change from 0 to 87 [ 143.780591][ C0] sd 0:0:1:0: tag#4533 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 143.795787][ C0] sd 0:0:1:0: tag#4533 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 18:53:41 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:41 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000440), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) io_submit(0x0, 0x5, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0xe1b3, 0xffffffffffffffff, &(0x7f00000001c0)="35a8ac9d63170b7ab44a7dddab4abca76b12dc044d260d1b44adc9c71c7517e0b9d2bab2db51c30d3342c022d6aadd3eb3bb7a57d1ff0d95cfe3cd1e681a9803e26a747fc31dd7ba23e8db2c2d9725b7b1f42e", 0x53, 0x5, 0x0, 0x2, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f0000000380)="c55e21b2f99c6308723ebff25168e72613d934b60159a812e64bca5b3195dce4df3971cc01596333d275acd5d002c84e9c8d0e8d9d96bc84e715c1799246b30b9b00f2d1f4b7c4916090a0ed40b5dbd0b6ae02aa55f06f9b35ec1f2197d345016dfcbc6d12e19219ef4c0588b7f7498b74b04421ff91f19542ad4d8cebe9ca0ff1ce2f4b8b745d88ba2aaffff011f500bf7852711aad136b167773ded395603bcb38010ea0dfb4cdf577f868f52e93da558e2a400b25412e961a", 0xba, 0x1, 0x0, 0x3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x200, r2, &(0x7f0000000480)="619ba26fa06ac71537b67f87746e87054b396ea0303404b3698aed0147999e40eb1df057dd1b52fc95d1c156ff", 0x2d, 0x4, 0x0, 0x3, r3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x5dd, r1, &(0x7f0000000500)="a8221fd15542cec47d634e2a9af29ad965f810a98b94d0652e3942c574f12dcf7cc8fffdc1387954d79a08552237164e6f2ca4a6b9fa52279c5819198702a64b1374652944a2939e74d0d1ebb81c3af2fe078b332f6d96aa9b3d09ecb3694d5f5b4a032b9b0d20d072959922ac4f4bf3896af200170af7f327beb1ae9faf5cbd398ff3542a223e720a817365d355f27aade0bee863ff9b62fe58cfeb7a0e7b8e530c93b5c5d055e2f671685790cf0d6645719683528cd3e22e5be18523dd31f05dda6b298ce34a89ddb2e4ac924c7021280fc33a3009398cc014fd4fd0d8e728bc77", 0xe2, 0x8001, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x101, r0, &(0x7f0000000640)="95c547d9e67ef9e1dc3bab85d20e3ffb79cd8824e7471e906ad603f97b2fbd0c227892ebba5f477e5d0ea5777efc10ada967d08c0aa2029fa548b0583d25a74c40b48b8c83775f1cc507c9ce9f65cd71669f4f1c67ee6dc7ebf8e9d0107ff44d28ddcd77ad8329f282c81f7c407930692e4547e56c37cffe5c260f720d391a041abeda85fc29d177fb0a21cc10e309e50e847f181676cbcaac3bb8764bc6d5fab6010976f14b3c272c93aa93d7ba851d51903a185ac08317aa7175e07471cd32b6b2f1cbd6fca68fce1fee2e534e71352450254beebe60abd6f52a614b27e48f81d17fc93cf94c50", 0xe8, 0xf00, 0x0, 0x2}]) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="fa562db2fb8cec3aabaab8c9835a45e92ba6157c76384f985db86d11a8", @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES32, @ANYRES16=r0, @ANYRES32], 0x8) r4 = open(&(0x7f0000000000)='\x00', 0x8a0180, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r5, &(0x7f0000000180)=""/19, 0x7ffff000) [ 143.800747][T18644] loop5: detected capacity change from 0 to 262166 [ 143.804961][ C0] sd 0:0:1:0: tag#4533 CDB[20]: ba [ 143.818954][T18608] FAT-fs (loop3): Unrecognized mount option "./file1" or missing value [ 143.854759][T18653] FAT-fs (loop0): bogus number of reserved sectors [ 143.855993][T18644] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 143.861315][T18653] FAT-fs (loop0): Can't find a valid FAT filesystem 18:53:41 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 143.909220][T18665] loop1: detected capacity change from 0 to 87 [ 143.959662][T18675] loop4: detected capacity change from 0 to 87 [ 143.975001][T18644] EXT4-fs (loop5): orphan cleanup on readonly fs [ 143.981398][T18644] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 143.992380][T18644] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.995214][T18680] loop3: detected capacity change from 0 to 87 18:53:41 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:41 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:41 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x5, 0x2, 0x0, 0x5, 0x2, 0x3, 0x9, 0xa3, 0x40, 0x1e2, 0x9, 0x3ff, 0x38, 0x1, 0x0, 0x5, 0xff}, [{0x4, 0x4, 0x0, 0x100000001, 0x1, 0x80000000, 0x0, 0x1}, {0x1, 0x0, 0xffffffffffff570a, 0x7, 0x1000000, 0x3, 0x4, 0xa7e5}], "b4c6eca6b95d7f96f30af52a5b999c837797d52fe5da568fe62a5cc5a90b77a1156476f87f68c05975649f6a855863c85d134359768de340a5c38a1f43b0da58b6b312c44bc3468ed9a16b444a75dba4f6ca0292c3abeb2b2f8f2ad1da58c59da1a92510b00b95f15d19da89fb7aa2b8d68d57b66932fa046d24966038d3b4f09de76fa48e1a71777aa51c0730510ff2b6e8621bdc624325e4ff6c91f9c9fecba9d30632536a88a3f96e46613555e6d40a27a658c7a38e213bf8b4907ee4777d706df9a962dead5f76", ['\x00', '\x00']}, 0x379) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:41 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:41 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = accept4$packet(r0, &(0x7f0000000080), &(0x7f0000000140)=0x14, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000180)="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") sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xe) [ 144.086761][T18693] loop1: detected capacity change from 0 to 87 [ 144.093367][T18694] loop0: detected capacity change from 0 to 87 18:53:41 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc100, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 144.168018][T18694] FAT-fs (loop0): bogus number of reserved sectors [ 144.174565][T18694] FAT-fs (loop0): Can't find a valid FAT filesystem [ 144.189758][T18704] loop4: detected capacity change from 0 to 87 [ 144.215983][T18716] loop1: detected capacity change from 0 to 87 [ 144.218461][T18717] loop3: detected capacity change from 0 to 87 18:53:41 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:41 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:41 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r1, 0x1, 0xfff, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 144.276302][T18729] loop5: detected capacity change from 0 to 262166 [ 144.298376][T18729] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:41 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000080)='./file1\x00', 0x149ac2, 0x74) preadv2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000240)=""/78, 0x4e}], 0x5, 0xa920, 0x5, 0xa) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r3, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r0, r2, r3, r0], 0x4) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 144.328782][T18742] loop1: detected capacity change from 0 to 87 [ 144.335482][T18729] EXT4-fs (loop5): orphan cleanup on readonly fs [ 144.341960][T18729] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 144.352974][T18729] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.359385][T18751] loop4: detected capacity change from 0 to 87 [ 144.386648][T18754] loop0: detected capacity change from 0 to 87 [ 144.430283][T18754] FAT-fs (loop0): bogus number of reserved sectors [ 144.436931][T18754] FAT-fs (loop0): Can't find a valid FAT filesystem 18:53:41 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:41 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000100)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:41 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc103, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 144.493365][T18767] loop3: detected capacity change from 0 to 87 18:53:41 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 144.562593][T18784] loop1: detected capacity change from 0 to 87 [ 144.569497][T18785] loop4: detected capacity change from 0 to 87 [ 144.594979][T18792] loop0: detected capacity change from 0 to 87 18:53:41 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) preadv(r0, &(0x7f0000000080), 0x0, 0x8, 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 144.615845][T18795] loop5: detected capacity change from 0 to 262166 [ 144.631176][T18792] FAT-fs (loop0): bogus number of reserved sectors [ 144.637794][T18792] FAT-fs (loop0): Can't find a valid FAT filesystem 18:53:41 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) mount$bind(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x102090, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendfile(r0, r1, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:41 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 144.666939][T18805] loop3: detected capacity change from 0 to 87 [ 144.686385][T18795] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:42 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000100)='./bus\x00', 0x82042, 0x44) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r6}, {r5}, {r5}, {r5, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {r5}, {r5, r6}, {}, {r5}, {r4}, {}, {r4, r6}, {r5}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057100)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0xff, "12ebe9ecc4eb77"}) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r7, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:42 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:42 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='./bus/file0\x00', 0x4, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="b59de14f84eba612ea39d7cff85517017d97b19866d6237ebde786", 0x1b, 0x6}], 0x3012000, &(0x7f00000003c0)=ANY=[@ANYBLOB='utf8=1,shortname=winnt,seclabel,fsmagic=0x0000000000000080,hash,euid>', @ANYRESDEC, @ANYBLOB="2cd083e1a188f6fef996057c81e65a07"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) linkat(r1, &(0x7f0000000280)='./file1\x00', r2, &(0x7f0000000380)='./file1\x00', 0x1400) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 144.763740][T18795] EXT4-fs (loop5): orphan cleanup on readonly fs [ 144.770129][T18795] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 144.781098][T18795] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.807302][T18820] loop4: detected capacity change from 0 to 87 [ 144.834128][T18823] loop1: detected capacity change from 0 to 87 [ 144.859850][T18832] loop0: detected capacity change from 0 to 87 [ 144.869721][T18830] loop3: detected capacity change from 0 to 87 [ 144.877126][T18832] FAT-fs (loop0): bogus number of reserved sectors [ 144.879772][T18820] FAT-fs (loop4): Unrecognized mount option "./bus" or missing value [ 144.883691][T18832] FAT-fs (loop0): Can't find a valid FAT filesystem 18:53:42 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 144.933990][T18839] loop2: detected capacity change from 0 to 87 18:53:42 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:42 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xda03, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 144.975269][T18846] loop0: detected capacity change from 0 to 87 [ 145.013389][T18846] FAT-fs (loop0): bogus number of reserved sectors [ 145.019967][T18846] FAT-fs (loop0): Can't find a valid FAT filesystem [ 145.020694][T18856] loop1: detected capacity change from 0 to 87 [ 145.039621][ C1] sd 0:0:1:0: tag#4496 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 145.049477][ C1] sd 0:0:1:0: tag#4496 CDB: opcode=0xe5 (vendor) [ 145.055998][ C1] sd 0:0:1:0: tag#4496 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 145.065067][ C1] sd 0:0:1:0: tag#4496 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 18:53:42 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0x5d, 0x2) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syncfs(r2) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/169) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 145.074222][ C1] sd 0:0:1:0: tag#4496 CDB[20]: ba [ 145.093185][T18867] loop3: detected capacity change from 0 to 87 [ 145.114104][T18820] loop4: detected capacity change from 0 to 87 18:53:42 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:42 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) splice(r1, &(0x7f0000000080), r2, &(0x7f0000000140)=0xffffffff00000000, 0x6, 0xc) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:42 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) chdir(&(0x7f0000000100)='./file1\x00') lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 145.126735][T18820] FAT-fs (loop4): Unrecognized mount option "./bus" or missing value [ 145.145484][T18882] loop5: detected capacity change from 0 to 262166 [ 145.157558][T18884] loop0: detected capacity change from 0 to 87 [ 145.172026][T18882] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 145.182572][T18884] FAT-fs (loop0): invalid media value (0x00) [ 145.188646][T18884] FAT-fs (loop0): Can't find a valid FAT filesystem [ 145.193001][T18896] loop3: detected capacity change from 0 to 87 [ 145.205190][T18882] EXT4-fs (loop5): orphan cleanup on readonly fs [ 145.211682][T18882] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 145.222554][T18882] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.244905][T18904] loop2: detected capacity change from 0 to 87 18:53:42 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) unlink(&(0x7f0000000080)='./file1\x00') 18:53:42 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:42 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:42 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xedc0, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:42 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x4) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) read(r2, &(0x7f0000000180)=""/13, 0xd) 18:53:42 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) fallocate(r1, 0x20, 0x130, 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 145.328433][T18922] loop1: detected capacity change from 0 to 87 [ 145.338467][T18924] loop3: detected capacity change from 0 to 87 [ 145.341644][T18925] loop0: detected capacity change from 0 to 87 [ 145.354382][T18933] loop4: detected capacity change from 0 to 87 [ 145.361971][T18934] loop5: detected capacity change from 0 to 262166 [ 145.372240][T18925] FAT-fs (loop0): invalid media value (0x00) [ 145.378538][T18925] FAT-fs (loop0): Can't find a valid FAT filesystem [ 145.414360][T18945] loop2: detected capacity change from 0 to 87 18:53:42 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:42 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:42 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="0400050900e5000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:42 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfc12, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 145.423940][T18934] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 145.444317][T18934] EXT4-fs (loop5): orphan cleanup on readonly fs [ 145.450738][T18934] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 145.461628][T18934] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.532332][T18962] loop1: detected capacity change from 0 to 87 [ 145.547706][T18955] loop0: detected capacity change from 0 to 87 18:53:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000100)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) syz_open_dev$vcsu(&(0x7f00000001c0), 0x8, 0x90000) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000240)={0x0, 0x0, {0x20, 0x2e, 0x1, 0x12, 0x2, 0x849, 0x1, 0x7, 0xffffffffffffffff}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r3, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000140)='./bus\x00', 0x20000, 0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:42 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0xd8) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2002002, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@msize={'msize', 0x3d, 0x1}}, {@cache_mmap}, {@nodevmap}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:42 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 145.582359][T18973] loop5: detected capacity change from 0 to 262166 [ 145.598619][T18976] loop2: detected capacity change from 0 to 87 [ 145.607055][T18955] FAT-fs (loop0): invalid media value (0x00) [ 145.613058][T18955] FAT-fs (loop0): Can't find a valid FAT filesystem [ 145.618391][T18973] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 145.632378][T18973] EXT4-fs (loop5): orphan cleanup on readonly fs [ 145.638762][T18973] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 145.650157][T18973] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:42 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="0400050900000000030000000491d889fc00027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:42 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 145.683325][T18991] loop4: detected capacity change from 0 to 87 [ 145.705762][T18992] loop3: detected capacity change from 0 to 87 [ 145.717299][T19002] loop1: detected capacity change from 0 to 87 [ 145.754178][T19013] loop0: detected capacity change from 0 to 87 [ 145.777878][T19016] loop2: detected capacity change from 0 to 87 18:53:43 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xff0f, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:43 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x2800) sendfile(r0, r1, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:43 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:43 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="040005090000000066e17400040409000200027400f80611021b328c9f0cb54b16eea5985be0234d6b1c8b8e28f5523e4227d2e4ff534d69228ea9aeb81517a0cfa401581e87d3d05b0d75f1647bb58926e1f9f77eaf255b4577f5e5ad329c7a03cd5a3e0872322a9f2deb50c70442929a4256c332c9ae5026bceb782ad2fe15d35decf28b94741da3c3bf1df98820e3cb31e7836232ad1ed013b5d5b4324cf798d5", 0xa2}], 0x100010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') name_to_handle_at(r0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@reiserfs_3={0xc, 0x3, {0x565d, 0x400, 0x3}}, &(0x7f00000002c0), 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000017000005002e2f6275632e150cc408267a28fbdd31eeac0e14097177122bb14fa3b96856a87e5f93b90a055bf9"], 0xe) [ 145.802206][T19013] FAT-fs (loop0): invalid media value (0x00) [ 145.808245][T19013] FAT-fs (loop0): Can't find a valid FAT filesystem [ 145.829383][T19016] FAT-fs (loop2): bogus sectors per cluster 145 [ 145.835668][T19016] FAT-fs (loop2): Can't find a valid FAT filesystem 18:53:43 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:43 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20010, r2, 0x26513000) sendfile(r0, r1, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 145.903253][T19031] loop5: detected capacity change from 0 to 262166 [ 145.910182][T19037] loop3: detected capacity change from 0 to 87 [ 145.913278][T19053] loop0: detected capacity change from 0 to 87 [ 145.920998][T19031] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 145.935142][T19043] loop4: detected capacity change from 0 to 87 [ 145.946025][T19048] loop1: detected capacity change from 0 to 87 [ 145.957597][T19053] FAT-fs (loop0): invalid media value (0x00) [ 145.963642][T19053] FAT-fs (loop0): Can't find a valid FAT filesystem [ 145.965914][T19059] loop2: detected capacity change from 0 to 87 [ 145.988820][T19031] EXT4-fs (loop5): orphan cleanup on readonly fs [ 145.995358][T19031] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:53:43 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:43 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(0x0, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:43 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./bus\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xd1) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r3, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) flock(r3, 0xe) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREADLINK(r4, &(0x7f0000000140)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:43 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 146.006340][T19031] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.041358][T19037] loop3: detected capacity change from 0 to 87 18:53:43 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x20010, r2, 0x91bcc000) r3 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r3, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) lseek(r3, 0x6, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0xb0002, 0x24) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x3ff) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000180)=@random={'trusted.', '^*\x00'}) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) r5 = signalfd4(r4, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8, 0x800) write$P9_RCLUNK(r5, &(0x7f0000000140)={0x7, 0x79, 0x2}, 0x7) [ 146.094014][T19089] loop4: detected capacity change from 0 to 87 [ 146.108531][T19080] loop0: detected capacity change from 0 to 87 [ 146.117903][T19080] FAT-fs (loop0): invalid media value (0x00) [ 146.124018][T19080] FAT-fs (loop0): Can't find a valid FAT filesystem [ 146.128291][T19097] loop1: detected capacity change from 0 to 87 18:53:43 executing program 2: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = dup2(r0, r0) splice(r2, &(0x7f0000000100)=0xffffffff, r0, &(0x7f0000000140)=0x8, 0x80000000, 0x9) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:43 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 146.153447][T19105] loop3: detected capacity change from 0 to 87 [ 146.187014][T19113] loop5: detected capacity change from 0 to 262166 18:53:43 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsmount(r0, 0x0, 0xfa) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:43 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(0x0, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 146.206727][T19113] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 146.241788][T19123] loop0: detected capacity change from 0 to 87 [ 146.253808][T19125] loop2: detected capacity change from 0 to 87 [ 146.262663][T19113] EXT4-fs (loop5): orphan cleanup on readonly fs [ 146.269037][T19113] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 146.279921][T19113] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.295072][T19130] loop4: detected capacity change from 0 to 87 18:53:43 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0xfc00000000000000, 0x300}, 0x0, r3}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80048408}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x96c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5552}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb4b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PEERS={0x918, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0xec, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "887f8ec55faf8ab402766c72dcba7a8dea01c79e341ba753dd4dd3baf2db8d14"}, @WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a8e6918c19ad0300007f1507e40200e37965771d5e3000"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1000}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}, {0x480, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @loopback, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x430, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x4, 0x0}}, {0x5, 0x3, 0xc}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9939e236cf3e55dc6d369c10777cc24bbffe3513449dc17a5971f5f94bdd87d9"}]}, {0x1f4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "07e4079175f066770ffcf0bc112ec0a97a9cc8d1175e77f8fb50a90469315252"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x16b}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FLAGS={0x8}]}, 0x96c}, 0x1, 0x0, 0x0, 0x20004004}, 0x40) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a45c0, 0x0) ioctl$sock_ifreq(r4, 0x8936, &(0x7f0000000240)={'nr0\x00', @ifru_data=&(0x7f0000000200)="a525022825b7e1c43a30402b9c7ef290e5af282fe353aeb8f8b252eca49644a4"}) [ 146.308514][T19123] FAT-fs (loop0): bogus number of FAT sectors [ 146.314604][T19123] FAT-fs (loop0): Can't find a valid FAT filesystem [ 146.339432][T19138] loop1: detected capacity change from 0 to 87 18:53:43 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000200)='./file1\x00', 0x2800, 0xa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/54, 0x36}) [ 146.359518][T19152] loop3: detected capacity change from 0 to 87 18:53:43 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(0x0, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:43 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:43 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x1812009, &(0x7f0000000140)=ANY=[@ANYRES32]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0xb2) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x3d3a00, 0x2a6) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:43 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) creat(&(0x7f0000000080)='./bus\x00', 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000017000005002e2f627577dcd8797c6aff5b59b16e9ce8530c95c980a126cd7b6d0e823f3a447a98c79226c06f0e18f52a679fd63179618f95c4b65d6434e720bc0a5317bc05efb37971906de5214bfe3520c8d440d5dd82b660a3a154a5a160a76fdb10811c5e8b5ba99f99c89f8c3884dc4c9843553680f1744fc3d5f609b1444e1543c9b68c1e96972aafa3acbd0ddde1c7f295a5a1647c70f77168c03057d6cf603069a69277c5ec71e6f686b0f37542c8"], 0xe) 18:53:43 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000b, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 146.475750][T19172] loop2: detected capacity change from 0 to 87 [ 146.480177][T19171] loop0: detected capacity change from 0 to 87 [ 146.506867][T19184] loop1: detected capacity change from 0 to 87 [ 146.512936][T19175] loop4: detected capacity change from 0 to 87 18:53:43 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat(r0, &(0x7f0000000080)='./bus\x00', 0x212000, 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x21180, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:43 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 146.538799][T19193] loop3: detected capacity change from 0 to 87 [ 146.545397][T19171] FAT-fs (loop0): bogus number of FAT sectors [ 146.551512][T19171] FAT-fs (loop0): Can't find a valid FAT filesystem 18:53:43 executing program 2: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfb, {0xb, 0xd, './bus/file0', './file1/file0'}, ["", "", ""]}, 0x30}}, 0x4008800) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x20) ftruncate(r0, 0xcac) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) io_submit(0x0, 0x5, &(0x7f0000000940)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f0000000480)="a9042a1e69799c6983515d0da058351b4b385588b1bd405e10ba", 0x1a, 0x2, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f0000000500)="4bedb7dfa43660bcdaf77c99f4422e6e4d3a6d2fd0e4626a5917a2447aa49b9f83346bfce65d0ccf5211e23dd20a0ba8cf5ddbd8c883c07e7de788db28aca0ae30ccd7acd57f967383cd75a5a55ae42a01e994fa300873dcbb26da321f18d06037a7854127079efe76b08c3761a36c3bb48b69e15a7f5d2d8bb4361c10fc9fe000e001a88e4943a1f08b39f73292a73cc5f100f7c2b37df92b78fdd681164cc904398889265f6603614e40e89a7447afc5c68ee6dc66f6444f9bb7f473d05ed5705685bb7bf5dfe2b8c2f9a5b9a6ca", 0xcf, 0x2665, 0x0, 0x3, r4}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x9e95, r3, &(0x7f0000000640)="f4a0bfdea5f35d5325987ffed5a079cf2a2b04a2a85ecf3a0785ef989cf734902a97cb09cdc7dbacf247353f88ae60a042e68b53f148e13d518c29ec8e24ec6428e08ed1f1416287ea0a86bf96699d92b222389128d1fc6b228aa754d06f66afc2651cf910abc81527046d42ec9f63a717fe67f10608df32390763f05445bdb0277f229b6103d45ad35efe829c5bbb2c059535060340366eeba27de0afa61cc2b623a9609ec893b22346a5bedc841a2b4757c2fa88f28ae78378d7e3d23717a27dfa45cd12", 0xc5, 0x7, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x3, 0x20, 0xffffffffffffffff, &(0x7f00000007c0)="c8da902936fdb377ba109d1bf9dba1be726f3f634642bb214d02084142339c800a40bf44257db49bf517bcc499c8a2b1fa7fd3547595c5deb5b2fac259109a0c7d597676717c83b003ea7dca4818f76fee510ab55cfe1bdd7eaba8aa4379c631a8159785b204159f7adf6ff16073bfb44ac7c10710ab67e248b7a74b675ee53644f8e9cfad45b605eb91a302918a3c4b2e1f646fc0a7569feefa892d433060af339be2be011a4343072e42d6", 0xac, 0x10001, 0x0, 0x3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x401, 0xffffffffffffffff, &(0x7f00000008c0)="c69456e401563b52", 0x8, 0xff, 0x0, 0x2}]) pwrite64(r4, &(0x7f00000001c0)="00b1e620196555e746d062e400000000000000003bbc825ca11c20ab4962aff85bb5ed1f36e2ff8761d1e2fb39467da056173be4e00ec28415664216efc8abc6bbc375e1b676d1e8dbe63c9e96b2eb41ba5833c73e79bc86769e7dc489313bbe5b1d73e6cbb0d503218f6a36cc97a0ef02acfae0d5e8c9f665c63c9ff4aa5c0b0989a25c41ab01eb806055818d5e3eff340853b87361e8cb7682fadc16b6cd90e29c4b00da17fdca9ab469152f2832dc0dc1f4c3120a98c25c49e3449fd33977612c1609622ec749d23d937be849412fb18ffc8257a3c6e585", 0xd9, 0x3) sendfile(r0, r1, &(0x7f0000000100)=0x100000000, 0xff) creat(&(0x7f0000000140)='./file1\x00', 0x0) 18:53:43 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:43 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd, 0x8010, r0, 0x96a67000) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 146.579043][T19175] loop4: detected capacity change from 0 to 87 [ 146.608863][T19218] loop2: detected capacity change from 0 to 87 [ 146.615807][T19215] loop5: detected capacity change from 0 to 262166 [ 146.645750][T19235] loop1: detected capacity change from 0 to 87 [ 146.650496][T19215] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 146.652807][T19237] loop0: detected capacity change from 0 to 87 [ 146.673845][T19242] loop4: detected capacity change from 0 to 87 [ 146.676578][T19234] loop3: detected capacity change from 0 to 87 18:53:43 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:43 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 146.693031][T19242] buffer_io_error: 52 callbacks suppressed [ 146.693042][T19242] Buffer I/O error on dev loop4, logical block 44, async page read [ 146.697463][T19237] FAT-fs (loop0): bogus number of FAT sectors [ 146.704914][T19242] Buffer I/O error on dev loop4, logical block 44, async page read [ 146.706839][T19237] FAT-fs (loop0): Can't find a valid FAT filesystem [ 146.772310][T19262] Buffer I/O error on dev loop4, logical block 51, async page read [ 146.782545][T19260] loop1: detected capacity change from 0 to 87 [ 146.789904][T19261] loop2: detected capacity change from 0 to 87 [ 146.808491][T19261] FAT-fs (loop2): Unrecognized mount option "!gµâƒò—-¤üÆKinf%m~ŠÙ®–:®Q|½îླrã_dž†é é£Ñ.E:Éî¤"˜í·ÂIƒtK!