375][T16967] R13: 0000000020000100 R14: 0000000008100000 R15: 00000000200000c0 [ 805.472025][T16961] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 805.514169][T16981] loop1: detected capacity change from 0 to 16 11:15:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x80000) sendfile(r0, r1, 0x0, 0x8400fffffffa) mknodat$null(r1, &(0x7f0000000080)='./bus\x00', 0x1000, 0x103) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 11:15:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 6) [ 805.637185][T16999] loop0: detected capacity change from 0 to 16 [ 805.640369][T16998] FAULT_INJECTION: forcing a failure. [ 805.640369][T16998] name failslab, interval 1, probability 0, space 0, times 0 [ 805.655954][T16998] CPU: 1 PID: 16998 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 805.664713][T16998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.674780][T16998] Call Trace: [ 805.678074][T16998] dump_stack_lvl+0xd6/0x122 [ 805.682680][T16998] dump_stack+0x11/0x1b [ 805.686838][T16998] should_fail+0x23c/0x250 [ 805.691345][T16998] ? __alloc_file+0x2e/0x1a0 [ 805.695940][T16998] __should_failslab+0x81/0x90 [ 805.700704][T16998] should_failslab+0x5/0x20 [ 805.705212][T16998] kmem_cache_alloc+0x4f/0x300 [ 805.710057][T16998] __alloc_file+0x2e/0x1a0 [ 805.714487][T16998] alloc_empty_file+0xcd/0x1c0 [ 805.719252][T16998] alloc_file+0x3a/0x280 [ 805.723844][T16998] alloc_file_pseudo+0xfa/0x150 [ 805.728698][T16998] __shmem_file_setup+0x14c/0x1d0 [ 805.733723][T16998] shmem_file_setup+0x37/0x40 [ 805.738397][T16998] __se_sys_memfd_create+0x1eb/0x390 [ 805.743675][T16998] __x64_sys_memfd_create+0x2d/0x40 [ 805.748854][T16998] do_syscall_64+0x44/0xa0 [ 805.753263][T16998] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 805.759907][T16998] RIP: 0033:0x7f0ae3e38709 [ 805.764297][T16998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:15:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x4}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x20080, 0x1d) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) sync() 11:15:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600001b00f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:14 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x1400, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@version_9p2000}, {@cache_loose}]}}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xffff, 0xa0402) r6 = inotify_init() epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) open(&(0x7f0000000080)='./file0\x00', 0x80040, 0x3a) sendfile(r1, r4, 0x0, 0x0) lseek(r5, 0x400006, 0x2) 11:15:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = socket(0x2, 0x803, 0x9) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast1=0xe000000b}, @l2tp={0x2, 0x0, @local}, @isdn={0x22, 0x4, 0xf7, 0x1, 0x40}, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff, 0xfff7}) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180)) r4 = accept4(r3, &(0x7f0000000000)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80, 0x80800) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040040) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x11c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048054) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="8000df54206d090000", @ANYRES16=r5, @ANYBLOB="02002abd7000fcdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000900000006001100000800000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00090000000600110028000000"], 0x80}}, 0x4000804) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x10c, r5, 0x10, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0xdec}, {0x8, 0x15, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}, {0x8, 0x15, 0x4c1eede1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xffffffff}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40200f4}, 0x20000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="80010000", @ANYRES16=r5, @ANYBLOB="000129bd7000fcdbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00c02c000006001100040000000800150000000080080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000000000006001100010000000800150002000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b0005000000060011001900000008001500060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000000000006001100010000000800150001000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001100000000000800150000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008eb0a00fffbffff060011000000000008001500090000003846e5a5691f6354d0323bcdef934ac7f272a2a3b176054263c902dd872d9841f41aac1c63114e7083b8a3d5dce8ef8871"], 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x80}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x20004084) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x18c, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x64}, {0x6, 0x11, 0x20}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf89}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7e}, {0x6, 0x11, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3a51}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0xb, 0x3}, {0x6, 0x11, 0x81}}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc000}, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="48010000", @ANYRES16=r5, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000001100)={0x118, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x4}, {0x11}}, {0x8}}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff7}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc08c}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0xfc14}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004040}, 0xa29f364fc2a45404) sync() 11:15:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 7) [ 805.783931][T16998] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 805.792329][T16998] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f0ae3e38709 [ 805.800289][T16998] RDX: 0000000000022100 RSI: 0000000000000000 RDI: 00007f0ae3e91e76 [ 805.808382][T16998] RBP: 0000000000000003 R08: 0000000000011080 R09: ffffffffffffffff [ 805.816335][T16998] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 805.824286][T16998] R13: 0000000020000100 R14: 0000000008100000 R15: 00000000200000c0 11:15:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x4000}]) [ 805.875659][T17019] loop0: detected capacity change from 0 to 16 [ 805.880061][T17020] loop4: detected capacity change from 0 to 264192 [ 805.895743][T17020] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 805.900872][T17023] FAULT_INJECTION: forcing a failure. [ 805.900872][T17023] name failslab, interval 1, probability 0, space 0, times 0 [ 805.917466][T17023] CPU: 0 PID: 17023 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 805.918430][T17020] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 805.926276][T17023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.947356][T17023] Call Trace: [ 805.950644][T17023] dump_stack_lvl+0xd6/0x122 [ 805.955238][T17023] dump_stack+0x11/0x1b [ 805.959394][T17023] should_fail+0x23c/0x250 [ 805.963814][T17023] ? security_file_alloc+0x30/0x190 [ 805.969068][T17023] __should_failslab+0x81/0x90 [ 805.973895][T17023] should_failslab+0x5/0x20 [ 805.978404][T17023] kmem_cache_alloc+0x4f/0x300 [ 805.983159][T17023] security_file_alloc+0x30/0x190 [ 805.988275][T17023] __alloc_file+0x83/0x1a0 [ 805.992690][T17023] alloc_empty_file+0xcd/0x1c0 [ 805.997457][T17023] alloc_file+0x3a/0x280 [ 806.001701][T17023] alloc_file_pseudo+0xfa/0x150 [ 806.006565][T17023] __shmem_file_setup+0x14c/0x1d0 [ 806.011664][T17023] shmem_file_setup+0x37/0x40 [ 806.016385][T17023] __se_sys_memfd_create+0x1eb/0x390 [ 806.021681][T17023] __x64_sys_memfd_create+0x2d/0x40 [ 806.026930][T17023] do_syscall_64+0x44/0xa0 [ 806.031413][T17023] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 806.037566][T17023] RIP: 0033:0x7f0ae3e38709 [ 806.041962][T17023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 806.061555][T17023] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 11:15:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600001b10f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 806.069951][T17023] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f0ae3e38709 [ 806.077902][T17023] RDX: 0000000000022100 RSI: 0000000000000000 RDI: 00007f0ae3e91e76 [ 806.085864][T17023] RBP: 0000000000000003 R08: 0000000000011080 R09: ffffffffffffffff [ 806.093814][T17023] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 806.101768][T17023] R13: 0000000020000100 R14: 0000000008100000 R15: 00000000200000c0 [ 806.124038][T17032] FAT-fs (loop3): bogus number of reserved sectors [ 806.130615][T17032] FAT-fs (loop3): Can't find a valid FAT filesystem [ 806.155300][T17047] loop1: detected capacity change from 0 to 16 11:15:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./bus\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) openat(r1, &(0x7f0000000040)='./bus\x00', 0x4000, 0xaa) chdir(&(0x7f00000000c0)='./bus\x00') r2 = creat(&(0x7f0000000080)='./bus\x00', 0x110) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) [ 806.198382][T17054] loop4: detected capacity change from 0 to 264192 [ 806.209501][T17032] FAT-fs (loop3): bogus number of reserved sectors [ 806.216127][T17032] FAT-fs (loop3): Can't find a valid FAT filesystem 11:15:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 8) [ 806.254513][T17054] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 806.277130][T17054] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:15 executing program 5: sync() sync() 11:15:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 806.322534][T17078] FAULT_INJECTION: forcing a failure. [ 806.322534][T17078] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 806.335792][T17078] CPU: 0 PID: 17078 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 806.344672][T17078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.354721][T17078] Call Trace: [ 806.356582][T17085] loop0: detected capacity change from 0 to 16 [ 806.357989][T17078] dump_stack_lvl+0xd6/0x122 [ 806.368706][T17078] dump_stack+0x11/0x1b 11:15:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600001b40f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 806.372861][T17078] should_fail+0x23c/0x250 [ 806.377268][T17078] __alloc_pages+0x102/0x320 [ 806.381959][T17078] alloc_pages_vma+0x5ee/0x770 [ 806.386723][T17078] shmem_getpage_gfp+0x96d/0x13d0 [ 806.391749][T17078] ? policydb_context_isvalid+0x135/0x230 [ 806.395551][T17089] loop3: detected capacity change from 0 to 16 [ 806.397473][T17078] shmem_write_begin+0x7e/0x100 [ 806.408483][T17078] generic_perform_write+0x1b8/0x3e0 [ 806.413793][T17078] __generic_file_write_iter+0x174/0x310 [ 806.419423][T17078] ? generic_write_checks+0x250/0x290 [ 806.424843][T17078] generic_file_write_iter+0x75/0x130 [ 806.430415][T17078] vfs_write+0x7bc/0x900 [ 806.434654][T17078] __x64_sys_pwrite64+0xf5/0x150 [ 806.439631][T17078] do_syscall_64+0x44/0xa0 [ 806.444091][T17078] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 806.450065][T17078] RIP: 0033:0x7f0ae3deb8a7 [ 806.454574][T17078] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 806.474378][T17078] RSP: 002b:00007f0ae1baff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 806.482773][T17078] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3deb8a7 [ 806.490805][T17078] RDX: 000000000000003a RSI: 0000000020010000 RDI: 0000000000000004 [ 806.498766][T17078] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 806.506720][T17078] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 806.514732][T17078] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 11:15:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x7f01}]) [ 806.530279][T17078] loop2: detected capacity change from 0 to 264192 11:15:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x3008852, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0021}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x9, 0x0, 0x0, 0x0, @tick=0x40000000, {}, {0xfe, 0x7f}, @quote={{0x2}, 0x1, &(0x7f00000002c0)={0xff, 0x1, 0x2, 0x7, @time={0x80000001, 0x4}, {0x9, 0xfe}, {0x7f, 0xfe}, @result={0x1f, 0x10001}}}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x2d) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) pread64(r2, &(0x7f00000000c0)=""/190, 0xbe, 0x1f6) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000300)="1ae317498641e815973f7ed48030e4cdf342cbf1abb0bd1b6bd2ced49a908218ddf428870546d5fc05000000000000002fc29cd06542ff25594b1d836c081eed1a9abc9c35236469c6172711d0059ef3a2acab930ddd10629a9e2450db29c5b456228f5d435c259332b7037c6f6a7a552c29c24aaf5d62744ecd9d83d09920806417f4b50a4212dd9315edde6f2a1011c0cd402544cd511687a7d1fc155a74cf166363b3d273af7eaf6f7db933f1f366d40a96db4c7050b451b80b2511b4ef49150f748d745516266f2b979d546e07e89c6e") ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000500)="45ca080f6af390799591b39b318a705bd1666f45c4d977bc8c33eb54858a28fd3d4b5c6694f35d7bbdf200baba70b55b230edb7c0c05bc93e21cfcfce539724addc891f7b237c680fe0a40ce4051d756aa3826f9394da6186417c2b9811321969cc099a73a03f30ce3668f7ba0d7048a") r3 = gettid() tkill(r3, 0x3a) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000001c0)="f7f8e67678d00cca8c060d8cfbebd91d29b50eee4dc8676fa6d0dc271be1fe0ad21c6c77be55278d48568854257421a91db75e09d266841af50e8294919d85404299441e7d95b642678d70beeb00928fab1f178d58", 0x55}], 0x2}, 0x40) 11:15:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x8, 0x5}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="020027cc707ce010006a43"], 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x20040048) sync() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x6]}, 0x8, 0x800) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x200088c1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x8, 0x5}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044000) sync() sync() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x420829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc569f67f4d10e561}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x6725e98972c14c14}, 0x20) sync() [ 806.573675][T17078] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 806.602428][T17107] loop4: detected capacity change from 0 to 264192 [ 806.616926][T17109] loop1: detected capacity change from 0 to 16 11:15:15 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') statfs(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)=""/159) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000200)='./bus\x00', 0xee01, 0x0, 0x1000) creat(&(0x7f0000000080)='./bus\x00', 0xa) sendfile(r1, r2, 0x0, 0x0) [ 806.633748][T17107] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 9) [ 806.684185][T17107] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 806.723346][T17135] FAULT_INJECTION: forcing a failure. [ 806.723346][T17135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.736441][T17135] CPU: 1 PID: 17135 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 806.745224][T17135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.755280][T17135] Call Trace: [ 806.758543][T17135] dump_stack_lvl+0xd6/0x122 [ 806.763165][T17135] dump_stack+0x11/0x1b [ 806.767312][T17135] should_fail+0x23c/0x250 [ 806.771751][T17135] should_fail_usercopy+0x16/0x20 [ 806.776760][T17135] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 806.782487][T17135] ? shmem_write_begin+0x7e/0x100 [ 806.787496][T17135] generic_perform_write+0x201/0x3e0 [ 806.792844][T17135] __generic_file_write_iter+0x174/0x310 [ 806.798571][T17135] ? generic_write_checks+0x250/0x290 [ 806.803926][T17135] generic_file_write_iter+0x75/0x130 [ 806.809344][T17135] vfs_write+0x7bc/0x900 [ 806.813582][T17135] __x64_sys_pwrite64+0xf5/0x150 [ 806.818541][T17135] do_syscall_64+0x44/0xa0 [ 806.822944][T17135] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 806.828896][T17135] RIP: 0033:0x7f0ae3deb8a7 [ 806.833290][T17135] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 806.852882][T17135] RSP: 002b:00007f0ae1baff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 806.861276][T17135] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3deb8a7 [ 806.869227][T17135] RDX: 000000000000003a RSI: 0000000020010000 RDI: 0000000000000004 [ 806.877196][T17135] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff 11:15:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600001b50f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x8008}]) [ 806.885158][T17135] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 806.893168][T17135] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 806.903814][T17136] loop3: detected capacity change from 0 to 16 11:15:15 executing program 5: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() 11:15:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x6e) r1 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x50) sendfile(r0, r1, 0x0, 0x0) [ 806.933659][ T22] audit: type=1326 audit(1632827715.731:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17119 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c2455709 code=0x7ffc0000 11:15:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/198, 0xc6) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() unlink(&(0x7f0000000080)='./file0\x00') sync() r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x24040, 0x0) chdir(&(0x7f0000000140)='./bus\x00') sendfile(r1, r2, 0x0, 0x0) [ 806.996773][T17135] loop2: detected capacity change from 0 to 264192 [ 807.002487][T17164] loop1: detected capacity change from 0 to 16 [ 807.011222][T17165] loop4: detected capacity change from 0 to 264192 [ 807.024293][T17168] loop0: detected capacity change from 0 to 16 11:15:15 executing program 5: sync() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x7) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000180)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x90102, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf25020000003400078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000340d90a001746b534c6"], 0x54}, 0x1, 0x0, 0x0, 0x854}, 0x10) [ 807.026496][ T22] audit: type=1326 audit(1632827715.731:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17119 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c2455709 code=0x7ffc0000 [ 807.074962][T17165] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 807.090336][T17165] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600001b60f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = epoll_create(0x9) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400600, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x82}, 0x20048848) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) ftruncate(r1, 0xfd) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x0) [ 807.117921][T17181] loop3: detected capacity change from 0 to 16 [ 807.141004][T17164] handle_bad_sector: 146 callbacks suppressed [ 807.141017][T17164] attempt to access beyond end of device [ 807.141017][T17164] loop1: rw=2049, want=184, limit=16 [ 807.148565][T17135] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 10) [ 807.201647][T17164] attempt to access beyond end of device [ 807.201647][T17164] loop1: rw=2049, want=185, limit=16 [ 807.232227][T17200] loop4: detected capacity change from 0 to 264192 [ 807.261138][T17207] loop0: detected capacity change from 0 to 16 [ 807.270798][T17200] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 807.289805][T17200] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 807.315982][T17218] FAULT_INJECTION: forcing a failure. [ 807.315982][T17218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.329077][T17218] CPU: 1 PID: 17218 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 807.337840][T17218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.347891][T17218] Call Trace: [ 807.351161][T17218] dump_stack_lvl+0xd6/0x122 [ 807.355756][T17218] dump_stack+0x11/0x1b [ 807.359909][T17218] should_fail+0x23c/0x250 11:15:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600001b70f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 807.364326][T17218] should_fail_usercopy+0x16/0x20 [ 807.369349][T17218] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 807.375140][T17218] ? shmem_write_begin+0x7e/0x100 [ 807.380227][T17218] generic_perform_write+0x201/0x3e0 [ 807.385522][T17218] __generic_file_write_iter+0x174/0x310 [ 807.391226][T17218] ? generic_write_checks+0x250/0x290 [ 807.396601][T17218] generic_file_write_iter+0x75/0x130 [ 807.402100][T17218] vfs_write+0x7bc/0x900 [ 807.406344][T17218] __x64_sys_pwrite64+0xf5/0x150 [ 807.411284][T17218] do_syscall_64+0x44/0xa0 [ 807.415700][T17218] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 807.421697][T17218] RIP: 0033:0x7f0ae3deb8a7 [ 807.426211][T17218] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 807.446070][T17218] RSP: 002b:00007f0ae1baff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 807.454486][T17218] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3deb8a7 11:15:16 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x5, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0xffffffffffffffd1}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)=ANY=[]) open(&(0x7f0000000080)='./bus\x00', 0x101000, 0x100) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x0) [ 807.462457][T17218] RDX: 0000000000000009 RSI: 0000000020010400 RDI: 0000000000000004 [ 807.470500][T17218] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 807.478461][T17218] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004 [ 807.486460][T17218] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 807.494858][T17218] loop2: detected capacity change from 0 to 264192 11:15:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xff0f}]) [ 807.518703][T17218] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 807.599017][T17237] loop4: detected capacity change from 0 to 264192 [ 807.625293][T17244] loop1: detected capacity change from 0 to 16 11:15:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 11) [ 807.646767][T17244] attempt to access beyond end of device [ 807.646767][T17244] loop1: rw=2049, want=18, limit=16 [ 807.660454][T17236] loop3: detected capacity change from 0 to 32760 [ 807.675232][T17237] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 807.693347][T17244] attempt to access beyond end of device [ 807.693347][T17244] loop1: rw=2049, want=18, limit=16 [ 807.704046][T17244] buffer_io_error: 88 callbacks suppressed [ 807.704056][T17244] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 807.719037][T17237] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 807.756061][T17256] FAULT_INJECTION: forcing a failure. [ 807.756061][T17256] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 807.769336][T17256] CPU: 1 PID: 17256 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 807.778093][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.788144][T17256] Call Trace: [ 807.791448][T17256] dump_stack_lvl+0xd6/0x122 [ 807.796075][T17256] dump_stack+0x11/0x1b [ 807.800307][T17256] should_fail+0x23c/0x250 11:15:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600003ce0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 807.804797][T17256] __alloc_pages+0x102/0x320 [ 807.809387][T17256] alloc_pages_vma+0x5ee/0x770 [ 807.814154][T17256] shmem_getpage_gfp+0x96d/0x13d0 [ 807.819179][T17256] ? policydb_context_isvalid+0x135/0x230 [ 807.824912][T17256] shmem_write_begin+0x7e/0x100 [ 807.829762][T17256] generic_perform_write+0x1b8/0x3e0 [ 807.833605][T17244] attempt to access beyond end of device [ 807.833605][T17244] loop1: rw=2049, want=19, limit=16 [ 807.835048][T17256] __generic_file_write_iter+0x174/0x310 [ 807.845739][T17244] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 807.851317][T17256] ? generic_write_checks+0x250/0x290 [ 807.865070][T17256] generic_file_write_iter+0x75/0x130 [ 807.867629][T17244] attempt to access beyond end of device [ 807.867629][T17244] loop1: rw=2049, want=20, limit=16 [ 807.870440][T17256] vfs_write+0x7bc/0x900 [ 807.870463][T17256] __x64_sys_pwrite64+0xf5/0x150 [ 807.881132][T17244] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 807.881723][T17244] attempt to access beyond end of device [ 807.881723][T17244] loop1: rw=2049, want=21, limit=16 [ 807.885388][T17256] do_syscall_64+0x44/0xa0 [ 807.890330][T17244] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 807.890684][T17244] attempt to access beyond end of device [ 807.890684][T17244] loop1: rw=2049, want=22, limit=16 [ 807.898765][T17256] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 807.898794][T17256] RIP: 0033:0x7f0ae3deb8a7 [ 807.898808][T17256] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 807.909488][T17244] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 807.914573][T17244] attempt to access beyond end of device [ 807.914573][T17244] loop1: rw=2049, want=23, limit=16 [ 807.922296][T17256] RSP: 