Ù 18:53:44 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) openat(r0, &(0x7f0000000100)='./bus\x00', 0x103441, 0x2) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:44 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:44 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') socketpair(0xb, 0x6, 0xd9af491, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r3, &(0x7f0000000180)=0x1, 0xbe9d) 18:53:44 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 146.808491][T19261] È‚i [ 146.808491][T19261] ز‰§Û¢1òëýùÌÒRÞ²‚ñõ‚@»&Â`‘š ˜6¸@²ð¿eyÊñg¹]bqºDã™8¡†Í‚:!×" or missing value [ 146.809272][T19215] EXT4-fs (loop5): orphan cleanup on readonly fs [ 146.839448][T19215] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 146.850353][T19215] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:44 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3ffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 146.896194][T19261] loop2: detected capacity change from 0 to 87 [ 146.906712][T19261] FAT-fs (loop2): Unrecognized mount option "!gµâƒò—-¤üÆKinf%m~ŠÙ®–:®Q|½îླrã_dž†é é£Ñ.E:Éî¤"˜í·ÂIƒtK!Ù [ 146.906712][T19261] È‚i [ 146.906712][T19261] ز‰§Û¢1òëýùÌÒRÞ²‚ñõ‚@»&Â`‘š ˜6¸@²ð¿eyÊñg¹]bqºDã™8¡†Í‚:!×" or missing value [ 146.935415][T19280] loop1: detected capacity change from 0 to 87 [ 146.946304][T19279] loop4: detected capacity change from 0 to 87 [ 146.947506][T19288] loop0: detected capacity change from 0 to 87 [ 146.954132][T19278] loop3: detected capacity change from 0 to 87 18:53:44 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 147.003989][T19279] Buffer I/O error on dev loop4, logical block 44, async page read [ 147.018824][T19303] loop5: detected capacity change from 0 to 262166 [ 147.020311][T19279] Buffer I/O error on dev loop4, logical block 44, async page read [ 147.038038][T19302] Buffer I/O error on dev loop4, logical block 51, async page read 18:53:44 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea2, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000080)="040005090000000066617400040409000200027400f801a305abf4ac22e39c6ff72c641306d8f32722b1dd37afdf966ce86d97e6af08c68b7fb6cc", 0x3b}], 0x4400, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:44 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYRES16, @ANYRES64=r1, @ANYRES16, @ANYRES32=r0, @ANYBLOB="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", @ANYRESDEC=r1, @ANYRES32, @ANYRES16], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4091}, 0x4040) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) [ 147.040549][T19303] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 147.046017][T19302] Buffer I/O error on dev loop4, logical block 51, async page read [ 147.084568][T19319] loop1: detected capacity change from 0 to 87 [ 147.084735][T19303] EXT4-fs (loop5): orphan cleanup on readonly fs 18:53:44 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:44 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:44 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = syz_io_uring_complete(0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000012, 0x190011, r1, 0x991cc000) sendfile(r0, r1, &(0x7f0000000200)=0x977, 0x2) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4100) lseek(r2, 0x1200, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x40) sendfile(r2, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000380)={0x0, "fed3051bca285af4a3dffa8b1569af5b"}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f00000001c0)={0x101, {0x2, 0x101, 0x7, 0x42c, 0x673a}}) 18:53:44 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 147.097222][T19303] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 147.108089][T19303] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.124951][T19323] loop2: detected capacity change from 0 to 87 [ 147.153117][T19323] Buffer I/O error on dev loop2, logical block 44, async page read [ 147.171127][T19335] loop3: detected capacity change from 0 to 87 [ 147.182656][T19336] loop4: detected capacity change from 0 to 87 [ 147.189592][T19323] Buffer I/O error on dev loop2, logical block 44, async page read [ 147.204814][T19344] loop0: detected capacity change from 0 to 87 [ 147.212472][T19335] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 147.218324][T19345] loop1: detected capacity change from 0 to 87 [ 147.229254][T19347] loop5: detected capacity change from 0 to 262166 18:53:44 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x8c080, 0x100) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:44 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) getpeername$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file1\x00') 18:53:44 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) r3 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, 0x8, &(0x7f0000001740)=[{&(0x7f00000001c0)="73616c3a8c403959afc3fdfdda75294cd953612f9cbfae875547d1efc669ef3d84e17da266e5d655365133f3f50166dc98480a8bb8ea1233bd0a385cfab01c327800837113dd5dc2fbdb7c71244acbe751dd38a7463476ca06494a7c6faa19eb5f68a9786ebb050ea66ef521f57261daf063d0d366a3c6dd1f72d582a888c088c9beeab4e5d526b0a57ab97705e957e7e286975e618e515c37900db1392173ab6056ea6b1465b055ce9edeb0e1a460701c45503d61bdfe14124cb04916", 0xbd, 0xee6}, {&(0x7f0000000380)="02059edac381a5f9c21058fbf559b001036318eefbac9c7647beba261120b28c3d8c1f2fb312ebea0a5afc975241a19a2adf6d8e39a7f25c4717d386205bb6b323ec2d60c525cc5594a177f2d706f7591c4f4b8d1cc45b26aafa5206d7c8d2ae1b19a2c0721b3bfdcdfe9a303dd10239208ce7969de62fecc9dc54974b99d0c3ca692783", 0x84, 0x6}, {&(0x7f0000000440)="befdcb3620baa26ac21391cd94662350111247468a0a880c850c72a7aa8bf53f54266000afed44053b5e8b68283b5a907cf32eeff3cdf09577f8a90c8a21a13a524d57c0a3a27d68cbb3e5f1ba78fc6708348e68f7ef934eaccd8e6d5d1796af010bdfee271b67f482515d900057df367c135a93e6f5ad59a544f8477c909c349bd52747d83438d9e913d2c808db705e59", 0x91, 0x3ff}, {&(0x7f0000000500)="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", 0xfd}, {&(0x7f0000000600)="6208bcba1333cf9ac46fbe0d1edf9127fc4739ad6d0e7558aafb7ce34b9b46fc9a381815860b2a6286f69f954fb5c415e6d1458fd3f6e34a963cd5858d8c5a18558a8aa7333c6e8b03b7412ecf958b439b945e176f48b7f0127614ec1ed29f8a65d09a38fb1e4e32d43161cf5dee3c94d0e5252d99ce5a4dfb9205b86f10ebaca51ff8d2429621df1b0bbc2cf8af6514bfc15b48818012e78211cd18877330e3c99db0b3bd4557e2ced615e05f4cbb21141bb0b605a10c8cd85b2fccbf6391f394e022769c4c6e2509400c6bbd9216fc5c67475696f20fbb0abdea3dc322324efdd465897076d240d3c4ba", 0xeb, 0x5}, {&(0x7f0000000280)="a339d2aaee619ce07a855957da7280a1d341414ef075e77aa536e0b7a2ac526b3c4b220b2262e9703d4c7a7cf727d7fe52189b942adc4d", 0x37, 0xffffffff}, {&(0x7f0000000700)="4b72a86d01d7bb2b3a97ddcc45604a82a76dd7ac2b1c", 0x16, 0x7be1125b}, {&(0x7f0000000740)="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", 0x1000, 0x1}], 0x58800, &(0x7f0000001800)={[{@shortname_lower}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'msdos\x00'}}, {@obj_user={'obj_user', 0x3d, 'msdos\x00'}}]}) mkdirat(r3, &(0x7f0000001880)='./bus\x00', 0x9) [ 147.249053][T19347] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:44 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 147.314416][T19347] EXT4-fs (loop5): orphan cleanup on readonly fs [ 147.316576][T19372] loop2: detected capacity change from 0 to 87 [ 147.320906][T19347] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 147.337873][T19347] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.343790][T19372] Buffer I/O error on dev loop2, logical block 44, async page read 18:53:44 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1fffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:44 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:44 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x4, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000380)="78878ea5a7717d2cffec4b3e11488b3fa5ae56b085dfeba2b7814690e29a62d1d22ba29b961dba8e5be90d7e652e7a8a95a0c099eb4fa2d610670849fcd1f11a012a18b74c57d4406f1a66bce450bcfb41739eec3172cb4742a7d5a4938822d5e75d01530645d0243f07340f0352eabc8ae884967e7cce18a075b0a449bd633f4527bbc8d6d77d8e80b323bf17aa8b9776d5f917c63d45d58cc579b4b7fe12fbdcd647e1e6f4f91ad0d3b6c8b3523aeaa7e5cfc8ecfc", 0xb6, 0x8}, {&(0x7f0000000440)="ac14eab9b9c10d72810e0f7f162c78d30cf207ffd8dd1bbcdb5ea8e66b02783a0fecc365fc62306b8d9ab6e7f9181e69fd3ee7a1edbe62fef5c452078f00746d57d00081e60d26baf629c32bdf2e3584417934545d0a4701b7b529b3ddee130fb2f82880933af7fd09afd865b5b016b099bdbcffdcfe207419b600b5a4c327ca178eb60de7182ac14adde2eba8e888b1b16a33ce2d7b242e818e836079e14eec0b05da03b40755010994b5aa6462b2b7c8ee597d1b73cbe3bb0f43f9e892ca9611c521f012b8427345a5594d40f6487e0a2c841096c6e63d04e6e8e16241afbb88", 0xe1, 0x9}, {&(0x7f0000000540), 0x0, 0x9}, {&(0x7f0000000580)="249a4c0f7f0b52c834788562e74044fb52e8e46743d74700cbfa5f99b01ac7d18a99571114a976fddcc801703f7f73e321db0a74057aabf48455d4", 0x3b, 0x7}, {&(0x7f00000005c0)="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", 0xff, 0x100000001}], 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='rodir,uni_xlate=1,uni_xlate=0,utf8=0,shortname=mixed,rodir,obj_user=msdos ,subj_role=--,measure,euid=', @ANYRESDEC=0xee01, @ANYBLOB=',defcontext=unconfined_u,subj_role=msdos\x00,\x00']) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x3a) syz_open_procfs(0x0, &(0x7f00000001c0)='net/xfrm_stat\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r2, 0x4689}], 0x1, 0x3f) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) fchdir(r4) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:44 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) creat(&(0x7f0000000080)='./file1\x00', 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) execve(&(0x7f0000000140)='./bus\x00', &(0x7f00000003c0)=[&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='}\x00', &(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='\x00', &(0x7f0000000380)='msdos\x00'], &(0x7f0000000500)=[&(0x7f0000000400)='msdos\x00', &(0x7f0000000440)=')\\@-}L\x00', &(0x7f0000000480)='%\x00', &(0x7f00000004c0)=',]*,\x00']) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 147.368785][T19375] loop3: detected capacity change from 0 to 87 [ 147.377046][T19371] loop4: detected capacity change from 0 to 87 18:53:44 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000400)={{}, r4, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r5]}, @devid}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRESOCT, @ANYRES32=r3, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={r6, 0x101, 0x1, [0xc097, 0x4800000000, 0x7, 0xa780, 0x32e6], [0x5, 0xdf, 0xfffffffffffffffa, 0x100, 0x8, 0x3, 0x1000, 0x8, 0x400, 0x10001, 0x4, 0x80, 0x7, 0x6, 0x9, 0x9906, 0x7fffffff, 0xc5, 0x6555, 0xfd4f, 0x6, 0x800, 0xf7, 0x5, 0x7f, 0x4, 0x0, 0x7, 0x8, 0x8, 0xa4e0, 0x3, 0x9, 0x0, 0x7, 0x7, 0x81, 0x2, 0xe0b0, 0x7ff, 0x100000000, 0x9, 0x20, 0x81, 0x7f03af2f, 0x100, 0x80000001, 0x80000000, 0x76, 0x9, 0x2, 0x4, 0x800, 0x1ff, 0x9, 0x8, 0xa1, 0xb4e, 0x10001, 0xd224, 0x2, 0x3, 0x9, 0x2, 0x8, 0x0, 0x4, 0x44ea, 0x9, 0x200, 0x100, 0x6, 0x9f2e, 0x7, 0x7fffffff, 0x4, 0x7f, 0xc7b5, 0x4, 0x7fffffff, 0x5, 0x8, 0x5, 0x1000, 0x4fa5, 0x1010000000000, 0x9, 0x101, 0x7, 0xffffffffffffffff, 0x1f, 0x9, 0x55, 0x6c9e1f, 0xfffffffffffffffc, 0x5, 0x7, 0x0, 0xfffffffffffffff7, 0x12, 0x7, 0x8000, 0x81, 0x9, 0x64, 0x7, 0x3, 0x0, 0x8, 0x1f, 0x1, 0x5, 0x0, 0x2, 0x30, 0x5, 0x7, 0x40, 0x5, 0x1, 0x21]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000100)={{r1}, {@val={r6}, @max}}) sendfile(r0, r1, 0x0, 0x8400fffffffa) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r8, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:44 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 147.430715][T19393] loop1: detected capacity change from 0 to 87 [ 147.435011][T19392] loop5: detected capacity change from 0 to 262166 [ 147.446056][T19392] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 147.494179][T19412] loop0: detected capacity change from 0 to 87 [ 147.501122][T19411] loop3: detected capacity change from 0 to 87 [ 147.517659][T19413] loop4: detected capacity change from 0 to 87 18:53:44 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:44 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000fe160093c5f9c626aff1ba88e8cb422a39000500627573"], 0xe) [ 147.565333][T19420] loop2: detected capacity change from 0 to 87 [ 147.572349][T19392] EXT4-fs (loop5): orphan cleanup on readonly fs [ 147.578729][T19392] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 147.589601][T19392] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.601574][T19425] loop1: detected capacity change from 0 to 87 18:53:44 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000300)='./file1\x00', 0xc7c, 0xaaaaaaaaaaaaa1c, &(0x7f00000000c0), 0x1000800, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0]) ftruncate(0xffffffffffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0xf) sendfile(r0, r1, &(0x7f0000000240)=0x3f, 0x9) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4100) creat(&(0x7f0000000140)='./file1\x00', 0x50) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r2, 0x1200, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) futimesat(r3, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x0, 0xea60}, {0x0, 0xea60}}) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:44 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 147.611043][T19430] device lo entered promiscuous mode [ 147.634366][T19430] Y­4`Ò˜: renamed from lo 18:53:44 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe0ffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 147.657238][T19436] loop0: detected capacity change from 0 to 87 [ 147.664933][T19444] loop3: detected capacity change from 0 to 87 18:53:44 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:44 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x80aea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0xc) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000740)={{0x0, 0x1, 0x2c, 0x1, 0xfffffffffffffe01, 0x3, 0x4, 0x800, 0x5ba2d575, 0x1, 0x3, 0x4, 0x80000000, 0x7, 0x200}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x300, 0x20) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r3, 0xc3348000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x7cd900) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x1}, {0x3}, 0x111, 0x0, 0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000380)='./bus/file0\x00', &(0x7f00000003c0)="41cc3f9dee92f4006f609b852fc123db75481bd59eaf8055338b3be999fcc87279fa095ab83e83e9285bcdeb7df7dea8a1476c3a7982270a31a653eb248f617d205361fd1f4d0c4b9c8a73d9aedeebe73ca630e84cc8c330d0e74e4566ea07f520015b99ffaa99046f74b7b6e2f9495cfeebc068ccec98ed3acb3ff851392c87c4d2ac142443c6075bf2e238ea33e8373b66bbf3c311973ab8b488f9c86874ec0192d0c71733dab0c688f6a678b2cb65c3c2f8525be0f156db1895c6eb1ae2360791f2ed29e871f8ff984405db1e6d554b532f26cdef46824a3a3bd1437bbbfb3de10e822c551974bbaf7c84bfc0c44348", 0xf1, 0x0, &(0x7f00000004c0)={0x2, 0x152, {0x1, 0xc, 0xb6, "e23b28a57dbd5e11cbe9a7cbc9a2f1959c1b4fb387e852a07f1b2bc1ec175bccf84b8b7c34e5224206865b7006317fca517d4a332f554a92b5c75d803fb327f897d9e46f0d6166f34dfce57d138d5d93a6048a8f1b60eaa5ecdbd4c37859c2a6c072c87a74a189f1d8d8ff68a36e3578aa6dfef8811301adc4c6b9056c3f498a06ad32ba79337df5328ea9ca8d6aa857b0e6528d6014b9a7681c84616e78cd10bc08ddb7bae60b528178e4199d0c50bf92d1402bca7a", 0x8f, "4f254daee432be63b33e2ee601ac599287132aee43e4d3fc11e9f6f0f5b879ff288c06b11670439ce852f797af2e305b8b87f425478bc71e470abc8698633f43f6ae693589a5c27b79a30621a8b29809c9c2798a12b3b4b8adaf410a4a9c4d74698ae7e13522d44a2a5979028ecd23ca4d5c0b5c6ce15619fe63a03d66d3871bbf05adc8575c13b56044795478d2de"}, 0x78, "fb9f1836dfb466980e5bf48cc13901a0be9bb994915ec4c9b125dd9fffd62c722c79c2556c5932075cf8f83b977cfe39f3ae9d1724c36803e65798f54a867ba7cd207244f02871e6d399b0b258db1e3c9fc9234db474d9fe03d1761cc291dafac919a3af7bc46a9a30e28b96a5ce48f9b16031e2613d20a7"}, 0x1d6}) sendfile(r1, r3, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x5d, 0x75}) r5 = perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x7f, 0x8, 0x7f, 0x2, 0x0, 0xbb1, 0x988, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x3}, 0x2, 0xfdc, 0x3, 0x6, 0x8, 0x1ff, 0x400, 0x0, 0xfffff1e7, 0x0, 0x914}, r3, 0x9, r1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000001c0)={r3, 0x9, 0x1ff, 0xffffffffffffffac}) [ 147.712235][T19457] loop1: detected capacity change from 0 to 87 [ 147.736926][T19465] loop5: detected capacity change from 0 to 262166 18:53:45 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 147.787447][T19465] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 147.822184][T19476] loop3: detected capacity change from 0 to 16471 18:53:45 executing program 4: r0 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) r1 = socket$inet6(0xa, 0x6, 0x7f) pidfd_getfd(0xffffffffffffffff, r1, 0x0) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./bus\x00', 0xaea1, 0x3, &(0x7f0000000100)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000380)="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", 0x1000, 0x3}, {&(0x7f00000001c0)="43ff4ee6a21baf817029462b143f7720034a62e0174b492c307e90019d3f676a8490b50be60f111e7729bf5fa7cc89c24dd7c928088cd026b19e62deadac83433132cfd28238a9e8f639b445baae4f08a31814b1f09a1aa9275603b2ad7e3865a4ed9538d20aa1c74ea8df9c718f992854cb92db1e4951931f36b94807d2e2dcb60dab41", 0x84, 0x6}], 0x80000, &(0x7f0000001380)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4100) lseek(r2, 0x1200, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./bus\x00', 0x9, 0x9, &(0x7f0000002800)=[{&(0x7f0000001380)="54d6dca12288a0fb070f21b16f88d2cf4ba602bbb7181dfab1537e731d3007b72fdc5a46b073c790ceb283bb37a0758bde3b6922b5f2b523974666a127fd194914cd64e466092e75958c1e873829d881a774e4de220b908b0d259129b3fa722cb104830538028c89d935b05ee20e63d8d36d73c04962e2d7136da880754d", 0x7e, 0x372f}, {&(0x7f0000001400)="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", 0x1000, 0x11c48000000000}, {&(0x7f0000002400)="136e73a74d5069d955bd1d1e09dfe05f6e28b4fc6ba735f8a532c34e6e047ffe096d63cb33b144c5c9fe5ec900b5b242f05a5d9663aa99df066b48feb5fa35bb1bec6762d008b593e9a4d99e774fc3bab15093b0939335f62ce8498c087346323a934dd9762a56627c80da42f5082f847a8a43d65ace2265d9345adeb8ffa54d0246c0111c447970bfb901d8", 0x8c, 0x3}, {&(0x7f00000024c0)="a0e833dcfafa58869f2bc355fa053f35e6a16aa98bc78391642f", 0x1a, 0x81}, {&(0x7f0000002500)="24a9876231b0026c78b6c6dd8a380c3ad4cbbfc438032aeb59f95ccf8dba12ac226798daef0f5fbf38bc46862e619c2d4e55b2bb828feba9749472223b63ab83d79edcf88fd203249d81ea4578212960e56dbdc8f8d5", 0x56, 0xfffffffffffffeff}, {&(0x7f0000002580)="06a53b9b2911dba372606f15f728f5c795afe544086cd9cfc806184dd71b636a8a4aafe7fade7e502a05513b05258e6054eb519a76c167e345e121bc479bdeb8af8b8eb947ce480ff51f4877ab373650afcb34fd35dc07d424d836cbebe0ccf0cb8f5552bddd50b43f9c23eb2808268e7471a216bffd5860b5e298f76799c6421f3b42559d909964959e2dab15a64182d03e3938754e4597189ec84aa9cb1e333562c7304dc1f0", 0xa7, 0xb21d}, {&(0x7f0000002640)="6ab9a86e2c7ca2820bbaf4645b67ef4fddd3d214a852dc", 0x17, 0x2}, {&(0x7f0000002680)="30c02a69ffd534fd7467373f41f17bf91938f43231334f06bd65d31359c9036f86c702df7e92d18afcf947f006f5b5571322a41f5c05554448902d232912abefa0e14a2b936679b950d5536e0f7749e7c475ebe35879282c9aad24acebd7639ca1897ba5ba5a5578db7404032012ca16bdab1a9415dcd27c6f5950956395ec48920548acd850ae296e6447fc7416de6b4955fef84ca4", 0x96, 0x9}, {&(0x7f0000002740)="1f9111b5958db41bbe9302f730f781818bb2bf6e7addea1474f88e1cd0cf005937a17cd508df1bf414df5d1f47efc05ca9397779fd2683c47dc18cc95232152420f57495b2e3a27343c9209d7be705401564874a734cc598616dd1c9a4c9cccb11a8d4d8af08deacfeef4c7a64a0b39761072e912b19b1082b988af779a76c26e25b2585e0bb869661d2883728b7fbc1592028180d29", 0x96, 0x5}], 0x4, &(0x7f0000002900)={[{@block={'block', 0x3d, 0xc00}}], [{@uid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x30, 0x30, 0x61, 0x38, 0x39, 0x34, 0x33], 0x2d, [0x30, 0x33, 0x62, 0x65], 0x2d, [0x61, 0x34, 0x68, 0x65], 0x2d, [0x63, 0x37, 0x61, 0x63], 0x2d, [0x32, 0x64, 0x62, 0x30, 0x30, 0x62, 0x33, 0x31]}}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_gt={'fowner>', 0xee00}}, {@uid_lt={'uid<', r6}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) [ 147.843090][T19465] EXT4-fs (loop5): orphan cleanup on readonly fs [ 147.849489][T19465] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 147.850684][T19475] loop0: detected capacity change from 0 to 87 [ 147.860377][T19465] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.906541][T19484] loop1: detected capacity change from 0 to 87 18:53:45 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:45 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:45 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x82402, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) r6 = syz_mount_image$msdos(&(0x7f0000000680), &(0x7f00000006c0)='./bus\x00', 0x7, 0x1, &(0x7f0000000740)=[{&(0x7f0000000700), 0x0, 0x15892448}], 0x1104000, &(0x7f0000000780)={[{@nodots}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) io_submit(0x0, 0x7, &(0x7f0000001900)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x6, r0, &(0x7f0000000140)="e29916e9ff1cecbb74df55d0b63b51922a48f933d93a13d064b82777bc4ba2c8f100df058695baa2ee1ca013da680218e2a4432b336b6ce20310bde7c30503396fc6119644783ea7c2f680ac7da8e13688687a23eb4fa193abae7220a1ff3e54856f0fbec161ef34e262842d10e1972aafc8185f7bdcdae9dbc756b81ab3e105b562f0cd649c530d3be8becf6f1bce7a9cfb5345eba4d0a11f6d144e25c835a2ad6874688ff6bf086789bf388e3062ee0e53eda7de7dcda4aa52", 0xba, 0x7, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xebc9, 0xffffffffffffffff, &(0x7f0000000200)="5a521571dfb1de7c", 0x8, 0x1f, 0x0, 0x2, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000000380)="01fd30646d6fba4e13378a079bc52746bc3a88e02530d9357a2d2c400934b206fb32a728ae", 0x25, 0x3ff, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x7, r5, &(0x7f0000000480)="700390b848b929ef4f9c9ca871c17cb256daf79edde1158d06a86641eb5a164c35e0cb5fd12fdfac7fd0e687b33f8c96ff9b461a1564f9eb21c058fd1d805d45afcd4950cc28ee5590a580dd870d3cb50518c50c9f0cf02a39ddfea905b88a8cc4b3efa03c", 0x65, 0x8, 0x0, 0x1, r1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000540)="056857e75f3a02a3f806e5d34ab6bbabbb1212e7dbfb1bfd0d60c9e8562b79cf6a73358ac6c5d55341f675395b2d8e93c4f92d053c6c076f6f4db9729af2f427299efcc38c564654887e99cbc4f1187551170cc1e2fb075fa241c13db326148f778b474c311311d90e9a0ff949dcdbb5058d04ce1dbcf90c33f3bd52814e6223ede5d7cbdffbd58fcfd9e6b4117474d1239c2422edfa3df8f3cf1f23afb330e9893e15a3330e1d14cd7ca04d81d73f0f692a7bc947996444ac27ed15b2bdb8c61a5edb3d8f135420772a144c387746ef7cd22442f39fba76075d0169f2ab4e1eb07226928abc79ec0ee6fb59fa3a2b564a6f32cf81", 0xf5, 0xfffffffffffffffc, 0x0, 0x2, r1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x3, 0x0, r6, &(0x7f00000007c0)="36f9f15ab584141d1d2ab7ae10a132d3513cf6132b7e817aefe08210f4d1303ef381f0ebe1ccb69c0ad79b666cbbcac793f865e840229942bef63d98612d0cd0629aaef5819df325b80f18b0fe168d47efa1fe63a559d4f3f570a01c7e062314b01126269cce34065221c6b036bdd0a1488f700b34b7bd3ddef28d0ac1a4cdfbb5c8e117a540ad93a40d683153049bd514ee61", 0x93, 0x3, 0x0, 0x2, r7}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x7, 0xc000, r2, &(0x7f00000008c0)="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", 0x1000, 0x1, 0x0, 0x1, r8}]) sendfile(r1, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:45 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 147.998261][ T25] audit: type=1400 audit(1630695225.216:90): avc: denied { create } for pid=19494 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 18:53:45 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(0x0, 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 148.043402][T19499] loop4: detected capacity change from 0 to 87 [ 148.067929][T19506] loop5: detected capacity change from 0 to 262166 [ 148.072896][T19512] loop3: detected capacity change from 0 to 87 [ 148.075564][T19506] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 148.095574][T19527] loop0: detected capacity change from 0 to 87 [ 148.115199][T19512] handle_bad_sector: 198 callbacks suppressed [ 148.115214][T19512] attempt to access beyond end of device [ 148.115214][T19512] loop3: rw=0, want=90, limit=87 [ 148.140962][T19535] loop1: detected capacity change from 0 to 87 [ 148.154085][T19535] attempt to access beyond end of device [ 148.154085][T19535] loop1: rw=0, want=90, limit=87 [ 148.178809][T19506] EXT4-fs (loop5): orphan cleanup on readonly fs [ 148.185220][T19506] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 148.196115][T19506] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.227685][T19512] attempt to access beyond end of device [ 148.227685][T19512] loop3: rw=2049, want=104, limit=87 [ 148.241972][T19540] attempt to access beyond end of device [ 148.241972][T19540] loop3: rw=0, want=104, limit=87 [ 148.304012][ T1802] attempt to access beyond end of device [ 148.304012][ T1802] loop3: rw=1, want=102, limit=87 18:53:45 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x6a1c, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) lseek(r1, 0x3, 0x1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:45 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) open(&(0x7f0000000100)='./file1\x00', 0x800, 0x80) 18:53:45 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(0x0, 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:45 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:45 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2040000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:45 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) creat(&(0x7f0000000080)='./bus\x00', 0x88) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 148.717779][T19566] loop5: detected capacity change from 0 to 262166 [ 148.721943][T19565] loop1: detected capacity change from 0 to 87 [ 148.728353][T19571] loop0: detected capacity change from 0 to 87 [ 148.732083][T19567] loop2: detected capacity change from 0 to 87 [ 148.742779][T19566] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 148.743340][T19568] loop3: detected capacity change from 0 to 87 [ 148.761022][T19575] loop4: detected capacity change from 0 to 87 [ 148.791024][T19567] attempt to access beyond end of device [ 148.791024][T19567] loop2: rw=2049, want=116, limit=87 [ 148.811650][T19575] attempt to access beyond end of device [ 148.811650][T19575] loop4: rw=0, want=90, limit=87 [ 148.825596][T19565] attempt to access beyond end of device [ 148.825596][T19565] loop1: rw=0, want=90, limit=87 18:53:46 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:46 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2130000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:46 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) open(&(0x7f0000000080)='./bus\x00', 0x559340, 0xc8) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000017800005002e2f627573"], 0xe) 18:53:46 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(0x0, 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 148.829122][T19566] EXT4-fs (loop5): orphan cleanup on readonly fs [ 148.842479][T19566] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 148.853350][T19566] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.861812][T19568] attempt to access beyond end of device [ 148.861812][T19568] loop3: rw=2049, want=104, limit=87 [ 148.880188][T19575] attempt to access beyond end of device [ 148.880188][T19575] loop4: rw=0, want=90, limit=87 18:53:46 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) recvmmsg$unix(r0, &(0x7f0000000d00)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/190, 0xbe}], 0x2, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000000600), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/82, 0x52}, {&(0x7f0000000700)=""/53, 0x35}, {&(0x7f0000000740)=""/68, 0x44}], 0x3}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/80, 0x50}, {&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000980)=""/237, 0xed}, {&(0x7f0000000a80)=""/247, 0xf7}], 0x4, &(0x7f0000000bc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/3, 0x3}], 0x1, &(0x7f0000000c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x4, 0x2, &(0x7f0000000e00)={0x0, 0x989680}) write$P9_RREADLINK(r1, &(0x7f0000000e40)={0x14, 0x17, 0x1, {0xb, './bus/file0'}}, 0x14) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)="5cc77874fe04bf3261bd54ffa66a9d4532c76855098961724a56181157c89b", 0x1f, r4}, 0x68) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:46 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 148.914734][T19603] loop0: detected capacity change from 0 to 87 [ 148.939435][T19611] loop3: detected capacity change from 0 to 87 [ 148.953361][T19621] loop1: detected capacity change from 0 to 87 18:53:46 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 148.954533][T19616] loop5: detected capacity change from 0 to 262166 [ 148.974761][T19616] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 148.992889][T19616] EXT4-fs (loop5): orphan cleanup on readonly fs [ 148.999265][T19616] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:53:46 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000d, 0x4000010, r0, 0x96513000) sendfile(r1, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:46 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0x7ffff000) [ 149.010142][T19616] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.012922][T19636] loop2: detected capacity change from 0 to 87 [ 149.054567][T19642] loop4: detected capacity change from 0 to 87 18:53:46 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 149.062093][T19637] loop0: detected capacity change from 0 to 87 18:53:46 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:46 executing program 4: r0 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r1, 0x0) dup3(r0, r1, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17, 0x7}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000100)='./bus\x00', 0x27) fcntl$setstatus(r2, 0x4, 0x4100) lseek(r2, 0x1200, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setown(r5, 0x8, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) [ 149.089887][T19656] loop3: detected capacity change from 0 to 87 18:53:46 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000100)='./file1\x00', 0x440400, 0x88) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci_express', 0x101002, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x406, r2) sendfile(0xffffffffffffffff, r2, &(0x7f00000001c0)=0x660f, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:46 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:46 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0x7ffff000) [ 149.132616][T19670] loop1: detected capacity change from 0 to 87 [ 149.144346][T19671] loop5: detected capacity change from 0 to 262166 [ 149.166262][T19671] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 149.180529][T19671] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.186443][T19686] loop4: detected capacity change from 0 to 87 [ 149.186901][T19671] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 149.203853][T19671] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:46 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3130000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:46 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 149.233011][T19698] loop2: detected capacity change from 0 to 87 [ 149.233271][T19697] loop0: detected capacity change from 0 to 87 [ 149.245924][T19686] FAT-fs (loop4): Unrecognized mount option "á[½^ÿjœÚ¶v*1>üÍ›3¢N*]" or missing value [ 149.255543][T19701] loop3: detected capacity change from 0 to 87 [ 149.256375][T19702] loop1: detected capacity change from 0 to 87 18:53:46 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0x7ffff000) [ 149.299690][T19686] loop4: detected capacity change from 0 to 87 [ 149.317593][T19686] FAT-fs (loop4): Unrecognized mount option "á[½^ÿjœÚ¶v*1>üÍ›3¢N*]" or missing value 18:53:46 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r1, 0x80000000, 0x4) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:46 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0xfffffffffffffffd, 0x1) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 18:53:46 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 149.347302][T19729] loop0: detected capacity change from 0 to 87 [ 149.366493][T19730] loop5: detected capacity change from 0 to 262166 [ 149.386211][T19730] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:46 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 149.413506][T19744] loop3: detected capacity change from 0 to 87 [ 149.424023][T19730] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.430413][T19730] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 149.441383][T19730] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.449486][T19750] loop1: detected capacity change from 0 to 87 18:53:46 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:46 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, 0x0, 0x0) 18:53:46 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000100)='./bus\x00', 0x280001, 0x89) creat(&(0x7f0000000200)='./file0\x00', 0x42) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1250], 0x4e5) lseek(r2, 0x1200, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[], 0x8) r3 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r3, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) vmsplice(r3, &(0x7f0000000ac0)=[{&(0x7f0000000240)="1508adeadb9958334d4f9f3ba9cf0ae1b6094094634fd9b9220058c7d85d0b9924cb2066dfe23d87d6e43ab18e05882384f9650e44cb6d7fcc08dbeed02f5eee3703ab4603606519f2", 0x49}, {&(0x7f0000000880)="3582102f19c8dcacfaab4094aae788fc10ac36baaa6bc5fc325bfad16592bf7552971ab1d9e616508a487d54fa5a3fc563cdccaa13d2a9c8c07f5469d022e9b2c1c933467d4ff2846b9573f03b761e7961de96589dbe4ca0533325aaace57179f6cb8c0de6d2289d0106e2948728f08547202e9ffa3fb763a066cfbd2380cfccf6bcceb15d7de3a983d8a0ecef469a8df36118ed2906d9ca0826ef9f94d7e064e65a7d21b8dd23cab8fd47", 0xab}, {&(0x7f0000000940)="b09809022a17a57a8b4d3ad723a72b4d45bd4fdc103b213755777dbed4b6b0f18c048b7d45fde6626d14012cdf92e31306621c0272f8c12fa401d990a76c66a35742139db543c8df535b6ac1ec36a9295bfecb44afb035c082a316988fd25d24c02b1ce183d574cd549b0749f4f35b12c01ba8657d210d311cc41c02e239d91ffc04c7915db43a4105790d581507872e9fe0f4c3867838895a3b062d790c5345911fa5b1744eacb795e7ebc6cef551c03e4f979c1e974762ea67b4b3849fc0944f198474", 0xc4}, {&(0x7f0000000a40)="2cbb54d104aafaabf26be470f424ff013ef3876bb4b77165029cdd044b018f54a3e4573a24c88e0db3e363e6e082a67c11ba0f092afcaca433ec54ff7e58a62d4024a4d5e27524c966d2f01437b44bfa289ec5a8500d8fd5a7f7a9e12b52e9d3b6b9ec2ae5cff4e10e77f8", 0x6b}], 0x4, 0x9) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) read(r5, &(0x7f0000000180)=""/19, 0x7ffff000) [ 149.491170][T19752] loop2: detected capacity change from 0 to 87 [ 149.525022][T19759] loop0: detected capacity change from 0 to 87 18:53:46 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000180)="0002000000ee3f9d0d8fa4030000000000007400f80124ad582b", 0x1a}], 0x20000, &(0x7f00000000c0)=ANY=[@ANYRESHEX]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = pidfd_getfd(r1, r0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4091}, 0x2001) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x100008, &(0x7f0000000340)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0x5}}], [{@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x8f*'}}, {@uid_eq}, {@subj_user={'subj_user', 0x3d, '^'}}, {@dont_measure}]}}) sendfile(r1, r3, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) creat(&(0x7f0000000080)='./bus\x00', 0x111) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000004c0)) [ 149.578966][T19771] loop4: detected capacity change from 0 to 87 [ 149.591435][T19767] loop5: detected capacity change from 0 to 262166 [ 149.598269][T19772] loop1: detected capacity change from 0 to 87 18:53:46 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, 0x0, 0x0) [ 149.626949][T19789] loop2: detected capacity change from 0 to 87 [ 149.641026][T19767] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 149.657814][T19789] FAT-fs (loop2): Unrecognized mount option "keyring" or missing value 18:53:46 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x3, &(0x7f0000000100)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17, 0x1}, {&(0x7f0000000380)="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", 0x1000, 0x1}, {&(0x7f00000001c0)="0ab62a5b7ede8546bad0412ca9a78687a1e423cf67f1173a306fa9d8bfc4f93898d3af57defb4a52e35c3c86474d1a6a9fe86531e1f2992bf9dc2572dd81d60f30916c37f158bbd6e27872e4b559e043487598a55b9c34786f80d197026000b00bb05cbdcd9c61d7e6a93d4cd044c98af9d40ae8aba514026464de56fa3d5600875cbd3f39873c1597f24883c4a101b6e73c0dbe6dd6e6865a1940ec5498a1ccfd75e346da11d585d5a6494402682a7604d541dd8b52aaab83f0e1954a34f71389fd9ccf698826e0ec4107a0d86ae35bc14dca57d4859756dd1467f3725516c794809b5a13de68dd2caecf2b32ad8ed3", 0xf0, 0x90}], 0x400, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 149.675133][T19793] loop3: detected capacity change from 0 to 87 [ 149.726378][T19798] loop2: detected capacity change from 0 to 87 [ 149.742227][T19798] FAT-fs (loop2): Unrecognized mount option "keyring" or missing value [ 149.752511][T19809] loop1: detected capacity change from 0 to 87 [ 149.753670][T19803] loop4: detected capacity change from 0 to 87 [ 149.772392][T19767] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.778817][T19767] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 149.789888][T19767] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.803589][T19793] loop3: detected capacity change from 0 to 87 [ 149.816152][T19803] FAT-fs (loop4): invalid media value (0x5e) 18:53:47 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, 0x0, 0x0) [ 149.822317][T19803] FAT-fs (loop4): Can't find a valid FAT filesystem 18:53:47 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0xb4, 0xfc, 0xcd, 0x81, 0x1, 0x3, 0x3, 0xffffffa7, 0x69, 0x40, 0x11c, 0x80, 0xfffb, 0x38, 0x2, 0x1000, 0x553c, 0x8}, [{0x4, 0x7, 0x20, 0x8afb, 0x8, 0x7fff, 0x10000, 0x8}], "7f7b27a440b5c476f253d9f82f1e09e099945ed6ca01371533ca8361db4167cde9adde23f4432fafc72ea4a76a2af04d12831af4ff", ['\x00', '\x00']}, 0x2ad) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:47 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:47 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) open(&(0x7f0000000100)='./file1\x00', 0x800, 0x80) [ 149.911332][T19840] loop2: detected capacity change from 0 to 87 [ 149.920212][T19839] loop5: detected capacity change from 0 to 262166 [ 149.939793][T19839] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 149.949600][T19847] loop1: detected capacity change from 0 to 87 18:53:47 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(r1, 0x6) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x3) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000100)='./bus\x00', 0x101302, 0x102) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r4, r0, &(0x7f0000000140)=0xc1, 0x8) [ 149.971689][T19839] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.978114][T19839] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 149.988986][T19839] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.003152][T19803] loop4: detected capacity change from 0 to 87 [ 150.031072][T19803] FAT-fs (loop4): Unrecognized mount option "./bus" or missing value [ 150.034418][T19862] loop2: detected capacity change from 0 to 87 18:53:47 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:47 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0xd8) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2002002, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@msize={'msize', 0x3d, 0x1}}, {@cache_mmap}, {@nodevmap}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:47 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x100, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="04b2b28d218d6822670000", 0xb}], 0x800000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) creat(&(0x7f00000001c0)='./bus\x00', 0xc1) 18:53:47 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) openat(r2, &(0x7f0000000100)='./file1\x00', 0x5c900, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000b40)={{r3}, "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"}) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:47 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 150.366959][T19884] loop1: detected capacity change from 0 to 87 [ 150.373816][T19883] FAT-fs (loop2): bogus number of reserved sectors [ 150.374076][T19885] loop4: detected capacity change from 0 to 87 [ 150.380435][T19883] FAT-fs (loop2): Can't find a valid FAT filesystem [ 150.393664][T19891] loop5: detected capacity change from 0 to 262166 18:53:47 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0xd8) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2002002, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@msize={'msize', 0x3d, 0x1}}, {@cache_mmap}, {@nodevmap}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 150.438258][T19891] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 150.447809][T19883] FAT-fs (loop2): Unrecognized mount option "./bus" or missing value 18:53:47 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x240800, 0x100) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendfile(r3, r4, &(0x7f00000001c0)=0xcb6, 0x4) 18:53:47 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 150.503428][T19891] EXT4-fs (loop5): orphan cleanup on readonly fs [ 150.507441][T19911] loop0: detected capacity change from 0 to 87 [ 150.509824][T19891] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 150.526825][T19891] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:47 executing program 2: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) sendfile(r0, r1, &(0x7f0000000140)=0x6, 0x80000001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="cd464fcbcdc050562ad80b4d581ba6cf4e643d96fcbef645bf40bae029a754929fc85cb7cc7ef69fc9d74a4eb0406b511579dc48eb3554fd5b875f41b0435e69b01e07cf413c709d3fa8fac57a2a739fb1d80a50a97a0e291a02e3e06cc116070000acbd9ef41f62e9209998ca461073b43fcd38d78db7dd9c4c5f70d16d97f9eeb7dfd1fddbbb6d639f0b457d9f9efa6f54c4afd260eef844980f2eea343152a39516f1ff04378cb0b6edc25997014f09b74a005829c4ec9702fe8e", @ANYRES16, @ANYRES64, @ANYBLOB="071e29d2318e9c024b8220379452cd9b4bc09af82044eb4ee95f5edbe3180173f4fde7ac519ba1a6e33aae9cc499e85e81dea7a964420635c853bde4d2660ae59f45e51da02ea50cf18620c5ff3365b0ef28fbb5e1fdc27a90e55376ca0fb5d902e1c6bd67117754df5103477385ec44bc9bd3e2091f128e2c4571"], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) tkill(0x0, 0x3a) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) [ 150.573351][T19924] loop1: detected capacity change from 0 to 87 [ 150.591344][T19929] loop4: detected capacity change from 0 to 87 18:53:47 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0xd8) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2002002, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@msize={'msize', 0x3d, 0x1}}, {@cache_mmap}, {@nodevmap}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 150.632128][T19939] loop0: detected capacity change from 0 to 87 [ 150.640794][T19940] loop2: detected capacity change from 0 to 87 18:53:47 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/211, 0xd3}], 0x5, 0xfffffffc, 0x4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:47 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6040000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:47 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:47 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0xa, 0x3) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x3414c0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 150.728412][T19954] loop1: detected capacity change from 0 to 87 [ 150.753644][T19962] loop4: detected capacity change from 0 to 87 18:53:48 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0xd8) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2002002, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@msize={'msize', 0x3d, 0x1}}, {@cache_mmap}, {@nodevmap}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) 18:53:48 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x17, 0x8d, &(0x7f00000001c0)="0eaa3606327d7eedaeaad52ae404ed88d8f973c9007f9b8b97380897dd9fac09acf9e48db90f94e660023c47af8b088dfda24fc110c71762c7371e8889d6eaae6fdf69620aef669a0acc92ec1c8c6689b9c338986c00dcaac117940938970e7cecc7781bc0d253f0742d5c0d2dfeb4e13319e4039eee5726d2b45b01a3e98bb0c0a43bfdae026415fd14707e91"}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 150.793930][T19977] loop2: detected capacity change from 0 to 87 [ 150.805304][T19980] loop5: detected capacity change from 0 to 262166 [ 150.811602][T19982] loop0: detected capacity change from 0 to 87 [ 150.835203][T19980] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:48 executing program 2: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r1, 0x1200, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0xcf76e000) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="ce14441ade08fc3c2b31f31621cf8960d3f0f04cea4ba1e115a29ec7a4dca00aea8752c67ec5e9b0860fbb72f5b4bb406e13c1", 0x33}], 0x1, 0xe) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:48 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(0xffffffffffffffff, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 150.899570][T20001] loop1: detected capacity change from 0 to 87 [ 150.901325][T19980] EXT4-fs (loop5): orphan cleanup on readonly fs [ 150.912137][T19980] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 150.923123][T19980] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.942326][T20002] loop4: detected capacity change from 0 to 87 18:53:48 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0xd8) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) pipe2(&(0x7f0000000200), 0x80800) 18:53:48 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(0xffffffffffffffff, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 150.987851][T20015] loop0: detected capacity change from 0 to 87 [ 151.009969][T20010] loop2: detected capacity change from 0 to 87 18:53:48 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17, 0x3}], 0x4, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x80000, &(0x7f0000000440)={'trans=virtio,', {[{@posixacl}, {@access_uid={'access', 0x3d, 0xee00}}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@version_L}, {@access_user}, {@privport}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@uid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}, {@dont_appraise}]}}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 151.086344][T20028] loop0: detected capacity change from 0 to 87 [ 151.100451][T20034] loop1: detected capacity change from 0 to 87 18:53:48 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000140)='./file1\x00', 0x100) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x5c, "94201c920665e3333459fb080087aec7f9704e68a7a6f2819b12a6ce019e6595db50adf6dfee2a88f9d4a950eda38a85279fb7d0385c15dd1bdb44cd0559b13732d1899a5625a6b20a84307be4343f174834c0bc8094a58c82a11417"}, &(0x7f0000000040)=0x80) mkdir(&(0x7f0000000100)='./bus\x00', 0x88) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:48 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(0xffffffffffffffff, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 151.134320][T20041] loop4: detected capacity change from 0 to 87 [ 151.167848][T20041] FAT-fs (loop4): invalid media value (0x02) [ 151.173845][T20041] FAT-fs (loop4): Can't find a valid FAT filesystem 18:53:48 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:48 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0xd8) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 151.183592][T20046] loop2: detected capacity change from 0 to 87 18:53:48 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = syz_open_dev$vcsu(&(0x7f0000000240), 0x7, 0x40) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r1, 0x2400}], 0x1, &(0x7f00000003c0)={r2, r3+10000000}, &(0x7f0000000400)={[0x7]}, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/nfsv4', 0x600, 0x1a) syz_open_pts(r4, 0x880) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffa) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x86000, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, 0x9, 0x2db, 0x3, 0x300, 0xd482, 0x200000}) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file1\x00', 0x121000, 0x60) read(r7, &(0x7f0000000180)=""/19, 0x7ffff000) [ 151.206409][T20053] loop0: detected capacity change from 0 to 87 [ 151.242304][T20041] loop4: detected capacity change from 0 to 87 18:53:48 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 151.258139][T20041] FAT-fs (loop4): invalid media value (0x02) [ 151.264220][T20041] FAT-fs (loop4): Can't find a valid FAT filesystem [ 151.273240][T20073] loop5: detected capacity change from 0 to 262166 [ 151.280781][T20076] loop1: detected capacity change from 0 to 87 [ 151.289672][T20073] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 151.300035][T20081] loop2: detected capacity change from 0 to 87 [ 151.316795][T20073] EXT4-fs (loop5): orphan cleanup on readonly fs [ 151.323157][T20073] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 151.334429][T20073] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:48 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:48 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 151.415468][T20095] loop0: detected capacity change from 0 to 87 [ 151.451429][T20102] loop1: detected capacity change from 0 to 87 18:53:48 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r4 = timerfd_create(0x1, 0x800) r5 = syz_mount_image$nfs(&(0x7f0000001900), &(0x7f0000001940)='./file1\x00', 0x0, 0x1, &(0x7f0000001a40)=[{&(0x7f0000001980)="675d9946f8f977292c8265ee88e414770b346446cd4ba9156d078f2b7b0eaf3b01afc2706377aae8867600cf09a2bb9c4c7e10545acdfcf21489ec1f49643a964720522c86619ac7461277be41a83c5b51b3e752cca9bc7e94173305b85f833b39950e33e4e18984dba00689eb842ac60ebe7dafb35e00d8fd0826cc9d12490fdc6a6d7d75f64d80850fff9dac5696afa9d866663d317e56a21a9e60af6200dc1ff942fa104c16646cb4c613dac0b2d5f3f152433e8f7bd195c7aa8cfe64cc0b", 0xc0, 0x1000}], 0x0, &(0x7f0000001a80)={[{'msdos\x00'}, {'msdos\x00'}, {'\x17'}, {'}\xd2'}, {'msdos\x00'}, {'^.-[%\x13[('}, {'msdos\x00'}, {'\'^\xa6\xe6$+#{%,\\'}, {'!'