002b:00007f0ae1baff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 807.922317][T17256] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3deb8a7 [ 807.922328][T17256] RDX: 000000000000001d RSI: 0000000020000040 RDI: 0000000000000004 [ 807.922339][T17256] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 807.932998][T17244] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 807.938846][T17256] R10: 0000000000011080 R11: 0000000000000293 R12: 0000000000000004 [ 807.938859][T17256] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 [ 807.945098][T17244] attempt to access beyond end of device [ 807.945098][T17244] loop1: rw=2049, want=24, limit=16 [ 808.049331][T17244] Buffer I/O error on dev loop1, logical block 23, lost async page write 11:15:16 executing program 5: sync() sync() sync() sync() sync() sync() 11:15:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x30) sendfile(r0, r1, 0x0, 0x0) 11:15:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x20000}]) [ 808.084391][T17256] loop2: detected capacity change from 0 to 264192 [ 808.104089][T17256] EXT4-fs error (device loop2): ext4_fill_super:4810: inode #2: comm syz-executor.2: iget: root inode unallocated [ 808.116198][T17256] EXT4-fs (loop2): get root inode failed [ 808.121844][T17256] EXT4-fs (loop2): mount failed [ 808.127931][T17271] loop4: detected capacity change from 0 to 264192 [ 808.173790][T17271] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 808.204452][T17271] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 12) [ 808.223106][T17293] loop0: detected capacity change from 0 to 16 [ 808.236805][T17299] loop1: detected capacity change from 0 to 16 [ 808.255183][T17303] FAULT_INJECTION: forcing a failure. [ 808.255183][T17303] name failslab, interval 1, probability 0, space 0, times 0 [ 808.267898][T17303] CPU: 0 PID: 17303 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 808.276656][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.286712][T17303] Call Trace: [ 808.289980][T17303] dump_stack_lvl+0xd6/0x122 [ 808.294564][T17303] dump_stack+0x11/0x1b [ 808.298705][T17303] should_fail+0x23c/0x250 [ 808.303120][T17303] ? xas_create+0x3fb/0xb30 [ 808.307639][T17303] __should_failslab+0x81/0x90 [ 808.312389][T17303] should_failslab+0x5/0x20 [ 808.316954][T17303] kmem_cache_alloc+0x4f/0x300 [ 808.321707][T17303] xas_create+0x3fb/0xb30 [ 808.326023][T17303] ? get_page_from_freelist+0x460/0x830 [ 808.331689][T17303] xas_create_range+0x146/0x360 [ 808.336549][T17303] shmem_add_to_page_cache+0x3bd/0x660 [ 808.342022][T17303] shmem_getpage_gfp+0xba5/0x13d0 [ 808.347031][T17303] ? policydb_context_isvalid+0x135/0x230 [ 808.352740][T17303] shmem_write_begin+0x7e/0x100 [ 808.357573][T17303] generic_perform_write+0x1b8/0x3e0 [ 808.362968][T17303] __generic_file_write_iter+0x174/0x310 [ 808.368613][T17303] ? generic_write_checks+0x250/0x290 [ 808.373987][T17303] generic_file_write_iter+0x75/0x130 [ 808.379373][T17303] vfs_write+0x7bc/0x900 [ 808.383711][T17303] __x64_sys_pwrite64+0xf5/0x150 [ 808.388643][T17303] do_syscall_64+0x44/0xa0 [ 808.393049][T17303] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 808.398933][T17303] RIP: 0033:0x7f0ae3deb8a7 [ 808.403375][T17303] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b 11:15:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600002d00f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 808.423056][T17303] RSP: 002b:00007f0ae1baff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 808.431503][T17303] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3deb8a7 [ 808.439534][T17303] RDX: 000000000000001d RSI: 0000000020000040 RDI: 0000000000000004 [ 808.447491][T17303] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 808.455448][T17303] R10: 0000000000011080 R11: 0000000000000293 R12: 0000000000000004 [ 808.463515][T17303] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 11:15:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) creat(&(0x7f00000000c0)='./file0\x00', 0x88) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x7ffffffd, 0x1, 0x1, 0x9}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:15:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="f43c8f000000732e66617400020101000240008080f801", 0xfffffffffffffcea, 0x80}, {0x0, 0x0, 0x1000}], 0x1006083, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x444000, 0x31) sendfile(r0, r1, 0x0, 0x0) [ 808.490214][T17303] loop2: detected capacity change from 0 to 264192 [ 808.512974][T17303] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 13) [ 808.589123][T17321] loop0: detected capacity change from 0 to 16 [ 808.614217][T17327] loop4: detected capacity change from 0 to 264192 11:15:17 executing program 5: sync() sync() sync() sync() [ 808.687385][T17327] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 808.708210][T17340] FAULT_INJECTION: forcing a failure. [ 808.708210][T17340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.721295][T17340] CPU: 0 PID: 17340 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 808.730169][T17340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.740219][T17340] Call Trace: [ 808.743489][T17340] dump_stack_lvl+0xd6/0x122 [ 808.748082][T17340] dump_stack+0x11/0x1b [ 808.752290][T17340] should_fail+0x23c/0x250 [ 808.756708][T17340] should_fail_usercopy+0x16/0x20 [ 808.761719][T17340] copy_page_from_iter_atomic+0x2c1/0xbb0 [ 808.767423][T17340] ? shmem_write_begin+0x7e/0x100 [ 808.772435][T17340] generic_perform_write+0x201/0x3e0 [ 808.777715][T17340] __generic_file_write_iter+0x174/0x310 [ 808.783363][T17340] ? generic_write_checks+0x250/0x290 [ 808.788936][T17340] generic_file_write_iter+0x75/0x130 [ 808.794371][T17340] vfs_write+0x7bc/0x900 [ 808.798971][T17340] __x64_sys_pwrite64+0xf5/0x150 [ 808.804066][T17340] do_syscall_64+0x44/0xa0 [ 808.808547][T17340] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 808.814428][T17340] RIP: 0033:0x7f0ae3deb8a7 11:15:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40001, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 808.818828][T17340] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 808.838543][T17340] RSP: 002b:00007f0ae1baff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 808.847001][T17340] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3deb8a7 [ 808.854949][T17340] RDX: 000000000000001d RSI: 0000000020000040 RDI: 0000000000000004 [ 808.862904][T17340] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 808.870926][T17340] R10: 0000000000011080 R11: 0000000000000293 R12: 0000000000000004 [ 808.878903][T17340] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002 [ 808.901152][T17340] loop2: detected capacity change from 0 to 264192 [ 808.910868][T17327] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600002de0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 808.955391][T17340] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 14) [ 808.998778][T17356] loop0: detected capacity change from 0 to 16 11:15:17 executing program 5: sync() sync() sync() socket(0x26, 0x1, 0x40) [ 809.082965][T17366] loop4: detected capacity change from 0 to 264192 [ 809.104449][T17376] FAULT_INJECTION: forcing a failure. [ 809.104449][T17376] name failslab, interval 1, probability 0, space 0, times 0 [ 809.117174][T17376] CPU: 0 PID: 17376 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 809.125948][T17376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.135995][T17376] Call Trace: [ 809.139260][T17376] dump_stack_lvl+0xd6/0x122 [ 809.143842][T17376] dump_stack+0x11/0x1b [ 809.147987][T17376] should_fail+0x23c/0x250 [ 809.152385][T17376] ? getname_flags+0x84/0x3f0 [ 809.157047][T17376] __should_failslab+0x81/0x90 [ 809.161854][T17376] should_failslab+0x5/0x20 [ 809.166340][T17376] kmem_cache_alloc+0x4f/0x300 [ 809.171086][T17376] getname_flags+0x84/0x3f0 [ 809.175586][T17376] getname+0x15/0x20 [ 809.179463][T17376] do_sys_openat2+0x6d/0x2b0 [ 809.184161][T17376] __x64_sys_openat+0xef/0x110 [ 809.188909][T17376] do_syscall_64+0x44/0xa0 [ 809.193374][T17376] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 809.199327][T17376] RIP: 0033:0x7f0ae3deb7f4 [ 809.203720][T17376] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 809.223313][T17376] RSP: 002b:00007f0ae1bafed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 11:15:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'filter\x00'}, &(0x7f00000000c0)=0x24) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 809.231715][T17376] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3deb7f4 [ 809.239674][T17376] RDX: 0000000000000002 RSI: 00007f0ae1bb0000 RDI: 00000000ffffff9c [ 809.247644][T17376] RBP: 00007f0ae1bb0000 R08: 0000000000000000 R09: ffffffffffffffff [ 809.255603][T17376] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 809.263754][T17376] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 809.289875][T17366] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 809.322256][T17366] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 809.327772][T17386] loop0: detected capacity change from 0 to 16 11:15:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x40000}]) 11:15:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600001e50f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 809.354689][T17349] loop3: detected capacity change from 0 to 32760 11:15:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4) open(&(0x7f0000000500)='./file0\x00', 0x140, 0x122) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) getsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x1, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000140)="26a499bea155f99fc825b56d3626629d7dd7deae51479e49c0654c253cece6c5c3ff7215d463a46e40e77a56108bc26566aba06b55d5716a688c277f90f81ddac1a65dbd340c9c64f7197d2bc79e5cc47698a9724fe04de4affc6130b6fe1a0318947637a0a3fe92f5ede8c7810005e0f9ad680bb46d3f0d1085ff688b28f1c9a20e40c29790467d8a6f33d4f28869", 0x8f, 0x99e8}, {&(0x7f0000000200)="85523557ec2d4fd922b8d51cfb7cb96e2bedca00d823", 0x16, 0x100000001}, {&(0x7f0000000300)="88a0240f8969af27bfca908afe1ee7b7e2b4d4d78a3ee92299893c507a0df8bbedbe253cfd40c7c8989ad6d22e4c44e078d986ae835a2e29dc32fee9635f167e295086891c631603cc4ed413ce6ab7089b3421ee65916f5c65148412b4988e15a9d4ef5ea54c6b9c3b4d8603d63d96218dee377c39dbaf24ec39dd6b2502a900481b0dc5b448aa", 0x87, 0x6}, {&(0x7f0000000240)="3ba277295b8d251d41c6f84800407a102dbad7bfacea22cf6d27caea6ae63044ea3768a6540c13cf83f91a7bcd6842a753bea922153e9771", 0x38, 0x5}, {&(0x7f0000000280)="25e0069e5febf620fdd7a089c93943eeed51a80012c441db", 0x18, 0x8}], 0x800080, &(0x7f0000000440)={[{@dmode={'dmode', 0x3d, 0x30d}}, {@dmode={'dmode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x9}}, {@nojoliet}, {@uid={'uid', 0x3d, r5}}], [{@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@dont_measure}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 11:15:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 15) [ 809.430077][T17401] loop1: detected capacity change from 0 to 16 [ 809.456385][T17401] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 809.474787][T17401] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 809.490546][T17402] loop4: detected capacity change from 0 to 264192 [ 809.500580][T17411] loop0: detected capacity change from 0 to 16 [ 809.510466][T17402] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 809.510584][T17418] FAULT_INJECTION: forcing a failure. [ 809.510584][T17418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.520268][T17401] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 809.532633][T17418] CPU: 1 PID: 17418 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 809.549836][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.556537][T17402] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 809.559898][T17418] Call Trace: [ 809.559907][T17418] dump_stack_lvl+0xd6/0x122 [ 809.571057][T17402] EXT4-fs mount: 14 callbacks suppressed [ 809.571068][T17402] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 809.574279][T17418] dump_stack+0x11/0x1b [ 809.599113][T17418] should_fail+0x23c/0x250 [ 809.603531][T17418] should_fail_usercopy+0x16/0x20 [ 809.608548][T17418] strncpy_from_user+0x21/0x250 [ 809.613439][T17418] getname_flags+0xb8/0x3f0 [ 809.617946][T17418] getname+0x15/0x20 [ 809.621844][T17418] do_sys_openat2+0x6d/0x2b0 [ 809.626476][T17418] __x64_sys_openat+0xef/0x110 [ 809.631291][T17418] do_syscall_64+0x44/0xa0 [ 809.635708][T17418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 809.641598][T17418] RIP: 0033:0x7f0ae3deb7f4 [ 809.646003][T17418] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 809.665748][T17418] RSP: 002b:00007f0ae1bafed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 809.674163][T17418] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3deb7f4 [ 809.682223][T17418] RDX: 0000000000000002 RSI: 00007f0ae1bb0000 RDI: 00000000ffffff9c [ 809.690188][T17418] RBP: 00007f0ae1bb0000 R08: 0000000000000000 R09: ffffffffffffffff [ 809.698195][T17418] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 809.706163][T17418] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 11:15:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x80, 0x1) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:15:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @local, @loopback={0xfe800000070001a2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20d20002, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @local, @loopback={0xfe800000070001a2, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20d20002, r5}) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1a8, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x6040010}, 0x800) sync() sync() 11:15:18 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) mkdirat(r0, &(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x20) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 11:15:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600001ea0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x60000}]) [ 809.842756][T17349] loop3: detected capacity change from 0 to 32760 11:15:18 executing program 5: sync() sync() sync() sync() [ 809.903564][T17446] loop0: detected capacity change from 0 to 16 [ 809.904282][T17448] loop1: detected capacity change from 0 to 16 [ 809.918753][T17447] loop4: detected capacity change from 0 to 264192 11:15:18 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) 11:15:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 16) [ 810.026723][T17447] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 810.051423][T17472] FAULT_INJECTION: forcing a failure. [ 810.051423][T17472] name failslab, interval 1, probability 0, space 0, times 0 [ 810.064248][T17472] CPU: 0 PID: 17472 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 810.073014][T17472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.083089][T17472] Call Trace: [ 810.086385][T17472] dump_stack_lvl+0xd6/0x122 [ 810.091124][T17472] dump_stack+0x11/0x1b [ 810.095366][T17472] should_fail+0x23c/0x250 [ 810.099781][T17472] ? __alloc_file+0x2e/0x1a0 [ 810.104418][T17472] __should_failslab+0x81/0x90 [ 810.109182][T17472] should_failslab+0x5/0x20 [ 810.113686][T17472] kmem_cache_alloc+0x4f/0x300 [ 810.118454][T17472] __alloc_file+0x2e/0x1a0 [ 810.122942][T17472] alloc_empty_file+0xcd/0x1c0 [ 810.127773][T17472] path_openat+0x6a/0x1ec0 [ 810.132206][T17472] ? copy_page_from_iter_atomic+0x44b/0xbb0 [ 810.138100][T17472] ? set_page_dirty+0xf4/0x1a0 [ 810.142941][T17472] ? shmem_write_end+0x37d/0x3d0 [ 810.147948][T17472] ? balance_dirty_pages_ratelimited+0xc4/0x2a0 [ 810.154190][T17472] ? generic_perform_write+0x377/0x3e0 [ 810.159714][T17472] do_filp_open+0x105/0x220 [ 810.164303][T17472] do_sys_openat2+0xb5/0x2b0 [ 810.168934][T17472] __x64_sys_openat+0xef/0x110 [ 810.173794][T17472] do_syscall_64+0x44/0xa0 [ 810.178215][T17472] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 810.184157][T17472] RIP: 0033:0x7f0ae3deb7f4 [ 810.188569][T17472] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 810.208178][T17472] RSP: 002b:00007f0ae1bafed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 810.216646][T17472] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3deb7f4 [ 810.224619][T17472] RDX: 0000000000000002 RSI: 00007f0ae1bb0000 RDI: 00000000ffffff9c [ 810.232625][T17472] RBP: 00007f0ae1bb0000 R08: 0000000000000000 R09: ffffffffffffffff [ 810.240598][T17472] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 810.248573][T17472] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 810.267137][T17479] loop3: detected capacity change from 0 to 16 11:15:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 17) [ 810.275902][T17447] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 810.287033][T17447] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 810.340577][T17489] FAULT_INJECTION: forcing a failure. [ 810.340577][T17489] name failslab, interval 1, probability 0, space 0, times 0 [ 810.353228][T17489] CPU: 0 PID: 17489 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 810.361987][T17489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.372033][T17489] Call Trace: [ 810.375306][T17489] dump_stack_lvl+0xd6/0x122 [ 810.379898][T17489] dump_stack+0x11/0x1b [ 810.384061][T17489] should_fail+0x23c/0x250 [ 810.388476][T17489] ? security_file_alloc+0x30/0x190 [ 810.393704][T17489] __should_failslab+0x81/0x90 [ 810.398581][T17489] should_failslab+0x5/0x20 [ 810.403132][T17489] kmem_cache_alloc+0x4f/0x300 [ 810.407897][T17489] security_file_alloc+0x30/0x190 [ 810.412955][T17489] __alloc_file+0x83/0x1a0 [ 810.417430][T17489] alloc_empty_file+0xcd/0x1c0 [ 810.422194][T17489] path_openat+0x6a/0x1ec0 [ 810.426615][T17489] ? copy_page_from_iter_atomic+0x44b/0xbb0 [ 810.432541][T17489] ? set_page_dirty+0xf4/0x1a0 [ 810.437311][T17489] ? shmem_write_end+0x37d/0x3d0 [ 810.442322][T17489] ? balance_dirty_pages_ratelimited+0xc4/0x2a0 [ 810.448578][T17489] ? generic_perform_write+0x377/0x3e0 [ 810.454066][T17489] do_filp_open+0x105/0x220 [ 810.458568][T17489] do_sys_openat2+0xb5/0x2b0 [ 810.464248][T17489] __x64_sys_openat+0xef/0x110 [ 810.469071][T17489] do_syscall_64+0x44/0xa0 [ 810.473490][T17489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 810.479435][T17489] RIP: 0033:0x7f0ae3deb7f4 [ 810.483843][T17489] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 810.503444][T17489] RSP: 002b:00007f0ae1bafed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 810.511856][T17489] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3deb7f4 [ 810.519850][T17489] RDX: 0000000000000002 RSI: 00007f0ae1bb0000 RDI: 00000000ffffff9c [ 810.527826][T17489] RBP: 00007f0ae1bb0000 R08: 0000000000000000 R09: ffffffffffffffff 11:15:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x80000}]) 11:15:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000fffe0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 810.535803][T17489] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 810.543773][T17489] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 810.576566][T17494] loop0: detected capacity change from 0 to 16 [ 810.660927][T17507] loop1: detected capacity change from 0 to 16 [ 810.678753][T17510] loop4: detected capacity change from 0 to 264192 11:15:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 18) [ 810.703738][T17510] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 810.713942][T17510] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 810.725589][T17510] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c854d562da0bf0c75b11bedf9819a6f8f000000732e", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() mkdir(&(0x7f0000000080)='./file0/../file0\x00', 0x1a4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sync() sendfile(r0, r1, 0x0, 0x0) 11:15:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060000fff0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:19 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0200"/16, @ANYRES32=0x0, @ANYBLOB="040005000000000008000500", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0xee01, @ANYBLOB="10000500000000002000020000000000"], 0x4c, 0x2) [ 810.788806][T17523] FAULT_INJECTION: forcing a failure. [ 810.788806][T17523] name failslab, interval 1, probability 0, space 0, times 0 [ 810.801487][T17523] CPU: 1 PID: 17523 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 810.810419][T17523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.820474][T17523] Call Trace: [ 810.823745][T17523] dump_stack_lvl+0xd6/0x122 [ 810.828344][T17523] dump_stack+0x11/0x1b [ 810.832574][T17523] should_fail+0x23c/0x250 [ 810.836989][T17523] ? kzalloc+0x16/0x20 [ 810.841130][T17523] __should_failslab+0x81/0x90 [ 810.846031][T17523] should_failslab+0x5/0x20 [ 810.850537][T17523] __kmalloc+0x6f/0x350 [ 810.854703][T17523] ? _atomic_dec_and_lock+0x60/0xd0 [ 810.859900][T17523] kzalloc+0x16/0x20 [ 810.863788][T17523] alloc_workqueue+0x12f/0xad0 [ 810.868540][T17523] ? disk_unblock_events+0x35/0x40 [ 810.873638][T17523] ? bd_prepare_to_claim+0x1e6/0x270 [ 810.878950][T17523] ? loop_attr_do_show_dio+0x70/0x70 [ 810.884223][T17523] ? loop_set_status_from_info+0x35e/0x3a0 [ 810.890033][T17523] loop_configure+0x681/0xeb0 [ 810.894695][T17523] lo_ioctl+0x618/0x13e0 [ 810.898946][T17523] ? path_openat+0x18d4/0x1ec0 [ 810.903699][T17523] ? blkdev_common_ioctl+0x438/0x1110 [ 810.909068][T17523] ? selinux_file_ioctl+0x981/0xa10 [ 810.914259][T17523] ? lo_release+0x120/0x120 [ 810.918790][T17523] blkdev_ioctl+0x1d0/0x3f0 [ 810.923567][T17523] block_ioctl+0x6e/0x80 [ 810.927792][T17523] ? blkdev_iopoll+0x80/0x80 [ 810.932367][T17523] __se_sys_ioctl+0xcb/0x140 [ 810.936942][T17523] __x64_sys_ioctl+0x3f/0x50 [ 810.941581][T17523] do_syscall_64+0x44/0xa0 [ 810.945997][T17523] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 810.951885][T17523] RIP: 0033:0x7f0ae3e384c7 [ 810.956329][T17523] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 810.975965][T17523] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:15:19 executing program 5: sync() sync() 11:15:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0x1}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12b000, 0x100) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20a000, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./bus\x00', 0x10000000) [ 810.984382][T17523] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 810.992337][T17523] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 811.000296][T17523] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 811.008251][T17523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 811.016228][T17523] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 11:15:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 19) [ 811.074464][T17539] loop3: detected capacity change from 0 to 16 [ 811.096519][T17544] FAULT_INJECTION: forcing a failure. [ 811.096519][T17544] name failslab, interval 1, probability 0, space 0, times 0 [ 811.107950][T17539] FAT-fs (loop3): invalid media value (0x73) [ 811.109174][T17544] CPU: 1 PID: 17544 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 811.115110][T17539] FAT-fs (loop3): Can't find a valid FAT filesystem [ 811.123845][T17544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.123859][T17544] Call Trace: [ 811.123866][T17544] dump_stack_lvl+0xd6/0x122 [ 811.123889][T17544] dump_stack+0x11/0x1b [ 811.152557][T17544] should_fail+0x23c/0x250 [ 811.156995][T17544] __should_failslab+0x81/0x90 [ 811.161742][T17544] ? alloc_workqueue+0x15d/0xad0 [ 811.166723][T17544] should_failslab+0x5/0x20 [ 811.171215][T17544] kmem_cache_alloc_trace+0x52/0x320 [ 811.176482][T17544] alloc_workqueue+0x15d/0xad0 [ 811.181303][T17544] ? disk_unblock_events+0x35/0x40 [ 811.186476][T17544] ? bd_prepare_to_claim+0x1e6/0x270 [ 811.191768][T17544] ? loop_attr_do_show_dio+0x70/0x70 [ 811.197040][T17544] ? loop_set_status_from_info+0x35e/0x3a0 [ 811.202858][T17544] loop_configure+0x681/0xeb0 [ 811.207535][T17544] lo_ioctl+0x618/0x13e0 [ 811.211815][T17544] ? path_openat+0x18d4/0x1ec0 [ 811.216611][T17544] ? blkdev_common_ioctl+0x438/0x1110 [ 811.221981][T17544] ? selinux_file_ioctl+0x981/0xa10 [ 811.227169][T17544] ? lo_release+0x120/0x120 [ 811.231659][T17544] blkdev_ioctl+0x1d0/0x3f0 [ 811.236229][T17544] block_ioctl+0x6e/0x80 [ 811.240454][T17544] ? blkdev_iopoll+0x80/0x80 [ 811.245026][T17544] __se_sys_ioctl+0xcb/0x140 [ 811.249632][T17544] __x64_sys_ioctl+0x3f/0x50 [ 811.254207][T17544] do_syscall_64+0x44/0xa0 [ 811.258610][T17544] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 811.264631][T17544] RIP: 0033:0x7f0ae3e384c7 [ 811.269033][T17544] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 811.288639][T17544] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.297071][T17544] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 811.305040][T17544] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 