}], [{@fowner_lt={'fowner<', 0xee00}}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) io_submit(0x0, 0xa, &(0x7f0000001d00)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x7ff, r2, &(0x7f0000000380)="dbe161652d4cf23944d39566414a69a72eef62cd57616cb2dc239f4df31f3aaa3d6a0bbac93e2dd3f5c77fb53344c726a825cfbb69f458445e8e07d12b2400259c5dc3d0bf0f5d58fdee935cc1525ccc95533b21ec3117951a11f576624a6a5827ec69353eeb92ac0b51415c505798f9902addd1d0560df8c0e548760ad24b1d136172102f345ad6ac76e08f39222f9e971624b6c5f45588dae8db1aad5be41df4466b1f4865688f03a5fa8dc8c63416920a5756cd6d6f07df4cacc4f32f010d5187d481defa1fbe920c", 0xca, 0x7, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x3ff, 0xffffffffffffffff, &(0x7f0000000480)="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", 0x1000, 0x7}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000001480)="c806cf68dee3fea1b574644039cb766f4047ed6d3cf6eecd50f194c3c19f9a7f3ca2b9bbd858a6dac75476ff9d60ac55b71bbcbb7c7e5b750f89b59787a8f17b187fe6a0929f25f5440e30a33861ef8947316d04c586a1df0ab783f656b8cc860e12657f3d4316184aa1d9ba57205bd3c4f6fdb25725fcb44e1a80f81b8986882d82aace873e2d60eda68ccbfc886a2c8343fce7c2a792aeb784af7169953f24a5111e6a29533462a1ba9e96d754cf299d4f709b0d73f95ac4f6360be6", 0xbd, 0x2}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000001540)="91d4da2c6b89ece1d115f4f0f1cb05918b67167067011b20a3f47fa4295257bb026a189f1b7790155cf66f41ea780ca009225c0fba76f6e66c564c6c87cc433b44709cb70a23c4660ecf9794dc121c1431b79a9fcf701be4b2c4305585a5cd6d939c9e9206434f355d81735e7a8758f048181137c66d533eecdb31e2b6ac24e33dfbc6649bc218a1dfe8f2607cd0dd138b298287018ea7dd5917d99a7daf381abf312065d723704cc56211dcbb5f95beaf4b630639", 0xb5, 0x9, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0xf840, r1, &(0x7f0000001640)="71935a038fff784a2e5bcae797117ee190a2707b99476c78ebcde1a50898d22f2e3e", 0x22, 0xfffffffffffffff9, 0x0, 0x2, r3}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x3, 0x7ff, r1, &(0x7f00000016c0)="52fe0c8ecb56cd61307b43d18fa95fe4019e37b187801e6c02e74c156f43fdba1a232e644e17ca91279ea824bfc7cab9", 0x30, 0x3ff, 0x0, 0x2}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x5, 0xf5, r4, &(0x7f0000001740)="4012119c2216a51f378bec8463f9560fb4eac3bad1fd39b28ac8a5afc4dad3b0787b79c75ad571ae5b07f5a22eeb1d9069ac7d143e83061c04562adf837f655bc465b4086cb76a2c328559497dbf00a9baae0f3cf958d9f0d6046f0d35ea61f711a73936399617014d1414de6d6b543456c2147013c8c38c43eb453b74f8a8d08e5f81103273704f810a345eb986f56ebfbbf2609f43b3262228a3de5da2578a06d624b74097fc0f870f69e67d682dbf1af7a9d8e8db18867e6bc5cec278276c52e6a7e4cdbb2ee223cca08355dce3b46ad07b1760e2362dadd40a13efa040ec4c3abbed953916d889467baf9b63", 0xee, 0xabbe, 0x0, 0x1, r2}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x3, 0xffff, r1, &(0x7f0000001880)="af4d02790e1c32b3bb9bc8f1057a7bba6a3ea1051c0e61c715aacd2d512348259ad0923238ca5a", 0x27, 0x7, 0x0, 0x1, r2}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x3, 0x8001, r5, &(0x7f0000001b00)="e13242d5be3b109d8fe3b73a35d540f595fbcf550388aa02508344f93a3b3e0555553c8d7e7242007c4b0dd642f55170302153a601007f93042afbc945a26e80750a06dcb46fe905ecd379f93b0534fb6c7704a5221ebccb5da76980c43471b3bac710d500", 0x65, 0x3, 0x0, 0x2, r2}, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x2, 0x7f, r0, &(0x7f0000001bc0)="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", 0xfc, 0x0, 0x0, 0x2, r6}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000100), 0x0, 0x40000000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) read(r7, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:48 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 151.511053][T20107] loop0: detected capacity change from 0 to 87 18:53:48 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:48 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7eeffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 151.560672][T20113] loop4: detected capacity change from 0 to 87 18:53:48 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000100)='./bus\x00', 0x82042, 0x44) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r6}, {r5}, {r5}, {r5, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {r5}, {r5, r6}, {}, {r5}, {r4}, {}, {r4, r6}, {r5}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057100)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0xff, "12ebe9ecc4eb77"}) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r7, &(0x7f0000000180)=""/19, 0x7ffff000) [ 151.623722][T20124] loop1: detected capacity change from 0 to 87 [ 151.632171][T20127] loop0: detected capacity change from 0 to 87 18:53:48 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:48 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 151.677811][T20137] loop5: detected capacity change from 0 to 262166 [ 151.711775][T20137] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 151.717802][T20144] loop4: detected capacity change from 0 to 87 [ 151.728003][T20137] EXT4-fs (loop5): orphan cleanup on readonly fs [ 151.734390][ C0] sd 0:0:1:0: tag#4507 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 151.734522][T20137] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 151.744327][ C0] sd 0:0:1:0: tag#4507 CDB: opcode=0xe5 (vendor) [ 151.744346][ C0] sd 0:0:1:0: tag#4507 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 151.755300][T20137] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.761623][ C0] sd 0:0:1:0: tag#4507 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 151.790849][ C0] sd 0:0:1:0: tag#4507 CDB[20]: ba [ 151.797045][T20144] buffer_io_error: 48 callbacks suppressed [ 151.797059][T20144] Buffer I/O error on dev loop4, logical block 44, async page read [ 151.810990][T20144] Buffer I/O error on dev loop4, logical block 44, async page read 18:53:49 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 151.850249][T20159] loop1: detected capacity change from 0 to 87 [ 151.885324][T20161] loop0: detected capacity change from 0 to 87 [ 151.913313][T20167] loop4: detected capacity change from 0 to 87 [ 151.961353][T20167] FAT-fs (loop4): bogus number of reserved sectors [ 151.967894][T20167] FAT-fs (loop4): Can't find a valid FAT filesystem 18:53:49 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6d00) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:49 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:49 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:49 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:49 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x19c, 0x14, 0x7, 0x401, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@nested={0x188, 0x56, 0x0, 0x1, [@generic="964d03aecd7e5c46f65745e2a2fa4369109f86240ee307791742607843921018d0e4441062eee2a77786eb50442a86d1fd4cd161a876b7c75ab5da64117d71e9747f4ffe50c210debddf9da9b810c272e9360a8e3388b48d821a8a8a7b801fa72f0e8a72bae126e893f882c0414b9c58d57dc8fd3d21b9", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x5}, @generic="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", @typed={0x8, 0x6, 0x0, 0x0, @fd=r2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x804}, 0x4008804) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x44) fcntl$setstatus(r0, 0x4, 0x6000) sendfile(r1, r4, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 152.141942][T20193] Buffer I/O error on dev loop2, logical block 51, async page read [ 152.155647][T20193] Buffer I/O error on dev loop2, logical block 51, async page read [ 152.206042][T20199] loop0: detected capacity change from 0 to 87 [ 152.213345][T20201] loop1: detected capacity change from 0 to 87 [ 152.215965][T20200] loop5: detected capacity change from 0 to 262166 18:53:49 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:49 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 152.251292][T20209] loop4: detected capacity change from 0 to 87 [ 152.274954][T20218] loop2: detected capacity change from 0 to 87 18:53:49 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x19c, 0x14, 0x7, 0x401, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@nested={0x188, 0x56, 0x0, 0x1, [@generic="964d03aecd7e5c46f65745e2a2fa4369109f86240ee307791742607843921018d0e4441062eee2a77786eb50442a86d1fd4cd161a876b7c75ab5da64117d71e9747f4ffe50c210debddf9da9b810c272e9360a8e3388b48d821a8a8a7b801fa72f0e8a72bae126e893f882c0414b9c58d57dc8fd3d21b9", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x5}, @generic="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", @typed={0x8, 0x6, 0x0, 0x0, @fd=r2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x804}, 0x4008804) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x44) fcntl$setstatus(r0, 0x4, 0x6000) sendfile(r1, r4, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 152.311154][T20200] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 152.350136][T20231] loop1: detected capacity change from 0 to 87 18:53:49 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="33d7f70047ac0692b2fc12c670c013368eca54109cb214072ed985d9d6132d06a4f1c4c3ef53de1612a34e103c3dc1dca4b2146be75c26d2bbc07b168f15170f7506219b53da1fd6414fc2000e4bc35b08579a8111418c7f2b52d472082d337c9a17fb2f6c495034e3a19e5ca4a613da96298de46f58b6dbec78a369a0ec1c8e5e2a8044a8ede84cebf01938b0dd166c7664ae386691f25476b6f605ccbd3d84d51e292452"]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x280100, 0x140) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000440)) lseek(r1, 0x6, 0x0) r3 = geteuid() mount$tmpfs(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x300000, &(0x7f0000000200)={[{@mode}, {@huge_advise}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x6d, 0x189538a88573fd51, 0x34, 0x70, 0x30]}}, {@huge_within_size}], [{@obj_role={'obj_role', 0x3d, '+'}}, {@fowner_lt={'fowner<', r3}}, {@euid_eq}, {@subj_type={'subj_type', 0x3d, ')'}}]}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r5, &(0x7f0000000180)=""/19, 0x7ffff000) [ 152.354932][T20232] loop0: detected capacity change from 0 to 87 [ 152.381842][T20200] EXT4-fs (loop5): orphan cleanup on readonly fs [ 152.388232][T20200] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 152.399191][T20200] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:49 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:49 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, 0x0, 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 152.465080][T20243] loop4: detected capacity change from 0 to 87 [ 152.474611][T20250] loop2: detected capacity change from 0 to 87 [ 152.490141][T20250] FAT-fs (loop2): Unrecognized mount option "3×÷" or missing value 18:53:49 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 152.528515][T20260] loop1: detected capacity change from 0 to 87 [ 152.553985][T20250] loop2: detected capacity change from 0 to 87 18:53:49 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x19c, 0x14, 0x7, 0x401, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@nested={0x188, 0x56, 0x0, 0x1, [@generic="964d03aecd7e5c46f65745e2a2fa4369109f86240ee307791742607843921018d0e4441062eee2a77786eb50442a86d1fd4cd161a876b7c75ab5da64117d71e9747f4ffe50c210debddf9da9b810c272e9360a8e3388b48d821a8a8a7b801fa72f0e8a72bae126e893f882c0414b9c58d57dc8fd3d21b9", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x5}, @generic="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", @typed={0x8, 0x6, 0x0, 0x0, @fd=r2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x804}, 0x4008804) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x44) fcntl$setstatus(r0, 0x4, 0x6000) sendfile(r1, r4, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 152.573247][T20250] FAT-fs (loop2): Unrecognized mount option "3×÷" or missing value [ 152.598542][T20270] loop0: detected capacity change from 0 to 87 18:53:49 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) rmdir(&(0x7f0000000180)='./bus\x00') preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x2, 0xee) sendfile(r0, r2, 0x0, 0x8400fffffffa) mmap(&(0x7f00006aa000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, 0xffffffffffffffff, 0xa0f09000) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x84c00, 0x48) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fchownat(r3, &(0x7f0000000100)='./file1\x00', 0xee00, 0xee01, 0x1000) [ 152.639385][T20282] loop5: detected capacity change from 0 to 264192 18:53:49 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 152.692834][T20282] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 152.705666][T20288] loop4: detected capacity change from 0 to 87 [ 152.722371][T20282] EXT4-fs (loop5): orphan cleanup on readonly fs [ 152.728757][T20282] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:53:49 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, 0x0, 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:50 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xa000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 152.740257][T20282] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.750787][T20297] loop2: detected capacity change from 0 to 87 [ 152.753082][T20298] loop1: detected capacity change from 0 to 87 18:53:50 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x2}, {0x30}, 0x10, 0x0, 0x0, &(0x7f0000000100)='./file1/../file0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000380)="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", 0x1b3, 0x0, &(0x7f0000000540)={0x2, 0x165, {0x1, 0xc, 0xea, "d17f9a20429ba9081447129d0e45ac13a71eeb1d221efe9be167e0fa591f82c7db908f19036b828d841dbd4eb7d7f7c15cf8afac68c3947edf61343e5ee08f04d319b8458142908d4e41b1087a7fa0980895282e1ef0e398ee405f66c33ed060c6517fa5a19b3ff5bcc7dbf43f476127205e739d5f6ccf725e6b5244ba5d95418a206a1c7c5c5ce68d5a3eb64b69bb0f04e6a82daaf3f67e8ca3b3c621f87af44ef124e562e3d4dcaabee89d7e80fe2260a03e6898238a23b10eb518820aa69f6d30a639858c12b18aa83d2d27a4b0e9837b527939bdc7b82e60a257fbcbcd96e636ace811e4f7e215e1", 0x6e, "802f0d4dfab20394860829ff2b2091b09386b06a87f2dd976febf9a4a05f9f52f5bee3f9fc42dd547f36804111b3340e56be542452692ce873b57b25efe2bbdab9aec4cb2e2d543d23aaceaba70feb844444d7d1f34ce3a1a31ddcab4f3e07ef77f3bba9b7c96620a290f239e7c4"}, 0x46, "de76c0b1e26e10048e38bb948107c000ee7b1a28a55127646fc8cfc7e20ea81aa58f1b2eed357702173fee3039eebc7d27b71cc5d5061bfcaeda4ef006532f58794721afb58b"}, 0x1b7}) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(0xffffffffffffffff, 0x2e, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x813e000) sendfile(r0, r2, 0x0, 0x8400fffffffa) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x50, r0, 0x901df000) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) 18:53:50 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:50 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x19c, 0x14, 0x7, 0x401, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@nested={0x188, 0x56, 0x0, 0x1, [@generic="964d03aecd7e5c46f65745e2a2fa4369109f86240ee307791742607843921018d0e4441062eee2a77786eb50442a86d1fd4cd161a876b7c75ab5da64117d71e9747f4ffe50c210debddf9da9b810c272e9360a8e3388b48d821a8a8a7b801fa72f0e8a72bae126e893f882c0414b9c58d57dc8fd3d21b9", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x5}, @generic="8c4fcee8fa9c88281ba8cc7c776e053e99de4361668ba5e86bd02ee7cf087b971b013389fd614a546a3f2e03ae1b11d2e5ad4fce19a9b9b0ffa3eed261433aea193ded4ca0c0cae52ab170e2f38b6a832cbdaf85098941451f5ae0c4e2307f7164247725b877ff44c1a5b1ff7689f606a1702a8d5f1ba80849fe86b15a167c2b8859fdcb4488a851cd62987f31cca58feed9799bf27a37506477b154240d16a04e5d91bdb02fb8a151cf389e54588b3eabc0476f51addbcda7b3b33cebbc7facfd1fee726e2ac4ab98f262f7c4bb918b54d96c82f9c5a08798dd828452fede2a069daa18dd8f3a12e24f9c8378e14177df09db2ad719de9320236a1311", @typed={0x8, 0x6, 0x0, 0x0, @fd=r2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x804}, 0x4008804) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x44) fcntl$setstatus(r0, 0x4, 0x6000) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 152.830276][T20313] loop5: detected capacity change from 0 to 264192 [ 152.842234][T20314] loop0: detected capacity change from 0 to 87 [ 152.859829][T20313] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:50 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, 0x0, 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 152.889859][T20313] EXT4-fs (loop5): orphan cleanup on readonly fs [ 152.896247][T20313] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 152.907147][T20313] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:50 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xb000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 152.935931][T20333] loop2: detected capacity change from 0 to 87 [ 152.941274][T20334] loop1: detected capacity change from 0 to 87 [ 152.948968][T20337] loop4: detected capacity change from 0 to 87 18:53:50 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:50 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x19c, 0x14, 0x7, 0x401, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@nested={0x188, 0x56, 0x0, 0x1, [@generic="964d03aecd7e5c46f65745e2a2fa4369109f86240ee307791742607843921018d0e4441062eee2a77786eb50442a86d1fd4cd161a876b7c75ab5da64117d71e9747f4ffe50c210debddf9da9b810c272e9360a8e3388b48d821a8a8a7b801fa72f0e8a72bae126e893f882c0414b9c58d57dc8fd3d21b9", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x5}, @generic="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", @typed={0x8, 0x6, 0x0, 0x0, @fd=r2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x804}, 0x4008804) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x44) fcntl$setstatus(r0, 0x4, 0x6000) [ 153.021377][T20355] loop5: detected capacity change from 0 to 264192 [ 153.034809][T20358] loop0: detected capacity change from 0 to 87 [ 153.061307][T20367] loop1: detected capacity change from 0 to 87 18:53:50 executing program 2: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44800) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r0, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c081) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000240)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) open(&(0x7f0000000100)='./file1\x00', 0x42901, 0x130) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:50 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 153.098445][T20374] loop4: detected capacity change from 0 to 87 [ 153.123018][T20355] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:50 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:50 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x19c, 0x14, 0x7, 0x401, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@nested={0x188, 0x56, 0x0, 0x1, [@generic="964d03aecd7e5c46f65745e2a2fa4369109f86240ee307791742607843921018d0e4441062eee2a77786eb50442a86d1fd4cd161a876b7c75ab5da64117d71e9747f4ffe50c210debddf9da9b810c272e9360a8e3388b48d821a8a8a7b801fa72f0e8a72bae126e893f882c0414b9c58d57dc8fd3d21b9", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x5}, @generic="8c4fcee8fa9c88281ba8cc7c776e053e99de4361668ba5e86bd02ee7cf087b971b013389fd614a546a3f2e03ae1b11d2e5ad4fce19a9b9b0ffa3eed261433aea193ded4ca0c0cae52ab170e2f38b6a832cbdaf85098941451f5ae0c4e2307f7164247725b877ff44c1a5b1ff7689f606a1702a8d5f1ba80849fe86b15a167c2b8859fdcb4488a851cd62987f31cca58feed9799bf27a37506477b154240d16a04e5d91bdb02fb8a151cf389e54588b3eabc0476f51addbcda7b3b33cebbc7facfd1fee726e2ac4ab98f262f7c4bb918b54d96c82f9c5a08798dd828452fede2a069daa18dd8f3a12e24f9c8378e14177df09db2ad719de9320236a1311", @typed={0x8, 0x6, 0x0, 0x0, @fd=r2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x804}, 0x4008804) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x44) [ 153.166781][T20355] EXT4-fs (loop5): orphan cleanup on readonly fs [ 153.173153][T20355] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 153.184077][T20355] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.187708][T20381] loop2: detected capacity change from 0 to 87 18:53:50 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xb000200, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 153.220866][T20381] handle_bad_sector: 126 callbacks suppressed [ 153.220881][T20381] attempt to access beyond end of device [ 153.220881][T20381] loop2: rw=0, want=90, limit=87 [ 153.238036][T20381] attempt to access beyond end of device [ 153.238036][T20381] loop2: rw=0, want=90, limit=87 [ 153.248517][T20381] Buffer I/O error on dev loop2, logical block 44, async page read [ 153.256749][T20381] attempt to access beyond end of device [ 153.256749][T20381] loop2: rw=0, want=90, limit=87 18:53:50 executing program 2: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x20000, 0x102) open(&(0x7f0000000140)='./file1\x00', 0x20000, 0x131) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xbec, 0x5ae, 0x9, 0x8, 0x1}) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 153.267337][T20381] Buffer I/O error on dev loop2, logical block 44, async page read [ 153.272336][T20387] loop0: detected capacity change from 0 to 87 [ 153.279160][T20381] attempt to access beyond end of device [ 153.279160][T20381] loop2: rw=2049, want=104, limit=87 [ 153.293559][T20399] loop1: detected capacity change from 0 to 87 [ 153.309170][T20402] loop4: detected capacity change from 0 to 87 18:53:50 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:50 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 153.338020][ T4989] attempt to access beyond end of device [ 153.338020][ T4989] loop2: rw=1, want=102, limit=87 18:53:50 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x19c, 0x14, 0x7, 0x401, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@nested={0x188, 0x56, 0x0, 0x1, [@generic="964d03aecd7e5c46f65745e2a2fa4369109f86240ee307791742607843921018d0e4441062eee2a77786eb50442a86d1fd4cd161a876b7c75ab5da64117d71e9747f4ffe50c210debddf9da9b810c272e9360a8e3388b48d821a8a8a7b801fa72f0e8a72bae126e893f882c0414b9c58d57dc8fd3d21b9", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x5}, @generic="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", @typed={0x8, 0x6, 0x0, 0x0, @fd=r2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x804}, 0x4008804) [ 153.384481][T20415] loop5: detected capacity change from 0 to 264192 [ 153.396860][T20418] loop0: detected capacity change from 0 to 87 [ 153.405181][T20415] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:50 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 153.444780][T20435] loop2: detected capacity change from 0 to 87 [ 153.464770][T20439] loop1: detected capacity change from 0 to 87 [ 153.479155][T20441] loop4: detected capacity change from 0 to 87 [ 153.482760][T20415] EXT4-fs (loop5): orphan cleanup on readonly fs [ 153.491693][T20415] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 153.500913][T20435] attempt to access beyond end of device [ 153.500913][T20435] loop2: rw=0, want=90, limit=87 [ 153.502583][T20415] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:50 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:50 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) [ 153.546537][T20435] attempt to access beyond end of device [ 153.546537][T20435] loop2: rw=0, want=90, limit=87 [ 153.556995][T20435] Buffer I/O error on dev loop2, logical block 44, async page read [ 153.607113][T20451] loop0: detected capacity change from 0 to 87 [ 153.641116][T20460] loop1: detected capacity change from 0 to 87 [ 153.644555][T20454] loop4: detected capacity change from 0 to 87 18:53:50 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:50 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 153.680906][T20435] attempt to access beyond end of device [ 153.680906][T20435] loop2: rw=0, want=90, limit=87 [ 153.691426][T20435] Buffer I/O error on dev loop2, logical block 44, async page read 18:53:51 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) 18:53:51 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 153.788609][T20481] attempt to access beyond end of device [ 153.788609][T20481] loop2: rw=2049, want=104, limit=87 [ 153.796431][T20484] loop0: detected capacity change from 0 to 87 [ 153.800566][T20480] loop1: detected capacity change from 0 to 87 [ 153.808282][T20485] loop4: detected capacity change from 0 to 87 18:53:51 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:51 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000100)={0xffff, 0xfffffff7, 0x5, 0xda8f}, 0x10) 18:53:51 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) [ 153.873644][ T22] attempt to access beyond end of device [ 153.873644][ T22] loop2: rw=1, want=102, limit=87 [ 153.897564][T20501] loop5: detected capacity change from 0 to 264192 [ 153.909971][T20507] loop0: detected capacity change from 0 to 87 18:53:51 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:51 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 153.933756][T20514] loop4: detected capacity change from 0 to 87 [ 153.940111][T20501] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 153.985011][T20501] EXT4-fs (loop5): orphan cleanup on readonly fs [ 153.991389][T20501] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 153.992796][T20528] loop1: detected capacity change from 0 to 87 [ 154.002291][T20501] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.022119][T20526] loop2: detected capacity change from 0 to 87 18:53:51 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 154.049877][T20526] Buffer I/O error on dev loop2, logical block 44, async page read [ 154.112773][T20538] loop0: detected capacity change from 0 to 87 [ 154.126194][T20526] Buffer I/O error on dev loop2, logical block 44, async page read [ 154.153365][T20541] loop4: detected capacity change from 0 to 87 18:53:51 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xd000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:51 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:51 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:51 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 154.277806][T20556] loop5: detected capacity change from 0 to 264192 [ 154.310571][T20556] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 154.329030][T20565] loop1: detected capacity change from 0 to 87 [ 154.340934][T20574] loop4: detected capacity change from 0 to 87 [ 154.367459][T20578] loop0: detected capacity change from 0 to 87 18:53:51 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:51 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 154.395982][T20556] EXT4-fs (loop5): orphan cleanup on readonly fs [ 154.402339][T20556] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 154.413240][T20556] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:51 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:51 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 154.502808][T20594] loop4: detected capacity change from 0 to 87 [ 154.514004][T20592] loop1: detected capacity change from 0 to 87 18:53:51 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x84c03, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000002580)={0x18f0, 0x0, 0x8, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x3e}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x79c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x78c, 0x4, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_MASK={0xdc, 0x1, "092441750f2fb7a1f23177a225c703d873c015404ad6eb3b3ea1ff5d147cdfee1ff70b85420b4494a125e707c53a8e2343f0a4e851de3bca0ead10123d92fb747f63bba97f8c28915670e064e8ce5ed7912cd1985137bbe88bc70dce69374ce9a264be8d2eef669562ca6325c17fdccf01c9edd82d3aa5da7bcfd1fb371857359c8cb4557552309937a2223c6458383536abe542542965cdc9461418e3f6f2d08ee73894dd58aab03a9b86ba772db646df50ba1cd779fe48627853372a182e8e996bfed861d303541f2ed1e44e9983283594382ef726724f"}]}, {0x2b0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x6f, 0x2, "c7a2abb51c9245e4722b1f3a08302b58084880ae2f777bb5ed73093ed1895db6a122847653bbd231a19372f7b29dff2d3d4a9a851a2948c7389fe195abbf457199ee435e23b05fe36a65ffeda90d74f810e7df5343f042e53256b3596169f537d14fe71d43514ae6fe282c"}, @NL80211_PKTPAT_PATTERN={0x50, 0x2, "39099b82c139d4c50f4558863e413ba813c8a9612e62116dbae288a3f4d3b21a3b1223426e968bb9c78d834a905c4693c972124377e53d502448dc748c0fcf9ad2fb8db5b94a1cf7f9db5fbe"}, @NL80211_PKTPAT_MASK={0x90, 0x1, "bd6f8658262cf192ea00908a66c2bfc4c7cb25912a8d482cb646f73223c3b3c6c38659c805d9b97fc7725ad5dcafba4166116083df208218711a20c79349ed350a00307ca8595776a9602a2d11a0baf1282dbaf2589f85fea378cbf6b5587e1a4d25377b90ccf0cc8e5fd13fae05224eb6857fa36b667cb57fb264e61c066984c09fe5837661b47f72c6741b"}, @NL80211_PKTPAT_PATTERN={0x5f, 0x2, "4b68950614b33a49ed1669eff1229c063b6b57883e6acc1417bd89a6b36caa8627c1ee7102c3cefb027606946e328f1ec0ea36ddf6844da88510cb51699e211caa6561029a647516a7e7fb7270740aa683cc99350a83ab8a868e5e"}, @NL80211_PKTPAT_MASK={0xfa, 0x1, "0c349720562815cf37e6469bbb3a029c70dadfef1392cb20de21788865d7d3acf5d3aefe5a8a489c72281014f71dac86b61eefb19729ff0716cb4f95160eacfb5f5b86cb97389ca2a608404fde984395ed6f1b72629c8cd3d16a2ef26446fe1569e9086a5425c2f3ab74cefb59ac75038518d929ba16e968fd456b8c258c70509f477b356986e5454e1b5e02ca97cb06ea7d9d96678a979e6d82a21216dd62f6fcd0cd737397910562e23686541954f0d606b0b00023e1f2b894a3f98da45d40103167ce97f00a5552659c6e5dced8e8382fa8548a66c2cfb49041a79174feb54ba4fe6a7acfde04cba394c37be19901e7b6864a76d8"}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0x71, 0x2, "cc8eba41288b7384646fa1fa0cc197cdc8e73ab091c275e8c6e72cf67ce5c9f928e5733b4b74de6fa458cfb58c33dfdc4ae143822a90917d8e0f59ded9d28d8ae9cef74e7e94d5caccf416a21f9c5df349d5f1290fe6a9ad1ae934cb575f98480a8b83c540e2ba3fbebc3164ad"}, @NL80211_PKTPAT_MASK={0x27, 0x1, "7d4eba2a43f7e700340cffb03b0374dc1d17bc03817a498e62f5e968de1c87c560cc63"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0x5a, 0x2, "0d5c9ced18925ca7931960b0a2e53efc5c519f1e9fef86a85e9ad70e9753f07de109f67fe275743ccbd4d4465558c5215513483863d62c0197eecb3a85c0c6188e6672f00a04652f492802fede7d58a097039b6db667"}, @NL80211_PKTPAT_MASK={0x4}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1dcec85d}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0x7a, 0x2, "227b19dce69c79e9c17988e3fcee0f4ec937872a8d17ba546ab56bf57025fc303e992ff15eff831c0c5d456b710c984847dee65d27038c999c51b7c70308489fcb5e67b27eac3260ff9568447661b0f699eee8d2ab063472f93c8f5004c0ccfa01f61f84f82fd2ae850bfd75059bf5e03d1c13e70146"}, @NL80211_PKTPAT_PATTERN={0x45, 0x2, "8999ce160b655cae5ab43ebfdd432768d81d6026510e70db66a1efc7ebc7e744095ad3b365812098903bdf8b07813bd9d65c3f251d0df97fc0d5ce0862753ded41"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_PATTERN={0x18, 0x2, "34fef65a49d2c23d79baa16abc368224454e87d4"}]}, {0x1dc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_MASK={0xe1, 0x1, "213c9554517e5bae3a4b734ee24f53767ad7be6d15451ad7f39fc22611fc1e945abd4512da2e4fd8b6514b54f4cf196a207e034ae0f3f2bd3e2973736b5bb9dd5b9afe043dc32f7d884c017b748a4e26d87eed9e16d4f3198eeb1ded7f63300b5e303fecd7d39cb0df1e0d725ef4948c50b1a9ae23c11eeaa800e396d86707ffd4d052af3f0aa8a7a74ba3416d7b5ad6c40c16bbee1bedb5858be92fb478e35e8f435d985f0df06bb27dfce6d11dd46bf241659785c277e517ea928b9f27d4d521e0ceafeaadfbfffad0b1ee22a305a8c1f682fb36bc7667d25e9206f3"}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_PATTERN={0x8, 0x2, "e5141c65"}, @NL80211_PKTPAT_PATTERN={0x93, 