811.312992][T17544] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 11:15:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x100000000000000, 0x0) dup(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000480)={{}, 0x0, 0x2, @unused=[0x6, 0x100000001, 0x6, 0x6], @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={0x0, 0xfffffffffffffffa, 0x9}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000180)={0x0, "936c110874ece2efe2eda364fd7fa6f3"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000100)={0x18, 0x5, {0xfffffffffffffc97, @usage=0x10001, 0x0, 0xad, 0x6, 0x2, 0x100000000, 0x3, 0x8, @struct={0x3, 0x8}, 0x7f, 0xc, [0x9, 0x7ff, 0x9, 0x7fff, 0x1000, 0x4]}, {0x1, @usage=0x3, 0x0, 0x2, 0x2, 0x8a5, 0x14, 0x8, 0x0, @usage=0x8, 0x98, 0xf76a, [0x3, 0x5e9, 0x4, 0x1000, 0xf40, 0x1]}, {0x100, @struct={0x3, 0x1}, 0x0, 0x8000, 0x80000020, 0x5, 0x1, 0x7, 0x4a0, @struct={0x8, 0x4}, 0x9, 0x1c, [0x0, 0x5, 0x3ff, 0x3, 0x1, 0xffffffffffffff80]}, {0xffffffff, 0x6, 0x4}}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000100)={{}, 0x0, 0x2, @inherit={0x88, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"]}, @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000000c0)={0x0, 0x5268, 0x0, [0x68a, 0x0, 0x6, 0x10000, 0x1c0000000000], [0x101, 0xa4e6, 0x9, 0x40, 0xffffffff, 0x0, 0x4a9b, 0xf900, 0x6, 0x5, 0x100000000000004, 0x7, 0x4, 0x6, 0x200, 0x2a8, 0x1, 0x7, 0x7, 0x7, 0x80000000, 0xf07a, 0x0, 0x9, 0x0, 0x31fe3e37, 0x3, 0x3, 0x3, 0x3e311622, 0xff, 0x200, 0xffff, 0x8, 0x5, 0x401, 0xce75, 0xfffffffffffffffa, 0x1f, 0x6, 0x9, 0xc0, 0x2, 0x8, 0x0, 0x3, 0x0, 0xfff, 0x40, 0x5, 0x5be, 0x8, 0x1, 0x0, 0x434b, 0x9e2f, 0xfffffffffffffffe, 0x10001000000000, 0x800, 0x800, 0xffd, 0x9a9, 0x8, 0xe89, 0x6, 0x2, 0x5, 0x1, 0x4, 0x8000, 0xbc2, 0x9, 0x7fff, 0x5, 0x40, 0xaf, 0x9, 0x4, 0x8, 0x10001, 0xfffffffffffffffb, 0x1, 0xf7, 0x7, 0x8, 0x100, 0x1, 0x0, 0x7fffffff, 0x80, 0x81, 0x1, 0xffff, 0x5, 0x3, 0x9, 0x3f, 0x3, 0x2, 0xfffffffffffffff9, 0xfff, 0x0, 0x10000, 0x10000, 0x40, 0x3, 0x1f, 0xc9e4, 0x7, 0x1, 0x0, 0xb765, 0x100000000, 0x4, 0x8c7, 0x6, 0x9, 0x200, 0x7fffffff, 0x7, 0xcd31]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000d40)={0x0, "bd5b09ed5573ff5c5b7dc262d8f6ea4d"}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001c00)={{r0}, 0x0, 0x12, @unused=[0x0, 0x7ff, 0x4, 0x7], @devid}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) bind$inet6(r1, &(0x7f0000001940)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x7}, 0x1c) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffd, 0x6d, 0x7f, @buffer={0x0, 0xcb, &(0x7f0000000040)=""/203}, &(0x7f0000000140)="29fa70aa627751df78d7b8b5648f0c2643f9cd24b2449889092b4447bf2a5549e262bfe406dc8ffbfb5b237bf68c17872c59d45d10c564f70e02843043a78986c79bb5bcd73e2e0b20a356f3bcddd7e0629616667830becde64cd18f083195a7d529acd46e09b98e3e5cd61874", &(0x7f00000001c0)=""/176, 0xfffffffc, 0x0, 0x2, &(0x7f0000000280)}) process_vm_writev(0x0, &(0x7f0000001800)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/57, 0x39}, {&(0x7f0000001380)=""/95, 0x5f}, {&(0x7f0000001400)=""/48, 0x30}, {&(0x7f0000001440)=""/75, 0x4b}, {&(0x7f00000014c0)=""/94, 0x5e}, {&(0x7f0000001540)=""/54, 0x36}, {&(0x7f0000001580)=""/225, 0xe1}, {&(0x7f0000001680)=""/66, 0x42}, {&(0x7f0000001700)=""/232, 0xe8}], 0xa, &(0x7f0000001900)=[{&(0x7f00000018c0)=""/28, 0x1c}, {&(0x7f0000001a00)=""/209, 0xd1}], 0x2, 0x0) ioctl$SG_IO(r0, 0x2284, &(0x7f0000001980)={0x53, 0xfffffffffffffffd, 0x0, 0x3, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) sync() 11:15:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xa0000}]) [ 811.320944][T17544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 811.328912][T17544] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 811.340174][T17532] loop4: detected capacity change from 0 to 264192 [ 811.375317][T17532] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 811.399045][T17532] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 811.410128][T17532] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 20) [ 811.454384][T17539] loop3: detected capacity change from 0 to 16 [ 811.483512][T17539] FAT-fs (loop3): invalid media value (0x73) [ 811.489603][T17539] FAT-fs (loop3): Can't find a valid FAT filesystem [ 811.501062][T17571] loop1: detected capacity change from 0 to 16 [ 811.511058][T17575] loop0: detected capacity change from 0 to 16 [ 811.523231][T17583] FAULT_INJECTION: forcing a failure. [ 811.523231][T17583] name failslab, interval 1, probability 0, space 0, times 0 [ 811.535868][T17583] CPU: 0 PID: 17583 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 811.544624][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.554670][T17583] Call Trace: [ 811.557987][T17583] dump_stack_lvl+0xd6/0x122 [ 811.562588][T17583] dump_stack+0x11/0x1b [ 811.566805][T17583] should_fail+0x23c/0x250 [ 811.571214][T17583] ? kzalloc+0x16/0x20 [ 811.575384][T17583] __should_failslab+0x81/0x90 [ 811.580137][T17583] should_failslab+0x5/0x20 [ 811.584623][T17583] __kmalloc+0x6f/0x350 [ 811.588763][T17583] ? number+0xa13/0xb60 [ 811.592924][T17583] kzalloc+0x16/0x20 [ 811.596885][T17583] apply_wqattrs_prepare+0x3a/0x630 [ 811.602074][T17583] ? vsnprintf+0xe8f/0xed0 [ 811.606474][T17583] apply_workqueue_attrs+0x9e/0x100 [ 811.611662][T17583] alloc_workqueue+0x777/0xad0 [ 811.616486][T17583] ? disk_unblock_events+0x35/0x40 [ 811.621585][T17583] ? bd_prepare_to_claim+0x1e6/0x270 [ 811.626870][T17583] ? loop_attr_do_show_dio+0x70/0x70 [ 811.632182][T17583] ? loop_set_status_from_info+0x35e/0x3a0 [ 811.637978][T17583] loop_configure+0x681/0xeb0 [ 811.642663][T17583] lo_ioctl+0x618/0x13e0 [ 811.646926][T17583] ? path_openat+0x18d4/0x1ec0 [ 811.651790][T17583] ? blkdev_common_ioctl+0x438/0x1110 [ 811.657158][T17583] ? selinux_file_ioctl+0x981/0xa10 [ 811.662341][T17583] ? lo_release+0x120/0x120 [ 811.666867][T17583] blkdev_ioctl+0x1d0/0x3f0 [ 811.671468][T17583] block_ioctl+0x6e/0x80 [ 811.675759][T17583] ? blkdev_iopoll+0x80/0x80 [ 811.680330][T17583] __se_sys_ioctl+0xcb/0x140 [ 811.684914][T17583] __x64_sys_ioctl+0x3f/0x50 [ 811.689489][T17583] do_syscall_64+0x44/0xa0 [ 811.693982][T17583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 811.699872][T17583] RIP: 0033:0x7f0ae3e384c7 [ 811.704268][T17583] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 811.723859][T17583] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.732252][T17583] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 811.740253][T17583] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 11:15:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000feff0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 811.748209][T17583] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 811.756167][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 811.764123][T17583] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 11:15:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = epoll_create(0x9) epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) 11:15:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4000000010101040000c3e200c6a327c6ac906ca8d8b3000000000000070000001c001700000000810000000100010001000000e700000003000000060c000f80080003400000009978000180060003400000000006000340000300b01400018008000100e000000208000200ac1414bb2c00018014000300fe8000000000000000000000000000aa14000400ff0100140000000000000000000000010600034000040000060003400001000006000340000200000c0002800500010006000000"], 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x10) chdir(&(0x7f0000000040)='./file0\x00') sync() r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x9, 0x80, 0xf7, 0x0, 0x10001, 0x22040, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x124, 0x385, 0x7f, 0x1, 0xfc, 0x7fffffff, 0xd2b0, 0x0, 0x9, 0x0, 0xf233}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x80000000}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) 11:15:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 21) 11:15:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xc0000}]) [ 811.857478][T17597] loop0: detected capacity change from 0 to 16 [ 811.872938][T17602] loop3: detected capacity change from 0 to 16 [ 811.888439][T17602] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 811.920509][T17611] loop4: detected capacity change from 0 to 264192 [ 811.925531][T17613] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 811.927300][T17614] FAULT_INJECTION: forcing a failure. [ 811.927300][T17614] name failslab, interval 1, probability 0, space 0, times 0 [ 811.949032][T17614] CPU: 1 PID: 17614 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 811.957861][T17614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.967913][T17614] Call Trace: [ 811.971196][T17614] dump_stack_lvl+0xd6/0x122 [ 811.975787][T17614] dump_stack+0x11/0x1b [ 811.979974][T17614] should_fail+0x23c/0x250 [ 811.984619][T17614] __should_failslab+0x81/0x90 [ 811.989369][T17614] ? apply_wqattrs_prepare+0x5f/0x630 [ 811.994755][T17614] should_failslab+0x5/0x20 [ 811.999244][T17614] kmem_cache_alloc_trace+0x52/0x320 [ 812.004597][T17614] apply_wqattrs_prepare+0x5f/0x630 [ 812.009880][T17614] ? vsnprintf+0xe8f/0xed0 [ 812.014283][T17614] apply_workqueue_attrs+0x9e/0x100 [ 812.019540][T17614] alloc_workqueue+0x777/0xad0 [ 812.024291][T17614] ? disk_unblock_events+0x35/0x40 [ 812.029390][T17614] ? bd_prepare_to_claim+0x1e6/0x270 [ 812.034714][T17614] ? loop_attr_do_show_dio+0x70/0x70 [ 812.040111][T17614] ? loop_set_status_from_info+0x35e/0x3a0 [ 812.045910][T17614] loop_configure+0x681/0xeb0 [ 812.050598][T17614] lo_ioctl+0x618/0x13e0 [ 812.054919][T17614] ? path_openat+0x18d4/0x1ec0 [ 812.059909][T17614] ? blkdev_common_ioctl+0x438/0x1110 [ 812.065347][T17614] ? selinux_file_ioctl+0x981/0xa10 [ 812.070571][T17614] ? lo_release+0x120/0x120 [ 812.075066][T17614] blkdev_ioctl+0x1d0/0x3f0 [ 812.079606][T17614] block_ioctl+0x6e/0x80 [ 812.083834][T17614] ? blkdev_iopoll+0x80/0x80 [ 812.088404][T17614] __se_sys_ioctl+0xcb/0x140 [ 812.092980][T17614] __x64_sys_ioctl+0x3f/0x50 [ 812.097566][T17614] do_syscall_64+0x44/0xa0 [ 812.102043][T17614] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 812.107927][T17614] RIP: 0033:0x7f0ae3e384c7 [ 812.112374][T17614] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 812.132317][T17614] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.140721][T17614] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 812.148678][T17614] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 812.156717][T17614] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 812.164742][T17614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 812.172695][T17614] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 812.199671][T17611] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 22) [ 812.221253][T17611] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 812.232395][T17611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') sendfile(r0, r0, 0x0, 0x0) pread64(r0, &(0x7f0000000640)=""/4096, 0x1000, 0xce99) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 11:15:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000fffffffe0000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 812.277413][T17627] loop1: detected capacity change from 0 to 16 [ 812.303105][T17627] handle_bad_sector: 49 callbacks suppressed [ 812.303121][T17627] attempt to access beyond end of device [ 812.303121][T17627] loop1: rw=2049, want=18, limit=16 [ 812.307440][T17632] FAULT_INJECTION: forcing a failure. 11:15:21 executing program 5: sync() sync() [ 812.307440][T17632] name failslab, interval 1, probability 0, space 0, times 0 [ 812.320846][T17627] attempt to access beyond end of device [ 812.320846][T17627] loop1: rw=2049, want=18, limit=16 [ 812.332636][T17632] CPU: 1 PID: 17632 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 812.332658][T17632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.354468][T17627] attempt to access beyond end of device [ 812.354468][T17627] loop1: rw=2049, want=19, limit=16 [ 812.362089][T17632] Call Trace: [ 812.362098][T17632] dump_stack_lvl+0xd6/0x122 [ 812.362153][T17632] dump_stack+0x11/0x1b [ 812.362170][T17632] should_fail+0x23c/0x250 [ 812.362185][T17632] __should_failslab+0x81/0x90 [ 812.362203][T17632] ? apply_wqattrs_prepare+0xbe/0x630 [ 812.378986][T17627] attempt to access beyond end of device [ 812.378986][T17627] loop1: rw=2049, want=20, limit=16 [ 812.380973][T17632] should_failslab+0x5/0x20 [ 812.385230][T17627] attempt to access beyond end of device [ 812.385230][T17627] loop1: rw=2049, want=21, limit=16 [ 812.389529][T17632] kmem_cache_alloc_trace+0x52/0x320 [ 812.395598][T17627] attempt to access beyond end of device [ 812.395598][T17627] loop1: rw=2049, want=22, limit=16 [ 812.399667][T17632] ? apply_wqattrs_prepare+0x5f/0x630 [ 812.399689][T17632] apply_wqattrs_prepare+0xbe/0x630 [ 812.399712][T17632] ? vsnprintf+0xe8f/0xed0 [ 812.411538][T17627] attempt to access beyond end of device [ 812.411538][T17627] loop1: rw=2049, want=23, limit=16 [ 812.414833][T17632] apply_workqueue_attrs+0x9e/0x100 [ 812.426186][T17627] attempt to access beyond end of device [ 812.426186][T17627] loop1: rw=2049, want=24, limit=16 [ 812.430744][T17632] alloc_workqueue+0x777/0xad0 [ 812.430771][T17632] ? disk_unblock_events+0x35/0x40 [ 812.442314][T17627] attempt to access beyond end of device [ 812.442314][T17627] loop1: rw=2049, want=27, limit=16 [ 812.446762][T17632] ? bd_prepare_to_claim+0x1e6/0x270 [ 812.446789][T17632] ? loop_attr_do_show_dio+0x70/0x70 [ 812.512850][T17627] attempt to access beyond end of device [ 812.512850][T17627] loop1: rw=2049, want=185, limit=16 [ 812.513810][T17632] ? loop_set_status_from_info+0x35e/0x3a0 [ 812.530339][T17632] loop_configure+0x681/0xeb0 [ 812.535094][T17632] lo_ioctl+0x618/0x13e0 [ 812.539322][T17632] ? path_openat+0x18d4/0x1ec0 [ 812.544143][T17632] ? blkdev_common_ioctl+0x438/0x1110 [ 812.549499][T17632] ? selinux_file_ioctl+0x981/0xa10 [ 812.554763][T17632] ? lo_release+0x120/0x120 [ 812.559247][T17632] blkdev_ioctl+0x1d0/0x3f0 [ 812.563740][T17632] block_ioctl+0x6e/0x80 [ 812.567973][T17632] ? blkdev_iopoll+0x80/0x80 [ 812.572554][T17632] __se_sys_ioctl+0xcb/0x140 [ 812.577140][T17632] __x64_sys_ioctl+0x3f/0x50 [ 812.581753][T17632] do_syscall_64+0x44/0xa0 [ 812.586170][T17632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 812.592106][T17632] RIP: 0033:0x7f0ae3e384c7 [ 812.596498][T17632] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 812.616117][T17632] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.624524][T17632] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 812.632478][T17632] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 812.640433][T17632] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 812.648435][T17632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 812.656429][T17632] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 11:15:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 23) 11:15:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) mkdir(&(0x7f0000000700)='./file0\x00', 0x62) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) preadv(r0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000200)=""/192, 0xc0}, {&(0x7f0000000500)=""/5, 0x5}], 0x5, 0x200, 0x6) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000540)={0x5378, 0x5}) symlink(&(0x7f00000005c0)='./file0\x00', &(0x7f00000006c0)='./file0/file0\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) [ 812.709065][T17650] loop4: detected capacity change from 0 to 264192 [ 812.714951][T17652] loop3: detected capacity change from 0 to 16 [ 812.725903][T17650] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 812.740435][T17658] FAULT_INJECTION: forcing a failure. [ 812.740435][T17658] name failslab, interval 1, probability 0, space 0, times 0 11:15:21 executing program 5: sync() sched_getparam(0x0, &(0x7f0000000000)) 11:15:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xe0000}]) [ 812.753138][T17658] CPU: 1 PID: 17658 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 812.761995][T17658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.765708][T17650] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 812.772091][T17658] Call Trace: [ 812.772100][T17658] dump_stack_lvl+0xd6/0x122 [ 812.772125][T17658] dump_stack+0x11/0x1b [ 812.772144][T17658] should_fail+0x23c/0x250 [ 812.783207][T17650] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 812.786446][T17658] __should_failslab+0x81/0x90 [ 812.814946][T17658] should_failslab+0x5/0x20 [ 812.819462][T17658] kmem_cache_alloc_node+0x61/0x2c0 [ 812.824649][T17658] ? alloc_unbound_pwq+0x3e6/0x780 [ 812.829747][T17658] alloc_unbound_pwq+0x3e6/0x780 [ 812.834673][T17658] apply_wqattrs_prepare+0x1ed/0x630 [ 812.839968][T17658] ? vsnprintf+0xe8f/0xed0 [ 812.844372][T17658] apply_workqueue_attrs+0x9e/0x100 [ 812.849564][T17658] alloc_workqueue+0x777/0xad0 [ 812.854454][T17658] ? disk_unblock_events+0x35/0x40 [ 812.859622][T17658] ? bd_prepare_to_claim+0x1e6/0x270 [ 812.864903][T17658] ? loop_attr_do_show_dio+0x70/0x70 [ 812.870251][T17658] ? loop_set_status_from_info+0x35e/0x3a0 [ 812.876050][T17658] loop_configure+0x681/0xeb0 [ 812.880785][T17658] lo_ioctl+0x618/0x13e0 [ 812.885031][T17658] ? path_openat+0x18d4/0x1ec0 [ 812.889906][T17658] ? blkdev_common_ioctl+0x438/0x1110 [ 812.895293][T17658] ? selinux_file_ioctl+0x981/0xa10 [ 812.900507][T17658] ? lo_release+0x120/0x120 [ 812.905006][T17658] blkdev_ioctl+0x1d0/0x3f0 [ 812.909531][T17658] block_ioctl+0x6e/0x80 [ 812.913786][T17658] ? blkdev_iopoll+0x80/0x80 [ 812.918427][T17658] __se_sys_ioctl+0xcb/0x140 [ 812.923017][T17658] __x64_sys_ioctl+0x3f/0x50 [ 812.927618][T17658] do_syscall_64+0x44/0xa0 [ 812.932111][T17658] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 812.937998][T17658] RIP: 0033:0x7f0ae3e384c7 [ 812.942407][T17658] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 812.962159][T17658] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.970623][T17658] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 812.978583][T17658] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 812.986550][T17658] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 812.994508][T17658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 813.002481][T17658] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 11:15:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000003000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:21 executing program 5: sync() sync() sync() sync() 11:15:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 24) 11:15:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat(r1, &(0x7f0000000080)='./bus\x00', 0x4) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000140)={{'\x00', 0x3}, {0x4}, 0x120, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001700)="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", 0x1a1, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x10b6}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x0) [ 813.076359][T17674] loop1: detected capacity change from 0 to 16 [ 813.098928][T17677] loop0: detected capacity change from 0 to 16 [ 813.117484][T17684] FAULT_INJECTION: forcing a failure. [ 813.117484][T17684] name failslab, interval 1, probability 0, space 0, times 0 [ 813.121426][T17679] loop4: detected capacity change from 0 to 264192 [ 813.130239][T17684] CPU: 0 PID: 17684 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 813.145457][T17684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.155512][T17684] Call Trace: [ 813.158791][T17684] dump_stack_lvl+0xd6/0x122 [ 813.163389][T17684] dump_stack+0x11/0x1b [ 813.167552][T17684] should_fail+0x23c/0x250 [ 813.172057][T17684] __should_failslab+0x81/0x90 [ 813.176472][T17679] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 813.176903][T17684] ? kobject_uevent_env+0x1a7/0xc40 [ 813.191208][T17684] should_failslab+0x5/0x20 [ 813.195771][T17684] kmem_cache_alloc_trace+0x52/0x320 [ 813.201059][T17684] ? pwq_adjust_max_active+0x491/0x4b0 [ 813.206531][T17684] ? dev_uevent_filter+0x70/0x70 [ 813.210642][T17679] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 813.211474][T17684] kobject_uevent_env+0x1a7/0xc40 [ 813.222535][T17679] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 813.227517][T17684] ? __list_add_valid+0x28/0x90 [ 813.242847][T17684] ? alloc_workqueue+0xa18/0xad0 [ 813.247803][T17684] disk_force_media_change+0xe3/0x170 [ 813.253181][T17684] loop_configure+0x6c0/0xeb0 [ 813.257872][T17684] lo_ioctl+0x618/0x13e0 [ 813.262119][T17684] ? path_openat+0x18d4/0x1ec0 [ 813.266896][T17684] ? blkdev_common_ioctl+0x438/0x1110 [ 813.272390][T17684] ? selinux_file_ioctl+0x981/0xa10 [ 813.277679][T17684] ? lo_release+0x120/0x120 [ 813.282176][T17684] blkdev_ioctl+0x1d0/0x3f0 [ 813.286670][T17684] block_ioctl+0x6e/0x80 [ 813.290968][T17684] ? blkdev_iopoll+0x80/0x80 [ 813.295549][T17684] __se_sys_ioctl+0xcb/0x140 [ 813.300159][T17684] __x64_sys_ioctl+0x3f/0x50 [ 813.304747][T17684] do_syscall_64+0x44/0xa0 [ 813.309285][T17684] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.315238][T17684] RIP: 0033:0x7f0ae3e384c7 [ 813.319637][T17684] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.339471][T17684] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.347906][T17684] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 813.355861][T17684] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 813.363837][T17684] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 11:15:22 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r1 = dup2(r0, r0) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x2) chdir(&(0x7f0000000040)='./file0\x00') dup2(r0, r0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400400, 0x0) mkdirat(r3, &(0x7f0000000140)='./file1/file0\x00', 0x80) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x0) [ 813.371795][T17684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 813.379749][T17684] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 813.389665][T17684] loop2: detected capacity change from 0 to 264192 [ 813.400383][T17674] buffer_io_error: 33 callbacks suppressed [ 813.400391][T17674] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 813.416152][T17674] Buffer I/O error on dev loop1, logical block 18, lost async page write 11:15:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000005000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 813.425001][T17674] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 813.446065][T17674] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 813.469049][T17709] loop0: detected capacity change from 0 to 16 [ 813.472048][T17684] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 813.475461][T17674] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 813.490201][T17684] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 813.496524][T17712] loop3: detected capacity change from 0 to 16 [ 813.514382][T17674] Buffer I/O error on dev loop1, logical block 22, lost async page write 11:15:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 25) [ 813.520753][T17709] syz-executor.0 (17709): /proc/17706/oom_adj is deprecated, please use /proc/17706/oom_score_adj instead. [ 813.526436][T17674] Buffer I/O error on dev loop1, logical block 23, lost async page write 11:15:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) sync() open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x101) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 813.605656][T17728] loop4: detected capacity change from 0 to 264192 [ 813.635931][T17736] FAULT_INJECTION: forcing a failure. [ 813.635931][T17736] name failslab, interval 1, probability 0, space 0, times 0 [ 813.639930][T17728] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 813.648586][T17736] CPU: 0 PID: 17736 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 813.666429][T17736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.672503][T17728] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 813.676481][T17736] Call Trace: [ 813.676489][T17736] dump_stack_lvl+0xd6/0x122 [ 813.687530][T17728] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 813.690792][T17736] dump_stack+0x11/0x1b [ 813.690812][T17736] should_fail+0x23c/0x250 [ 813.714771][T17736] ? kzalloc+0x1d/0x30 [ 813.718857][T17736] __should_failslab+0x81/0x90 [ 813.723657][T17736] should_failslab+0x5/0x20 [ 813.728167][T17736] __kmalloc+0x6f/0x350 [ 813.732373][T17736] ? kobject_uevent_env+0x1a7/0xc40 [ 813.737599][T17736] kzalloc+0x1d/0x30 [ 813.741490][T17736] kobject_get_path+0x7c/0x110 [ 813.746259][T17736] kobject_uevent_env+0x1be/0xc40 [ 813.751284][T17736] ? __list_add_valid+0x28/0x90 [ 813.756145][T17736] ? alloc_workqueue+0xa18/0xad0 [ 813.761099][T17736] disk_force_media_change+0xe3/0x170 [ 813.766574][T17736] loop_configure+0x6c0/0xeb0 [ 813.771258][T17736] lo_ioctl+0x618/0x13e0 [ 813.775501][T17736] ? path_openat+0x18d4/0x1ec0 [ 813.780389][T17736] ? blkdev_common_ioctl+0x438/0x1110 [ 813.785932][T17736] ? selinux_file_ioctl+0x981/0xa10 [ 813.791192][T17736] ? lo_release+0x120/0x120 [ 813.795728][T17736] blkdev_ioctl+0x1d0/0x3f0 [ 813.800218][T17736] block_ioctl+0x6e/0x80 [ 813.804456][T17736] ? blkdev_iopoll+0x80/0x80 [ 813.809030][T17736] __se_sys_ioctl+0xcb/0x140 [ 813.813607][T17736] __x64_sys_ioctl+0x3f/0x50 [ 813.818184][T17736] do_syscall_64+0x44/0xa0 [ 813.822638][T17736] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.828568][T17736] RIP: 0033:0x7f0ae3e384c7 [ 813.833006][T17736] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:15:22 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) lseek(r0, 0x2, 0x1) r3 = dup(r1) sendfile(r1, r3, &(0x7f0000003540)=0x100, 0x7ff) sendmmsg$sock(r2, &(0x7f0000003340)=[{{&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)="3b06081bc8c29e195e368c969ee1b3a3ca872dea6959d6943e002acbb82694b075eec5fd5134af8bce71431fb029a999c29a3eb25d5a205d1d0bf01a269fac7bd630e9f6a252add80417e813b097c80103249c0b13e6a2d148afa788dd290705f36287d90844a1fd8b6e4343f535ab2613", 0x71}, {&(0x7f0000000300)="376950957c7eaf5008bbb57b0def9f45bffab2ed15ac97f57b5adbc59ca165967adae010e985d83d2734de0f134518cc54849b5a05e420deea8adb95525a4eb65d44f38d01d4d6e7583c4caace2b0138097ec433d11f7c5641e3ab0dc9ed77d722d7cfe89628647e899d50c89223c9b05a5664f110e5984d5f640d1cf2b8cb93d84b378bd75801fdd2fb5a7bcb7afd281e75316ebbd93c065f71749494be39be92171562", 0xa4}, {&(0x7f00000003c0)="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", 0xfa}, {&(0x7f00000004c0)="b90bfc1f256fa3e86de518b73539e8d2288aa112d555e7529dc1429dc5aac22dbc51d7f7e1734857f08ab08cc435d635ce4a5b8b2f46715ded80813c901e3203188f28e03c7202c26f4fd7ab0e2f0f66cabd53a2079e4aa69e6678270660b1a24da4d4213323ca275de8a280a46279744a786699f55eea72a68699af6bfd4f02c7deb7c9dc71", 0x86}, {&(0x7f0000000640)="5a5c1881e758efd615bff48818830ce9625d8a19a3e65cef3ad94614f9cab02ce7e1f81a2bd4b68e76fad3109a795fbbdce473f1c271463a587402d50f163c032fc70a5cc67652902371db641bbd4c954b563ccf01594547b3a4bb777eb8ce5deece81253a316ef95145a7e73268698efac883fc1621adfb951c1f66ddeb1e02ec431ccae0a9b1a535613d03d17c6cd5e5bd3b8e04227ffb8d082b", 0x9b}, {&(0x7f00000000c0)="7a7567729cf3299cd212549e375bee8f3b0fbb1e89d8fcc0ad8dcf472d", 0x1d}, {&(0x7f0000000700)="3dd7eba9a0b2c18ceedd54958852b0069781a80d6ac323920db5c557c09ed2f034f58bb0cce6e73172c8e25d8ac1c482ad1a82b0bb1ecbd224117ea0e4b60cc283d4e6b097490b8749dca947055b63daf96c7fa5ed0e897c89acda3baa9b652fbc99a70fe7a77df05f6558476760c668ec555b5794e6c00508fd7741ae24c0a7c1460dedc166d67f5fe3dd943a38ae7a87a27a5e018a4785a3fed314c05e6ddf839e0c7e5751e341eb96b19e9680344818d54dc45858515a6426d72b34fa32579b", 0xc1}, {&(0x7f0000000800)="3a60c5d2cad0f5af76bb95f17b9f4c4d57a407c4342c0640a235b3c5622d98d9de83eac6fce68ecfa8d56b3df37ca20811735d3fcd38cfb1f50a72223a4e3573421d832280e354f9d86ed660ac47ea38c516924845fad974bbf7f699737d996043a3acf6bb9756d82d1585248df638297676a914eec4a0da3efe0a1b7238cb0f75f0", 0x82}, {&(0x7f00000008c0)="6e6c0acf2b286ab004562341b67c0fa0d9058a84775e254948442bb41d1def4747ff7c4248e60cce2211ce1548591f3d0339797b8a2aedc6d5f7dcfcf6603550816311370d0e334d48e0bc58bfb5d8463e9aa770aceb5f16e1ff92dfe9e2375cb8bec89dd9e27ac8e6fb9697fa373f30256ff7b38f4ae47500b746df842c08e9da20ab3ccf749213778d3e74fdd20b0c2245f78485d1d2f5ab6656aa1d1a5954", 0xa0}], 0x9, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x360}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="399ae24a232e4ba5cb391e7e76982872dbb13517b96f583f301e16ff745fb559f463988a0702a6bf43ed7b5c17778d74636f593ad4ef48c62bf148a082885332009af468d51da0137b274362d8362d8d452b2e5655e771b1a38d6fb59a9059ec65419cadf6d603426aedf56f8ddc357df6a7f256aeefd8af2ba40d9fbf1a15381a0259d3deb5fd79cce82061c4", 0x8d}], 0x1, &(0x7f0000000b00)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0x60}}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x2, @loopback, 0x5, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000c00)="9e1370f5e33e15ea97a4896dd75879f83739d0574b2d9f8a3506611bcfcffc7635d820654fa54a7d32eeeab77f3033ff5975700968e1f1a3bd58286c5e40129d769e672cdb268b21c8c6be4d21ca7b70a60fe8a7a37b80a609f21049b271cb800e847db7521a342a090113c5752ff5a7d593afe6e2ac0a6af370f4bbfe4d2b52d79007331858da0ec21280184957f391267c3cfd79487adfe0b4f7f458e2a850c89361a199736b943286e2698e0867ba99ad2cd4730c684b8865c7692a85d3cff173405399529bce6ac3fbe5cdd5a03ac5113a8249555e12689089faa0c2455b800fd359fba3f0c76af3b3d8f173f0ae80965e583a2e8273e7d8ba790a1762f9d12d10c13c0abf57adb4e3b236b04a0fd7c0253e0b2b9835289bde02e8618267be0d31ad53428dd5dab66a7252ddde30c47eb8ddbd0f5a23c3708992272c1b93163b7402e951c429ff7616f00a38228c665c99fec3d65ecb52ee35b601b1155fe5a6c62e8628a8888fe313bc8681e55d938612bc2c4fec40372c460b4afb00c89d80fa0690ffc663bf4b0ed661bc402bad8514dcdbf9350a1c729dca5f70e52c2b08c6602cc5ee4619fe326e8d81558301fdaa1a10f1b29bb2488556c843615b1d323834d719cbac3904c1dee1b7f9363e4aad1542e118c6c0b3637d6d2007a1d4ba7910a0ea68da3aabf36130cd508a86ae6628416d549355daa94d694b6056f01d44542e3d71ed60dc474756409458a1c383bfb014baeafcba53a3cd4ce96512309403f308a5651e48fca23d286f5a6f0893e3a81b0b121ca9d8b23a96ad7038f97731e3215759d8b3f62995fbb3ff5facc262a451b7300d356a7e540d41c0a0d6527c3dd9c0f56fdb5b0c0e7aa94d99b6fe115b26b2dd8ef1ffe28b83f81b36b4eb626176cc1e2f21e3c63b7efb5a3d0d8a62e782a384bce7b76d167459b6c915b1ef02671bfed0dbc0bf95dae08b3b14af6adbac6cf7382947e4df580163077fb5fc34451cbc9dc60efb85beeb36eecd181ae0e184bf1d2dc0c02c0d0ad0c6457dc66e1cf0dbd840cbacd560b12d1d11b8f3591ac9488e31a04b44d91d191ee750ff9cac01861937433756d005f9031df1b7619688fa52274672cc290f86cce2161d114be325aef79f20786e86af764cb3dd58521b0df5a7439c658384f06a42618f8798e27505d081c9262a442d069651b25f65953e32922d0140f7f5842c706dff6d64a964e5f1e8a12f9f1d1881c5145da8d50fe9904ede446e91e1685acb635253e9fb8c93f86352bf6ab3bc99ef91a871bb99908fb8b30bf356111195b11073b3ababa2fad2d7c1a53801bf12631375c560326dec0692c170aa3ac632024335928335fcdb4be6ce66c4b695e91a3be14c208653e8e4d158f6868688b7e9d3a81aa745430a2c03217c6c38b855da2159bfa4270c4e760a2a1dba8ddd36e471e5b94760e246c19f2dcc995c1f16c80261f14e48b4ce9f8d0c7bb82b232b3c51c9d12c43c1fe1406282ac6604dd17af759fe2a12a3d811750c41800f5a6af05c53c7c02c55b9e809746ab60d0a9ed16ba3fcdb2b384fae1eeb158680344a4beb7fefd152f61b7ada8442d4509748af2f1e13274ea51e3895b5ed19042f4915c908664d3a2d318df11b6ddeec5070edaf0b6d5ffc18356bab9de86ddaecb5112074cac815724485e14906a65570bd5813b4c56bdcb9d865512ccfe7f9a19664e0504e8656a2494813a03c1af7d47c30149e5c4561c3edda2e71515ee0ec4ad47c9c58193fb674cbab0cd6f1e0c395414bba2bbd2c012ac2991995d62202cd07ca24c1dba2f8e70e369f05fe45c9f2e54f4d91253f990c8ea57e86cefc649eccc537a70d0be57bdd9a12ca66ef1af1445732aa55eb60efbfd53236349726934f416676ee06eae3a3be4a6df3ad2d6c22e3b56e9108bb8659344d4d88cf2bf2efd1074ffd61446f93e674bb1b8083513c024c1678cca51e62eca6ae515a1d795ecc4169f74cfd9dbe590e2473c87b7cfcf3215b815a30d57529569ef1ce5793d27c36a44fd501e9b735d1c72d9be18306c380da5f07480472872241fc2b82e12b5780196ecfc1aac00681cbecff7b67abc288255e6fe7f1288c81321e82529fdf83678857d1f4bc502ceedc041a79dcdb7ded57f2aace6f28d79e62e8027575a6b5fe66d76027d402843f5296953565e07c9085f4498efe7ad0a74a3fc478cb351be1d0c6211ae4f25c0c433d63e57ed9ae11582d60f4c94c36919950eea603c4ed71d9f099f68cf2e0519e6eeded01b4a8010a9dfb5461eecedc04fad1e312dd089cfdce744f7c268700e6aaa7e5f4f550c35698b230e4fd9f612ce73eacc0a305d379593acbba258b166c0e9f2b9770b8cb6b7b9a250e13ca9b8e34ce326bd850bbe288d61419dfe9930cacfb6d28fe757811cf8824b007a24a584862e62c6e86b3522d5623c2def6c9f69193733210496ba86814eefa4076f49ad01b499130b328d5608ca174e244f9601e6ef33f4febf0c78470076067ee155bb7f1d08bfc5047b66d64ee545171de45b859c0ce895b7a694290388c262f53274c382b9a4531cb16dc9792d7121b0cc1421440a9dfd47726318a0ef51364ad6a232aaeb9fb76072a97e4d5c074590d83791484e84e7f182f06f2c4b9260b7627c171baf4cbd96adcad95e362978ed3da4ac3c3c9612a99c23c6881dd22a40dcfe20f46b2b92cf7d1617d2d0e7f0f69c71b022ff017d5b02965ba298a8f57c14b0434327ad8d72eba71667ec9cd5d388e3b613a554e8ebe4cea435c6d4d2c361bdcd8ee5cfa06c5767314f7b8967b5e65d8cbb4222fbb9c2b1ed27486ae85a51b51af0cd2ff52b262f565b2ac534e9a68634b984585520fa9309161169e39e2ea2e7602c6bc8590409c8659bf9539b643f69874d74e7d2ba7bdb56860dc73b2da703a3aeb260a74e839033bf893a7fb3f27c7a0d65cce572986c388bb63944d2a4494b4202c475ccff826465f210140b2859d068a36e8cef9d56653fd9712bcf586ef892a9d4de5ef902dc7c63d665e0cbdf6d69b705b5e5e253c945d333ed8139ec38ff8e543fb60e3564d733a2fe84a33c88e2061cb84253156477a4410a8bab6c205f4dd89afa1c25b471b6ae0f63038f136e723d9e1cbb5c6c86c97a96232601f74185deb8b8dc13ac083f54e13e1c3c2cce3adbd5c5d28a4f8f457f8a846a4848c58280334f666e98d9911c5f1b3ba7d467d8acabe2efd1a74c577efdcce3696b671964034978044aa40ff31468fe69b9e013b35975fc8c1376062df91fea6dcc5e35d02cf58fde0784757a669446ee46c4b3591b2dcfd27fd7b6f8742cc5b7059d08a84a4b7b528386bff5df46c9937d4030c1c0ee0400086ae4d375df7a3562803da7e9f3b5dc3bba46f7557754e46bd138618b72780c8b9edf6908daa45e9901ccc3b723af6b813a7783f001b28df6c6ecc5d6a2debf24b60d8e7990c74e181899668f51c090716bbd3519322ce3bab5473f5b8b59387156e27e008b8a1f2e501c08eb58e61992960fb6b84adf623e9d643f7adc8f54217e327021df6f00a748610a58ebedb56b27704c0bfc448d474a32ed92c9ab18f731cf1d311f6e8ecf81f54b88530957be44122af7e183071ec05ff548d1fdaddb2f86d364d2268d5f8990701ac0a74bf79cddcc14569ca5afff49efa2ded2b726626ccfcc1bbf47bb66b9de8f4a841afd451c909efa517f3b5de22992ed448173ed6a4e24822e29bfd91889c5cab679abf1be7047b5390172d778006255cf1c62497172250c8af8932e31dfa01f12bbbc14c95f2d0b472e5c0edeb2364f9fe7e73773bc66a44afdc0098b6282d625332526d62199a1fa97b6bb8726462ca835c05adce90471912586649a259e549e35b4e52d486edc5ae788e565d1eecdbcaf6f65c9ed37f2370851bce193e58911e42b65212104d50be7f2bd65195cac01422d0f788ad7b76874ec8522cdd7aeff6f8abdefde80449e71ed31cf836843af65de87beb84e1de38a58a49f18be14e599b60a746811811e435b9a557645ed5af6cb4d0c58507e9ee56b227f8d3f194d7b90c78ecbeb07b393af941365b16f2c3b5744b40a6d8263cce644c1f5731ae19f3573e08eb712fbe819d39c61ffc246c9efb22fb7902213056fa8b79505f233d690d7c3d8167bfac1cd46775d0d6fe19283731d4d7be2c24cbb64b718fda1a2136ea72d42f32037c83df0cb5c5096d63dae09fa5bf113d75d27e463611a0c08e3e01742326059660cf6cec615a8065119c4844e2623032af3f955a91d059e393de9d6e9b9feea702dcf4e82c836c43846aa28e39ab1cc1324008c13f47b1d4c82adda4491bd04ab132a33c48e5930e760b67d3be05a0a63ccc2094aaaec5e6d31fbde3e76f31d701217bcd419f53d791717e88aa6477081b59bbc94ae622392b62e4b991854a50bd62f9e100246da2234ad5fd4cfdb49868315a4ef9bb8bac6ea7f796fabebf099828d464a0ac760c8bccebc574560ed904b71ba43b732a70e4e56cd7e340e3cc7c304b9986a73d8b96a490da78fe3c5b3a638872506a7817aded79013ac47dd620daaad8e4a0632331600d8f541d52159f7a1468a91170700723f6c8a32013a255a349fe4c5c6d9186b3d5189673eeb51f92b389e6624bab21d3e9dd36b317a3176f2c807df6ca57610755d83506e39e830375aa1159e6c075d6d804a8d3cbc53c9df87a26a1123430cdd8ac349035e2a2177b45952d2e7669c45d3c59accb4e1eca237db3978a90dcca7b5cb76693a25d1df0950c9a30721947c39098f7b5368846300d5f15a7365bfb596d660cfbd19e86b425be7b14639bcf29d2e550479bb63c4e53857ef6820a5722e21bdb9df7af2272c6f082fbcfa7ec7332478c67f20ebd5d72089a48d9dd98b5325dea2ad1222f57436c773c1544a21d7c98287a769634a4bfce675c3bcd2238baa713eab9a58526ca2f164f7d17899e157ac64c11963cb4db87a536dc0f0245f142a64244f8502fc34eac80abfb942f1399fe339bd2f3fa2959bd6165d45804beb5f4df3c6fcdba9e0f5811eb8e4c792a076709602163102a6f1bc7499a56767dc4ba114098bbe32f8bc761a1733241fcd23a2695b20e03dd9f16934013b109409e8ade7a8eb425b44e0c7a1d6e793917fca60e967e51061d1978ddb5ddbcd6fc3cb5b9e77690086f5410e96f61399fa3893656ac0441c2fd0a52898b6e02a2e7d886f78368d6d0f8024a64caa1c83a0a524db39e192af0b36544598d4026741e96be95834cca87a8582ad3733bc15146b7a83ae7341c105868da1a5f6019a0697a4dc1e2a7f0829e7b5913cae2c4b93378671d83e179e9c776a622db49034f126b899f51c8b1e1ef4eb1151ac17bda28322572be7443e9b66b8c3716508b6ea812d6596dfe5b654a93d2d40f524e593f8232cbff1719a69f3e737c424b9bdbce475a7ca9da36cbb93ce08cce6c901f1a9ed75c66e4e1b9308cf959e854484ad86fc1f046286698ea40ebc2b513fd8f3ff3b62df6eaba35a2ab1864dc25c4526e1ddf449299f4fb1776ff38538bb5c17fd0077af6846f0a2f1167451a3c3ae5d434be19f9c48087582a39c9f24fcc3efc94a4d4164e8b54838f8cdb40941d25f271e5ef10bc0ac0fc4d96b672d403b60c154cf51dc97cd7e6bdff612f6f952fb853b37ad96de941cfd37c3db52f89ec85bac1e9771ef543081c71dc1d2105a6d50f155ecca6533fda4a7275c9c7bd35969fd37bae0e2524e989978bf3b377ad38135cf695edcc87", 0x1000}, {&(0x7f0000001c00)="a17bb86d0807d18c4cefa2a21a33b1f00ea1318b0801536dec70853ee3d6b58ef193cbe9b05594946b13e68e12525f72bc9bd1b18261c0e01b54b613a508dc0ca4547c835ce4d6a25cc33a238ff2a7a150970d18bb4434d3f29cc4a55945fabc04f2289eee5ad5274066f5a91e6b323d49d3a901338539e24813b1689f95f67308b84c7e36b80f5b54cb08c85e276ebe79dda4580cdd86721f63ca7340a38f09aa4abacd342199", 0xa7}], 0x2, &(0x7f0000001cc0)=[@txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}}, {{&(0x7f0000001d00)=@generic={0x6, "6fc3690e38b8efa9607e1a30e64c215d07acb8d170c50bb144514eefee4553803b7ee65c10f922c2b477f79707a51ea3ffb6ef3bdbcc553556c87996cd7c145d0ac7b504be64e04e432ab1fd24ef314807029558d78254926ff4df2540958dc5bbf066eabe816870f0cde96e055a7cd8693a971afc1cde34e533c5c77e61"}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001d80)="acdab486339e9098a0ca11951322f4dfeb2c6ebb3010", 0x16}, {&(0x7f0000001dc0)="6e23c57cb1a3e567583d76ffd30ab66b4497b977fe508d036c35b452d01a9dc0635b4bbe0cb564c81cd15d95482df56b992b8f4f5b5c019757a67900a17d31a0b39e1231738dda33980094b469091dff16ecbbf3e5cf0e0d3b5201de1115635dda9dd9ad7ed649f02ad1fb3cc6b8dbb801fd933cc1acfe4fe36c7608a224ffa2891085eb505778f7ce056ae0c793dda3727dd12ec1d09b0b4f81de12d37182", 0x9f}, {&(0x7f0000001e80)="3bd516d4b9a648f1194a532044517d8b7c768d7a5ce4bd11185a27b113f3ccf86b6efe368b81de91433d0a8eea232d5d076ae3ddf60cbfcd97c73d9721294850cdf2a130f7ccb09cf05ae3f459e9b107f88f6740f6", 0x55}, {&(0x7f0000001f00)="117dc88b5c1ff7f7b8378fdb62e7f2fdfa071fb3fc38d31f14d31ee22eed69acab636f58489a42fa25aa0aca3a3e5900ca2066b6a9af13c2ce0859de67e629dcb279eaff419a74753733a3d7e05d7b2e49d5c3dba0c1935a4063c881a69577cdd487512eaf764410a9c0e50d6efc671179414407be81c90ddb228128d87c7563b3435077217a4ef7709bf50e2a3507f3c8cbd3aaed5dc9f8cfffc8f4b084d55478894392061e4602877c787c9dd02ce8005a813534a991098086694580ba990ac04db601f2307d7432ec3af689959cacba78d942e2f940ee56731bb708fc47ea43888f587dd86980de43e8c93906", 0xee}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="6df44f4b285249e422e91d984a64ae83741a28dd358becf564858609c50daf9c4ecb479ace68167524153d368f46256fc38219fcee80", 0x36}], 0x6, &(0x7f00000030c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}], 0x60}}, {{&(0x7f0000003140)=@l2tp={0x2, 0x0, @local, 0x3}, 0x80, &(0x7f0000003240)=[{&(0x7f00000031c0)="05bfc2376b03da0dd36b86c76ad7fefd3e823cf7222b150b6760256c58a70e38262574cd8719f1febb29714c94431d376546abf7a5015807972a0610ab03039c93f68e7d68d35a9a5681d6b50b5e933873265ca8", 0x54}], 0x1, &(0x7f0000003280)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x700e}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xe5}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x90}}], 0x5, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000003480)='./file0\x00', 0x8000, 0x0) sendfile(r1, r4, 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000034c0), 0x501000, 0x0) write$P9_RREADLINK(r5, &(0x7f0000003500)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r6 = openat$cgroup_ro(r4, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) ftruncate(r6, 0x4) 11:15:22 executing program 5: r0 = socket(0x1e, 0x800, 0x1c93) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @sco={0x1f, @none}, @phonet={0x23, 0x4, 0x6, 0xfc}, @can, 0x5, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000000)='syzkaller1\x00', 0x20, 0x6, 0x80}) sync() r1 = syz_io_uring_setup(0x6926, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r4 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r8}}, 0x9) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r9, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x9, 0x420000, 0x23456, {0x0, r10}}, 0x7) sync() r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r12 = epoll_create(0x9) epoll_pwait(r12, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) syz_io_uring_submit(r2, r9, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r11, 0x0, r12, 0x2, 0x0, 0x1, {0x0, r10}}, 0x6) 11:15:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000006000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 813.852616][T17736] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.861015][T17736] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 813.869061][T17736] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 813.877019][T17736] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 813.884977][T17736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 813.893083][T17736] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 11:15:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x100000}]) [ 813.908267][T17736] loop2: detected capacity change from 0 to 264192 [ 813.924523][T17747] loop3: detected capacity change from 0 to 16 [ 813.933882][T17736] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 26) [ 813.967019][T17736] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 813.997898][T17763] loop4: detected capacity change from 0 to 264192 [ 814.006793][T17765] loop1: detected capacity change from 0 to 16 [ 814.010717][T17764] loop0: detected capacity change from 0 to 16 [ 814.029711][T17765] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 814.053917][T17765] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 814.063466][T17778] FAULT_INJECTION: forcing a failure. [ 814.063466][T17778] name failslab, interval 1, probability 0, space 0, times 0 [ 814.076122][T17778] CPU: 1 PID: 17778 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 814.084892][T17778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.094949][T17778] Call Trace: [ 814.098262][T17778] dump_stack_lvl+0xd6/0x122 [ 814.102972][T17778] dump_stack+0x11/0x1b [ 814.107203][T17778] should_fail+0x23c/0x250 11:15:22 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = dup3(r0, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2080000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@posixacl}, {@version_u}, {@privport}, {@loose}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@privport}]}}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) [ 814.109894][T17765] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 814.111625][T17778] __should_failslab+0x81/0x90 [ 814.111650][T17778] should_failslab+0x5/0x20 [ 814.129418][T17778] kmem_cache_alloc_node+0x61/0x2c0 [ 814.134764][T17778] ? __alloc_skb+0xed/0x420 [ 814.139357][T17778] __alloc_skb+0xed/0x420 [ 814.143695][T17778] alloc_uevent_skb+0x5b/0x120 [ 814.148464][T17778] kobject_uevent_env+0x863/0xc40 [ 814.153617][T17778] disk_force_media_change+0xe3/0x170 [ 814.158995][T17778] loop_configure+0x6c0/0xeb0 [ 814.163679][T17778] lo_ioctl+0x618/0x13e0 [ 814.167462][T17763] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 814.167981][T17778] ? path_openat+0x18d4/0x1ec0 [ 814.168010][T17778] ? blkdev_common_ioctl+0x438/0x1110 [ 814.181233][T17763] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 814.182003][T17778] ? selinux_file_ioctl+0x981/0xa10 [ 814.182029][T17778] ? lo_release+0x120/0x120 [ 814.187385][T17763] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) unlinkat(r0, &(0x7f00000003c0)='./bus\x00', 0x200) write$P9_RREADLINK(r0, &(0x7f0000000440)={0x10, 0x17, 0x6, {0x7, './file1'}}, 0x10) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) signalfd4(r2, &(0x7f0000000280)={[0x3]}, 0x8, 0x1000) setxattr$security_ima(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340), &(0x7f0000000380)=ANY=[@ANYBLOB="0248e2ca1b879412d0dce5"], 0xf, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x7e15) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x0) r4 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x5, 0x1, &(0x7f0000000400)=[{&(0x7f0000000140)="13e39d9632b9e3e3f24bc94d4fa215685b1f6eabd8ac7e61b294f1255960ce2e79f435a14a95ff8e852c2ba41a69465b3edc7d0f90bff8aa263bc2", 0x3b, 0x4}], 0x1820080, &(0x7f00000001c0)={[], [{@permit_directio}, {@obj_type}, {@uid_gt={'uid>', 0xee01}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x48) 11:15:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000007000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 814.198367][T17778] blkdev_ioctl+0x1d0/0x3f0 [ 814.223014][T17778] block_ioctl+0x6e/0x80 [ 814.227277][T17778] ? blkdev_iopoll+0x80/0x80 [ 814.231940][T17778] __se_sys_ioctl+0xcb/0x140 [ 814.236548][T17778] __x64_sys_ioctl+0x3f/0x50 [ 814.241483][T17778] do_syscall_64+0x44/0xa0 [ 814.245933][T17778] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 814.251869][T17778] RIP: 0033:0x7f0ae3e384c7 [ 814.256267][T17778] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 814.276051][T17778] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.284598][T17778] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 814.292640][T17778] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 814.300594][T17778] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 814.308579][T17778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 814.316534][T17778] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 814.328530][T17778] loop2: detected capacity change from 0 to 264192 [ 814.336736][T17778] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x1000000}]) [ 814.366927][T17798] loop0: detected capacity change from 0 to 16 [ 814.368259][T17778] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 814.394522][T17800] loop4: detected capacity change from 0 to 264192 [ 814.400449][T17801] loop3: detected capacity change from 0 to 16 [ 814.419887][T17800] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 814.477848][T17800] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 814.488920][T17800] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 27) 11:15:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000009000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 814.522232][T17820] loop1: detected capacity change from 0 to 16 [ 814.603262][T17827] FAULT_INJECTION: forcing a failure. [ 814.603262][T17827] name failslab, interval 1, probability 0, space 0, times 0 [ 814.615916][T17827] CPU: 0 PID: 17827 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 814.624749][T17827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.634803][T17827] Call Trace: [ 814.638071][T17827] dump_stack_lvl+0xd6/0x122 [ 814.642668][T17827] dump_stack+0x11/0x1b [ 814.646809][T17827] should_fail+0x23c/0x250 [ 814.651219][T17827] __should_failslab+0x81/0x90 [ 814.656035][T17827] should_failslab+0x5/0x20 [ 814.660527][T17827] kmem_cache_alloc_node_trace+0x61/0x2e0 [ 814.666252][T17827] ? __kmalloc_node_track_caller+0x30/0x40 [ 814.672046][T17827] __kmalloc_node_track_caller+0x30/0x40 [ 814.677738][T17827] ? alloc_uevent_skb+0x5b/0x120 [ 814.682700][T17827] __alloc_skb+0x187/0x420 [ 814.687128][T17827] alloc_uevent_skb+0x5b/0x120 [ 814.691971][T17827] kobject_uevent_env+0x863/0xc40 [ 814.697007][T17827] disk_force_media_change+0xe3/0x170 [ 814.702380][T17827] loop_configure+0x6c0/0xeb0 [ 814.707050][T17827] lo_ioctl+0x618/0x13e0 [ 814.711289][T17827] ? path_openat+0x18d4/0x1ec0 [ 814.716134][T17827] ? finish_task_switch+0xce/0x290 [ 814.721236][T17827] ? blkdev_common_ioctl+0x438/0x1110 [ 814.726619][T17827] ? selinux_file_ioctl+0x981/0xa10 [ 814.731841][T17827] ? lo_release+0x120/0x120 [ 814.736330][T17827] blkdev_ioctl+0x1d0/0x3f0 [ 814.740816][T17827] block_ioctl+0x6e/0x80 [ 814.745044][T17827] ? blkdev_iopoll+0x80/0x80 [ 814.749618][T17827] __se_sys_ioctl+0xcb/0x140 [ 814.754272][T17827] __x64_sys_ioctl+0x3f/0x50 [ 814.758847][T17827] do_syscall_64+0x44/0xa0 [ 814.763258][T17827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 814.769224][T17827] RIP: 0033:0x7f0ae3e384c7 [ 814.773623][T17827] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 814.793215][T17827] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.801630][T17827] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 814.809582][T17827] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 814.817536][T17827] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 814.825490][T17827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 814.833446][T17827] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 11:15:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() open(&(0x7f0000000080)='./file0\x00', 0xb624464a7cfacc4c, 0x20) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 814.882579][T17827] loop2: detected capacity change from 0 to 264192 [ 814.910446][T17827] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 814.911237][T17842] loop4: detected capacity change from 0 to 264192 11:15:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x1240000}]) [ 814.976906][T17842] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 814.987786][T17827] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 814.993597][T17850] loop3: detected capacity change from 0 to 16 [ 