0x2, "38ce83c3407489d5777f6e8e74903bbe0dd7c24656da03e629635d7d3a473dc6804e6ac4d4a7215fe87335e128e207547745fcfa2a3ead392a422130bd8d5dbdb8e3da2a68f4ec9973c43a94aea084a207b18206a2d13f075acd50a90d9bf9aaed8c520f2035ec097de86bc79ea0008b230698634ab11506368cc4762c1fda7253dfd832c7a8af4d3703be3e8faa76"}, @NL80211_PKTPAT_PATTERN={0x4a, 0x2, "501ae10cf7d3a8656378af52cb634bf15a7bd8313d65972867af8f39197bd77b1c739baf95872786efc506e17eaa9943f5e8b41a200407d1ab6c6ae8eaa691c795d1f2fa7a81"}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xf74, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf64, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x0, 0x20}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xdd, 0xa, "e891934a7d38c5dd8134fd9602e4fbf671eaf401142e93dcb1ea39b9c1210d6c965a4e2df60d501c84779c8af3b7c69ecfdc95f2004cc05ed80136bdb5a44340c75a6bbf73ed0b6743edd910d94b130df4c8a630a51d2fd0638ad5d03c4f374daf4bb001eee060cb38668adc9e035f42b3dd2bb08ff965df16e17d0d2a8b30986209bfc693d340aa8383ccb0f16e058be94ded16ba78ce465c04b26eeaee695f1f29857767854d836fb49ceee26944baef0aaa04a8f279d7b1f2400be17085bcd4df91de9a6e6826251b6d375afed9cc46c53d1f346ed627bd"}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x14, 0x6, "6cc07ae7c46ec0290fb96c53f827f376"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xdbc, 0x6, "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"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x81, 0x8, {0x9, 0x1, "cab726bedd4ef5c3e8a48478e5227c57b6d1a0e15363f3f77a7909efa7ebd8f0d51443fa6475656813ab6cb5d86fbce189b2281c7f31bba4e118efa5d8ff817777b5c60d53272e7b9b0f050bf9b2289f0267394d8a92c1c4b8ad8d1528bb58c6fb5e2951700de70349cb6e80974091bc6ef4368765"}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x4}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x174, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x148, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_PATTERN={0x4}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0xee, 0x1, "2c66d8890233d3019f0b100c06e44137e9501b69c347e2421e9972bae3ff33fb9aa15c7a9753e3d5e392932ff28538fea2c09a3cd75cfebbe89b62f24718608b021cf2c77c631e2ba1b696a9f5b5f2cdfe6f56ab98344ea15f402446da632d01dda33ef554ddaad8f452c8ad26cc27626fe9d3e93be68c2a13b6673a1bfa258bf7edae8f078ff05be38f7f63ac29fdb1c86955ff871a05c4dd9765ea3f54e8f854af7bca2e53f594e07bb062378dc99456f3f2acf0754d97a7db84ec2d052ed403223fb9c93e42a76116ee608ea1a8ee25adcfd687302b18cae75842f2dbc6ae30ae699c18ea75af7429"}, @NL80211_PKTPAT_PATTERN={0x22, 0x2, "c284533de379aeee6d18a5f85dbbbf6093700d3d8fd72931b35eda95d7f0"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_OFFSET={0x8}]}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x24, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x4}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x4}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="11570aeaa4f9"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0xff}}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x18f0}}, 0x24000c01) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0f5c8a7bb75f73dab06e875842"}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x5, 0x4, "cc"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e61a6467c30330955196d74d2d"}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x8000) symlinkat(&(0x7f0000000140)='./bus\x00', r3, &(0x7f0000000200)='./bus\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0x40) 18:53:51 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:51 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 154.565960][T20603] loop0: detected capacity change from 0 to 87 18:53:51 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 154.624715][T20620] loop2: detected capacity change from 0 to 87 [ 154.632263][T20613] loop4: detected capacity change from 0 to 87 [ 154.641791][T20624] loop5: detected capacity change from 0 to 264192 [ 154.654198][T20623] loop1: detected capacity change from 0 to 87 [ 154.693039][T20624] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:51 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:51 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setxattr$incfs_size(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140), &(0x7f00000001c0)=0xfff, 0x8, 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 154.735626][T20639] loop0: detected capacity change from 0 to 87 [ 154.769682][T20624] EXT4-fs (loop5): orphan cleanup on readonly fs 18:53:52 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:52 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 154.776079][T20624] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 154.787001][T20624] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.798594][T20648] loop4: detected capacity change from 0 to 87 18:53:52 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:52 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:52 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 154.860487][T20659] loop1: detected capacity change from 0 to 87 [ 154.869429][T20655] loop2: detected capacity change from 0 to 87 [ 154.906752][T20670] loop0: detected capacity change from 0 to 87 [ 154.923438][T20673] loop5: detected capacity change from 0 to 264192 18:53:52 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file1/file0\x00') chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x802, 0xc2) lseek(r1, 0x9, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r3, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) fallocate(r3, 0x2, 0x8, 0x7fff) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:52 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 154.962459][T20673] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 154.992044][T20688] loop1: detected capacity change from 0 to 87 [ 154.999584][T20689] loop4: detected capacity change from 0 to 87 18:53:52 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 155.006858][T20673] EXT4-fs (loop5): orphan cleanup on readonly fs [ 155.013271][T20673] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 155.024154][T20673] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:52 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 155.081604][T20703] loop0: detected capacity change from 0 to 87 [ 155.084624][T20704] loop2: detected capacity change from 0 to 87 18:53:52 executing program 2: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) fcntl$setstatus(r1, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) fallocate(r0, 0x8, 0x9, 0xa8b) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:52 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:53:52 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:52 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 155.126191][T20717] loop4: detected capacity change from 0 to 87 [ 155.154591][T20712] loop1: detected capacity change from 0 to 87 18:53:52 executing program 2: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) mq_open(&(0x7f0000000140)='msdos\x00', 0x0, 0x60, &(0x7f00000001c0)={0x4, 0x200, 0xffffffffffffff01}) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) preadv(r2, &(0x7f0000000280), 0x0, 0x5, 0x3) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000240)={{r0}, 0x4, &(0x7f0000000200)=[0xbfb, 0x1, 0x3, 0x1], 0x5, 0x0, [0xfffffffffffffffc, 0x4, 0x8001, 0x9f]}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x2, 0x90) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) [ 155.213323][T20730] loop2: detected capacity change from 0 to 87 [ 155.248788][T20745] loop0: detected capacity change from 0 to 87 18:53:52 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(0x0, 0x0) [ 155.276816][T20749] loop4: detected capacity change from 0 to 87 [ 155.296470][T20748] loop5: detected capacity change from 0 to 264192 18:53:52 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 155.332778][T20757] loop2: detected capacity change from 0 to 87 18:53:52 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x6f, 0x3, 0xe78, {0x2, 0xffffffff}, 0x3, 0x1f}) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 155.380684][T20766] loop0: detected capacity change from 0 to 87 [ 155.387158][T20748] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:52 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(0x0, 0x0) [ 155.432011][T20772] loop4: detected capacity change from 0 to 87 [ 155.461224][T20748] EXT4-fs (loop5): orphan cleanup on readonly fs [ 155.467604][T20748] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:53:52 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 155.478510][T20748] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.542309][T20781] loop2: detected capacity change from 0 to 87 [ 155.556556][T20780] loop0: detected capacity change from 0 to 87 [ 155.601903][T20794] loop4: detected capacity change from 0 to 87 18:53:52 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:52 executing program 2: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="04000509000000006ed96046cf33d3c540b41a885f22009d9079c3fd6b5b3519b14a897c5aa4f87e34d0f5e840a762df5e8d3213c7ef9f9f978f63f954dc8d5b00ff9f23cb805a07147b7f329f11701385780526f58f770c9348d849cb5a0eb3d8233777a83f162e5a", 0x69}], 0x810, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0x3, 0x220100) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000140)={0x2, 0x0, 0x7, 0x0, 0x8, 0x2}) 18:53:52 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:52 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(0x0, 0x0) 18:53:52 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 155.719570][T20813] loop2: detected capacity change from 0 to 87 [ 155.726060][T20821] loop0: detected capacity change from 0 to 87 [ 155.729922][T20814] loop4: detected capacity change from 0 to 87 [ 155.744123][T20813] FAT-fs (loop2): invalid media value (0x22) [ 155.747344][T20828] loop1: detected capacity change from 0 to 87 [ 155.750154][T20813] FAT-fs (loop2): Can't find a valid FAT filesystem [ 155.767259][T20816] loop5: detected capacity change from 0 to 264192 18:53:53 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 155.813495][T20816] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:53 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x1f, 0x80, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000140), 0x8f41176aa0ebd71b}, 0x2905, 0x3, 0x7fffffff, 0x6, 0x7, 0x84, 0x7, 0x0, 0x1000}, 0x0, 0xa, r3, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x19c, 0x14, 0x7, 0x401, 0x70bd2d, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@nested={0x188, 0x56, 0x0, 0x1, [@generic="964d03aecd7e5c46f65745e2a2fa4369109f86240ee307791742607843921018d0e4441062eee2a77786eb50442a86d1fd4cd161a876b7c75ab5da64117d71e9747f4ffe50c210debddf9da9b810c272e9360a8e3388b48d821a8a8a7b801fa72f0e8a72bae126e893f882c0414b9c58d57dc8fd3d21b9", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x5}, @generic="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", @typed={0x8, 0x6, 0x0, 0x0, @fd=r2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x804}, 0x4008804) [ 155.867139][T20816] EXT4-fs (loop5): orphan cleanup on readonly fs [ 155.873519][T20816] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 155.884410][T20816] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.886497][T20845] loop4: detected capacity change from 0 to 87 [ 155.911590][T20813] loop2: detected capacity change from 0 to 87 18:53:53 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 155.956914][T20813] FAT-fs (loop2): Unrecognized mount option "./bus" or missing value [ 155.974722][T20855] loop0: detected capacity change from 0 to 87 18:53:53 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x2) fcntl$setstatus(r1, 0x4, 0x2800) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x22, &(0x7f0000000100)="8a99578a7d33d313a90e81ed840f1eb77412b6b1c730b92940a14e6c0bd7b65a8717", 0x7d, 0x0, &(0x7f00000001c0)="4d20dacb7898695976b3aabb088f79f40f56d288aa15cd95d6fbc1325ff520a6965be5e2282302f25aad60e25a8dfe1ac9d9213a90002944cf606d2e2ff643201dc6f169e2e45b50f3979663ea9ba03bd1d270e77494f504530c155a98c9b4815cb4fc6387758877a207c344af31f37bd3bac8b2458abb8dcf7059a251"}) write$P9_RREADLINK(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000017010007002e2f66696c653104cbf1cfeb0798ef14a97398196d96e73c58bb46bea1ff000000000000001323f5d47411e3723eaef4"], 0x10) fcntl$setsig(r0, 0xa, 0x17) truncate(&(0x7f0000000080)='./file1\x00', 0x3e) 18:53:53 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) symlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1/file0\x00') preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:53 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x12000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:53 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 156.082914][T20871] loop4: detected capacity change from 0 to 87 [ 156.103808][T20878] loop2: detected capacity change from 0 to 87 [ 156.191710][T20889] loop5: detected capacity change from 0 to 264192 [ 156.222898][T20897] loop4: detected capacity change from 0 to 87 [ 156.241976][T20889] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:53 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:53 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x800, 0x20) symlink(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file1\x00') write$P9_RREMOVE(r2, &(0x7f0000000140)={0x7, 0x7b, 0x1}, 0x7) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="c3097dd3582af012714b30b0b08326c3114fee7ea421444e3eca4aedc04e2d1fbc6449300a8855e17db8323ebac89eb6b001439d09b15040213f2817b2320f354e8d0bc7a30c", 0x46}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000016c0), 0x290000, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x13) 18:53:53 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:53 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x18000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 156.295905][T20889] EXT4-fs (loop5): orphan cleanup on readonly fs [ 156.302261][T20889] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 156.313139][T20889] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.366671][T20910] loop2: detected capacity change from 0 to 87 [ 156.406452][T20919] loop4: detected capacity change from 0 to 87 18:53:53 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r5 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000140)={r3, r4/1000+60000}, 0x10) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 156.423028][T20928] loop1: detected capacity change from 0 to 87 [ 156.431121][T20930] loop5: detected capacity change from 0 to 264192 [ 156.455816][T20930] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 156.505824][T20930] EXT4-fs (loop5): orphan cleanup on readonly fs [ 156.512178][T20930] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 156.523068][T20930] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:53 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 156.554912][T20945] loop2: detected capacity change from 0 to 87 [ 156.615388][T20953] loop4: detected capacity change from 0 to 87 18:53:53 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea3, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17, 0x400000}], 0xc0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x2}, 0x10) write(r1, &(0x7f00000000c0)="240000001a005f0014f9f407000904000200000000000000000000000800100200000000", 0x24) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x134) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:53 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 156.740749][T20967] loop2: detected capacity change from 0 to 16384 [ 156.782198][T20967] FAT-fs (loop2): bogus number of reserved sectors [ 156.788762][T20967] FAT-fs (loop2): Can't find a valid FAT filesystem [ 156.811902][T20976] loop5: detected capacity change from 0 to 264192 [ 156.829760][T20976] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 156.859656][T20967] loop2: detected capacity change from 0 to 16384 [ 156.861293][T20976] EXT4-fs (loop5): orphan cleanup on readonly fs [ 156.872459][T20976] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 156.879117][T20967] FAT-fs (loop2): Unrecognized mount option "./bus" or missing value [ 156.883336][T20976] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:54 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000000000000025000000190016", 0x23}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x4ffe3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4100) lseek(0xffffffffffffffff, 0x1200, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xd5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r6, &(0x7f0000000180)=""/19, 0x7ffff000) splice(r0, &(0x7f0000000100)=0x9, 0xffffffffffffffff, &(0x7f0000000200)=0x6, 0x5, 0x8) 18:53:54 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {r3}, {r2}, {}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000545c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000555c0)={0x0, 0x0, "16f62e29292f1b3203263bb2d25a959358a60765ea8e8451bb7cdd8b3eac931d554eedeab4c7e3682333d7e1d830d74ad1b3d178eed082ef280144b15df034ea3f836215f94bcd14c7076fd9612038eb5df04a9df5575e20a2a41775a7eef06c3b45af6da811e2e77d0b7b2111faeab8f8722442f0960b48a7a2099a0b8373ac0f71bb7cb6de31f046c392a8ba38483c0fdf18efd20b3b8ec8d27b59467e3f75d58e1569f228ac8737a9719a7f05f9b5800e1af0fb6029d95ee3127172ebded0f543d278cb819609b679514e3a378f72bdfb3d3f5f65af341f12c5c79bd3746fa094011ef3eb091d11fdcb6a415a8661a6ff438ab0ad3c7837e6f85dffdee1cc", "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"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r11}, {r10}, {r10}, {r10, r11}, {}, {}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {}, {}, {r9, r11}, {r10}, {}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {r9}, {}, {r10}, {r9}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10}, {r9, r11}, {}, {r9}, {}, {}, {0x0, r11}, {}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r10}, {}, {}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {}, {}, {0x0, r11}, {}, {r9}, {0x0, r11}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r9}, {r9, r11}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10}, {}, {r9, r11}, {r9}, {r10, r11}, {}, {r9}, {r9, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10, r11}, {}, {}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {}, {r10, r11}, {r10}, {}, {0x0, r11}, {r9}, {0x0, r11}, {r10, r11}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {r10, r11}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {r9}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {r10}, {r9, r11}, {r9, r11}, {0x0, r11}, {0x0, r11}, {}, {}, {0x0, r11}, {r10}, {r9}, {}, {r9}, {r10}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r9, r11}, {r10}, {r10, r11}, {}, {r10}, {r9}, {}, {r9, r11}, {r10}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {r10}, {r10}, {}, {}, {r10}, {0x0, r11}, {0x0, r11}, {}, {r9}, {}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {r9}, {0x0, r11}, {r9}, {0x0, r11}, {r9, r11}, {r10, r11}, {r10}, {r9, r11}, {}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10}, {r10}, {r9}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {r9, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000565c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r5, r6}, {}, {}, {}, {r10}], 0xe0, "a9ea90eff8f7ee"}) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:54 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:54 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1f000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 157.011778][T20997] loop4: detected capacity change from 0 to 87 [ 157.022813][T20998] loop5: detected capacity change from 0 to 264192 [ 157.036600][T21004] loop3: detected capacity change from 0 to 87 [ 157.053108][T20998] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 157.058566][T21008] loop0: detected capacity change from 0 to 87 [ 157.100416][T20998] EXT4-fs (loop5): orphan cleanup on readonly fs [ 157.106778][T20998] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 157.117743][T20998] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.133804][ C1] sd 0:0:1:0: tag#4509 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 157.143644][ C1] sd 0:0:1:0: tag#4509 CDB: opcode=0xe5 (vendor) [ 157.149985][ C1] sd 0:0:1:0: tag#4509 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 157.159036][ C1] sd 0:0:1:0: tag#4509 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 157.168073][ C1] sd 0:0:1:0: tag#4509 CDB[20]: ba 18:53:54 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') lseek(0xffffffffffffffff, 0x1200, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:54 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r3, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:54 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16, @ANYRESHEX], 0x12) 18:53:54 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 157.267683][ C1] sd 0:0:1:0: tag#4510 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 157.277555][ C1] sd 0:0:1:0: tag#4510 CDB: opcode=0xe5 (vendor) [ 157.283979][ C1] sd 0:0:1:0: tag#4510 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 157.293065][ C1] sd 0:0:1:0: tag#4510 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 157.302142][ C1] sd 0:0:1:0: tag#4510 CDB[20]: ba [ 157.346155][T21032] loop2: detected capacity change from 0 to 87 [ 157.348102][T21034] loop4: detected capacity change from 0 to 87 [ 157.366432][T21040] loop5: detected capacity change from 0 to 264192 [ 157.387117][T21040] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 157.412745][T21032] buffer_io_error: 19 callbacks suppressed [ 157.412759][T21032] Buffer I/O error on dev loop2, logical block 44, async page read [ 157.429252][T21040] EXT4-fs (loop5): orphan cleanup on readonly fs [ 157.435582][T21040] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 157.446557][T21040] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:54 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16, @ANYRESHEX], 0x12) 18:53:54 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x20100000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:54 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast2, @in=@remote}}, {{@in=@empty}}}, &(0x7f0000000100)=0xe8) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:54 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') lseek(0xffffffffffffffff, 0x1200, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 157.448955][T21053] loop1: detected capacity change from 0 to 87 [ 157.459447][T21032] Buffer I/O error on dev loop2, logical block 44, async page read [ 157.553413][T21066] loop2: detected capacity change from 0 to 87 [ 157.569380][T21076] loop5: detected capacity change from 0 to 264192 [ 157.570760][T21079] loop4: detected capacity change from 0 to 87 [ 157.586049][T21080] loop1: detected capacity change from 0 to 87 [ 157.598601][T21066] Buffer I/O error on dev loop2, logical block 44, async page read [ 157.622361][T21076] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 157.654955][T21076] EXT4-fs (loop5): orphan cleanup on readonly fs [ 157.656366][T21066] Buffer I/O error on dev loop2, logical block 44, async page read [ 157.661396][T21076] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 157.680200][T21076] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:55 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffffff, &(0x7f0000001a00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000000000000025000000190016", 0x23}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x4ffe3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4100) lseek(0xffffffffffffffff, 0x1200, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xd5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r6, &(0x7f0000000180)=""/19, 0x7ffff000) splice(r0, &(0x7f0000000100)=0x9, 0xffffffffffffffff, &(0x7f0000000200)=0x6, 0x5, 0x8) 18:53:55 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16, @ANYRESHEX], 0x12) 18:53:55 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') lseek(0xffffffffffffffff, 0x1200, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:55 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x22000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:55 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000100)='./file1\x00', 0x44800, 0x1) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) [ 157.903830][T21104] loop0: detected capacity change from 0 to 87 [ 157.921332][T21111] loop1: detected capacity change from 0 to 87 [ 157.926720][T21113] loop4: detected capacity change from 0 to 87 [ 157.933126][T21112] loop2: detected capacity change from 0 to 87 [ 157.947698][T21116] loop5: detected capacity change from 0 to 264192 18:53:55 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:55 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 157.985885][T21116] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 157.998701][T21112] Buffer I/O error on dev loop2, logical block 44, async page read [ 158.018610][T21112] Buffer I/O error on dev loop2, logical block 44, async page read [ 158.036079][T21116] EXT4-fs (loop5): orphan cleanup on readonly fs [ 158.042544][T21116] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 158.048635][T21135] loop4: detected capacity change from 0 to 87 [ 158.053475][T21116] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:55 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x25000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:55 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r4 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = eventfd2(0x80, 0x0) r6 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4, 0xffffffffffffffff, r2, r5, r6], 0x5) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:55 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 158.139672][T21144] loop1: detected capacity change from 0 to 87 [ 158.245768][T21161] loop5: detected capacity change from 0 to 264192 [ 158.249980][T21162] loop2: detected capacity change from 0 to 87 [ 158.261184][T21163] loop4: detected capacity change from 0 to 87 [ 158.304440][T21161] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 158.315217][T21162] handle_bad_sector: 79 callbacks suppressed [ 158.315233][T21162] attempt to access beyond end of device [ 158.315233][T21162] loop2: rw=0, want=90, limit=87 18:53:55 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 158.356512][T21161] EXT4-fs (loop5): orphan cleanup on readonly fs [ 158.362994][T21161] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 158.369287][T21173] attempt to access beyond end of device [ 158.369287][T21173] loop2: rw=0, want=90, limit=87 [ 158.373881][T21161] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.384313][T21173] Buffer I/O error on dev loop2, logical block 44, async page read 18:53:55 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2e000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 158.444192][T21181] loop4: detected capacity change from 0 to 87 [ 158.515229][T21190] loop5: detected capacity change from 0 to 264192 [ 158.532294][T21173] attempt to access beyond end of device [ 158.532294][T21173] loop2: rw=2049, want=96, limit=87 [ 158.552072][T21190] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 158.564503][T21173] attempt to access beyond end of device [ 158.564503][T21173] loop2: rw=2049, want=104, limit=87 [ 158.601702][T21190] EXT4-fs (loop5): orphan cleanup on readonly fs [ 158.608217][T21190] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 158.619132][T21190] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.646221][ T2125] attempt to access beyond end of device [ 158.646221][ T2125] loop2: rw=1, want=98, limit=87 [ 158.656731][ T2125] Buffer I/O error on dev loop2, logical block 48, lost async page write [ 158.675047][ T2125] attempt to access beyond end of device [ 158.675047][ T2125] loop2: rw=1, want=100, limit=87 [ 158.685625][ T2125] Buffer