815.012474][T17842] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:23 executing program 5: sync() sync() 11:15:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 28) 11:15:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000a000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 815.023573][T17842] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 815.085963][T17858] loop1: detected capacity change from 0 to 16 [ 815.113291][T17867] FAULT_INJECTION: forcing a failure. [ 815.113291][T17867] name failslab, interval 1, probability 0, space 0, times 0 [ 815.125983][T17867] CPU: 1 PID: 17867 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 815.134765][T17867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.144816][T17867] Call Trace: [ 815.148091][T17867] dump_stack_lvl+0xd6/0x122 [ 815.152679][T17867] dump_stack+0x11/0x1b [ 815.156835][T17867] should_fail+0x23c/0x250 [ 815.161248][T17867] ? skb_clone+0x12c/0x1f0 [ 815.165664][T17867] __should_failslab+0x81/0x90 [ 815.170430][T17867] should_failslab+0x5/0x20 [ 815.174959][T17867] kmem_cache_alloc+0x4f/0x300 [ 815.179725][T17867] skb_clone+0x12c/0x1f0 11:15:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = epoll_create(0x9) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) fallocate(r1, 0x2, 0x6, 0x10000000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x0) [ 815.183977][T17867] netlink_broadcast_filtered+0x4fd/0xb60 [ 815.189699][T17867] ? skb_put+0xb9/0xf0 [ 815.193770][T17867] netlink_broadcast+0x35/0x50 [ 815.198529][T17867] kobject_uevent_env+0x8c9/0xc40 [ 815.203591][T17867] disk_force_media_change+0xe3/0x170 [ 815.208984][T17867] loop_configure+0x6c0/0xeb0 [ 815.213668][T17867] lo_ioctl+0x618/0x13e0 [ 815.217943][T17867] ? path_openat+0x18d4/0x1ec0 [ 815.222759][T17867] ? blkdev_common_ioctl+0x438/0x1110 [ 815.228131][T17867] ? selinux_file_ioctl+0x981/0xa10 [ 815.233373][T17867] ? lo_release+0x120/0x120 [ 815.237971][T17867] blkdev_ioctl+0x1d0/0x3f0 [ 815.242468][T17867] block_ioctl+0x6e/0x80 [ 815.246711][T17867] ? blkdev_iopoll+0x80/0x80 [ 815.251307][T17867] __se_sys_ioctl+0xcb/0x140 [ 815.255937][T17867] __x64_sys_ioctl+0x3f/0x50 [ 815.260523][T17867] do_syscall_64+0x44/0xa0 [ 815.264950][T17867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 815.270850][T17867] RIP: 0033:0x7f0ae3e384c7 [ 815.275318][T17867] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 815.294971][T17867] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.303384][T17867] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 815.311356][T17867] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 815.319396][T17867] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 815.327369][T17867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 815.335335][T17867] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 815.344475][T17867] loop2: detected capacity change from 0 to 264192 [ 815.384827][T17867] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 815.408986][T17885] loop3: detected capacity change from 0 to 16 [ 815.418700][T17886] loop4: detected capacity change from 0 to 264192 [ 815.424766][T17867] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) name_to_handle_at(r0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="200000000100000055ef3bae8506000000000000000000200508000020000000b453aedde8330000837dc355e2922ebcd2f5b6c1349bda1e791eb552ff20564a9e14d5bc5ef1142ef03003db68c8c36b595f206f20ee2bc0b84c8a0b954e0f6860b07238eebeb5172e780b8825c7441590bd58c15983991525e5e7b54f6b5ce9bbe887fef1e417b4905d3d"], &(0x7f0000000140), 0x1000) chdir(&(0x7f0000000040)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) fcntl$setstatus(r4, 0x4, 0x44800) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0xffd8}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xcc, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9dc}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84}, 0x42080) sendfile(r2, r3, 0x0, 0x0) 11:15:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 29) [ 815.510826][T17886] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 815.538275][T17886] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 815.549378][T17886] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:24 executing program 5: sync() sync() sync() 11:15:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000b000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 815.631558][T17909] FAULT_INJECTION: forcing a failure. [ 815.631558][T17909] name failslab, interval 1, probability 0, space 0, times 0 [ 815.644332][T17909] CPU: 1 PID: 17909 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 815.648245][T17908] loop0: detected capacity change from 0 to 16 [ 815.653175][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.653187][T17909] Call Trace: [ 815.653194][T17909] dump_stack_lvl+0xd6/0x122 [ 815.653219][T17909] dump_stack+0x11/0x1b [ 815.681458][T17909] should_fail+0x23c/0x250 [ 815.685889][T17909] __should_failslab+0x81/0x90 [ 815.690641][T17909] ? call_usermodehelper_setup+0x71/0x190 [ 815.696351][T17909] should_failslab+0x5/0x20 [ 815.701032][T17909] kmem_cache_alloc_trace+0x52/0x320 [ 815.706305][T17909] call_usermodehelper_setup+0x71/0x190 [ 815.711892][T17909] ? add_uevent_var+0x1d0/0x1d0 [ 815.716731][T17909] kobject_uevent_env+0xb29/0xc40 [ 815.721810][T17909] disk_force_media_change+0xe3/0x170 [ 815.727172][T17909] loop_configure+0x6c0/0xeb0 [ 815.731862][T17909] lo_ioctl+0x618/0x13e0 [ 815.736091][T17909] ? path_openat+0x18d4/0x1ec0 [ 815.740923][T17909] ? blkdev_common_ioctl+0x438/0x1110 [ 815.746285][T17909] ? selinux_file_ioctl+0x981/0xa10 [ 815.751473][T17909] ? lo_release+0x120/0x120 [ 815.755968][T17909] blkdev_ioctl+0x1d0/0x3f0 [ 815.760501][T17909] block_ioctl+0x6e/0x80 [ 815.764755][T17909] ? blkdev_iopoll+0x80/0x80 [ 815.769349][T17909] __se_sys_ioctl+0xcb/0x140 [ 815.773946][T17909] __x64_sys_ioctl+0x3f/0x50 [ 815.778527][T17909] do_syscall_64+0x44/0xa0 [ 815.782936][T17909] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 815.788826][T17909] RIP: 0033:0x7f0ae3e384c7 [ 815.793223][T17909] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 815.812920][T17909] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.821316][T17909] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 815.829346][T17909] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 815.837323][T17909] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 815.845279][T17909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 815.853235][T17909] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 815.880271][T17909] loop2: detected capacity change from 0 to 264192 [ 815.903060][T17918] loop4: detected capacity change from 0 to 264192 [ 815.947720][T17909] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 815.975076][T17909] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 815.987755][T17918] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 30) 11:15:24 executing program 5: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) sync() [ 816.002662][T17918] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 816.013839][T17918] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000c000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x2000000}]) 11:15:24 executing program 5: sync() sync() [ 816.093692][T17943] FAULT_INJECTION: forcing a failure. [ 816.093692][T17943] name failslab, interval 1, probability 0, space 0, times 0 [ 816.106372][T17943] CPU: 1 PID: 17943 Comm: syz-executor.2 Not tainted 5.15.0-rc3-syzkaller #0 [ 816.111773][T17950] loop4: detected capacity change from 0 to 264192 [ 816.115133][T17943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.115145][T17943] Call Trace: [ 816.115153][T17943] dump_stack_lvl+0xd6/0x122 [ 816.139541][T17943] dump_stack+0x11/0x1b [ 816.143695][T17943] should_fail+0x23c/0x250 [ 816.148099][T17943] ? __kernfs_new_node+0x6a/0x330 [ 816.153120][T17943] __should_failslab+0x81/0x90 [ 816.157892][T17943] should_failslab+0x5/0x20 [ 816.162384][T17943] kmem_cache_alloc+0x4f/0x300 [ 816.167136][T17943] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 816.172979][T17943] __kernfs_new_node+0x6a/0x330 [ 816.177900][T17943] ? ___cache_free+0x3c/0x300 [ 816.182586][T17943] ? kfree+0xf8/0x1d0 [ 816.186553][T17943] kernfs_create_dir_ns+0x5e/0x140 [ 816.191760][T17943] internal_create_group+0x148/0x860 [ 816.197050][T17943] ? __invalidate_device+0xb0/0xc0 [ 816.202163][T17943] ? set_disk_ro+0x73/0x110 [ 816.206727][T17943] sysfs_create_group+0x1b/0x20 [ 816.211621][T17943] loop_configure+0xbcd/0xeb0 [ 816.216294][T17943] lo_ioctl+0x618/0x13e0 [ 816.220526][T17943] ? path_openat+0x18d4/0x1ec0 [ 816.225336][T17943] ? blkdev_common_ioctl+0x438/0x1110 [ 816.230730][T17943] ? selinux_file_ioctl+0x981/0xa10 [ 816.235918][T17943] ? lo_release+0x120/0x120 [ 816.240407][T17943] blkdev_ioctl+0x1d0/0x3f0 [ 816.244893][T17943] block_ioctl+0x6e/0x80 [ 816.249118][T17943] ? blkdev_iopoll+0x80/0x80 [ 816.253692][T17943] __se_sys_ioctl+0xcb/0x140 [ 816.258273][T17943] __x64_sys_ioctl+0x3f/0x50 [ 816.262860][T17943] do_syscall_64+0x44/0xa0 [ 816.267321][T17943] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 816.273246][T17943] RIP: 0033:0x7f0ae3e384c7 [ 816.277667][T17943] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 64 55 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 816.297264][T17943] RSP: 002b:00007f0ae1baff48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 816.305671][T17943] RAX: ffffffffffffffda RBX: 00007f0ae3e82cc0 RCX: 00007f0ae3e384c7 [ 816.313628][T17943] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 816.321584][T17943] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 816.329564][T17943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 816.337519][T17943] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 816.345675][T17943] loop2: detected capacity change from 0 to 264192 [ 816.368957][T17943] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 816.383090][T17965] loop1: detected capacity change from 0 to 16 [ 816.391450][T17943] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) (fail_nth: 31) 11:15:25 executing program 0: chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:15:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) set_mempolicy(0x2, &(0x7f00000000c0)=0xf, 0x8) r0 = syz_io_uring_setup(0x3881, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000340)) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x1}) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) sendfile(r1, r2, 0x0, 0x0) 11:15:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x2040000}]) 11:15:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000d000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:25 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1000001, 0x14, 0x14, 0x5e, &(0x7f0000000000)="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"}) sync() sync() sync() sync() [ 816.519833][T17950] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 816.530709][T17950] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 816.541877][T17950] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x2000, 0x44) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 816.607926][T17993] loop2: detected capacity change from 0 to 264192 [ 816.633360][T18000] loop0: detected capacity change from 0 to 16 [ 816.639763][T17993] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 816.656620][T18009] loop1: detected capacity change from 0 to 16 [ 816.665597][T18018] loop3: detected capacity change from 0 to 16 [ 816.687145][T17993] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:25 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x4, 0xaaaaaaaaaaaab7b, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x4}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 816.733327][T18023] loop4: detected capacity change from 0 to 264192 11:15:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010002, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 816.787980][T18023] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 816.857862][T18023] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 816.868970][T18023] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 816.898437][T18049] loop2: detected capacity change from 0 to 264192 [ 816.920108][T18049] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x3000000}]) 11:15:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000e000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 816.946379][T18049] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0xfffffffffffffffc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 11:15:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010003, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 817.050083][T18061] loop1: detected capacity change from 0 to 16 [ 817.082342][T18067] loop4: detected capacity change from 0 to 264192 [ 817.133820][T18067] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 817.162618][T18082] loop2: detected capacity change from 0 to 264192 [ 817.173200][T18078] loop3: detected capacity change from 0 to 16383 [ 817.190975][T18082] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 817.222681][T18067] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000020f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 817.233808][T18067] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 817.252231][T18082] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 817.266095][T18078] FAT-fs (loop3): bogus number of reserved sectors [ 817.272678][T18078] FAT-fs (loop3): Can't find a valid FAT filesystem 11:15:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x4000000}]) 11:15:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="a3ef9241b4b83cc662811ddfd4045bee7a7bc7aa50b0292ab0ff31abc7581275da70e83ecdbc76ff60ec199eb780738f3418861b9121a7a0703fcab4df1e93bbaa65f9878b9c1848268eb35ca68797ab0991f08057a3da90b4364803fc06621e97665b9ac7c6731615fc247bfa073ec4b8f4994437ca78aa74d624c3512d254cc52a0aebc861558d8f5367df9fc6f5b06af0dda639a19646885d2966f18a3cd117ca55f5fed99d32f9a08ebb3ab04bb89d09fe571a03836035f3198b7a964274dea35a7ae73958ccb4c4a841ccd0f40f4fecf5c5e2b2e0178892cf49280ef096f6112013400a560f167652bdc1065f6d53a99a4421630c4d4968f0fbdaf30df9bf2103fd080ac5ec681fa83a93b3", @ANYRESDEC, @ANYRESOCT=0x0]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x1) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 817.320068][T18078] loop3: detected capacity change from 0 to 16383 [ 817.335648][T18078] FAT-fs (loop3): bogus number of reserved sectors [ 817.342262][T18078] FAT-fs (loop3): Can't find a valid FAT filesystem [ 817.422696][T18118] loop4: detected capacity change from 0 to 264192 [ 817.424515][T18115] loop2: detected capacity change from 0 to 264192 [ 817.430464][T18120] loop1: detected capacity change from 0 to 16 [ 817.440408][T18124] loop3: detected capacity change from 0 to 16 [ 817.464276][T18124] FAT-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value [ 817.482798][T18120] handle_bad_sector: 73 callbacks suppressed [ 817.482812][T18120] attempt to access beyond end of device [ 817.482812][T18120] loop1: rw=2049, want=18, limit=16 [ 817.501522][T18115] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 817.513031][T18118] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 817.543773][T18120] attempt to access beyond end of device [ 817.543773][T18120] loop1: rw=2049, want=18, limit=16 [ 817.559617][T18118] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 817.570826][T18118] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 817.600634][T18115] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 817.603799][T18120] attempt to access beyond end of device [ 817.603799][T18120] loop1: rw=2049, want=19, limit=16 [ 817.622047][T18120] attempt to access beyond end of device [ 817.622047][T18120] loop1: rw=2049, want=20, limit=16 [ 817.632871][T18120] attempt to access beyond end of device [ 817.632871][T18120] loop1: rw=2049, want=21, limit=16 [ 817.643789][T18120] attempt to access beyond end of device 11:15:26 executing program 5: readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/188, 0xfffffc89) mkdir(&(0x7f0000000140)='./file0\x00', 0x65) sync() [ 817.643789][T18120] loop1: rw=2049, want=22, limit=16 [ 817.654553][T18120] attempt to access beyond end of device [ 817.654553][T18120] loop1: rw=2049, want=23, limit=16 [ 817.655628][T18124] loop3: detected capacity change from 0 to 16 [ 817.665443][T18120] attempt to access beyond end of device [ 817.665443][T18120] loop1: rw=2049, want=24, limit=16 [ 817.729364][T18132] attempt to access beyond end of device [ 817.729364][T18132] loop1: rw=2049, want=185, limit=16 [ 817.740639][T18124] FAT-fs (loop3): Unrecognized mount option "18446744073709551615" or missing value 11:15:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010005, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40400c1) sync() r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x0) 11:15:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000030f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:26 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6d67, 0x6, &(0x7f0000000400)=[{&(0x7f0000000080)="aff55937cab705441414f0279beaefdf04cbdae7ad86499259df3876e0eaf4327eee7b4838a7ebb0cb6aae03483804a1d6251dad38997dad90f10c9623ab9874e5fc4eeb3f1a8ee0a2af8ef0e9a5d8e18bef0abd65399c07912c1e852217aa349b09836f3d26bfc8d35d6accef577c896d2fec77ca0e8a6af4596891358f47d8b138167920724d6cff32a2b74329e2b3b0f091bd8a9775c43b855cdcd081f1db58cfc83c5784c459a116415d1d5f", 0xae}, {&(0x7f0000000140)="9313e18b150d20c951482fd05343e9c8e1205d9f6e66b0855f5475ff3fd85de705e47ccd2baad71bc8a1dbac6367a483adf23e7753a02f771cde8674ee9e20ba1683fcaa71c44fdacdec7e10a221b1463d7ba45c1fb0998e2855d5be84ea96aaea14d688de2f367fbb4d3fc40075a15770e2b2bf507eb73a7f9006bd3d7859c1dfad9abf0b4c681823c4c4a23d075f9f2417fdc325af82c52ab9d0f455a0da7232a1edbecd857b71aee61636dc39713c26882bba4a829605fc1b77970ecd5bfa725a9002ae798627b417cc83cf40706ca682c853", 0xd4, 0x5}, {&(0x7f0000000240)="999c042d8bf08c5ff75951bd2a42bf4b3a152323c402dc4402d63f5071a6f8353bf1b7b3a86f3b17fa14c4981892995f5a32d2c76b5e1df2", 0x38, 0xffffffff}, {&(0x7f0000000280)="4c7532d020e1e5c9865b7710edc063d8d0230ed6fc0348a2cf9501b41e61f9538f48c61e9affc02b03d325e1d96b91d7beb8bcdbd58049c86a5d50c22f4de1e66c4dd783cc0d835de35a6fb1b4944f6d09565fcdda493266f5c523495a78072939b3228f35f6bb31ceb6bfb61f7d311c42fcd9e729741915062c53141b928a04357c82b277bb886bd4d4776274daaf292b2057dfb746b6dde568706a51b2b1f01d89", 0xa2, 0x5}, {&(0x7f0000000340)="2b6c8b387a09f2df467546aa3ec43f05f6b18bc98a3dea3108d9ed1a3673d5e977b142c534da8784db1ebc6b933bede8", 0x30, 0x800}, {&(0x7f0000000380)="5cc0cc93086288f857fba64102b8aa2fde7370439881c6041b14a200c84bd2fce152d652765a8da47984b79ad3a51c6ce77f3c1f148780ca845ac49db1f4965aba839b3888a47e9f16f3907730c290e7cc8b783b1502892032af9e5f9761085b8c50eeb70b5fd58a26a20b5e1e352a5616b9a329adf1c494dfce05", 0x7b, 0xc}], 0x130800, &(0x7f00000004c0)=ANY=[@ANYBLOB='utf8,map=acorn,map=acorn,mode=0x0000000000000004,check=relaxed,gid=', @ANYRESHEX, @ANYBLOB=',rootcontext=user_u,eu)d=', @ANYRESDEC=0xee00, @ANYBLOB=',id<', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) r1 = openat(r0, &(0x7f0000000580)='./file0\x00', 0x22000, 0x100) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) recvmmsg$unix(r1, &(0x7f0000002980)=[{{&(0x7f0000000640)=@abs, 0x6e, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000880)=""/91, 0x5b}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f00000009c0)=""/130, 0x82}, {&(0x7f0000000a80)=""/33, 0x21}, {&(0x7f0000000ac0)=""/96, 0x60}, {&(0x7f0000000b40)=""/202, 0xca}, {&(0x7f0000000c40)=""/157, 0x9d}, {&(0x7f0000000d00)=""/112, 0x70}, {&(0x7f0000000d80)=""/38, 0x26}], 0x9, &(0x7f0000000e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000f40), 0x6e, &(0x7f0000001100)=[{&(0x7f0000000fc0)=""/143, 0x8f}, {&(0x7f0000001080)=""/101, 0x65}], 0x2, &(0x7f0000001140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001180)=""/93, 0x5d}, {&(0x7f0000001200)=""/87, 0x57}, {&(0x7f0000001280)=""/227, 0xe3}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/198, 0xc6}, {&(0x7f0000002480)=""/121, 0x79}, {&(0x7f0000002500)=""/202, 0xca}, {&(0x7f0000002600)=""/63, 0x3f}], 0x8, &(0x7f00000026c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002740), 0x6e, &(0x7f0000002900)=[{&(0x7f00000027c0)=""/105, 0x69}, {&(0x7f0000002840)=""/179, 0xb3}], 0x2, &(0x7f0000002940)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x2000, &(0x7f0000002ac0)) lsetxattr$system_posix_acl(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='system.posix_acl_default\x00', &(0x7f0000002b00)={{}, {0x1, 0x2}, [{0x2, 0x6, 0xffffffffffffffff}, {}, {0x2, 0x4, 0xee00}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x7}, {0x2, 0x2, r3}, {0x2, 0x2, 0xee00}], {0x4, 0x2}, [{0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x1, r4}], {0x10, 0x7}, {0x20, 0x7}}, 0x6c, 0x2) sync() 11:15:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x5000000}]) [ 817.841707][T18158] loop3: detected capacity change from 0 to 16 [ 817.863214][T18164] loop4: detected capacity change from 0 to 264192 [ 817.881637][T18165] loop5: detected capacity change from 0 to 264192 [ 817.896617][T18168] loop2: detected capacity change from 0 to 264192 [ 817.916173][T18175] loop1: detected capacity change from 0 to 16 [ 817.948379][T18164] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 817.963242][T18175] attempt to access beyond end of device [ 817.963242][T18175] loop1: rw=2049, want=18, limit=16 [ 817.988868][T18164] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 817.999957][T18164] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 818.036080][T18168] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 818.049456][T18168] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000080)='./file0\x00', 0x82843, 0x22) sendfile(r0, r1, 0x0, 0x0) 11:15:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000040f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010006, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:26 executing program 5: sync() sync() sync() socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4, 0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) sync() sync() sync() 11:15:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x6000000}]) [ 818.196612][T18216] loop2: detected capacity change from 0 to 264192 [ 818.201337][T18215] loop3: detected capacity change from 0 to 16 [ 818.210233][T18217] loop4: detected capacity change from 0 to 264192 [ 818.222978][T18216] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 818.238924][T18216] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 818.262806][T18231] loop1: detected capacity change from 0 to 16 11:15:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010007, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 818.290947][T18217] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 818.395298][T18217] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 818.406388][T18217] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010008, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 818.465121][T18249] loop2: detected capacity change from 0 to 264192 [ 818.473707][T18249] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x6040000}]) [ 818.508822][T18249] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000050f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:27 executing program 5: sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 11:15:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010009, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x2}], 0x2000, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x10) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) pipe(&(0x7f00000000c0)) [ 818.611785][T18264] loop1: detected capacity change from 0 to 16 [ 818.622609][T18266] loop4: detected capacity change from 0 to 264192 [ 818.653873][T18266] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 818.675410][T18264] buffer_io_error: 53 callbacks suppressed [ 818.675423][T18264] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 818.678553][T18266] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000060f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 818.697332][T18264] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 818.700849][T18266] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 818.738027][T18279] loop2: detected capacity change from 0 to 264192 [ 818.756569][T18279] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 818.764915][T18264] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 818.767210][T18279] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01000a, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000070f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 818.828195][T18264] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 818.836792][T18264] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 818.861599][T18301] loop4: detected capacity change from 0 to 264192 [ 818.869285][T18264] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 818.897821][T18301] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 818.913237][T18313] loop2: detected capacity change from 0 to 264192 [ 818.914381][T18264] Buffer I/O error on dev loop1, logical block 23, lost async page write 11:15:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000080f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 818.938769][T18301] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 818.949829][T18301] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 818.981115][T18313] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x7000000}]) [ 819.022368][T18313] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 819.048511][T18320] loop4: detected capacity change from 0 to 264192 11:15:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01000b, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 819.118372][T18320] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 819.135644][T18332] loop1: detected capacity change from 0 to 16 [ 819.153037][T18320] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 819.164129][T18320] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 819.210056][T18332] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 819.210943][T18339] loop2: detected capacity change from 0 to 264192 [ 819.238223][T18332] Buffer I/O error on dev loop1, logical block 18, lost async page write 11:15:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000090f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 819.255599][T18332] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 819.287510][T18339] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 819.313073][T18339] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sync() sendfile(r0, r1, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x10100, 0x10) [ 819.368872][T18353] loop4: detected capacity change from 0 to 264192 11:15:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 819.438506][T18353] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 819.456217][T18361] loop3: detected capacity change from 0 to 16 [ 819.472447][T18353] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x8000000}]) [ 819.483783][T18353] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 819.557773][T18371] loop1: detected capacity change from 0 to 16 [ 819.571964][T18375] loop2: detected capacity change from 0 to 264192 11:15:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xe0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x505}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-!\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x851) sync() r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x1) lseek(r2, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x180, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000655f73"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r6) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0xfffffffffffffc8e, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0xba}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'gretap0\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000050) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r7, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x49}, 0x4040800) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x278, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x35}}}}, [@crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0x2, 0xfac0d, 0xfac08, 0xfac0c, 0xfac09]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}], @NL80211_ATTR_IE={0x16f, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}, @ht={0x2d, 0x1a, {0x80, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x800, 0x3}}, @supported_rates={0x1, 0x3, [{0x6}, {0x60, 0x1}, {0x1b, 0x1}]}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0xf6, 0x10}}, @ssid={0x0, 0x1d, @random="fee80ce4a619860143796fe88b3ab0bcbc40fc2ac919cbd036fdeda25a"}, @random={0x8, 0xec, "203a6fd2253e2b555f3cf8ebf05b762f4d700538ee42a3d5a98dfc3b4bf638aa0120aec1a22ae9ffbd63d2740116a14341c344a28df8c460c9b89dde53d3177e490ecb3beef575b03be32bb78d947588550fdffe069cde1742c134b8673c6a849c2d22f61a0544907f60247209adfba2714f17bf4ae0ed10055a742b92ae133eeb41ec2446b0e49557474e13d657819dbf7e93e8563c3cc53a3d0a23282b8267fe0d9a68e0d5c4e507d98d5c4d910795464fdc32f543f65dc652359e77348f421bd647363b4c0e6c6d3cf881c7177f05fb15735f01b0fbdccbd8404065a6de53b7fe62fe99d808517fd0188f"}, @link_id={0x65, 0x12, {@random="3f6e5cac3271", @broadcast}}, @ibss={0x6, 0x2, 0x1000}]}, @NL80211_ATTR_IE={0xbc, 0x2a, [@mesh_chsw={0x76, 0x6, {0xfd, 0x7, 0x39, 0x445a}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x20, 0x79, 0x0, 0xffc0}}, @perr={0x84, 0x9b, {0x5, 0x9, [@ext={{}, @broadcast, 0x1, @device_a, 0x2a}, @not_ext={{}, @device_a, 0x401, "", 0x2f}, @ext={{}, @device_a, 0x2, @device_b, 0x19}, @not_ext={{}, @device_a, 0x7, "", 0x42}, @ext={{}, @device_b, 0x2, @broadcast, 0x42}, @ext={{}, @device_b, 0x5, @device_a, 0x1e}, @ext={{}, @device_a, 0x9, @device_b, 0x3}, @ext={{}, @device_a, 0x7, @broadcast, 0x2a}, @not_ext={{}, @device_a, 0x200, "", 0x5}]}}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x48090}, 0x40800) sync() 11:15:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 819.619176][T18375] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 819.658020][T18375] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./bus\x00', 0x30000000) sendfile(r0, r1, 0x0, 0x0) 11:15:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01000d, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 819.742898][T18393] loop4: detected capacity change from 0 to 264192 [ 819.776181][T18393] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 819.811412][T18412] loop3: detected capacity change from 0 to 16 [ 819.834727][T18393] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 819.845817][T18393] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x8800000}]) [ 819.859493][T18413] loop2: detected capacity change from 0 to 264192 [ 819.919267][T18421] loop1: detected capacity change from 0 to 16 [ 819.944547][T18413] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 819.990569][T18413] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000b0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = syz_io_uring_complete(0x0) r2 = dup(r0) renameat2(r1, &(0x7f0000001840)='./file1\x00', r2, &(0x7f0000001880)='./file2\x00', 0x6) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r7) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2, 0x8, &(0x7f0000001640)=[{&(0x7f0000000140)="c3f8ac7f1557ae889a3289f4227164b9ebd68fa3ae7fc10692d740d8be37083c991e2876ff92d97c2107e38d57e9770f958126fa194c81cdaec5669f98f61ac3f41cdef96ec44b269104aa2ef1420060b9205646495bb3e4bc0797485713de8f5f6a8390f080dbc7f9225c56b03f2f7c327a85a7869c5d8699c57807217a8b08753df3d39140c4eed2e3875af504697ed2363da5231dc89681b3b420a2470388833f5c4e90c38a50da010e6b7be6e06cbffd596de73d328c6c6f73c959e39713e16b4afca361e5bb3198978ca3861550b3f7a78fe6d35e6014d8dc0cb87d7ca6dc563eaf5db415", 0xe7, 0x2}, {&(0x7f0000000240)="c8b4b8170a60714096c14011e198f4d83babc34a554cd59feea6f564687d9216514d1401b00619aaaf344e82645856f4a38b8871ac89ac2b4fc4f11d2e16497e", 0x40}, {&(0x7f0000000300)="be97a7b401b5444ad296e605e1c083c2898d5569fa4c3fb81cadc5260c4139ce035284f064241e8aa068e9873d279b27db04f7715000b197d8f65122c3ca37a23ae60383803040763b87e6c7af4d6c1838547b044703947ba45b4e2e8aaa6c99a63b6f87264483453395720bb1b69a652c6f01c57aba9153f6", 0x79, 0x7}, {&(0x7f0000000380)="58ab9f29fe3fa29c2e10173f0d585a3d11d0595840d9c07259d7243754e017a296f8b16d2e0267941e11783a2901f277f1379cec386f188d9c754b41117ab3ed9bdfee191e6d89e029ef2fc64a6df9a3fb51475b388e94f4116c7dee43060b2f4129aafccdf443cfbf49ee13abbac65f8e30375e368050f7ecd7a86cc3e62ac4827815d52b947bb29cf14c6401d15bdea58c8b0ce3f285b74857996412a5519d4bff2d9759f06e5ef20370bed28c56917d8cedb77958468fee5953bf17e1d51ae9e296ceb128bfe89f15906f4b3ac9", 0xcf, 0xaa2}, {&(0x7f0000000480)="4b1d67eea966b9990503416ae69c8b9668506b0d841831e5cdcd73315536c645944e9361f7fff519112b095dc211a53186b5edb602be35aa1fa5c18655efe1ccab4292c5b4dff69a986a1ed048fb3afd614d612a2772586684cb94f488f76cfd9ce4ae77ce240f3f87b850a159115f9125f88b9d600a7678ecbaf02789e870c195ae2d20b75437d587bdb6ce01e7788c244ee83940aa6c15fd5a43945998cae50ffce5ba3aa099beee450f3b4339ce7393b3feab7243dfd90d5f9527681dbb7b51aa636f62439c7566cd9ced7be65df3f31ae3b95e7af18cf2f591ffd68384af3f18716ed8a50140b2db6f1bd2ae", 0xee, 0x200}, {&(0x7f0000000280)='j', 0x1, 0x5}, {&(0x7f0000000640)="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", 0x1000, 0x7}, {&(0x7f00000005c0)="bf", 0x1, 0x1f}], 0x100400, &(0x7f0000001700)={[{'vfat\x00'}, {}, {'vfat\x00'}, {'+$-}\']\x8b(}'}, {}], [{@pcr={'pcr', 0x3d, 0x6}}, {@subj_role={'subj_role', 0x3d, '$-^!.'}}, {@euid_lt={'euid<', r5}}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@subj_type={'subj_type', 0x3d, ']'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, r7}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r9 = inotify_init() sync() mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x10010, r9, 0x385e8000) io_uring_enter(r8, 0x1e32, 0x3ad9, 0x3, &(0x7f0000001800)={[0xff]}, 0x8) sendfile(r3, r8, 0x0, 0xfffffffffffffffe) 11:15:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01000e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 820.129278][T18435] loop4: detected capacity change from 0 to 264192 [ 820.189311][T18435] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 820.220772][T18452] loop3: detected capacity change from 0 to 16 [ 820.226758][T18435] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x9000000}]) 11:15:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 820.231628][T18453] loop2: detected capacity change from 0 to 264192 [ 820.238205][T18435] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 820.310035][T18453] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 820.343717][T18469] loop4: detected capacity change from 0 to 264192 [ 820.351282][T18470] loop1: detected capacity change from 0 to 16 [ 820.363615][T18453] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01000f, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 820.411435][T18469] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 820.451918][T18469] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 820.463050][T18469] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000d0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:29 executing program 5: sync() sync() 11:15:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080e801", 0xfffffffffffffdea}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@md5={0x1, "82d99ee67a62f1adef0661cda78ee834"}, 0x11, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x1) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000280)=0x0) r2 = getuid() mount$9p_virtio(&(0x7f0000000300), &(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=virtio,', {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@fowner_lt={'fowner<', r1}}, {@uid_lt={'uid<', r2}}]}}) sync() r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x0) 11:15:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xa000000}]) [ 820.550020][T18482] loop2: detected capacity change from 0 to 264192 [ 820.572980][T18482] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 820.583945][T18482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:29 executing program 5: sync() sync() 11:15:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010010, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 820.657477][T18505] loop4: detected capacity change from 0 to 264192 [ 820.674481][T18508] loop1: detected capacity change from 0 to 16 [ 820.700998][T18505] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 820.735515][T18505] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 820.746601][T18505] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 820.772042][T18521] loop2: detected capacity change from 0 to 264192 [ 820.823111][T18521] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010011, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 820.863530][T18521] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:29 executing program 5: sync() sync() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private2, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) sync() 11:15:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xb000000}]) 11:15:29 executing program 5: sync() sync() sync() [ 820.980891][T18541] loop2: detected capacity change from 0 to 264192 [ 820.995139][T18543] loop4: detected capacity change from 0 to 264192 [ 821.047318][T18504] loop3: detected capacity change from 0 to 32760 [ 821.057921][T18541] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 821.061138][T18504] FAT-fs (loop3): Unrecognized mount option "‚Ùžæzbñ­ïaͧŽè4" or missing value 11:15:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010012, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 821.088201][T18541] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 821.104087][T18557] loop1: detected capacity change from 0 to 16 [ 821.163676][T18543] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 821.192225][T18543] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 821.203337][T18543] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 821.224530][T18567] loop2: detected capacity change from 0 to 264192 [ 821.283424][T18504] loop3: detected capacity change from 0 to 32760 [ 821.295777][T18504] FAT-fs (loop3): Unrecognized mount option "‚Ùžæzbñ­ïaͧŽè4" or missing value [ 821.315885][T18567] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xf000000}]) [ 821.351592][T18567] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000000f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:30 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/194, 0xc2}, {&(0x7f0000001100)=""/99, 0x63}, {&(0x7f0000001180)=""/220, 0xdc}], 0x4, &(0x7f00000012c0)=""/237, 0xed}, 0x9}, {{&(0x7f00000013c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001440)=""/21, 0x15}, {&(0x7f0000001480)=""/198, 0xc6}, {&(0x7f0000001580)=""/140, 0x8c}, {&(0x7f0000001640)=""/97, 0x61}], 0x4}, 0x940}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001700)=""/234, 0xea}, {&(0x7f0000001800)=""/249, 0xf9}], 0x2, &(0x7f0000001940)=""/50, 0x32}, 0x7ff}, {{&(0x7f0000001980)=@nfc, 0x80, &(0x7f0000001a00), 0x0, &(0x7f0000001a40)=""/131, 0x83}, 0x101}, {{&(0x7f0000001b00)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b80)=""/60, 0x3c}, {&(0x7f0000001bc0)=""/2, 0x2}, {&(0x7f0000001c00)=""/45, 0x2d}, {&(0x7f0000001c40)=""/58, 0x3a}, {&(0x7f0000001c80)=""/89, 0x59}, {&(0x7f0000001d00)=""/85, 0x55}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/23, 0x17}], 0x8, &(0x7f0000001e80)=""/22, 0x16}, 0x3}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001ec0)=""/207, 0xcf}, {&(0x7f0000001fc0)=""/108, 0x6c}], 0x2, &(0x7f0000002080)=""/187, 0xbb}, 0x8}], 0x6, 0x10001, &(0x7f00000022c0)={0x77359400}) sync() sync() [ 821.455932][T18590] loop4: detected capacity change from 0 to 264192 [ 821.474609][T18592] loop1: detected capacity change from 0 to 16 [ 821.481368][T18590] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 821.494872][T18590] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rmdir(&(0x7f0000000280)='./file0\x00') sync() r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = dup3(r0, r0, 0x0) fallocate(r3, 0x41, 0x8, 0x8000) preadv(0xffffffffffffffff, &(0x7f0000002700)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000400)=""/135, 0x87}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000002640)=""/177, 0xb1}], 0xa, 0x2, 0x2) 11:15:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010018, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 821.505989][T18590] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000100f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 821.589572][T18607] loop3: detected capacity change from 0 to 16 [ 821.628240][T18606] loop2: detected capacity change from 0 to 264192 [ 821.678790][T18616] loop4: detected capacity change from 0 to 264192 [ 821.701347][T18606] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 821.705162][T18616] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xfffffff}]) [ 821.747346][T18606] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 821.761705][T18616] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 821.772774][T18616] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010019, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$sock_SIOCADDRT(r1, 0x89e0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"8b2a26958d2a6f5930ecbbc7740baa9b", 0x0, 0x0, {0x3e51, 0x30321861}, {0x2, 0x5}, 0x7fffffff, [0x2, 0x3, 0x3, 0x7, 0x200, 0x40, 0x2, 0x1, 0xb1b6, 0x9, 0x7, 0x4, 0x92c4, 0x62164516, 0x100000000, 0x7f]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000018c0)={r3, 0x8, 0x80000001, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000480)={{}, r2, 0x2, @unused=[0x6, 0x100000001, 0x6, 0x6], @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={r3, 0xfffffffffffffffa, 0x9}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000180)={r3, "936c110874ece2efe2eda364fd7fa6f3"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000100)={0x18, 0x5, {0xfffffffffffffc97, @usage=0x10001, r3, 0xad, 0x6, 0x2, 0x100000000, 0x3, 0x8, @struct={0x3, 0x8}, 0x7f, 0xc, [0x9, 0x7ff, 0x9, 0x7fff, 0x1000, 0x4]}, {0x1, @usage=0x3, 0x0, 0x2, 0x2, 0x8a5, 0x14, 0x8, 0x0, @usage=0x8, 0x98, 0xf76a, [0x3, 0x5e9, 0x4, 0x1000, 0xf40, 0x1]}, {0x100, @struct={0x3, 0x1}, 0x0, 0x8000, 0x80000020, 0x5, 0x1, 0x7, 0x4a0, @struct={0x8, 0x4}, 0x9, 0x1c, [0x0, 0x5, 0x3ff, 0x3, 0x1, 0xffffffffffffff80]}, {0xffffffff, 0x6, 0x4}}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000100)={{}, 0x0, 0x2, @inherit={0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000000000000000100000000ff0000000000000000d7c466e32cb2362c220300000000000000000000000000000080000000000000f7ffffffffffffff0001000000000000fcffffffffffffff1f00000000000000800000000000000000f8ffffffffffff03000000000000007f1100"/136]}, @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r3, 0x5268, 0x0, [0x68a, 0x0, 0x6, 0x10000, 0x1c0000000000], [0x101, 0xa4e6, 0x9, 0x40, 0xffffffff, 0x0, 0x4a9b, 0xf900, 0x6, 0x5, 0x4, 0x7, 0x4, 0x6, 0x200, 0x2a8, 0x1, 0x7, 0x7, 0x7, 0x80000000, 0xf07a, 0x3, 0x9, 0x0, 0x31fe3e37, 0x3, 0x3, 0x3, 0x3e311622, 0xff, 0x200, 0xffff, 0x4, 0x5, 0x401, 0xce75, 0xfffffffffffffffa, 0x1f, 0x6, 0x9, 0xc0, 0xff, 0x8, 0x0, 0x3, 0x0, 0xfff, 0x40, 0x5, 0x5be, 0x8, 0x1, 0x0, 0x434b, 0x9e2f, 0xfffffffffffffffe, 0x10001000000000, 0x800, 0x800, 0xffd, 0x9a9, 0x8, 0xe89, 0x6, 0x2, 0x5, 0x1, 0x4, 0x8000, 0xbc2, 0x9, 0x7fff, 0x5, 0x40, 0xaf, 0x5, 0x4, 0x8, 0x10001, 0xfffffffffffffffb, 0x1, 0xf7, 0x7, 0x8, 0x100, 0x1, 0x0, 0x7fffffff, 0x80, 0x81, 0x1, 0xffff, 0x5, 0x3, 0x8, 0x3f, 0x3, 0x2, 0xfffffffffffffff9, 0xfff, 0x0, 0x10000, 0x10000, 0x40, 0x3, 0x1f, 0xc9e4, 0x7, 0x1, 0x0, 0xb765, 0x100000000, 0x4, 0x8c7, 0x6, 0x9, 0x200, 0x7fffffff, 0x7, 0xcd31]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={r3, 0xfffffffffffffffd, 0x7}) sync() 11:15:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000110f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 821.872183][T18641] loop2: detected capacity change from 0 to 264192 [ 821.882130][T18643] loop1: detected capacity change from 0 to 16 [ 821.918203][T18641] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 821.929094][T18645] loop4: detected capacity change from 0 to 264192 [ 821.960595][T18645] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 821.974572][T18645] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 821.985741][T18645] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 821.998296][T18641] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x10000000}]) 11:15:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01001b, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000120f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 822.141571][T18674] loop1: detected capacity change from 0 to 16 [ 822.156773][T18680] loop2: detected capacity change from 0 to 264192 11:15:31 executing program 5: sync() sync() sync() arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5) sync() [ 822.198289][T18680] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 822.222213][T18689] loop4: detected capacity change from 0 to 264192 [ 822.238855][T18680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010022, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 822.326477][T18689] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x1d3f88ad}]) [ 822.371535][T18689] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 822.382690][T18689] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 822.400510][T18706] loop2: detected capacity change from 0 to 264192 11:15:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000130f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 822.430450][T18706] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 822.455543][T18706] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:31 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) sendfile(r0, r0, 0x0, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x30002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r2, 0x2f, 0x9, 0x8, 0x0, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x20, 0x80, 0x1e2c, 0x8}}) sync() ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000180)={0x7, 'geneve1\x00', {0x8}}) [ 822.517495][T18722] loop1: detected capacity change from 0 to 16 [ 822.526159][T18723] loop4: detected capacity change from 0 to 264192 11:15:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010025, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 822.576424][T18722] handle_bad_sector: 143 callbacks suppressed [ 822.576441][T18722] attempt to access beyond end of device [ 822.576441][T18722] loop1: rw=2049, want=18, limit=16 [ 822.593739][T18723] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 822.616236][T18723] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 822.627344][T18723] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 822.637513][T18735] EXT4-fs warning (device sda1): ext4_group_extend:1805: can't shrink FS - resize aborted 11:15:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000140f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 822.669230][T18722] attempt to access beyond end of device [ 822.669230][T18722] loop1: rw=2049, want=18, limit=16 [ 822.688922][ T51] attempt to access beyond end of device [ 822.688922][ T51] loop1: rw=1, want=27, limit=16 [ 822.709622][T18739] loop2: detected capacity change from 0 to 264192 [ 822.722808][T18722] attempt to access beyond end of device [ 822.722808][T18722] loop1: rw=2049, want=19, limit=16 [ 822.762797][T18749] loop4: detected capacity change from 0 to 264192 [ 822.782351][T18722] attempt to access beyond end of device [ 822.782351][T18722] loop1: rw=2049, want=20, limit=16 [ 822.788863][T18739] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 822.818261][T18739] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 822.830124][T18749] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 822.832090][T18722] attempt to access beyond end of device [ 822.832090][T18722] loop1: rw=2049, want=21, limit=16 [ 822.864374][T18749] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 822.875518][T18749] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 11:15:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01002e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 822.968323][T18722] attempt to access beyond end of device [ 822.968323][T18722] loop1: rw=2049, want=22, limit=16 11:15:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000150f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 823.027603][T18762] loop2: detected capacity change from 0 to 264192 [ 823.029089][T18722] attempt to access beyond end of device [ 823.029089][T18722] loop1: rw=2049, want=23, limit=16 [ 823.055030][T18762] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 823.103175][T18762] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 823.115759][T18722] attempt to access beyond end of device [ 823.115759][T18722] loop1: rw=2049, want=24, limit=16 [ 823.128370][T18768] loop4: detected capacity change from 0 to 264192 [ 823.166011][T18768] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 823.197321][T18768] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010032, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 823.225706][T18737] attempt to access beyond end of device [ 823.225706][T18737] loop1: rw=2049, want=28, limit=16 