I/O error on dev loop2, logical block 49, lost async page write 18:53:55 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {r3}, {r2}, {}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000545c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000555c0)={0x0, 0x0, "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", "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"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r11}, {r10}, {r10}, {r10, r11}, {}, {}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {}, {}, {r9, r11}, {r10}, {}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {r9}, {}, {r10}, {r9}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10}, {r9, r11}, {}, {r9}, {}, {}, {0x0, r11}, {}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r10}, {}, {}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {}, {}, {0x0, r11}, {}, {r9}, {0x0, r11}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r9}, {r9, r11}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10}, {}, {r9, r11}, {r9}, {r10, r11}, {}, {r9}, {r9, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10, r11}, {}, {}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {}, {r10, r11}, {r10}, {}, {0x0, r11}, {r9}, {0x0, r11}, {r10, r11}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {r10, r11}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {r9}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {r10}, {r9, r11}, {r9, r11}, {0x0, r11}, {0x0, r11}, {}, {}, {0x0, r11}, {r10}, {r9}, {}, {r9}, {r10}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r9, r11}, {r10}, {r10, r11}, {}, {r10}, {r9}, {}, {r9, r11}, {r10}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {r10}, {r10}, {}, {}, {r10}, {0x0, r11}, {0x0, r11}, {}, {r9}, {}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {r9}, {0x0, r11}, {r9}, {0x0, r11}, {r9, r11}, {r10, r11}, {r10}, {r9, r11}, {}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10}, {r10}, {r9}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {r9, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000565c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r5, r6}, {}, {}, {}, {r10}], 0xe0, "a9ea90eff8f7ee"}) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:55 executing program 4: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r0, @ANYRESHEX=r0], 0x12) 18:53:55 executing program 2: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x2) fcntl$setstatus(r1, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x80000001, 0x9}) open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x2) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) chdir(&(0x7f00000001c0)='./bus\x00') 18:53:55 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x32000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 158.716729][ T2125] attempt to access beyond end of device [ 158.716729][ T2125] loop2: rw=1, want=102, limit=87 [ 158.727360][ T2125] Buffer I/O error on dev loop2, logical block 50, lost async page write [ 158.813919][T21215] loop2: detected capacity change from 0 to 87 [ 158.822059][T21214] loop5: detected capacity change from 0 to 264192 [ 158.828206][T21220] loop0: detected capacity change from 0 to 87 [ 158.850314][ C1] sd 0:0:1:0: tag#4511 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 18:53:56 executing program 4: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r0, @ANYRESHEX=r0], 0x12) [ 158.860172][ C1] sd 0:0:1:0: tag#4511 CDB: opcode=0xe5 (vendor) [ 158.866565][ C1] sd 0:0:1:0: tag#4511 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 158.875583][ C1] sd 0:0:1:0: tag#4511 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 158.884624][ C1] sd 0:0:1:0: tag#4511 CDB[20]: ba 18:53:56 executing program 4: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r0, @ANYRESHEX=r0], 0x12) 18:53:56 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 158.984104][T21214] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 159.002433][T21230] attempt to access beyond end of device [ 159.002433][T21230] loop0: rw=0, want=90, limit=87 18:53:56 executing program 4: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:56 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {r3}, {r2}, {}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000545c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000555c0)={0x0, 0x0, "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", "2733ad52ce458d479a998a9b98bfa500c4adce1f6478a39231c48621bf318151b01a01794f9a60509bac9da98fc12a8e2d85632120e5f4d9d21fdb26fd81a4a62e1b3bbde62abe3970f0a6b61986cb590a8ae4fae1fbb4aecc5d3af271919ccfe10a3329b062cef4309a3d29c50dd9dee11536f1f2605919f51419f277ae9a8c2066d9e8235323b269ab6c0abc113d6b2f17be3fbfb31aa586f9258bc3bb4d4e6b5feb8114c675f2466f52d73a4c7206d16a91e0f28667bffeef270aae0d5d53edc0b791d0a2568c7d37f85474fa27929ebac7df469e2c334800af76cdcceb4915af045f77589c90caacde4922d286705289effe4ca893efd5d266bef65436a8c765f991f68c0e81533f55811ffa4b3c35215af225582a197e9732f659f28ce766be315cdd00055c54df228a65f577757b4e6b8af9540b0707dffb81ff6d31528a707b407c79e60c19fd075601a991c888b2122f9cd76174d112f4facd0fb4f4823aa617fd0736668126f3cd4a189802b96f8e84e42c3f5932dc2e5b7f13fac392a9f99f1426383af225eb64c32a80127af1e9c8102597d4105ae056493f7353647be5d207c623f307a73210e8b305eb43c2be0c24b8ddea9a3560be1380fcdfaee24c795efd0188d0f8d9df0221329f4484cb003973acf19700aaa564e5b6a4487cebb8250a31d5ee8148eb85ace4da1b21ea922749d3f6d749ec531eb0e7ef627b367636f61a2e6fdbcc1c3e046e26a3278ed2efd99f7ff33f1e257662ccc407b7b863a89eaa7853b527a5b4552fcb46cb6e667befc5cdf82754922bf9f796686757889bf720754962665c28feb0bb0238acf4786372440bf8dfd4acd7bab8fc3505e1752a1efb0d5cad8cb9721079a250590a8fa199672b0748b2fecc6a491dbbe8dd1e457ddb06d085bd1daaa22749f6ca198409ff0a5ace4be9e668d1ae2eb5aed0f3cf5f08c4b711f9dd15997ede4976c6cdbb75ef514199a4a28482e7f577eb6e6ef3ac0d85d75e25cbec5edef4e5d33fd9b716f79ceaeb518e9cad53061d6cef535c25169d040a67b6a151e6bb07bcaa6c40afb8cf130c0ba6d3fa4f3a07a3fe599c3c1a65292127a090b7b959f45c28fd9db5191e97e57a299b575ce75bb95f7546651cb6ec9392209ef56a7ecf96fe02d5d2f278022bf4719f9e447b4b2be5be187f9079d6707764b16a4a205765a4312fe6f547af215cb05fa77820fcc9a38086e4c683607afecef713efda56282a3a9f439c934052077f45597637d3ad370b95fdee474e92ada87641e5978845e2312a4d85ba0152842a4efd2d97c53747936b16190861254d927731596141e54ba75543301ab8b1df0991091cb8846073cd0322f715440ee4bc3a873c5683fcd09bae4ddfeab333de39c6b0f187ee84e86512f2091c884eaf7b0faf2744f0e67c14eb3036707d5b54a729f5b561a0d9c3718f33b6600124f4bfacbe3e12f813c7b73687d64fc5e834a79d6f659ba66dbb26fe258611f776e79c5c3b9ce0b25bf2d22137fd1c6191f778d7423ee66a87bc0834aac073c1eeb1a15579ba6566de532f920e56da662a8f274ca0ccc656ce9c9a4c5e56d014cc60601f854a9fafcfb97c1f06d805a186f1619abb1ba793bad1c9e4189752bae6065cae11a042a5392926d163f6159ce0bda7a00caa4cef10e1d9529f96e7205d7b83db0aff6644b9afaa06af2112e735d1244c302d8f66225a76c551518cc8456a51190bab6d128ff015676b4dfe5df70db02684a4f83f611b15188953af6f705189dceefae8520708f2651c4dd7687234184dbdddddf3c0da4c73f3f5ed8277386940a8d3fed766a77fe77e85f7faa5c6794293b4b5fd6682ba64430caeaeebb421067c644b6fe547733cf5c271fd49058449af42ba4ca1af4ff737d40127c94899c9bdfe45a314f3fcb7ec7ad37fcd94849ba4b3c1086537ef6bad7480fb8dcb1fde05fac1237fcb3a50657cedb68ff5fcb77b6da6580e45ffe23bbdc59834a78f560539eb3d91bca69cd690997eae57a6fbf38ceb6d8bf841a661ddcc8613456f11ea2c02b2944211bf47e746087c0dda2b532bfc30e83a358fcc32828ce504c8383c0a83b7915cf9ba62e491dfcfc5b0ab8f427f1a499a851355b39b910ba083f20c1c2c3d229245629d445402f49a9f860985bf1f9a9b73087f25affcb504ac49a61f1fc23f672f90a30dad9e6180ca735c60575e4b34aaa1de94c906de6101007fea38b2ce013108432dbfe18d257ad2f80453cf584b596546124bbfacc4143371f432a0c9b69a7f2da8525c7b71718e7f1f9f1f668683306e4c7bf7748c4143dab6acd4d01c6d7742fd3a683034688f44a1a12edea5ca5fd77774649d2b5237545c1f014be06637e0581f5690ad7ed294eca372fa9af0515d4a52872f50ad20b559f2c9c0ba8b50fd3c43f7153b9210deb183d14f2f8e6f1618fb1269dc2d6075f3dacce965593c67d1d4097d469f8354e39e3d885b401151b59f78e62c73c14bd2e8b9436f6be8096a4f7b4eb240909d590b3d1ffbe5e4f98465b17d7875aa8670ca79cf44a1222a910ce4cdd951dc773686411cb52d80e130d6f308b39ad51fca72e64e609b16efdcf2c1138f8885a5772a99cde419ba5bf39d2f32160168cce0565bd74ab176b21d7abdf4c511d2114fe8f37a16298d751a2ac995e5b119627df706c6e56d02b5664620beedcfd5f790b412568b80b183f0ac251c513be5f48f10867551e2c0224874bd69227401790ea9c1b19ad89e0ce27fe89f2a763cd1da8fb866f752ddcb31ca1f1cb3ec52d376615700b02638c47d38d0c23519980a9fd4029d897ff3eb03ce8a086594a9cd1c4be911e94795f92c6a09b00d9da4bd3f212ffa2ff817a2eb334ecf8c27674d363f74b18515cdc5d6f162c1bec42bbda00b9f8030bb2ccb3f8de2bf57a3c9d582a0b2b305d36d55ad1ef1e996128ee7faed179e16709064730fa5b8b95e29179ee4bc81d474f1c98a6efd61968294a1d1b44c2b1247b7ffaff592cad29c0bee8c00f1f64b53309b611a2fc2a00eb8f13011275aa9a6cd9b22b98c4a5f590e7abadc423a70874c977f6c2582bfee4ec02f4283148793c4df42d2394b972333e9475f69d2cfb728d26e0721827e55e5f6acae72774b1a06465f3efa5910b9f65b70f9f63fea27c02947293eac5ef6c609804a32736d276836ffe668052bc45e39abcdb3a867e9566a5f676cb55a9ce805ec1e97ca782128ed1983fbb62fe0329161b21ccaeb815561f473629e7cacdcc04000002f3cd5120909cd069d53cea2dd40715bce0e9fd145c751f6bfedb719bcb04f89170d413b3f2ab69c38881a667285387673df28c14503ebf5d22c7ba9fc0057272becbd7d5c1806bdb0a12720eeac0fd44810f6403c6460720b407d227bb905cf35986d7dc2a746e809137d86ee77712edd882a87fd7116c23fe43478d8eda02aa3d687762989407fb50b4493c5eac80f672e42eeb77d7205504cfff01440a236b383466a454d2bfce693516634de9f2988a0d88f217128d3e00b2a1b735376bfdcadecdd277068e72c7b33ee57be93a1bdf41faa58e22503b94010b9ee4a3243048a280b9edf1cd08f2a5c16f7aeaecf32a3162d0a6c0122252d6bb10c201a18131cc94d862c148f168acf8052229700b155759a9041d98f3bb7ebd942b1430fe44e028bd41452595c53968436089a60735fa23b68a93367a9d52dd8a593b533a66bf6caac7951bb81f993c9e03c7409ad41ba83534d7bc77b74cde4c0fa4c8f04033dc27fc94720caaf0952a51b6cb9d40905c32ae1992f7e1ca16480dc8f10454d198efb0c16cf7b9d0e4c17bda921ff17c750019787a11637a0e5657a37f421aee5429dad103dd7ec58ee7c1431998106b4e1cb607ded9df54c42964606fad32e6e73b2dafd7233391aa5d54f95b13064f9845c9395eba61acaf41d9941a72951b8feed2b1c709add73f9004eb30413bcb2fb7aa6009e4fe41052c3a521251a4ca95c8d49675b33df23c72206175a033bddf395af6ac0ee0c50d8009d540b6ed8beac9976aadebb001625841064eb76cda56dea3c8107b4f83c9c71549f64d894888f54eba5ea968908be3957b07f1e28c158bf1fdbf0382dd65309e03ca3468254c38c2053181b4917aa2532551b9da4d5838ad1c0060d81c9c503f4a583c6154545eee17dd2b8998214eab95303ef6d0f5f92e601e9fbf6460a4c6fe5d50ebc952469075438433d578e92744f7f0518ee21a7fe201c7d540fd3a782e36731ef847689124887011b7b3bba0875e383fdb66be4c99d3d5667b1f392767a3988b7da220d9c124af6eaae90dee6a9a8d66c3f707c60306cbc9acd883aa38467885926f848a5a3e732a04b453162cfaac6f3dccbceb51d47675efa961a98c6f307f0190463fd96973c21faa796933f12ff8d83168fbe79641ecbb9056fb75369769fd9444d070c1032100f334a1f23d107efc292fb560eca17013b14df5470c49ce7764785d3aff17a07ad2876a0e0eef9bc1ce50565b08fcf0722595c6841396aa030a998dc2a1c59a306ffcd9d5518e36950adee224827a8e57127a79fecfa6fe638bcd8e4a183e28fbf2746c1789217c840e971e4cfcfad10221888df03548343db6eebee1feacb86a7b5ef133cb87037b3ae572342c7a3a380fc184a18bb319c8cb177fb9818da64b3c9b03b9879514f08dbb9953d298296d0130a16dbcb57bbafdd1d8c9d075914884a9c6b3c066e3c3bf258c59341dc7fe3e28c375ca2d934668ea6cb2850808103d0e6b04af65800747598f9e83db207161841d73b6863b88c7141ab2e144192c5b95323bc6625289a54eb4da65cf54363d2d96c453e1eb14b4fdb63b142aa3ac85d1bf6ae73ff7ada0bf7f0949efecbdfaec6caac4ec7b768b65cb0446b8fe62ca769c154b8070f0e1ae51ae4df15963f77546d022ead6bf8a599940cdeb1b0a4ab7f581f0b23303ff8dcb4d4dab0b8e2c9078365bf146c8ccc09c5fdeb19c5bb474addfaa0f858c7663facf42c6b954cabaa959702cdb67ca190d5f5fa6025b76ab56c4d082941fb1f9879e4930f216f00389510a736e77472e30ece8166da2563875995e1e445dc56dc3da81a5c69e830cc80d26df6f2b3c504a14c955c58ba9dea011be0a08f9f4b5843087fb73275954761ead2ae32238212ab44de276097f4ffeb8011d5a32809d17218ebaf0f1aff5dd78a44c04b21e2f98e34d8fc40889435a9170b31fb7c1905f8aa19a0a4d1e3f6e1eab563197f3e088e87d1c0f972764205ddabdc4bcef774d514633749eb9c5ebd2bca57e1535b22f22a17ef25ca8a97783f0a1d6ffef4fba75e23dfecc583ffef1cbcf39978c4cb8ca64ee15ee1596ae7715f7c31519232ba55cdf23c1e18b08c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r11}, {r10}, {r10}, {r10, r11}, {}, {}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {}, {}, {r9, r11}, {r10}, {}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {r9}, {}, {r10}, {r9}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10}, {r9, r11}, {}, {r9}, {}, {}, {0x0, r11}, {}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r10}, {}, {}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {}, {}, {0x0, r11}, {}, {r9}, {0x0, r11}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r9}, {r9, r11}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10}, {}, {r9, r11}, {r9}, {r10, r11}, {}, {r9}, {r9, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10, r11}, {}, {}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {}, {r10, r11}, {r10}, {}, {0x0, r11}, {r9}, {0x0, r11}, {r10, r11}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {r10, r11}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {r9}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {r10}, {r9, r11}, {r9, r11}, {0x0, r11}, {0x0, r11}, {}, {}, {0x0, r11}, {r10}, {r9}, {}, {r9}, {r10}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r9, r11}, {r10}, {r10, r11}, {}, {r10}, {r9}, {}, {r9, r11}, {r10}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {r10}, {r10}, {}, {}, {r10}, {0x0, r11}, {0x0, r11}, {}, {r9}, {}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {r9}, {0x0, r11}, {r9}, {0x0, r11}, {r9, r11}, {r10, r11}, {r10}, {r9, r11}, {}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10}, {r10}, {r9}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {r9, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000565c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r5, r6}, {}, {}, {}, {r10}], 0xe0, "a9ea90eff8f7ee"}) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:53:56 executing program 2: r0 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040805090000000066617400040409000200027400f801", 0x17, 0xfffffffffffffffc}], 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES16=r0, @ANYRES16, @ANYBLOB="b1cbfa34f731d54d29760b05b206ef0dca9e2cbb084ff198de390f32d7759eb1562cebc91cc9455d73abb68ca18a51fd9aee3c5d258e472112a3f180be95ee390999d31e968cf3ffb8e48f26ca58a4816a6909", @ANYRES16=0x0, @ANYBLOB="330760c440d2cef345881bcbca7066a4f29595ab68e92adf5018e6bb73e43b7c81ba0a7301ad86ffa06d5a00338731e2cfb6f74be3dc3580055b5e58ad00c54ca5a32cfe2c2f0150b5", @ANYRESHEX=r0, @ANYRES16=r0]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./file1\x00', 0x41) unlinkat(r1, &(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x100902, 0x2) lseek(r2, 0x1200, 0x0) socket(0x12, 0x1, 0x7f) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x62, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e20, 0x1, 'sed\x00', 0x0, 0x8, 0x6f}, 0x2c) [ 159.062458][T21214] EXT4-fs (loop5): orphan cleanup on readonly fs [ 159.068841][T21214] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 159.079701][T21214] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.123944][T21245] loop1: detected capacity change from 0 to 87 [ 159.133073][T21248] loop4: detected capacity change from 0 to 87 [ 159.199151][T21263] loop0: detected capacity change from 0 to 87 [ 159.202341][T21262] loop2: detected capacity change from 0 to 16383 [ 159.225245][ C0] sd 0:0:1:0: tag#4512 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 159.235119][ C0] sd 0:0:1:0: tag#4512 CDB: opcode=0xe5 (vendor) 18:53:56 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3e030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 159.241473][ C0] sd 0:0:1:0: tag#4512 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 159.244196][T21262] FAT-fs (loop2): bogus number of reserved sectors [ 159.250531][ C0] sd 0:0:1:0: tag#4512 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 159.257074][T21262] FAT-fs (loop2): Can't find a valid FAT filesystem [ 159.266144][ C0] sd 0:0:1:0: tag#4512 CDB[20]: ba 18:53:56 executing program 4: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:56 executing program 0: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r4}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r2, r4}, {}, {r2}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {r3}, {r2}, {}, {r2, r4}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {r2}, {0x0, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000545c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000555c0)={0x0, 0x0, "16f62e29292f1b3203263bb2d25a959358a60765ea8e8451bb7cdd8b3eac931d554eedeab4c7e3682333d7e1d830d74ad1b3d178eed082ef280144b15df034ea3f836215f94bcd14c7076fd9612038eb5df04a9df5575e20a2a41775a7eef06c3b45af6da811e2e77d0b7b2111faeab8f8722442f0960b48a7a2099a0b8373ac0f71bb7cb6de31f046c392a8ba38483c0fdf18efd20b3b8ec8d27b59467e3f75d58e1569f228ac8737a9719a7f05f9b5800e1af0fb6029d95ee3127172ebded0f543d278cb819609b679514e3a378f72bdfb3d3f5f65af341f12c5c79bd3746fa094011ef3eb091d11fdcb6a415a8661a6ff438ab0ad3c7837e6f85dffdee1cc", "2733ad52ce458d479a998a9b98bfa500c4adce1f6478a39231c48621bf318151b01a01794f9a60509bac9da98fc12a8e2d85632120e5f4d9d21fdb26fd81a4a62e1b3bbde62abe3970f0a6b61986cb590a8ae4fae1fbb4aecc5d3af271919ccfe10a3329b062cef4309a3d29c50dd9dee11536f1f2605919f51419f277ae9a8c2066d9e8235323b269ab6c0abc113d6b2f17be3fbfb31aa586f9258bc3bb4d4e6b5feb8114c675f2466f52d73a4c7206d16a91e0f28667bffeef270aae0d5d53edc0b791d0a2568c7d37f85474fa27929ebac7df469e2c334800af76cdcceb4915af045f77589c90caacde4922d286705289effe4ca893efd5d266bef65436a8c765f991f68c0e81533f55811ffa4b3c35215af225582a197e9732f659f28ce766be315cdd00055c54df228a65f577757b4e6b8af9540b0707dffb81ff6d31528a707b407c79e60c19fd075601a991c888b2122f9cd76174d112f4facd0fb4f4823aa617fd0736668126f3cd4a189802b96f8e84e42c3f5932dc2e5b7f13fac392a9f99f1426383af225eb64c32a80127af1e9c8102597d4105ae056493f7353647be5d207c623f307a73210e8b305eb43c2be0c24b8ddea9a3560be1380fcdfaee24c795efd0188d0f8d9df0221329f4484cb003973acf19700aaa564e5b6a4487cebb8250a31d5ee8148eb85ace4da1b21ea922749d3f6d749ec531eb0e7ef627b367636f61a2e6fdbcc1c3e046e26a3278ed2efd99f7ff33f1e257662ccc407b7b863a89eaa7853b527a5b4552fcb46cb6e667befc5cdf82754922bf9f796686757889bf720754962665c28feb0bb0238acf4786372440bf8dfd4acd7bab8fc3505e1752a1efb0d5cad8cb9721079a250590a8fa199672b0748b2fecc6a491dbbe8dd1e457ddb06d085bd1daaa22749f6ca198409ff0a5ace4be9e668d1ae2eb5aed0f3cf5f08c4b711f9dd15997ede4976c6cdbb75ef514199a4a28482e7f577eb6e6ef3ac0d85d75e25cbec5edef4e5d33fd9b716f79ceaeb518e9cad53061d6cef535c25169d040a67b6a151e6bb07bcaa6c40afb8cf130c0ba6d3fa4f3a07a3fe599c3c1a65292127a090b7b959f45c28fd9db5191e97e57a299b575ce75bb95f7546651cb6ec9392209ef56a7ecf96fe02d5d2f278022bf4719f9e447b4b2be5be187f9079d6707764b16a4a205765a4312fe6f547af215cb05fa77820fcc9a38086e4c683607afecef713efda56282a3a9f439c934052077f45597637d3ad370b95fdee474e92ada87641e5978845e2312a4d85ba0152842a4efd2d97c53747936b16190861254d927731596141e54ba75543301ab8b1df0991091cb8846073cd0322f715440ee4bc3a873c5683fcd09bae4ddfeab333de39c6b0f187ee84e86512f2091c884eaf7b0faf2744f0e67c14eb3036707d5b54a729f5b561a0d9c3718f33b6600124f4bfacbe3e12f813c7b73687d64fc5e834a79d6f659ba66dbb26fe258611f776e79c5c3b9ce0b25bf2d22137fd1c6191f778d7423ee66a87bc0834aac073c1eeb1a15579ba6566de532f920e56da662a8f274ca0ccc656ce9c9a4c5e56d014cc60601f854a9fafcfb97c1f06d805a186f1619abb1ba793bad1c9e4189752bae6065cae11a042a5392926d163f6159ce0bda7a00caa4cef10e1d9529f96e7205d7b83db0aff6644b9afaa06af2112e735d1244c302d8f66225a76c551518cc8456a51190bab6d128ff015676b4dfe5df70db02684a4f83f611b15188953af6f705189dceefae8520708f2651c4dd7687234184dbdddddf3c0da4c73f3f5ed8277386940a8d3fed766a77fe77e85f7faa5c6794293b4b5fd6682ba64430caeaeebb421067c644b6fe547733cf5c271fd49058449af42ba4ca1af4ff737d40127c94899c9bdfe45a314f3fcb7ec7ad37fcd94849ba4b3c1086537ef6bad7480fb8dcb1fde05fac1237fcb3a50657cedb68ff5fcb77b6da6580e45ffe23bbdc59834a78f560539eb3d91bca69cd690997eae57a6fbf38ceb6d8bf841a661ddcc8613456f11ea2c02b2944211bf47e746087c0dda2b532bfc30e83a358fcc32828ce504c8383c0a83b7915cf9ba62e491dfcfc5b0ab8f427f1a499a851355b39b910ba083f20c1c2c3d229245629d445402f49a9f860985bf1f9a9b73087f25affcb504ac49a61f1fc23f672f90a30dad9e6180ca735c60575e4b34aaa1de94c906de6101007fea38b2ce013108432dbfe18d257ad2f80453cf584b596546124bbfacc4143371f432a0c9b69a7f2da8525c7b71718e7f1f9f1f668683306e4c7bf7748c4143dab6acd4d01c6d7742fd3a683034688f44a1a12edea5ca5fd77774649d2b5237545c1f014be06637e0581f5690ad7ed294eca372fa9af0515d4a52872f50ad20b559f2c9c0ba8b50fd3c43f7153b9210deb183d14f2f8e6f1618fb1269dc2d6075f3dacce965593c67d1d4097d469f8354e39e3d885b401151b59f78e62c73c14bd2e8b9436f6be8096a4f7b4eb240909d590b3d1ffbe5e4f98465b17d7875aa8670ca79cf44a1222a910ce4cdd951dc773686411cb52d80e130d6f308b39ad51fca72e64e609b16efdcf2c1138f8885a5772a99cde419ba5bf39d2f32160168cce0565bd74ab176b21d7abdf4c511d2114fe8f37a16298d751a2ac995e5b119627df706c6e56d02b5664620beedcfd5f790b412568b80b183f0ac251c513be5f48f10867551e2c0224874bd69227401790ea9c1b19ad89e0ce27fe89f2a763cd1da8fb866f752ddcb31ca1f1cb3ec52d376615700b02638c47d38d0c23519980a9fd4029d897ff3eb03ce8a086594a9cd1c4be911e94795f92c6a09b00d9da4bd3f212ffa2ff817a2eb334ecf8c27674d363f74b18515cdc5d6f162c1bec42bbda00b9f8030bb2ccb3f8de2bf57a3c9d582a0b2b305d36d55ad1ef1e996128ee7faed179e16709064730fa5b8b95e29179ee4bc81d474f1c98a6efd61968294a1d1b44c2b1247b7ffaff592cad29c0bee8c00f1f64b53309b611a2fc2a00eb8f13011275aa9a6cd9b22b98c4a5f590e7abadc423a70874c977f6c2582bfee4ec02f4283148793c4df42d2394b972333e9475f69d2cfb728d26e0721827e55e5f6acae72774b1a06465f3efa5910b9f65b70f9f63fea27c02947293eac5ef6c609804a32736d276836ffe668052bc45e39abcdb3a867e9566a5f676cb55a9ce805ec1e97ca782128ed1983fbb62fe0329161b21ccaeb815561f473629e7cacdcc04000002f3cd5120909cd069d53cea2dd40715bce0e9fd145c751f6bfedb719bcb04f89170d413b3f2ab69c38881a667285387673df28c14503ebf5d22c7ba9fc0057272becbd7d5c1806bdb0a12720eeac0fd44810f6403c6460720b407d227bb905cf35986d7dc2a746e809137d86ee77712edd882a87fd7116c23fe43478d8eda02aa3d687762989407fb50b4493c5eac80f672e42eeb77d7205504cfff01440a236b383466a454d2bfce693516634de9f2988a0d88f217128d3e00b2a1b735376bfdcadecdd277068e72c7b33ee57be93a1bdf41faa58e22503b94010b9ee4a3243048a280b9edf1cd08f2a5c16f7aeaecf32a3162d0a6c0122252d6bb10c201a18131cc94d862c148f168acf8052229700b155759a9041d98f3bb7ebd942b1430fe44e028bd41452595c53968436089a60735fa23b68a93367a9d52dd8a593b533a66bf6caac7951bb81f993c9e03c7409ad41ba83534d7bc77b74cde4c0fa4c8f04033dc27fc94720caaf0952a51b6cb9d40905c32ae1992f7e1ca16480dc8f10454d198efb0c16cf7b9d0e4c17bda921ff17c750019787a11637a0e5657a37f421aee5429dad103dd7ec58ee7c1431998106b4e1cb607ded9df54c42964606fad32e6e73b2dafd7233391aa5d54f95b13064f9845c9395eba61acaf41d9941a72951b8feed2b1c709add73f9004eb30413bcb2fb7aa6009e4fe41052c3a521251a4ca95c8d49675b33df23c72206175a033bddf395af6ac0ee0c50d8009d540b6ed8beac9976aadebb001625841064eb76cda56dea3c8107b4f83c9c71549f64d894888f54eba5ea968908be3957b07f1e28c158bf1fdbf0382dd65309e03ca3468254c38c2053181b4917aa2532551b9da4d5838ad1c0060d81c9c503f4a583c6154545eee17dd2b8998214eab95303ef6d0f5f92e601e9fbf6460a4c6fe5d50ebc952469075438433d578e92744f7f0518ee21a7fe201c7d540fd3a782e36731ef847689124887011b7b3bba0875e383fdb66be4c99d3d5667b1f392767a3988b7da220d9c124af6eaae90dee6a9a8d66c3f707c60306cbc9acd883aa38467885926f848a5a3e732a04b453162cfaac6f3dccbceb51d47675efa961a98c6f307f0190463fd96973c21faa796933f12ff8d83168fbe79641ecbb9056fb75369769fd9444d070c1032100f334a1f23d107efc292fb560eca17013b14df5470c49ce7764785d3aff17a07ad2876a0e0eef9bc1ce50565b08fcf0722595c6841396aa030a998dc2a1c59a306ffcd9d5518e36950adee224827a8e57127a79fecfa6fe638bcd8e4a183e28fbf2746c1789217c840e971e4cfcfad10221888df03548343db6eebee1feacb86a7b5ef133cb87037b3ae572342c7a3a380fc184a18bb319c8cb177fb9818da64b3c9b03b9879514f08dbb9953d298296d0130a16dbcb57bbafdd1d8c9d075914884a9c6b3c066e3c3bf258c59341dc7fe3e28c375ca2d934668ea6cb2850808103d0e6b04af65800747598f9e83db207161841d73b6863b88c7141ab2e144192c5b95323bc6625289a54eb4da65cf54363d2d96c453e1eb14b4fdb63b142aa3ac85d1bf6ae73ff7ada0bf7f0949efecbdfaec6caac4ec7b768b65cb0446b8fe62ca769c154b8070f0e1ae51ae4df15963f77546d022ead6bf8a599940cdeb1b0a4ab7f581f0b23303ff8dcb4d4dab0b8e2c9078365bf146c8ccc09c5fdeb19c5bb474addfaa0f858c7663facf42c6b954cabaa959702cdb67ca190d5f5fa6025b76ab56c4d082941fb1f9879e4930f216f00389510a736e77472e30ece8166da2563875995e1e445dc56dc3da81a5c69e830cc80d26df6f2b3c504a14c955c58ba9dea011be0a08f9f4b5843087fb73275954761ead2ae32238212ab44de276097f4ffeb8011d5a32809d17218ebaf0f1aff5dd78a44c04b21e2f98e34d8fc40889435a9170b31fb7c1905f8aa19a0a4d1e3f6e1eab563197f3e088e87d1c0f972764205ddabdc4bcef774d514633749eb9c5ebd2bca57e1535b22f22a17ef25ca8a97783f0a1d6ffef4fba75e23dfecc583ffef1cbcf39978c4cb8ca64ee15ee1596ae7715f7c31519232ba55cdf23c1e18b08c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r11}, {r10}, {r10}, {r10, r11}, {}, {}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {}, {}, {r9, r11}, {r10}, {}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {r9}, {}, {r10}, {r9}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10}, {r9, r11}, {}, {r9}, {}, {}, {0x0, r11}, {}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r10}, {}, {}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {}, {}, {0x0, r11}, {}, {r9}, {0x0, r11}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r9}, {r9, r11}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10}, {}, {r9, r11}, {r9}, {r10, r11}, {}, {r9}, {r9, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10, r11}, {}, {}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {}, {r10, r11}, {r10}, {}, {0x0, r11}, {r9}, {0x0, r11}, {r10, r11}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {r10, r11}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {r9}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {r10}, {r9, r11}, {r9, r11}, {0x0, r11}, {0x0, r11}, {}, {}, {0x0, r11}, {r10}, {r9}, {}, {r9}, {r10}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r9, r11}, {r10}, {r10, r11}, {}, {r10}, {r9}, {}, {r9, r11}, {r10}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {r10}, {r10}, {}, {}, {r10}, {0x0, r11}, {0x0, r11}, {}, {r9}, {}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {r9}, {0x0, r11}, {r9}, {0x0, r11}, {r9, r11}, {r10, r11}, {r10}, {r9, r11}, {}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10}, {r10}, {r9}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {r9, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000565c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r5, r6}, {}, {}, {}, {r10}], 0xe0, "a9ea90eff8f7ee"}) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 159.322034][T21263] attempt to access beyond end of device [ 159.322034][T21263] loop0: rw=0, want=90, limit=87 [ 159.338151][T21263] attempt to access beyond end of device [ 159.338151][T21263] loop0: rw=0, want=90, limit=87 [ 159.350206][T21276] loop5: detected capacity change from 0 to 264192 [ 159.361839][T21276] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 159.386624][T21262] loop2: detected capacity change from 0 to 16383 [ 159.394993][T21276] EXT4-fs (loop5): orphan cleanup on readonly fs [ 159.398022][T21290] loop4: detected capacity change from 0 to 87 [ 159.401377][T21276] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 159.418350][T21276] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:56 executing program 4: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 159.431914][T21262] FAT-fs (loop2): bogus number of reserved sectors [ 159.438453][T21262] FAT-fs (loop2): Can't find a valid FAT filesystem [ 159.455209][T21289] loop0: detected capacity change from 0 to 87 [ 159.468975][ C1] sd 0:0:1:0: tag#4513 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 159.478846][ C1] sd 0:0:1:0: tag#4513 CDB: opcode=0xe5 (vendor) 18:53:56 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002c00)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000380)=""/248, 0xf8}], 0x1, &(0x7f0000002d80)=ANY=[@ANYBLOB="1c009fc9000000000100040002000000d2fb9723de9cf46a2c788c02ab22365a370afadb9f86db294a8eca83e79f07355f14a6ddffe962550630b5684af6266f9e1288b13a802b05dd006982324d753f99df85b10d0b7db4578fe7594105613f38b35d720cc70336aa691466f350b76a32098e76ad7c96a11d9efa28be92be57a49f903a7a6e2c30c410844a17e98cf174796d3603d559d4fd479a4793ff9e35f08d47bcb6b5bddcaed1a427387ea47ba4d2351ef28928cc87d4b35fd00a20a0a5ef2af9c460daf08217035dce4774c02946e119", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x70}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000640)=""/113, 0x71}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f0000000980)=""/175, 0xaf}, {&(0x7f0000000a40)=""/130, 0x82}, {&(0x7f0000000b00)=""/138, 0x8a}], 0x4, &(0x7f0000000c00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000d40)=""/236, 0xec}, {&(0x7f0000000e40)=""/227, 0xe3}, {&(0x7f0000000f40)=""/130, 0x82}, {&(0x7f0000001000)=""/100, 0x64}, {&(0x7f0000001080)=""/71, 0x47}, {&(0x7f0000001100)=""/200, 0xc8}, {&(0x7f0000001200)=""/29, 0x1d}, {&(0x7f0000001240)=""/229, 0xe5}, {&(0x7f0000001340)=""/242, 0xf2}], 0x9}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000001580)=""/63, 0x3f}, {&(0x7f00000015c0)=""/157, 0x9d}, {&(0x7f0000001680)=""/200, 0xc8}, {&(0x7f0000001780)=""/210, 0xd2}, {&(0x7f0000001880)=""/49, 0x31}, {&(0x7f00000018c0)=""/101, 0x65}, {&(0x7f0000001940)=""/215, 0xd7}, {&(0x7f0000001a40)=""/47, 0x2f}, {&(0x7f0000001a80)=""/131, 0x83}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0xa}}], 0x5, 0x2, &(0x7f0000002d40)={0x77359400}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000240)) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESOCT=r0], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) [ 159.485175][ C1] sd 0:0:1:0: tag#4513 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 159.494223][ C1] sd 0:0:1:0: tag#4513 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 159.503270][ C1] sd 0:0:1:0: tag#4513 CDB[20]: ba 18:53:56 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) write$P9_RSTATu(r2, &(0x7f0000000400)={0x15c, 0x7d, 0x2, {{0x0, 0x3f, 0x2, 0x725df1fc, {0x0, 0x1, 0x3}, 0x42040000, 0x8, 0x1b8, 0x100000001, 0x6, 'msdos\x00', 0x0, '', 0x6, 'msdos\x00'}, 0x108, 'msdos\x00\xb7\x953\x05\xbd\x93\\\x8bNy\xcb\xdf\xba\x02\x82&\xfb\x18\x80\x9d\x9c\xd0\xba8Z\x1dBm\x80X\x8ei\x83\xd2\xda3}Z\x96\xfe\xf9ay\\UR\xbe\xdc\x95C\xf9\xe4e/\xca\xbdT\x15\xc3\xdd\fW\xc6\xa6l\xc8s\xec\x9ah\xef\aN\xaf\x88\\\xf8)\x86\xebDo\x95cO\xda\xd5\xa5\xbd\x80@\x1d\x974\xc9\xcbKP\xd9M\xdd\xa7\x9eZ\xed\xda\x84~es`\x0e\xa5(c\xd7\xa2\xfa *\xe9\xae\xf2\xa3\x00\xe7q\x0ej\x95\x12W\x8b[\xbcLU\xcd\xa8!