11:15:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000160f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x20000000}]) [ 823.295578][T18782] loop2: detected capacity change from 0 to 264192 [ 823.323571][T18782] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010035, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 823.397801][T18794] loop1: detected capacity change from 0 to 16 11:15:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000170f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 823.460343][T18800] EXT4-fs warning (device sda1): ext4_group_extend:1805: can't shrink FS - resize aborted [ 823.509788][T18809] loop2: detected capacity change from 0 to 264192 [ 823.525436][T18810] loop4: detected capacity change from 0 to 264192 [ 823.537623][T18810] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x22000000}]) [ 823.595601][T18810] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 823.595958][T18809] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000180f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 823.656340][T18824] loop1: detected capacity change from 0 to 16 [ 823.692413][T18824] buffer_io_error: 74 callbacks suppressed [ 823.692425][T18824] Buffer I/O error on dev loop1, logical block 17, lost async page write 11:15:32 executing program 5: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x190, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x160, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x127}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66950105}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeda8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62d944cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x311bda98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c974627}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x791a5abc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55f21fe9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71a9}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cddc535}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7da99adc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9df0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe334}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e71}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68754a03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18623e6e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6dc7921d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x492d6e5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5994f4e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f03}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58402e21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2016}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70cd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b9696c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1060b437}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x86f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7af9d620}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b743d4e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34960321}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d34f10c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdbc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ac2bbc}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x1}, 0xc000) sync() sync() 11:15:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010048, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 823.721772][T18824] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 823.750073][T18832] loop4: detected capacity change from 0 to 264192 [ 823.766698][T18824] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 823.799371][T18832] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 823.803374][T18824] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 823.810188][T18844] loop2: detected capacity change from 0 to 264192 [ 823.824125][T18824] Buffer I/O error on dev loop1, logical block 21, lost async page write [ 823.831291][T18832] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 823.841427][T18824] Buffer I/O error on dev loop1, logical block 22, lost async page write 11:15:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000190f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 823.897841][T18844] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 823.918762][T18824] Buffer I/O error on dev loop1, logical block 23, lost async page write 11:15:32 executing program 5: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000000)={0x3, {{0xa, 0x1, 0x3, @loopback, 0xfffffffa}}, {{0xa, 0x4e22, 0x40, @local, 0x1}}}, 0x108) sync() 11:15:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01004c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 824.029570][T18858] loop4: detected capacity change from 0 to 264192 [ 824.057994][T18858] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 824.059773][T18870] loop2: detected capacity change from 0 to 264192 11:15:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001b0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 824.086235][T18858] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 824.121701][T18870] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x3f000000}]) 11:15:33 executing program 5: sync() r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) 11:15:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010060, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 824.227523][T18888] loop4: detected capacity change from 0 to 264192 [ 824.238594][T18889] loop1: detected capacity change from 0 to 16 [ 824.294600][T18888] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 824.302573][T18900] loop2: detected capacity change from 0 to 264192 [ 824.313892][T18889] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 824.323241][T18888] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 824.346549][T18889] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 824.386264][T18876] ================================================================== [ 824.394348][T18876] BUG: KCSAN: data-race in delete_from_page_cache_batch / page_mapping [ 824.402568][T18876] [ 824.404871][T18876] write to 0xffffea0004e96a98 of 8 bytes by task 18900 on cpu 0: [ 824.412561][T18876] delete_from_page_cache_batch+0x30c/0x6c0 [ 824.418436][T18876] truncate_inode_pages_range+0x1d5/0xad0 [ 824.424137][T18876] truncate_inode_pages+0x20/0x30 [ 824.429138][T18876] set_blocksize+0x24e/0x270 [ 824.433747][T18876] sb_set_blocksize+0x2c/0xa0 [ 824.438403][T18876] ext4_fill_super+0x2279/0x7840 [ 824.443316][T18876] mount_bdev+0x1e8/0x290 [ 824.447619][T18876] ext4_mount+0x2d/0x40 [ 824.451748][T18876] legacy_get_tree+0x70/0xc0 [ 824.456317][T18876] vfs_get_tree+0x4a/0x1a0 [ 824.460734][T18876] path_mount+0x11ec/0x1d20 [ 824.465229][T18876] __se_sys_mount+0x24b/0x2f0 [ 824.469900][T18876] __x64_sys_mount+0x63/0x70 [ 824.474471][T18876] do_syscall_64+0x44/0xa0 [ 824.478887][T18876] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 824.484759][T18876] [ 824.487062][T18876] read to 0xffffea0004e96a98 of 8 bytes by task 18876 on cpu 1: [ 824.494667][T18876] page_mapping+0x111/0x1c0 [ 824.499163][T18876] __pagevec_lru_add_fn+0x82/0x490 [ 824.504251][T18876] __pagevec_lru_add+0x189/0x240 [ 824.509167][T18876] lru_cache_add+0x121/0x150 [ 824.513737][T18876] add_to_page_cache_lru+0x150/0x1b0 [ 824.519006][T18876] page_cache_ra_unbounded+0x274/0x430 [ 824.524442][T18876] force_page_cache_ra+0x256/0x290 [ 824.529531][T18876] page_cache_sync_ra+0xcc/0xe0 [ 824.534357][T18876] filemap_read+0x3ad/0x1220 [ 824.538925][T18876] generic_file_read_iter+0x75/0x2c0 [ 824.544190][T18876] blkdev_read_iter+0xb9/0xf0 [ 824.548843][T18876] vfs_read+0x66c/0x750 [ 824.553012][T18876] ksys_read+0xd9/0x190 [ 824.557151][T18876] __x64_sys_read+0x3e/0x50 [ 824.561635][T18876] do_syscall_64+0x44/0xa0 [ 824.566031][T18876] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 824.571904][T18876] [ 824.574206][T18876] value changed: 0xffff888100424568 -> 0x0000000000000000 [ 824.581394][T18876] [ 824.583691][T18876] Reported by Kernel Concurrency Sanitizer on: 11:15:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 824.589813][T18876] CPU: 1 PID: 18876 Comm: systemd-udevd Not tainted 5.15.0-rc3-syzkaller #0 [ 824.598548][T18876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.608580][T18876] ================================================================== [ 824.626994][T18889] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 824.658336][T18906] loop4: detected capacity change from 0 to 264192 [ 824.700511][T18906] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 824.727366][T18906] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x40000000}]) 11:15:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001d0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 824.853096][T18919] loop1: detected capacity change from 0 to 16 [ 824.875316][T18922] loop4: detected capacity change from 0 to 264192 [ 824.948822][T18922] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 824.972910][T18922] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000001e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x7f010000}]) [ 825.140037][T18941] loop4: detected capacity change from 0 to 264192 [ 825.162252][T18945] loop1: detected capacity change from 0 to 16 [ 825.184118][T18941] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 825.220343][T18941] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000210f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 825.349824][T18958] loop4: detected capacity change from 0 to 264192 [ 825.380578][T18900] EXT4-fs: failed to create workqueue [ 825.385990][T18900] EXT4-fs (loop2): mount failed [ 825.395847][T18958] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xad883f1d}]) [ 825.436138][T18958] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010068, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000220f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 825.478231][T18970] loop1: detected capacity change from 0 to 16 11:15:34 executing program 5: sync() sync() [ 825.522603][T18976] loop2: detected capacity change from 0 to 264192 [ 825.549103][T18982] loop4: detected capacity change from 0 to 264192 [ 825.563351][T18976] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01006c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xf6ffffff}]) [ 825.620530][T18982] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 825.655495][T18982] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:34 executing program 5: pkey_alloc(0x0, 0x3) sync() 11:15:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000230f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 825.701779][T19002] loop2: detected capacity change from 0 to 264192 [ 825.718204][T19004] loop1: detected capacity change from 0 to 16 [ 825.755095][T19002] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 825.770102][T19017] loop4: detected capacity change from 0 to 264192 11:15:34 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') prctl$PR_GET_DUMPABLE(0x3) sync() r0 = syz_open_dev$vcsn(&(0x7f0000002ac0), 0xfff, 0xb2006) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000014) 11:15:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010074, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xff0f0000}]) [ 825.870176][T19017] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 825.892975][T19017] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000240f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:34 executing program 5: sync() sync() sync() [ 825.954694][T19031] loop2: detected capacity change from 0 to 264192 [ 825.994594][T19037] loop1: detected capacity change from 0 to 16 [ 826.029053][T19031] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 826.068454][T19039] loop4: detected capacity change from 0 to 264192 11:15:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01007a, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 826.124966][T19039] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 826.160266][T19039] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000250f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 826.229300][T19056] loop2: detected capacity change from 0 to 264192 11:15:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc01004c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xfffdffff}]) [ 826.286153][T19069] loop4: detected capacity change from 0 to 264192 [ 826.299631][T19056] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 826.315204][T19069] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0100f8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 826.358271][T19069] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 826.363186][T19076] loop5: detected capacity change from 0 to 264192 [ 826.388531][T19080] loop1: detected capacity change from 0 to 16 11:15:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000260f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 826.430524][T19084] loop2: detected capacity change from 0 to 264192 [ 826.485919][T19076] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended 11:15:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010006, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 826.538223][T19084] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 826.538449][T19094] loop4: detected capacity change from 0 to 264192 11:15:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0100fe, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 826.610816][T19094] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 826.647451][T19094] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 826.671061][T19111] loop2: detected capacity change from 0 to 264192 [ 826.681498][T19105] loop5: detected capacity change from 0 to 264192 11:15:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000270f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 826.727669][T19111] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 826.760868][T19105] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 826.777449][T19123] loop4: detected capacity change from 0 to 264192 11:15:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010128, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESOCT=0x0]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x1) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 826.851082][T19123] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 826.865452][T19123] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 826.917400][T19131] loop2: detected capacity change from 0 to 264192 11:15:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000280f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 826.972562][T19131] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 826.981938][T19139] loop5: detected capacity change from 0 to 16 [ 826.989912][T19139] FAT-fs (loop5): Unrecognized mount option "18446744073709551615" or missing value [ 827.078924][T19149] loop4: detected capacity change from 0 to 264192 11:15:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0101b3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 827.178895][T19149] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 827.218623][T19149] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:36 executing program 5: sync() sync() 11:15:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000290f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 827.265847][T19161] loop2: detected capacity change from 0 to 264192 11:15:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xfffffdff}]) [ 827.342056][T19161] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 827.353135][T19171] loop4: detected capacity change from 0 to 264192 11:15:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010204, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 827.406670][T19171] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 827.417380][T19171] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 827.431692][T19182] loop1: detected capacity change from 0 to 16 11:15:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0x2000000}]) [ 827.458416][T19188] loop2: detected capacity change from 0 to 264192 [ 827.487406][T19188] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002a0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xffffff0f}]) [ 827.517854][T19198] loop5: detected capacity change from 0 to 16 11:15:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0102d7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 827.616156][T19212] loop4: detected capacity change from 0 to 264192 [ 827.618285][T19214] loop1: detected capacity change from 0 to 16 [ 827.661500][T19214] handle_bad_sector: 104 callbacks suppressed [ 827.661528][T19214] attempt to access beyond end of device [ 827.661528][T19214] loop1: rw=2049, want=18, limit=16 [ 827.683729][T19212] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 827.693253][T19219] loop2: detected capacity change from 0 to 264192 11:15:36 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x4, 0x5) r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./bus\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x15, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) bind(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x80) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x80010, r0, 0x8b) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r4}, {}, {r3}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {}, {}, {0x0}, {r2, r4}, {r3, r4}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {0x0}, {r2, r4}, {}, {}, {}, {}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {0x0}, {}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {}, {r3}, {r2}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {}, {}, {r2}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r3}, {}, {}, {}, {}, {r2}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {r2, r4}, {r3}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {}, {r3}, {r2}, {0x0, r4}, {}, {0x0}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) r14 = syz_open_dev$sg(0x0, 0x0, 0x0) r15 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r14, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r15, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r18}, {}, {r17}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {r17, r18}, {0x0, r18}, {}, {}, {}, {0x0, r18}, {r17}, {0x0, r18}, {0x0, r18}, {}, {}, {}, {}, {r16}, {r17, r18}, {}, {}, {r16, r18}, {}, {}, {0x0, r18}, {0x0, r18}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {r17}, {0x0, r18}, {}, {r16, r18}, {}, {}, {}, {}, {r16}, {}, {0x0, r18}, {}, {0x0, r18}, {}, {}, {0x0, r18}, {r17, r18}, {}, {0x0, r18}, {0x0, r18}, {}, {r16}, {r16}, {}, {}, {}, {}, {}, {r17}, {r16}, {}, {}, {}, {0x0, r18}, {r17}, {}, {}, {0x0, r18}, {}, {}, {}, {0x0, r18}, {r16}, {}, {}, {0x0, r18}, {}, {r16}, {0x0, r18}, {}, {}, {}, {}, {r16}, {0x0, r18}, {0x0, r18}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17, r18}, {r16}, {}, {}, {0x0, r18}, {r16}, {r17, r18}, {}, {r16}, {r16, r18}, {}, {0x0, 0x0}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {0x0, r18}, {0x0, r18}, {0x0, r18}, {0x0}, {}, {}, {}, {}, {}, {0x0, r18}, {r16}, {}, {r17}, {}, {}, {}, {0x0, r18}, {}, {}, {0x0, r18}, {}, {}, {r17}, {r16}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {r16}, {r16}, {}, {}, {r16}, {}, {}, {}, {r17}, {0x0, r18}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {0x0, r18}, {r17}, {r16}, {}, {r16}, {}, {}, {r17}, {0x0, r18}, {r17, r18}, {0x0, r18}, {}, {0x0, r18}, {}, {}, {r17}, {}, {}, {}, {}, {r16}, {}, {}, {0x0, r18}, {}, {}, {0x0}, {}, {0x0, r18}, {r16}, {r17}, {}, {}, {}, {r17}, {0x0, r18}, {0x0, r18}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16, r18}, {r17}, {}, {}, {}, {}, {}, {}, {}, {r16, r18}, {}, {}, {r17}, {r16}, {0x0, r18}, {}, {}, {}, {}, {}, {0x0, r18}], 0x1, "2156816c73038c"}) r23 = syz_open_dev$sg(0x0, 0x0, 0x0) r24 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r23, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r24, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r27}, {}, {r26}, {r26}, {}, {}, {r22}, {}, {}, {}, {}, {}, {}, {0x0, r27}, {}, {r26, r27}, {0x0, r27}, {}, {}, {}, {0x0, r27}, {r26}, {0x0, r27}, {0x0, r27}, {}, {}, {}, {}, {r25}, {r26, r27}, {}, {}, {r25, r27}, {}, {}, {0x0, r27}, {0x0, r27}, {}, {0x0, r27}, {}, {r6}, {}, {}, {}, {}, {}, {r26}, {0x0, r27}, {}, {r25}, {}, {}, {}, {}, {r25}, {}, {0x0, r27}, {}, {0x0, r27}, {}, {}, {0x0, r27}, {r26, r27}, {r19}, {0x0, r27}, {0x0, r27}, {}, {r25}, {r25, r11}, {}, {}, {0x0, r20}, {}, {}, {r26}, {r25}, {}, {}, {}, {0x0, r27}, {r26}, {}, {r7}, {0x0, r8}, {}, {}, {}, {0x0, r27}, {r25}, {}, {r5}, {0x0, r27}, {}, {r25}, {0x0, r27}, {}, {}, {}, {}, {r25}, {0x0, r27}, {0x0, r27}, {0x0, r27}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r26, r27}, {r25}, {}, {}, {0x0, r27}, {r25}, {r26, r27}, {}, {r25}, {r25, r27}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r27}, {0x0, r27}, {0x0, r27}, {}, {}, {}, {}, {}, {}, {0x0, r27}, {r25}, {}, {r26}, {}, {}, {}, {}, {}, {}, {0x0, r27}, {}, {}, {r26}, {r25}, {r21}, {}, {}, {}, {}, {0x0, r27}, {}, {}, {}, {}, {}, {}, {}, {r25}, {r25}, {}, {}, {r25}, {0x0, r12}, {}, {}, {r26}, {0x0, r27}, {}, {}, {}, {0x0, r27}, {}, {}, {}, {0x0, r27}, {r26}, {r25}, {}, {r25}, {}, {}, {r26}, {0x0, r9}, {r26, r27}, {0x0, r27}, {}, {0x0, r27}, {}, {}, {r26}, {}, {}, {}, {}, {r25}, {}, {}, {0x0, r27}, {r13}, {}, {}, {}, {r10, r27}, {r25}, {r26}, {}, {}, {}, {}, {0x0, r27}, {0x0, r27}, {}, {r25}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r25, r27}, {r26}, {}, {}, {}, {}, {}, {}, {}, {r25, r27}, {}, {}, {r26}, {r25}, {0x0, r27}, {}, {}, {}, {}, {}, {0x0, r27}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000047c00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000047e00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {0x0, r18}, {r25, r28}], 0x3f, "f9fc6e2663a55d"}) chdir(&(0x7f0000000040)='./file0\x00') r29 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendfile(r29, 0xffffffffffffffff, 0x0, 0x0) 11:15:36 executing program 5: sync() sync() sync() sync() sync() sync() sync() sync() sync() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) sync() sync() sync() [ 827.715621][T19212] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 827.736620][T19227] attempt to access beyond end of device [ 827.736620][T19227] loop1: rw=2049, want=18, limit=16 [ 827.796571][T19230] loop0: detected capacity change from 0 to 16 [ 827.815217][T19227] attempt to access beyond end of device [ 827.815217][T19227] loop1: rw=2049, want=19, limit=16 [ 827.828145][ T1119] attempt to access beyond end of device [ 827.828145][ T1119] loop1: rw=1, want=27, limit=16 11:15:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002b0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 827.852533][T19219] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 827.879663][T19227] attempt to access beyond end of device [ 827.879663][T19227] loop1: rw=2049, want=20, limit=16 11:15:36 executing program 0: sync() sync() sync() sync() sync() sync() sync() sync() sync() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) sync() sync() sync() 11:15:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 827.914170][T19227] attempt to access beyond end of device [ 827.914170][T19227] loop1: rw=2049, want=21, limit=16 [ 827.945370][T19227] attempt to access beyond end of device [ 827.945370][T19227] loop1: rw=2049, want=22, limit=16 11:15:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010307, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 827.985000][T19227] attempt to access beyond end of device [ 827.985000][T19227] loop1: rw=2049, want=23, limit=16 [ 828.002673][T19255] loop4: detected capacity change from 0 to 264192 [ 828.007943][T19227] attempt to access beyond end of device [ 828.007943][T19227] loop1: rw=2049, want=24, limit=16 [ 828.026148][T19255] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 828.056546][T19214] attempt to access beyond end of device [ 828.056546][T19214] loop1: rw=2049, want=28, limit=16 [ 828.073019][T19265] loop2: detected capacity change from 0 to 264192 [ 828.077944][T19255] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002c0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xfffffff6}]) [ 828.126547][T19265] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) (fail_nth: 1) 11:15:37 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xffffffff) r3 = epoll_create(0x9) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000180)=0x3ff) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) 11:15:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010326, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 828.229845][T19285] loop1: detected capacity change from 0 to 16 [ 828.236622][T19286] loop4: detected capacity change from 0 to 264192 [ 828.264273][T19294] loop0: detected capacity change from 0 to 16 [ 828.269636][T19286] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 828.322489][T19286] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 828.356446][T19304] FAULT_INJECTION: forcing a failure. [ 828.356446][T19304] name failslab, interval 1, probability 0, space 0, times 0 [ 828.369087][T19304] CPU: 1 PID: 19304 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 828.377859][T19304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.387911][T19304] Call Trace: [ 828.391195][T19304] dump_stack_lvl+0xd6/0x122 [ 828.395874][T19304] dump_stack+0x11/0x1b [ 828.400030][T19304] should_fail+0x23c/0x250 [ 828.404450][T19304] __should_failslab+0x81/0x90 [ 828.409212][T19304] ? alloc_pipe_info+0xac/0x350 [ 828.414083][T19304] should_failslab+0x5/0x20 [ 828.418588][T19304] kmem_cache_alloc_trace+0x52/0x320 [ 828.423883][T19304] alloc_pipe_info+0xac/0x350 [ 828.428580][T19304] splice_direct_to_actor+0x5f7/0x650 [ 828.433954][T19304] ? security_file_permission+0x7c/0xa0 [ 828.439665][T19304] ? do_splice_direct+0x190/0x190 [ 828.444692][T19304] ? security_file_permission+0x87/0xa0 [ 828.450241][T19304] do_splice_direct+0x106/0x190 [ 828.455088][T19304] do_sendfile+0x63e/0xbb0 [ 828.459506][T19304] __x64_sys_sendfile64+0x102/0x140 [ 828.464727][T19304] do_syscall_64+0x44/0xa0 [ 828.469148][T19304] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 828.475045][T19304] RIP: 0033:0x7fe6c2455709 [ 828.479747][T19304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 828.499376][T19304] RSP: 002b:00007fe6c01ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 828.507784][T19304] RAX: ffffffffffffffda RBX: 00007fe6c255a020 RCX: 00007fe6c2455709 11:15:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002d0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 828.515756][T19304] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 828.523733][T19304] RBP: 00007fe6c01ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 828.531755][T19304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.539725][T19304] R13: 00007ffe5911184f R14: 00007fe6c01ac300 R15: 0000000000022000 [ 828.558299][T19305] loop2: detected capacity change from 0 to 264192 11:15:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x0, 0x0, 0xffffffff}]) [ 828.598034][T19305] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 828.708713][ C1] sd 0:0:1:0: tag#4779 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 828.718562][ C1] sd 0:0:1:0: tag#4779 CDB: opcode=0xe5 (vendor) [ 828.724890][ C1] sd 0:0:1:0: tag#4779 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 828.733926][ C1] sd 0:0:1:0: tag#4779 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 828.742961][ C1] sd 0:0:1:0: tag#4779 CDB[20]: ba 11:15:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010328, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 828.753054][T19327] loop1: detected capacity change from 0 to 16 [ 828.783436][T19332] loop4: detected capacity change from 0 to 264192 [ 828.833333][T19327] buffer_io_error: 67 callbacks suppressed [ 828.833357][T19327] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 828.849490][T19332] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 828.860135][T19327] Buffer I/O error on dev loop1, logical block 18, lost async page write 11:15:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002f0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 828.897466][T19332] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 828.911864][T19327] Buffer I/O error on dev loop1, logical block 19, lost async page write [ 828.925413][T19341] loop2: detected capacity change from 0 to 264192 [ 828.955465][T19327] Buffer I/O error on dev loop1, logical block 20, lost async page write [ 828.957583][T19341] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 828.986330][T19327] Buffer I/O error on dev loop1, logical block 21, lost async page write 11:15:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) (fail_nth: 2) [ 829.022976][T19350] loop4: detected capacity change from 0 to 264192 [ 829.065259][T19327] Buffer I/O error on dev loop1, logical block 22, lost async page write [ 829.105716][T19350] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0103b7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 829.156907][T19358] loop0: detected capacity change from 0 to 16 [ 829.179187][T19327] Buffer I/O error on dev loop1, logical block 23, lost async page write [ 829.237052][T19350] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 829.247583][T19368] loop2: detected capacity change from 0 to 264192 [ 829.257272][T19358] FAULT_INJECTION: forcing a failure. [ 829.257272][T19358] name failslab, interval 1, probability 0, space 0, times 0 [ 829.269991][T19358] CPU: 0 PID: 19358 Comm: syz-executor.0 Not tainted 5.15.0-rc3-syzkaller #0 [ 829.278743][T19358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.288908][T19358] Call Trace: [ 829.292257][T19358] dump_stack_lvl+0xd6/0x122 [ 829.296882][T19358] dump_stack+0x11/0x1b [ 829.301024][T19358] should_fail+0x23c/0x250 [ 829.305421][T19358] ? kcalloc+0x32/0x40 [ 829.309571][T19358] __should_failslab+0x81/0x90 [ 829.314380][T19358] should_failslab+0x5/0x20 [ 829.318876][T19358] __kmalloc+0x6f/0x350 [ 829.323030][T19358] ? alloc_pipe_info+0xac/0x350 [ 829.327868][T19358] kcalloc+0x32/0x40 [ 829.331795][T19358] alloc_pipe_info+0x1be/0x350 [ 829.336564][T19358] splice_direct_to_actor+0x5f7/0x650 [ 829.341922][T19358] ? security_file_permission+0x7c/0xa0 [ 829.347457][T19358] ? do_splice_direct+0x190/0x190 [ 829.352519][T19358] ? security_file_permission+0x87/0xa0 [ 829.358097][T19358] do_splice_direct+0x106/0x190 [ 829.362942][T19358] do_sendfile+0x63e/0xbb0 [ 829.367399][T19358] __x64_sys_sendfile64+0x102/0x140 [ 829.372586][T19358] do_syscall_64+0x44/0xa0 [ 829.377101][T19358] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 829.383000][T19358] RIP: 0033:0x7fe6c2455709 [ 829.387398][T19358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 829.406994][T19358] RSP: 002b:00007fe6c01cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 829.415386][T19358] RAX: ffffffffffffffda RBX: 00007fe6c2559f60 RCX: 00007fe6c2455709 [ 829.423357][T19358] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 829.431332][T19358] RBP: 00007fe6c01cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 829.439281][T19358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.447233][T19358] R13: 00007ffe5911184f R14: 00007fe6c01cd300 R15: 0000000000022000 11:15:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000300f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x145) sendfile(r2, r5, 0x0, 0x8400fffffffa) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 11:15:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006000002e0f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 829.569564][T19381] loop4: detected capacity change from 0 to 264192 [ 829.592761][T19389] loop5: detected capacity change from 0 to 264192 [ 829.613160][T19391] loop1: detected capacity change from 0 to 16 [ 829.627413][T19381] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 829.692178][T19389] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 829.692680][T19381] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 829.713544][T19389] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 2441661457 [ 829.730926][T19391] Buffer I/O error on dev loop1, logical block 17, lost async page write [ 829.739580][T19391] Buffer I/O error on dev loop1, logical block 18, lost async page write [ 829.750516][T19391] Buffer I/O error on dev loop1, logical block 19, lost async page write 11:15:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000310f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 829.851357][T19368] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 829.910492][T19416] loop4: detected capacity change from 0 to 264192 [ 829.921889][T19416] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0103c5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffa) fallocate(r3, 0x1, 0x9, 0x7a) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 11:15:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 829.965046][T19416] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 830.038707][T19424] loop2: detected capacity change from 0 to 264192 [ 830.078022][T19429] loop1: detected capacity change from 0 to 16 11:15:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000320f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 830.088043][T19440] loop0: detected capacity change from 0 to 16 [ 830.144758][T19424] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 830.180515][T19450] loop4: detected capacity change from 0 to 264192 11:15:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8) 11:15:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0103c6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 830.230751][T19450] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 830.299852][T19450] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 830.316928][T19459] loop0: detected capacity change from 0 to 16 [ 830.330295][T19468] loop2: detected capacity change from 0 to 264192 11:15:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = epoll_create(0x9) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x846c, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000640)={0x0, 0x0, "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", "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"}) sendfile(r3, r4, 0x0, 0x8400fffffffa) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./bus\x00') sendfile(r2, r6, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 11:15:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000330f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 830.387611][T19468] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1c0) [ 830.482831][T19482] loop1: detected capacity change from 0 to 16 11:15:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0103c7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 830.524704][T19477] loop4: detected capacity change from 0 to 264192 [ 830.529946][T19490] loop0: detected capacity change from 0 to 16 [ 830.580492][T19503] loop2: detected capacity change from 0 to 264192 [ 830.587285][T19477] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 830.641275][T19477] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 830.719906][T19503] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc001) 11:15:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0103c8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000340f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 830.845333][T19525] loop0: detected capacity change from 0 to 16 [ 830.851912][T19524] loop2: detected capacity change from 0 to 264192 [ 830.885061][T19524] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 830.891487][T19529] loop4: detected capacity change from 0 to 264192 11:15:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0103ca, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000) [ 831.028317][T19529] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 831.067119][T19529] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 831.089986][T19546] loop0: detected capacity change from 0 to 16 [ 831.118645][T19549] loop2: detected capacity change from 0 to 264192 11:15:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000350f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 831.141240][T19549] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 831.206615][T19559] loop4: detected capacity change from 0 to 264192 11:15:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf0ff7f) 11:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0103f9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 831.316900][T19559] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 831.357960][T19569] loop0: detected capacity change from 0 to 16 [ 831.382695][T19576] loop2: detected capacity change from 0 to 264192 [ 831.389122][T19559] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 831.426602][T19576] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffff000) 11:15:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000360f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:40 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1100}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x1200, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x1) lseek(r0, 0x1200, 0x3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) r6 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) r7 = open_tree(r1, &(0x7f00000005c0)='./file0/file0\x00', 0x8100) io_submit(0x0, 0x8, &(0x7f0000000b80)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000300)="3b69259a7e7a33459639cb438bae4d793f8b70a671250e2f26d87a0db437af4b791c7e7ab24c5463a6e86d7f38b067599fd52828d8e630adc57505fc182b28359d0cb258b5e3d71b6ea0d0529ddb081442aecfad46f03ad4fdbf6a12e2b6f925deb0b0b4b10489e91d0f97702c4f9039850bde5d578428d99e2346d308e94c6a7f76a2c330d464f326b8a74a77e5474ef2785c6c9741194d38b35b50782c8adedbc485cafb04b2235e5eed61babc00ec79c1ed0c8f41dd9699291b8794b1aa373e8bf08165682c98c09d43d292f977a70b955f33b0b5a0e82dd85b28e1fa4d6410da3c9e1b6d9042f5c2266f67527b", 0xef, 0xfff, 0x0, 0x1, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x800, r1, &(0x7f0000000bc0)="47c92e9902fa159f4882bc74f9f72a1dd94480545d60247e2765142e769f07e5708b0fa732d88785d6c3b8e5694120338b4489c701fa42ae2b150903894362a2fb1d165bab2b92efd612f54608192c111eaf02229309d850c7dc7fcafe1c874eec27f73416851b58", 0x68, 0xfff, 0x0, 0x1, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x14, 0x8cb1, 0xffffffffffffffff, &(0x7f0000000640)="89f1c77fad1e1fc0db6533f054b4db03b03d9ec4c4a65722f8ee02682def176efc1b7fd820909e911a4777c8a720580a8440a8aee8f33b2eade31af294ec8a9851ee0610e1e764de3f38b8a60f965fcd931db61c5e855cb3ec3497093ab28b83e81a860ae49df5ea44b29009b20c7321b698c1bf00597462b851f091b2254539caf4f5590f9c27cda06fac2d131306d471b65c56628f8b8b19ac48d313e08fe8388cfdfa3aeca4540349da0a57036c35e05343efeb4e52130b7c1b5e7711702b1645f574ba8acd430881c421ad05", 0xce, 0x9}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x30, 0xffffffffffffffff, &(0x7f0000000740)="ae87a03f0a5b47906bbcc7f91d9867d191e3b0b1a06e99c1e13fdfaba87e2e638550136381fc07e7cfecad035ac031f0767a86af901f77c9f55b1809afe64805b07adbc1fe3594e45afa5fa2b34341f6761910cea3024cbceb8fa7dd7e5e203bc1df77882a6c569d3e4df0605ad634453fa91c3751440de4f09ea7318571d5be4cc186da1261f96dccc42ab50aa04058e443e1ce366f4db7a26b88a4011369fe120e8652219096880854eae8b7c5b3a6bb4f3388a336d541295dd0704b74bc22d676ef9378834b939b4cf442e321864ca4347647fecd33530aa0dcc4", 0xdc, 0x5, 0x0, 0x1, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000000840)="5ee076bda7c769cfc16c0a5a4d2504cec3d12e10265ed7dcd1e5c0baaacd91ffb1348f4a909c45740244cab35401efb173f365a60f508308308a102769471ccda8b84fe2760e5ed5a11f27328c0c0a34d8b3fe29d7f8fb12e3a3bb09e5c2041dad646072de55c9585c6e323820c6cab05c0ee5a28b8c24128216bb1c89ccfc78294b59421ac8ab333b74bb759630fa", 0x8f, 0x56b7, 0x0, 0x1}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, &(0x7f0000000900)="9118589b048058fed7dfacb2e3f95c80273f6e224f5de6b1209dc9667ab5b85b8dd716ac3ad648d652243f72c7f6297bbff3120d1f32742cd6a2f5c05764fee72e1661ab61afcbd9469ae760acd294657b08205b65c20178661943f29ca535c76551", 0x62, 0x8, 0x0, 0x0, r7}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f00000009c0)="26327856013a5f01665613f935f137e33c5b265fff6c7b8ca8e7ee4694afbb43ff1f86279eef6141f8b30e0f08cc56ee58942d38682a0935d7db4f7528247cfea89514cc8a20d4a4eeff9dc6150e9e973af57a19dd48bb890393c834685bf235013a98c4573a", 0x66, 0x2, 0x0, 0x855c88b66020b333}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x2, 0x4, r3, &(0x7f0000000a80)="3e4dc8ab59ccde76cd0d311b2320d6952be9cb3d88b5302fe2b0b2cc8b93c0b83b1631d02afe4d62f30f23d78bcc984bd1be117dfa98d499c1ae205d8ea289eb40ff626b117f9b34cb15a56ef94af33fe7f89f5c2496f66fe3801d7766705208c1999fda4aaf2c0e6192fd2311b08494e0a431fd4c2b88a7fe8105b789fbdc0b220a638abe027e5a556e407d54b3f1cc0eee9b47176d45b94f8c5ae1bd072047099a330331e42d35367679edf8c93e06", 0xb0, 0x1000, 0x0, 0x2, r3}]) fallocate(r6, 0x40, 0x0, 0x5) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x8400fffffffc) io_submit(r2, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) r9 = syz_open_dev$sg(&(0x7f0000000080), 0x200000000000fe, 0x466000) sendfile(r9, r8, &(0x7f0000000180)=0xfff, 0x0) 11:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc0103fe, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 831.578067][T19596] loop2: detected capacity change from 0 to 264192 [ 831.587512][T19593] loop1: detected capacity change from 0 to 17 [ 831.588085][T19603] loop4: detected capacity change from 0 to 264192 [ 831.605397][T19604] loop0: detected capacity change from 0 to 16 [ 831.618564][T19596] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 831.657898][T19603] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended 11:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010402, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 831.739997][T19603] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 [ 831.778257][T19623] loop2: detected capacity change from 0 to 264192 11:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010406, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000370f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 831.819111][T19623] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xc0010000) 11:15:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) open_tree(r1, &(0x7f0000000140)='./file0\x00', 0x1901) io_setup(0xff, &(0x7f0000000080)=0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x1200, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x1) lseek(r5, 0x1200, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffa) io_submit(r3, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) [ 831.915469][T19635] loop2: detected capacity change from 0 to 264192 [ 831.935149][T19635] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 831.953072][T19648] loop0: detected capacity change from 0 to 16 [ 831.965407][T19649] loop4: detected capacity change from 0 to 264192 [ 831.984382][T19655] loop1: detected capacity change from 0 to 16 11:15:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010410, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 832.029592][T19649] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 832.045164][T19649] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:40 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r7}, {}, {r6}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r6, r7}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {r5}, {r6, r7}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {r5, r7}, {}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {r6, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {r5}, {r5}, {}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {0x0, r7}, {r6}, {}, {}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {r5}, {}, {}, {0x0, r7}, {}, {r5}, {0x0, r7}, {}, {}, {}, {}, {r5}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6, r7}, {r5}, {}, {}, {0x0, r7}, {r5}, {r6, r7}, {}, {r5}, {r5, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {r5}, {}, {r6}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r5}, {}, {}, {r5}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {r6}, {r5}, {}, {r5}, {}, {}, {r6}, {0x0, r7}, {r6, r7}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r6}, {}, {}, {}, {}, {r5}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {r5}, {r6}, {}, {}, {}, {r6}, {0x0, r7}, {0x0, r7}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {r6}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {}, {r6}, {r5}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dc80)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "24597e07944885"}) r9 = syz_open_dev$sg(0x0, 0x0, 0x0) r10 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, r13}, {}, {r12}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {r12, r13}, {0x0, r13}, {}, {}, {}, {0x0, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {r11}, {r12, r13}, {}, {}, {r11, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r12}, {0x0, r13}, {}, {r11, r13}, {}, {}, {}, {}, {r11}, {}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {r12, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {r11}, {r11}, {}, {}, {}, {}, {}, {r12}, {r11}, {}, {}, {}, {0x0, r13}, {r12}, {}, {}, {0x0, r13}, {}, {}, {}, {0x0, r13}, {r11}, {}, {}, {0x0, r13}, {}, {r11}, {0x0, r13}, {}, {}, {}, {}, {r11}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r13}, {r11}, {}, {}, {0x0, r13}, {r11}, {r12, r13}, {}, {r11}, {r11, r13}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {r11}, {}, {r12}, {}, {}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {}, {r12}, {r11}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r11}, {r11}, {}, {}, {r11}, {}, {}, {}, {r12}, {0x0, r13}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {0x0, r13}, {r12}, {r11}, {}, {r11}, {}, {}, {r12}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {r12}, {}, {}, {}, {}, {r11}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {0x0, r13}, {r11}, {r12}, {}, {}, {}, {r12}, {0x0, r13}, {0x0, r13}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {r12}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {}, {}, {r12}, {r11}, {0x0, r13}, {}, {}, {}, {}, {}, {0x0, r13}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000005ec80)={{0x0, 0xe1, 0x7, 0xffff, 0xffffffff, 0xf19e, 0x9, 0x101, 0xa58d, 0x5, 0xcf05, 0x6, 0x3, 0x5f, 0x3}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005fc80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000060c80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000061c80)={0x407e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "c831ab68815961"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000062c80)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r8}, {0x0, r13}, {r14, r15}, {r16, r17}], 0x5, "55d72d8f0cea7d"}) [ 832.148465][T19666] loop2: detected capacity change from 0 to 264192 11:15:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000380f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x3008852, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfeffffff) [ 832.206005][T19675] loop3: detected capacity change from 0 to 16 [ 832.213672][T19666] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended 11:15:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file1\x00', 0x108) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockname$unix(r0, &(0x7f0000000180), &(0x7f0000000240)=0x6e) lseek(r2, 0x1200, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x8001, 0x3) sendfile(r2, r5, 0x0, 0x8400fffffffa) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0}]) [ 832.294624][T19681] loop4: detected capacity change from 0 to 264192 11:15:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x160) sync() r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fchdir(r1) sendfile(r0, r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x8, 0xcd}, @mss={0x2, 0x2}, @mss={0x2, 0x8001}, @window={0x3, 0x6, 0x1}, @window={0x3, 0x0, 0x1000}, @sack_perm, @timestamp, @mss={0x2, 0x8f47}, @mss={0x2, 0x2}], 0x9) 11:15:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000060007a000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) [ 832.353785][T19690] loop0: detected capacity change from 0 to 16 [ 832.357519][T19699] loop1: detected capacity change from 0 to 16 [ 832.370250][T19681] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 832.406521][T19681] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz-executor.4: bad orphan inode 2441661457 11:15:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc010000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000390f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f00000002c0)="000000000000000011cc8891d28f43f309be17390897f05a462e11f2f7fcae54e4d667365dd5104aa9deb751e514f321d869f6515deebde60485fd288575cd73d99ae5b4edfb48f2570c45806af138305c71fd1220bc979fd9edbf13efe19924488bcb32bb213ada34519a556132d7fa99782b7f2fb1e96827e7d91ba9ec8b105b9938f9f260", 0x86, 0x4e0}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000040)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)) 11:15:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x30000d0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x1200, 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffa) io_submit(r1, 0x18b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 11:15:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)=[{&(0x7f00000002c0)="eb3c8f000000732e6661740002010