\x15&\x01\xeay#\xcf\xf9\xfeOk`L\xd4\xcc\xa6\x1a\xd5\xe5\x1f\x01\xed\xb0\x8b*F\xf6\xa4\xb9\x86j\xaa\xea\v\xca\x91\x17<\x7f\xaev\xb2/_\x12\xa4>\x1d(j6\xb5\xe6\x9f\xd3\x93ee\x96 \xaaZ\xe3\b\x00\xb0\xfc\b\x9d\xe4$\x8f\x84\x1c\x93\xb9.\xda\xad\xcew\x1aM\xbeF2\x03\xac\x94\x111B\x03\x19~\x11\xa4\x05S\xff$\xf0\x91\x88\xcfx\xc6\x91]\x99\xa8\x95c\x18V\x1c~r', r3, r6, r5}}, 0x15c) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r7, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:56 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3f000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:56 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 159.569765][T21306] loop4: detected capacity change from 0 to 87 [ 159.576889][T21309] loop2: detected capacity change from 0 to 87 [ 159.626807][T21321] loop0: detected capacity change from 0 to 87 [ 159.646286][T21320] loop5: detected capacity change from 0 to 264192 [ 159.657360][T21320] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 159.697735][T21320] EXT4-fs (loop5): orphan cleanup on readonly fs [ 159.705130][T21320] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 159.716055][T21320] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.743995][T21333] loop4: detected capacity change from 0 to 87 18:53:57 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:57 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x6) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:57 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) write$P9_RSTATu(r2, &(0x7f0000000400)={0x15c, 0x7d, 0x2, {{0x0, 0x3f, 0x2, 0x725df1fc, {0x0, 0x1, 0x3}, 0x42040000, 0x8, 0x1b8, 0x100000001, 0x6, 'msdos\x00', 0x0, '', 0x6, 'msdos\x00'}, 0x108, 'msdos\x00\xb7\x953\x05\xbd\x93\\\x8bNy\xcb\xdf\xba\x02\x82&\xfb\x18\x80\x9d\x9c\xd0\xba8Z\x1dBm\x80X\x8ei\x83\xd2\xda3}Z\x96\xfe\xf9ay\\UR\xbe\xdc\x95C\xf9\xe4e/\xca\xbdT\x15\xc3\xdd\fW\xc6\xa6l\xc8s\xec\x9ah\xef\aN\xaf\x88\\\xf8)\x86\xebDo\x95cO\xda\xd5\xa5\xbd\x80@\x1d\x974\xc9\xcbKP\xd9M\xdd\xa7\x9eZ\xed\xda\x84~es`\x0e\xa5(c\xd7\xa2\xfa *\xe9\xae\xf2\xa3\x00\xe7q\x0ej\x95\x12W\x8b[\xbcLU\xcd\xa8!\x15&\x01\xeay#\xcf\xf9\xfeOk`L\xd4\xcc\xa6\x1a\xd5\xe5\x1f\x01\xed\xb0\x8b*F\xf6\xa4\xb9\x86j\xaa\xea\v\xca\x91\x17<\x7f\xaev\xb2/_\x12\xa4>\x1d(j6\xb5\xe6\x9f\xd3\x93ee\x96 \xaaZ\xe3\b\x00\xb0\xfc\b\x9d\xe4$\x8f\x84\x1c\x93\xb9.\xda\xad\xcew\x1aM\xbeF2\x03\xac\x94\x111B\x03\x19~\x11\xa4\x05S\xff$\xf0\x91\x88\xcfx\xc6\x91]\x99\xa8\x95c\x18V\x1c~r', r3, r6, r5}}, 0x15c) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r7, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:57 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3f030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:57 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:57 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) write$P9_RSTATu(r2, &(0x7f0000000400)={0x15c, 0x7d, 0x2, {{0x0, 0x3f, 0x2, 0x725df1fc, {0x0, 0x1, 0x3}, 0x42040000, 0x8, 0x1b8, 0x100000001, 0x6, 'msdos\x00', 0x0, '', 0x6, 'msdos\x00'}, 0x108, 'msdos\x00\xb7\x953\x05\xbd\x93\\\x8bNy\xcb\xdf\xba\x02\x82&\xfb\x18\x80\x9d\x9c\xd0\xba8Z\x1dBm\x80X\x8ei\x83\xd2\xda3}Z\x96\xfe\xf9ay\\UR\xbe\xdc\x95C\xf9\xe4e/\xca\xbdT\x15\xc3\xdd\fW\xc6\xa6l\xc8s\xec\x9ah\xef\aN\xaf\x88\\\xf8)\x86\xebDo\x95cO\xda\xd5\xa5\xbd\x80@\x1d\x974\xc9\xcbKP\xd9M\xdd\xa7\x9eZ\xed\xda\x84~es`\x0e\xa5(c\xd7\xa2\xfa *\xe9\xae\xf2\xa3\x00\xe7q\x0ej\x95\x12W\x8b[\xbcLU\xcd\xa8!\x15&\x01\xeay#\xcf\xf9\xfeOk`L\xd4\xcc\xa6\x1a\xd5\xe5\x1f\x01\xed\xb0\x8b*F\xf6\xa4\xb9\x86j\xaa\xea\v\xca\x91\x17<\x7f\xaev\xb2/_\x12\xa4>\x1d(j6\xb5\xe6\x9f\xd3\x93ee\x96 \xaaZ\xe3\b\x00\xb0\xfc\b\x9d\xe4$\x8f\x84\x1c\x93\xb9.\xda\xad\xcew\x1aM\xbeF2\x03\xac\x94\x111B\x03\x19~\x11\xa4\x05S\xff$\xf0\x91\x88\xcfx\xc6\x91]\x99\xa8\x95c\x18V\x1c~r', r3, r6, r5}}, 0x15c) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r7, &(0x7f0000000180)=""/19, 0x7ffff000) [ 159.988102][T21350] loop2: detected capacity change from 0 to 87 [ 159.996498][T21351] loop0: detected capacity change from 0 to 87 [ 159.999262][T21352] loop4: detected capacity change from 0 to 87 18:53:57 executing program 2: r0 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0xaea1, 0x3, &(0x7f0000000440)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f00000001c0)="65ab53186bebd5bed67e1cc1090b876b437c9260870f9c8763704f234862795eb6891886f8ea6d170927b6cb8ea6eccc7245f9e57ffa2eb1df86ba0cc5584f1ed006b9547ac88dda457710e80f6e29af87f583faeeef56b3333c90ce1da832271b62ec2e6f21f13293e392dc12f1d687d7aa665b2a8024bac237451554d27a88c9ae22795f4c7d70e934b142a467729a3e6eb2ebcbebad7aa20044eb5de0926acc1b7c581868a4bd1dc7c3ae5574730b72", 0xb1, 0x101}, {&(0x7f0000000600)="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", 0x136, 0x5}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES16, @ANYRESHEX=r0, @ANYBLOB="327ed54027865e7f0197cf7bb9ac0b9c6a62b7af64f07e1c2dffcf47bb57d4c5462d8ba460776487cf7afea0c85fb75bf5717c9be0be32fcecbaa37518b1517f95f1d75dab1cc3db651b1d09fc2301e83e2f27f12d2c9b65afc0217a75094277b332f1e822da9830ecf13461531be5a68d583ab65bee42053796e80bd03c48848c52802c28b0343df0d6a5dfda00800000000000006fbe85ee00"/168, @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r3, 0x1200, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[], 0x8) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r5, &(0x7f0000000180)=""/19, 0x7ffff000) creat(&(0x7f0000000100)='./file1\x00', 0x9d) [ 160.058074][T21363] loop5: detected capacity change from 0 to 264192 [ 160.075986][T21365] loop0: detected capacity change from 0 to 87 [ 160.094258][T21363] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:57 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) write$P9_RSTATu(r2, &(0x7f0000000400)={0x15c, 0x7d, 0x2, {{0x0, 0x3f, 0x2, 0x725df1fc, {0x0, 0x1, 0x3}, 0x42040000, 0x8, 0x1b8, 0x100000001, 0x6, 'msdos\x00', 0x0, '', 0x6, 'msdos\x00'}, 0x108, 'msdos\x00\xb7\x953\x05\xbd\x93\\\x8bNy\xcb\xdf\xba\x02\x82&\xfb\x18\x80\x9d\x9c\xd0\xba8Z\x1dBm\x80X\x8ei\x83\xd2\xda3}Z\x96\xfe\xf9ay\\UR\xbe\xdc\x95C\xf9\xe4e/\xca\xbdT\x15\xc3\xdd\fW\xc6\xa6l\xc8s\xec\x9ah\xef\aN\xaf\x88\\\xf8)\x86\xebDo\x95cO\xda\xd5\xa5\xbd\x80@\x1d\x974\xc9\xcbKP\xd9M\xdd\xa7\x9eZ\xed\xda\x84~es`\x0e\xa5(c\xd7\xa2\xfa *\xe9\xae\xf2\xa3\x00\xe7q\x0ej\x95\x12W\x8b[\xbcLU\xcd\xa8!\x15&\x01\xeay#\xcf\xf9\xfeOk`L\xd4\xcc\xa6\x1a\xd5\xe5\x1f\x01\xed\xb0\x8b*F\xf6\xa4\xb9\x86j\xaa\xea\v\xca\x91\x17<\x7f\xaev\xb2/_\x12\xa4>\x1d(j6\xb5\xe6\x9f\xd3\x93ee\x96 \xaaZ\xe3\b\x00\xb0\xfc\b\x9d\xe4$\x8f\x84\x1c\x93\xb9.\xda\xad\xcew\x1aM\xbeF2\x03\xac\x94\x111B\x03\x19~\x11\xa4\x05S\xff$\xf0\x91\x88\xcfx\xc6\x91]\x99\xa8\x95c\x18V\x1c~r', r3, r6, r5}}, 0x15c) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) [ 160.133147][T21380] loop2: detected capacity change from 0 to 87 [ 160.148257][T21363] EXT4-fs (loop5): orphan cleanup on readonly fs [ 160.154613][T21363] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 160.165563][T21363] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:57 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 160.182840][T21380] FAT-fs (loop2): Unrecognized mount option "ÿÿ00000000000000000000" or missing value [ 160.206835][T21388] loop1: detected capacity change from 0 to 87 [ 160.210436][T21394] loop0: detected capacity change from 0 to 87 [ 160.221792][T21389] loop2: detected capacity change from 0 to 87 [ 160.238580][T21396] loop4: detected capacity change from 0 to 87 [ 160.248631][T21389] FAT-fs (loop2): Unrecognized mount option "ÿÿ00000000000000000000" or missing value 18:53:57 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:57 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:57 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) write$P9_RSTATu(r2, &(0x7f0000000400)={0x15c, 0x7d, 0x2, {{0x0, 0x3f, 0x2, 0x725df1fc, {0x0, 0x1, 0x3}, 0x42040000, 0x8, 0x1b8, 0x100000001, 0x6, 'msdos\x00', 0x0, '', 0x6, 'msdos\x00'}, 0x108, 'msdos\x00\xb7\x953\x05\xbd\x93\\\x8bNy\xcb\xdf\xba\x02\x82&\xfb\x18\x80\x9d\x9c\xd0\xba8Z\x1dBm\x80X\x8ei\x83\xd2\xda3}Z\x96\xfe\xf9ay\\UR\xbe\xdc\x95C\xf9\xe4e/\xca\xbdT\x15\xc3\xdd\fW\xc6\xa6l\xc8s\xec\x9ah\xef\aN\xaf\x88\\\xf8)\x86\xebDo\x95cO\xda\xd5\xa5\xbd\x80@\x1d\x974\xc9\xcbKP\xd9M\xdd\xa7\x9eZ\xed\xda\x84~es`\x0e\xa5(c\xd7\xa2\xfa *\xe9\xae\xf2\xa3\x00\xe7q\x0ej\x95\x12W\x8b[\xbcLU\xcd\xa8!\x15&\x01\xeay#\xcf\xf9\xfeOk`L\xd4\xcc\xa6\x1a\xd5\xe5\x1f\x01\xed\xb0\x8b*F\xf6\xa4\xb9\x86j\xaa\xea\v\xca\x91\x17<\x7f\xaev\xb2/_\x12\xa4>\x1d(j6\xb5\xe6\x9f\xd3\x93ee\x96 \xaaZ\xe3\b\x00\xb0\xfc\b\x9d\xe4$\x8f\x84\x1c\x93\xb9.\xda\xad\xcew\x1aM\xbeF2\x03\xac\x94\x111B\x03\x19~\x11\xa4\x05S\xff$\xf0\x91\x88\xcfx\xc6\x91]\x99\xa8\x95c\x18V\x1c~r', r3, r6, r5}}, 0x15c) [ 160.414843][T21416] FAT-fs (loop4): bogus number of reserved sectors [ 160.421395][T21416] FAT-fs (loop4): Can't find a valid FAT filesystem [ 160.430845][T21422] loop5: detected capacity change from 0 to 264192 [ 160.451396][T21422] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 160.492671][T21434] loop0: detected capacity change from 0 to 87 [ 160.498017][T21422] EXT4-fs (loop5): orphan cleanup on readonly fs [ 160.505166][T21422] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 160.516112][T21422] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:58 executing program 1: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:58 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, r3, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r4]}, @devid}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYRESOCT, @ANYRES32=r2, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={r5, 0x101, 0x1, [0xc097, 0x4800000000, 0x7, 0xa780, 0x32e6], [0x5, 0xdf, 0xfffffffffffffffa, 0x100, 0x8, 0x3, 0x1000, 0x8, 0x400, 0x10001, 0x4, 0x80, 0x7, 0x6, 0x9, 0x9906, 0x7fffffff, 0xc5, 0x6555, 0xfd4f, 0x6, 0x800, 0xf7, 0x5, 0x7f, 0x4, 0x0, 0x7, 0x8, 0x8, 0xa4e0, 0x3, 0x9, 0x0, 0x7, 0x7, 0x81, 0x2, 0xe0b0, 0x7ff, 0x100000000, 0x9, 0x20, 0x81, 0x7f03af2f, 0x100, 0x80000001, 0x80000000, 0x76, 0x9, 0x2, 0x4, 0x800, 0x1ff, 0x9, 0x8, 0xa1, 0xb4e, 0x10001, 0xd224, 0x2, 0x3, 0x9, 0x2, 0x8, 0x0, 0x4, 0x44ea, 0x9, 0x200, 0x100, 0x6, 0x9f2e, 0x7, 0x7fffffff, 0x4, 0x7f, 0xc7b5, 0x4, 0x7fffffff, 0x5, 0x8, 0x5, 0x1000, 0x4fa5, 0x1010000000000, 0x9, 0x101, 0x7, 0xffffffffffffffff, 0x1f, 0x9, 0x55, 0x6c9e1f, 0xfffffffffffffffc, 0x5, 0x7, 0x0, 0xfffffffffffffff7, 0x12, 0x7, 0x8000, 0x81, 0x9, 0x64, 0x7, 0x3, 0x0, 0x8, 0x1f, 0x1, 0x5, 0x0, 0x2, 0x30, 0x5, 0x7, 0x40, 0x5, 0x1, 0x21]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000380)={0xf, 0x6, {0x9, @struct={0xb21, 0x5}, 0x0, 0x1ff, 0x2, 0xc7b, 0x5, 0xef, 0x10, @usage=0xffffffff, 0x81, 0x3, [0x0, 0x2, 0x1, 0x2, 0x0, 0xad20]}, {0x53, @struct={0x20, 0x9}, 0x0, 0x3, 0xff, 0x9, 0x27, 0x9, 0x10, @usage=0x4, 0x10001, 0x5, [0x2, 0x6, 0x1, 0x6, 0x1, 0x9e95]}, {0x9, @struct={0x9, 0x3}, r5, 0x6, 0x9, 0x68, 0xa, 0x3, 0xb, @usage=0xb8a, 0x1ff, 0x3, [0x7d5, 0x7, 0x6, 0x3, 0x80, 0x8000]}, {0x2, 0x4, 0x5}}) sendfile(r0, r1, 0x0, 0x8400fffffffa) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r7, &(0x7f0000000180)=""/19, 0x7ffff000) 18:53:58 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:58 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) 18:53:58 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x48000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 161.071644][T21453] FAT-fs (loop4): bogus number of reserved sectors [ 161.078189][T21453] FAT-fs (loop4): Can't find a valid FAT filesystem [ 161.082677][T21459] loop2: detected capacity change from 0 to 87 [ 161.086773][T21456] loop5: detected capacity change from 0 to 264192 [ 161.102292][T21458] loop0: detected capacity change from 0 to 87 18:53:58 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) [ 161.154405][T21456] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:58 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 161.205922][T21456] EXT4-fs (loop5): orphan cleanup on readonly fs [ 161.212300][T21456] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 161.223294][T21456] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:58 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4c000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:58 executing program 2: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) lseek(r1, 0x1200, 0x0) r2 = io_uring_setup(0x2aad, &(0x7f00000001c0)={0x0, 0x389c, 0x20, 0x3, 0x2c0, 0x0, r1}) splice(r0, &(0x7f0000000100)=0x81, r2, &(0x7f0000000140)=0x20, 0x1, 0x8) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0x7ffff000) [ 161.263967][T21493] FAT-fs (loop4): bogus number of reserved sectors [ 161.270708][T21493] FAT-fs (loop4): Can't find a valid FAT filesystem [ 161.279079][T21489] loop0: detected capacity change from 0 to 87 18:53:58 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, 0x0, 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:58 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) socket$inet_udplite(0x2, 0x2, 0x88) [ 161.375314][T21516] loop5: detected capacity change from 0 to 264192 [ 161.382195][T21518] loop2: detected capacity change from 0 to 87 [ 161.413903][T21516] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:58 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, 0x0, 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 161.438762][T21529] loop0: detected capacity change from 0 to 87 [ 161.475684][T21516] EXT4-fs (loop5): orphan cleanup on readonly fs [ 161.482149][T21516] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 161.493043][T21516] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:59 executing program 1: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:53:59 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./bus\x00') lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x7ffff000) r3 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r3, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000100), 0x0, 0x8, 0x13) 18:53:59 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:53:59 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4f000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:53:59 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, 0x0, 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:59 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r1 = openat(r0, &(0x7f0000000080)='./bus\x00', 0x9a280, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x4100) lseek(r2, 0x1200, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r2, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r6}, {r5}, {r5}, {r5, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {r5}, {r5, r6}, {}, {r5}, {r4}, {}, {r4, r6}, {r5}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}], 0x0, "2156816c73038c"}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r11}, {r10}, {r10}, {r10, r11}, {}, {}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {}, {}, {r9, r11}, {r10}, {}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {r9}, {}, {r10}, {r9}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10}, {r9, r11}, {}, {r9}, {}, {}, {0x0, r11}, {}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r10}, {}, {}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9, r11}, {}, {}, {0x0, r11}, {}, {r9}, {0x0, r11}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r9}, {r9, r11}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10}, {}, {r9, r11}, {r9}, {r10, r11}, {}, {r9}, {r9, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10, r11}, {}, {}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {}, {r10, r11}, {r10}, {}, {0x0, r11}, {r9}, {0x0, r11}, {r10, r11}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {r10, r11}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {r9}, {0x0, r11}, {r9, r11}, {r10, r11}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {r10}, {r9, r11}, {r9, r11}, {0x0, r11}, {0x0, r11}, {}, {}, {0x0, r11}, {r10}, {r9}, {}, {r9}, {r10}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r9, r11}, {r10}, {r10, r11}, {}, {r10}, {r9}, {}, {r9, r11}, {r10}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {r10}, {r10}, {}, {}, {r10}, {0x0, r11}, {0x0, r11}, {}, {r9}, {}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {r9}, {0x0, r11}, {r9}, {0x0, r11}, {r9, r11}, {r10, r11}, {r10}, {r9, r11}, {}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10}, {r10}, {r9}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {r9, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000052c40)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r11}], 0x2, "36e1bc356e0558"}) [ 162.101452][T21553] loop2: detected capacity change from 0 to 87 [ 162.108207][T21554] loop3: detected capacity change from 0 to 87 [ 162.112904][T21552] loop0: detected capacity change from 0 to 87 [ 162.121609][T21557] loop5: detected capacity change from 0 to 264192 [ 162.137170][T21557] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:53:59 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:53:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'bond_slave_1\x00'}) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000058980)={{0x0, 0x7, 0x9, 0x4, 0x401, 0x167, 0x101, 0x4, 0x0, 0x0, 0x5a18, 0x10000, 0x7, 0x1000, 0x9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r8}, {r7}, {r7}, {r7, r8}, {}, {}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {}, {}, {r6, r8}, {r7}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r6, r8}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {r6}, {}, {r7}, {r6}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {r6, r8}, {}, {r6}, {}, {}, {0x0, r8}, {}, {r7}, {r6}, {0x0}, {}, {}, {0x0, r8}, {r7}, {}, {}, {0x0, r8}, {r6}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r6, r8}, {}, {}, {0x0, r8}, {}, {r6}, {0x0, r8}, {}, {r7}, {r6, r8}, {0x0, r8}, {r6}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {r6}, {r6, r8}, {}, {0x0, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7}, {}, {r6, r8}, {r6}, {r7, r8}, {}, {r6}, {r6, r8}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7, r8}, {}, {}, {r6, r8}, {0x0, r8}, {r7, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {}, {r7, r8}, {r7}, {}, {0x0, r8}, {r6}, {0x0, r8}, {r7, r8}, {r6}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r7}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {r7, r8}, {}, {0x0, r8}, {}, {r7}, {0x0, r8}, {}, {}, {r6}, {r6}, {0x0, r8}, {r6, r8}, {r7, r8}, {0x0, r8}, {r6}, {}, {r6}, {0x0, r8}, {r7}, {r6, r8}, {r6, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {r7}, {r6}, {}, {r6}, {r7}, {0x0, r8}, {r7, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {r6, r8}, {r7}, {r7, r8}, {}, {r7}, {r6}, {}, {r6, r8}, {r7}, {}, {r6, r8}, {}, {}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {r7}, {r7}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {r6}, {0x0, r8}, {r6, r8}, {r7, r8}, {r7}, {r6, r8}, {}, {}, {r7}, {r6, r8}, {0x0, r8}, {r6, r8}, {0x0, r8}, {r7}, {r7}, {r6}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {r6, r8}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058a40)={0x80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r7}], 0x6b, "359b3b6865283e"}) sendfile(r1, r2, 0x0, 0x8400fffffffa) r12 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r12, &(0x7f0000000180)=""/19, 0x7ffff000) [ 162.155199][ C1] sd 0:0:1:0: tag#4516 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 162.165066][ C1] sd 0:0:1:0: tag#4516 CDB: opcode=0xe5 (vendor) [ 162.171412][ C1] sd 0:0:1:0: tag#4516 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 162.180454][ C1] sd 0:0:1:0: tag#4516 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 162.189486][ C1] sd 0:0:1:0: tag#4516 CDB[20]: ba 18:53:59 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) fstat(r1, &(0x7f00000001c0)) 18:53:59 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x54000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 162.226623][T21557] EXT4-fs (loop5): orphan cleanup on readonly fs [ 162.233073][T21557] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 162.241938][T21577] loop4: detected capacity change from 0 to 87 [ 162.243982][T21557] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:53:59 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) [ 162.286879][T21577] FAT-fs (loop4): bogus number of reserved sectors [ 162.293464][T21577] FAT-fs (loop4): Can't find a valid FAT filesystem [ 162.304937][T21585] loop2: detected capacity change from 0 to 87 18:53:59 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 162.362823][ C0] sd 0:0:1:0: tag#4517 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 162.372678][ C0] sd 0:0:1:0: tag#4517 CDB: opcode=0xe5 (vendor) [ 162.379036][ C0] sd 0:0:1:0: tag#4517 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 162.388100][ C0] sd 0:0:1:0: tag#4517 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 162.390629][T21606] loop3: detected capacity change from 0 to 87 [ 162.397178][ C0] sd 0:0:1:0: tag#4517 CDB[20]: ba [ 162.404033][T21610] loop5: detected capacity change from 0 to 264192 [ 162.419125][T21609] loop0: detected capacity change from 0 to 87 [ 162.423758][T21610] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 162.430037][T21615] loop4: detected capacity change from 0 to 87 [ 162.439222][T21585] buffer_io_error: 16 callbacks suppressed [ 162.439241][T21585] Buffer I/O error on dev loop2, logical block 44, async page read [ 162.460352][T21585] Buffer I/O error on dev loop2, logical block 44, async page read [ 162.462283][T21615] FAT-fs (loop4): bogus number of reserved sectors [ 162.474818][T21615] FAT-fs (loop4): Can't find a valid FAT filesystem [ 162.504302][T21610] EXT4-fs (loop5): orphan cleanup on readonly fs [ 162.510679][T21610] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 162.521549][T21610] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:00 executing program 1: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:00 executing program 2 (fault-call:8 fault-nth:0): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:54:00 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:00 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) open(&(0x7f0000000080)='./file1\x00', 0x48200, 0x90) lseek(r1, 0x1200, 0x0) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@rc={0x1f, @any, 0xff}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000380)=[{0xe8, 0x100, 0x7, "eded94a50c0e63d360deda235ef198e3d20a7c1e6a66aa51d3e2019c88e2f39ee5696b5f57689c97d4a4e94a8fb07b0b9c62308c7a20faf09956878f4e2831cf86d6a8d6718d93cffd78f067ba6f78de1789838db131ab0f9e3768c89daa403872a5384866f0438c507912040abe7078cd58c9e86e33e779fb753d2c83bf5a68a99e21bba708af92d094a9b2f9824acad7a451c8ac94fe83308cbbeb37ac2df38bf84fcf92820f1087979af3d75c43a7c86321d585b7d35bc0a952cbb305ad4f1c369529377faf8a5ecb4fc3cd816687e3398fa4cda3"}, {0x10, 0x107, 0x4}, {0x68, 0xff, 0xfffffffc, "537582f449735ff3bdfbf30be720659f5a369d241e36737ec38b91764f3e18284d836ccfda4bc954c7e8e4c0593b329f33b39504fa88aedd1bf57ad8b13e00782341d018fe4ab9aa591aa09e6bfc65969b695a77"}, {0x80, 0x10b, 0x1, "1e0271a33d5aa3b91df69fbfd1da24467f9f3792d44ac5d99a1ae388fcbde0f34467d4efa63ccc49c98679b2bacde0ff438459b023f7f6cf33c3509aed80960bee0cc29f5a12b3dfba0189a77c938733d6b833450aee0c04ef9191bfd183f6ff79a8382901a6226372c8d841ccf19781"}, {0xe8, 0x88, 0x7, "f8d58882252a105021be355d6dcdcdb088793114d08181772d5d70f1e40567ac3392a8666e6c4a4fbc12836c63208e33fb00ac3dfcd90b0e50074d3b9e366c2f1cb5e73f55b6c6cce860477741b49d6e1ce4f1f63ff578d23f00c36cb0ebbb4225d19823c58662bcb8778432ce9a92203d6edff61e8b25cfcc4c3c2ad7f3da3f861d8bbb5432b14eea37c30572e958d55911885fd30e0c52d881b41348914dc203ae22a43a0221a3fd282ab71dd055b8854a324d91c2f5e1f0b7e3452235b529dee14f52a185e88e130a2c2e945900c03e"}, {0x1010, 0x10c, 0x1, "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"}], 0x12d8}, 0x44004) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) fcntl$setpipe(r0, 0x407, 0x8) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0e000000002e2f627573"], 0xe) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00') 18:54:00 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x57000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:00 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 163.186091][T21650] loop3: detected capacity change from 0 to 87 [ 163.192824][T21651] loop2: detected capacity change from 0 to 87 [ 163.198693][T21652] loop0: detected capacity change from 0 to 87 [ 163.200964][T21658] loop4: detected capacity change from 0 to 87 [ 163.211392][T21655] loop5: detected capacity change from 0 to 264192 [ 163.232870][T21651] FAULT_INJECTION: forcing a failure. [ 163.232870][T21651] name failslab, interval 1, probability 0, space 0, times 0 [ 163.245529][T21651] CPU: 1 PID: 21651 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 163.253988][T21651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.264478][T21651] Call Trace: [ 163.267770][T21651] dump_stack_lvl+0xb7/0x103 [ 163.272441][T21651] dump_stack+0x11/0x1a [ 163.276382][T21655] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:54:00 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) fstat(r1, &(0x7f00000001c0)) [ 163.276716][T21651] should_fail+0x23c/0x250 [ 163.290305][T21651] ? getname_flags+0x84/0x3f0 [ 163.295097][T21651] __should_failslab+0x81/0x90 [ 163.299865][T21651] should_failslab+0x5/0x20 [ 163.304371][T21651] kmem_cache_alloc+0x46/0x2e0 [ 163.309162][T21651] ? __cond_resched+0x11/0x40 [ 163.313903][T21651] getname_flags+0x84/0x3f0 [ 163.318514][T21651] __x64_sys_mkdir+0x31/0x50 [ 163.323156][T21651] do_syscall_64+0x3d/0x90 [ 163.327581][T21651] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 163.333645][T21651] RIP: 0033:0x4665f9 [ 163.337534][T21651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 163.357256][T21651] RSP: 002b:00007f99f3033188 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 163.365666][T21651] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 163.373624][T21651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 163.381655][T21651] RBP: 00007f99f30331d0 R08: 0000000000000000 R09: 0000000000000000 [ 163.389636][T21651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.397598][T21651] R13: 00007ffe3d0e133f R14: 00007f99f3033300 R15: 0000000000022000 18:54:00 executing program 2 (fault-call:8 fault-nth:1): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 163.427700][T21650] handle_bad_sector: 55 callbacks suppressed [ 163.427713][T21650] attempt to access beyond end of device [ 163.427713][T21650] loop3: rw=2049, want=104, limit=87 [ 163.431317][T21655] EXT4-fs (loop5): orphan cleanup on readonly fs [ 163.435004][T21676] attempt to access beyond end of device [ 163.435004][T21676] loop3: rw=0, want=104, limit=87 [ 163.444554][T21655] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:54:00 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 163.444587][T21655] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.495879][ T1802] attempt to access beyond end of device [ 163.495879][ T1802] loop3: rw=1, want=102, limit=87 18:54:00 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x60000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 163.570249][T21695] loop2: detected capacity change from 0 to 87 [ 163.583088][T21696] loop0: detected capacity change from 0 to 87 [ 163.592216][T21697] loop4: detected capacity change from 0 to 87 [ 163.642051][T21695] attempt to access beyond end of device [ 163.642051][T21695] loop2: rw=0, want=90, limit=87 [ 163.647590][T21715] loop5: detected capacity change from 0 to 264192 [ 163.659691][T21697] FAT-fs (loop4): bogus number of reserved sectors [ 163.666233][T21697] FAT-fs (loop4): Can't find a valid FAT filesystem [ 163.674589][T21696] attempt to access beyond end of device [ 163.674589][T21696] loop0: rw=0, want=90, limit=87 [ 163.697975][T21719] FAULT_INJECTION: forcing a failure. [ 163.697975][T21719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.711063][T21719] CPU: 1 PID: 21719 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 163.719636][T21719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.729687][T21719] Call Trace: [ 163.732986][T21719] dump_stack_lvl+0xb7/0x103 [ 163.737562][T21719] dump_stack+0x11/0x1a [ 163.741728][T21719] should_fail+0x23c/0x250 [ 163.746137][T21719] should_fail_usercopy+0x16/0x20 [ 163.751154][T21719] strncpy_from_user+0x21/0x250 [ 163.755993][T21719] getname_flags+0xb8/0x3f0 [ 163.760529][T21719] __x64_sys_mkdir+0x31/0x50 [ 163.765127][T21719] do_syscall_64+0x3d/0x90 [ 163.769541][T21719] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 163.775452][T21719] RIP: 0033:0x4665f9 [ 163.779329][T21719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 163.798918][T21719] RSP: 002b:00007f99f3012188 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 163.807310][T21719] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 163.815262][T21719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 163.823218][T21719] RBP: 00007f99f30121d0 R08: 0000000000000000 R09: 0000000000000000 [ 163.831174][T21719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.839141][T21719] R13: 00007ffe3d0e133f R14: 00007f99f3012300 R15: 0000000000022000 18:54:01 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:01 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 163.948837][T21727] loop4: detected capacity change from 0 to 87 [ 163.957570][T21732] loop0: detected capacity change from 0 to 87 [ 163.989014][T21727] FAT-fs (loop4): bogus number of reserved sectors [ 163.995542][T21727] FAT-fs (loop4): Can't find a valid FAT filesystem [ 164.007938][T21732] attempt to access beyond end of device [ 164.007938][T21732] loop0: rw=0, want=90, limit=87 18:54:01 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:01 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:01 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:01 executing program 2 (fault-call:8 fault-nth:2): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 164.229798][T21715] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 164.267881][T21754] loop4: detected capacity change from 0 to 87 [ 164.271275][T21755] loop2: detected capacity change from 0 to 87 [ 164.280513][T21756] loop0: detected capacity change from 0 to 87 [ 164.288912][T21715] EXT4-fs (loop5): orphan cleanup on readonly fs [ 164.295260][T21715] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 164.306143][T21715] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.326179][T21755] attempt to access beyond end of device [ 164.326179][T21755] loop2: rw=0, want=90, limit=87 [ 164.346076][T21754] FAT-fs (loop4): bogus number of reserved sectors [ 164.352679][T21754] FAT-fs (loop4): Can't find a valid FAT filesystem [ 164.360551][T21756] attempt to access beyond end of device [ 164.360551][T21756] loop0: rw=0, want=90, limit=87 [ 164.376840][T21772] loop1: detected capacity change from 0 to 87 [ 164.384090][T21773] FAULT_INJECTION: forcing a failure. [ 164.384090][T21773] name failslab, interval 1, probability 0, space 0, times 0 [ 164.396736][T21773] CPU: 0 PID: 21773 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 164.405229][T21773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.415278][T21773] Call Trace: [ 164.418552][T21773] dump_stack_lvl+0xb7/0x103 [ 164.423139][T21773] dump_stack+0x11/0x1a [ 164.427296][T21773] should_fail+0x23c/0x250 [ 164.431725][T21773] ? __d_alloc+0x36/0x370 [ 164.436057][T21773] __should_failslab+0x81/0x90 [ 164.440817][T21773] should_failslab+0x5/0x20 [ 164.445327][T21773] kmem_cache_alloc+0x46/0x2e0 [ 164.450083][T21773] __d_alloc+0x36/0x370 [ 164.454244][T21773] d_alloc+0x2a/0x130 [ 164.458232][T21773] __lookup_hash+0x8f/0x180 [ 164.462947][T21773] __filename_create+0xe2/0x250 [ 164.467797][T21773] do_mkdirat+0x46/0x2e0 [ 164.472061][T21773] __x64_sys_mkdir+0x40/0x50 [ 164.476654][T21773] do_syscall_64+0x3d/0x90 [ 164.481143][T21773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 164.487163][T21773] RIP: 0033:0x4665f9 [ 164.491053][T21773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 164.510655][T21773] RSP: 002b:00007f99f3012188 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 164.519151][T21773] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 18:54:01 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x64030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:01 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:01 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 164.527126][T21773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 164.535160][T21773] RBP: 00007f99f30121d0 R08: 0000000000000000 R09: 0000000000000000 [ 164.543142][T21773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.551102][T21773] R13: 00007ffe3d0e133f R14: 00007f99f3012300 R15: 0000000000022000 18:54:01 executing program 2 (fault-call:8 fault-nth:3): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 164.617279][T21787] loop5: detected capacity change from 0 to 264192 [ 164.622631][T21790] loop0: detected capacity change from 0 to 87 [ 164.631792][T21794] loop4: detected capacity change from 0 to 87 [ 164.652764][T21794] FAT-fs (loop4): bogus number of reserved sectors [ 164.659373][T21794] FAT-fs (loop4): Can't find a valid FAT filesystem [ 164.673689][T21790] attempt to access beyond end of device [ 164.673689][T21790] loop0: rw=0, want=90, limit=87 [ 164.676481][T21787] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 164.702401][T21806] loop2: detected capacity change from 0 to 87 18:54:01 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:02 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 164.738626][T21806] attempt to access beyond end of device [ 164.738626][T21806] loop2: rw=0, want=90, limit=87 [ 164.775891][T21806] FAULT_INJECTION: forcing a failure. [ 164.775891][T21806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.789005][T21806] CPU: 0 PID: 21806 Comm: syz-executor.2 Not tainted 5.14.0-syzkaller #0 [ 164.797445][T21806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.807529][T21806] Call Trace: [ 164.810799][T21806] dump_stack_lvl+0xb7/0x103 [ 164.815534][T21806] dump_stack+0x11/0x1a [ 164.819693][T21806] should_fail+0x23c/0x250 [ 164.824115][T21806] should_fail_usercopy+0x16/0x20 [ 164.829143][T21806] _copy_to_user+0x1c/0x90 [ 164.833623][T21806] simple_read_from_buffer+0xab/0x120 [ 164.839018][T21806] proc_fail_nth_read+0xf6/0x140 [ 164.844013][T21806] ? proc_fault_inject_write+0x200/0x200 [ 164.849870][T21806] vfs_read+0x1ea/0x730 [ 164.854032][T21806] ? mntput_no_expire+0x64/0x730 [ 164.858968][T21806] ? __fget_light+0x21b/0x260 [ 164.863642][T21806] ? __cond_resched+0x11/0x40 [ 164.868319][T21806] ksys_read+0xce/0x180 [ 164.872473][T21806] __x64_sys_read+0x3e/0x50 [ 164.877049][T21806] do_syscall_64+0x3d/0x90 [ 164.881500][T21806] ? irqentry_exit+0xe/0x30 [ 164.886096][T21806] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 164.892000][T21806] RIP: 0033:0x41937c [ 164.895906][T21806] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 164.915551][T21806] RSP: 002b:00007f99f3033170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.924042][T21806] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 164.932009][T21806] RDX: 000000000000000f RSI: 00007f99f30331e0 RDI: 0000000000000006 [ 164.939981][T21806] RBP: 00007f99f30331d0 R08: 0000000000000000 R09: 0000000000000000 [ 164.948032][T21806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.956024][T21806] R13: 00007ffe3d0e133f R14: 00007f99f3033300 R15: 0000000000022000 [ 164.971083][T21787] EXT4-fs (loop5): orphan cleanup on readonly fs [ 164.971301][T21821] loop0: detected capacity change from 0 to 87 18:54:02 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:02 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 164.977464][T21787] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 164.977490][T21787] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.988107][T21826] loop4: detected capacity change from 0 to 87 [ 165.026401][T21826] FAT-fs (loop4): bogus number of reserved sectors [ 165.032942][T21826] FAT-fs (loop4): Can't find a valid FAT filesystem [ 165.113043][T21841] loop0: detected capacity change from 0 to 87 [ 165.135657][T21842] loop4: detected capacity change from 0 to 87 [ 165.150481][T21842] FAT-fs (loop4): bogus number of reserved sectors [ 165.157059][T21842] FAT-fs (loop4): Can't find a valid FAT filesystem 18:54:02 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:02 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 18:54:02 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x68000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:02 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000bec3eedda900510b83f4bb008f820cbffa794f758e7e36dfc8871d27cb69c6b6ec2b5c8569f5359b1a2135c87b8b207ff71559f241ef32771c89e74f340f75a7e2b986ddc4e62ff97ea3f9e77d8471319647904f1c120f3fd566d58da5d02d59a53078dd69a9c9690d91bcd2eb0c91ece3025a10ed43cd1ce74d", @ANYRES16=r1, @ANYBLOB="04012abd7000fcdbdf2502000000050033000200000008003c0004000000080031000900000008002b000900000008002b00000000000a000900000000000000000008003c0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x40004) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendfile(r0, r0, &(0x7f0000000240)=0x100000000, 0x93) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000003c0)) fcntl$setstatus(r2, 0x4, 0x4100) lseek(r2, 0x1200, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[], 0x8) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1) write$P9_RREADLINK(r2, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:02 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:02 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 165.276098][T21863] loop4: detected capacity change from 0 to 87 [ 165.284363][T21863] FAT-fs (loop4): bogus number of reserved sectors [ 165.291033][T21863] FAT-fs (loop4): Can't find a valid FAT filesystem [ 165.300998][T21869] loop0: detected capacity change from 0 to 87 [ 165.301004][T21864] loop5: detected capacity change from 0 to 264192 [ 165.303578][T21872] loop2: detected capacity change from 0 to 87 [ 165.311680][T21867] loop3: detected capacity change from 0 to 87 18:54:02 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:02 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:02 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) [ 165.326906][T21864] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 165.330956][T21867] FAT-fs (loop3): Unrecognized mount option "/proc/bus/input/handlers" or missing value [ 165.347369][T21886] loop1: detected capacity change from 0 to 87 [ 165.404354][T21864] EXT4-fs (loop5): orphan cleanup on readonly fs [ 165.410830][T21864] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 165.421803][T21864] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.464306][T21911] loop3: detected capacity change from 0 to 87 [ 165.478854][T21903] loop4: detected capacity change from 0 to 87 [ 165.488057][T21912] loop2: detected capacity change from 0 to 87 [ 165.499444][T21916] loop0: detected capacity change from 0 to 87 [ 165.513427][T21911] FAT-fs (loop3): Unrecognized mount option "/proc/bus/input/handlers" or missing value 18:54:02 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6c000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:02 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:02 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) [ 165.620062][T21936] loop4: detected capacity change from 0 to 87 [ 165.628768][T21936] FAT-fs (loop4): bogus number of reserved sectors [ 165.635280][T21936] FAT-fs (loop4): Can't find a valid FAT filesystem [ 165.667834][T21946] loop0: detected capacity change from 0 to 87 [ 165.691667][T21950] loop5: detected capacity change from 0 to 264192 [ 165.712716][T21950] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 165.726602][T21950] EXT4-fs (loop5): orphan cleanup on readonly fs [ 165.732980][T21950] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 165.743876][T21950] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:03 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:03 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x3) 18:54:03 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101881, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x80000000000aea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES16, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES64=r0]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:03 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) 18:54:03 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x6c030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 166.330326][T21975] loop4: detected capacity change from 0 to 87 [ 166.337001][T21977] loop2: detected capacity change from 0 to 87 [ 166.343517][T21976] loop5: detected capacity change from 0 to 264192 [ 166.343729][T21980] loop0: detected capacity change from 0 to 87 [ 166.359283][T21982] loop3: detected capacity change from 0 to 264192 [ 166.368394][T21975] FAT-fs (loop4): invalid media value (0x00) [ 166.374485][T21975] FAT-fs (loop4): Can't find a valid FAT filesystem [ 166.382982][T21976] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 166.401687][T21982] FAT-fs (loop3): Unrecognized mount option "" or missing value 18:54:03 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) 18:54:03 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) 18:54:03 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 166.439839][T21976] EXT4-fs (loop5): orphan cleanup on readonly fs [ 166.446221][T21976] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 166.457092][T21976] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.476997][T21982] loop3: detected capacity change from 0 to 264192 18:54:03 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x74000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 166.505681][T21982] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 166.548739][T22018] loop2: detected capacity change from 0 to 87 [ 166.550553][T22016] loop4: detected capacity change from 0 to 87 [ 166.556437][T22017] loop0: detected capacity change from 0 to 87 [ 166.564743][T22016] FAT-fs (loop4): invalid media value (0x00) [ 166.573236][T22016] FAT-fs (loop4): Can't find a valid FAT filesystem 18:54:03 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x5) [ 166.589998][T22006] blk_update_request: I/O error, dev loop3, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 22 prio class 0 18:54:03 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x2d) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) [ 166.644387][T22037] loop5: detected capacity change from 0 to 264192 [ 166.656146][T22044] loop1: detected capacity change from 0 to 87 [ 166.663217][T22045] loop2: detected capacity change from 0 to 87 [ 166.674872][T22037] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 166.720570][T22059] loop0: detected capacity change from 0 to 87 [ 166.726738][T22037] EXT4-fs (loop5): orphan cleanup on readonly fs [ 166.726753][T22037] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 166.726777][T22037] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:04 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:04 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x7fffffff, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17, 0x2}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') execveat(r0, &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='(}\x00'], &(0x7f0000000300)=[&(0x7f0000000200)='*(--[::%\x00', &(0x7f0000000240)='^+\xeb]\x00', &(0x7f0000000280)='msdos\x00'], 0x100) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:04 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:04 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x6) 18:54:04 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:04 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7a000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 167.670799][T22085] loop4: detected capacity change from 0 to 87 [ 167.679602][T22085] FAT-fs (loop4): invalid media value (0x00) [ 167.685621][T22085] FAT-fs (loop4): Can't find a valid FAT filesystem [ 167.686779][T22086] loop3: detected capacity change from 0 to 264192 [ 167.705579][T22091] loop5: detected capacity change from 0 to 264192 [ 167.708875][T22092] loop0: detected capacity change from 0 to 87 18:54:04 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 167.720969][T22097] loop2: detected capacity change from 0 to 87 [ 167.733143][T22091] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 167.733611][T22086] FAT-fs (loop3): Unrecognized mount option "./file1" or missing value [ 167.793895][T22091] EXT4-fs (loop5): orphan cleanup on readonly fs [ 167.800348][T22091] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 167.808960][T22110] loop4: detected capacity change from 0 to 87 18:54:05 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:05 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x7) 18:54:05 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x85ffffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 167.834369][T22110] FAT-fs (loop4): invalid media value (0x00) [ 167.840382][T22110] FAT-fs (loop4): Can't find a valid FAT filesystem 18:54:05 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 167.895786][T22125] loop0: detected capacity change from 0 to 87 18:54:05 executing program 3: r0 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r1, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="0400050900000000666174080424bfe6dffe941543f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f22ffd7eaa705aba584fc2cb1ebcc2931c70f95016926dc36e85bd7882e942d7898d21eaf04a8dfaa126b1d3bd877bec3d5b1368f41ec50f41c4116023c1230db1d0b900b301a729b2222ea5bf50c46352edc15c087bfb3200712b091476031f28c33774accb430eb68980db9e180f4beb6e30f3a383e6ef26b11bc4fc226d6d49f228a621817da9d7ac66f530d1c7fb60e94b34f6f5809d71c082ceff7cc9b02581bf9a3a94cfb77de8", @ANYRESDEC, @ANYRES64, @ANYRES32=r1, @ANYRES64, @ANYRESDEC=r0, @ANYBLOB="a4f02e168131127d7343b309f8fb63ea51a82a602b807ea18fef7a520e8b45c2f3b13e727510fc36046d4cd5b10cbd3955", @ANYRESDEC, @ANYRES16=r0]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = syz_io_uring_complete(0x0) lseek(r4, 0x8, 0x1) fcntl$setstatus(r3, 0x4, 0x4100) lseek(r3, 0x1200, 0x0) r5 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r5, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) write$cgroup_devices(r3, &(0x7f0000000540)=ANY=[@ANYRES64=r2, @ANYBLOB="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", @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESDEC=r3, @ANYRES64=r5, @ANYRESHEX], 0x8) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000d0017000005002e2f62757382317d10acfd2e775b121db7ba5b72ab008ef643a716392a80e3de376ff8c919b015224f779887de87e1772ee5df6f596ca7b597fdf0e6c838d1e46d5bc7feda72628ac499e5800ddd73352ccc920706269fd1df03572666534214089acecf9a78e39196b44d90ee44dc396876759f9a331a6325663ae53bc9304ee4e23f8a9d"], 0xe) [ 167.938928][T22139] loop2: detected capacity change from 0 to 87 [ 167.947329][T22140] loop1: detected capacity change from 0 to 87 [ 167.957353][T22141] loop4: detected capacity change from 0 to 87 [ 167.972913][T22141] FAT-fs (loop4): invalid media value (0x00) [ 167.978952][T22141] FAT-fs (loop4): Can't find a valid FAT filesystem [ 167.982260][T22152] loop5: detected capacity change from 0 to 264192 [ 167.987735][T22148] loop3: detected capacity change from 0 to 87 [ 167.995727][T22152] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 168.015562][T22148] FAT-fs (loop3): Unrecognized mount option "ò/ý~ªpZºXOÂ˼“pùP’mÃn…½x‚éB׉!êðJú¡&±Ó½‡{ì=[hôÅAÄ`#Á#±Ð¹" or missing value [ 168.054919][T22152] EXT4-fs (loop5): orphan cleanup on readonly fs [ 168.061348][T22152] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 168.104954][T22174] loop3: detected capacity change from 0 to 87 [ 168.179020][T22174] FAT-fs (loop3): Unrecognized mount option "ò/ý~ªpZºXOÂ˼“pùP’mÃn…½x‚éB׉!êðJú¡&±Ó½‡{ì=[hôÅAÄ`#Á#±Ð¹" or missing value 18:54:06 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:06 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r1, &(0x7f00000001c0)) 18:54:06 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) 18:54:06 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:06 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:06 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./bus\x00', 0xaea1, 0x4, &(0x7f0000000480)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17, 0x403}, {&(0x7f0000000140)="b01c964110786622065a5265f45b0706e6d99db68d79f077d5c212c5e1636e039ab79e3aa02ed2ad4b335686c054be113a0d2d5615053a07ef", 0x39, 0x5}, {&(0x7f0000000600)="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", 0x107, 0x7fffffff}, {&(0x7f0000000500)="5b5336b14f9aceaef51a3947ff49d71221300e8354104fe25f11f0b500d6a08fd150ec3b7166e92a7e6f28645ffe48c18a07b3b78dcb858bf7ed9f38ef7dad56b7f882f56a8a42d1a0b1b991f3f4c2ad3e31b9db923d314beb311f9f3689ed1b7d388e8877f05afa862ee944213c8e5755026c7dd7119b99a4dc714c8e837a06ae149f63f8f2008de975f59e647b89b9b068ea86b5a39b119ae4c0f369bfc647c0bf08cf98a453239c27295a16b78fb008be7e9673916dbf9cf09f5f1f768a08eff663ee61b3f9ca654a5c9342a2541e62836de29fa62b0fc9ea5660ff4181ee46c26c4c5b42a5740b", 0xe9, 0x3ff}], 0x1001001, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x10) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, 0x13, r2, 0x436b1000) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 168.803999][T22191] loop3: detected capacity change from 0 to 264192 [ 168.810664][T22193] loop4: detected capacity change from 0 to 87 [ 168.818990][T22196] loop5: detected capacity change from 0 to 264192 [ 168.827645][T22192] loop0: detected capacity change from 0 to 87 [ 168.836390][T22200] loop2: detected capacity change from 0 to 87 18:54:06 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(&(0x7f0000000140)='./bus\x00', 0x8a) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 168.851579][T22196] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 168.861784][T22193] FAT-fs (loop4): invalid media value (0x00) [ 168.867816][T22193] FAT-fs (loop4): Can't find a valid FAT filesystem 18:54:06 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 168.903057][T22200] handle_bad_sector: 24 callbacks suppressed [ 168.903072][T22200] attempt to access beyond end of device [ 168.903072][T22200] loop2: rw=0, want=90, limit=87 [ 168.925146][T22196] EXT4-fs (loop5): orphan cleanup on readonly fs [ 168.931525][T22196] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 168.943813][T22218] loop3: detected capacity change from 0 to 87 18:54:06 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:06 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x93000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 168.971836][T22218] FAT-fs (loop3): Unrecognized mount option "@" or missing value [ 169.000820][T22230] loop0: detected capacity change from 0 to 87 [ 169.016140][T22200] attempt to access beyond end of device [ 169.016140][T22200] loop2: rw=2049, want=112, limit=87 [ 169.029435][T22236] loop4: detected capacity change from 0 to 87 [ 169.039725][T22236] FAT-fs (loop4): bogus number of FAT sectors [ 169.043129][T22218] loop3: detected capacity change from 0 to 87 [ 169.045970][T22236] FAT-fs (loop4): Can't find a valid FAT filesystem [ 169.054682][T22218] FAT-fs (loop3): Unrecognized mount option "@" or missing value 18:54:06 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x204) [ 169.065404][T22246] loop5: detected capacity change from 0 to 264192 [ 169.076540][T22246] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 169.089403][ T1790] attempt to access beyond end of device [ 169.089403][ T1790] loop2: rw=1, want=110, limit=87 [ 169.104532][T22254] loop1: detected capacity change from 0 to 87 [ 169.105100][T22246] EXT4-fs (loop5): orphan cleanup on readonly fs 18:54:06 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 169.117107][T22246] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 169.211693][T22271] loop2: detected capacity change from 0 to 87 [ 169.221542][T22277] loop0: detected capacity change from 0 to 87 [ 169.264285][T22271] attempt to access beyond end of device [ 169.264285][T22271] loop2: rw=0, want=90, limit=87 [ 169.292598][T22271] attempt to access beyond end of device [ 169.292598][T22271] loop2: rw=2049, want=112, limit=87 [ 169.307151][T22288] attempt to access beyond end of device [ 169.307151][T22288] loop2: rw=0, want=112, limit=87 [ 169.326471][ T2125] attempt to access beyond end of device [ 169.326471][ T2125] loop2: rw=1, want=110, limit=87 18:54:07 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:07 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:07 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x20000, 0x2) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) 18:54:07 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x93030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:07 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:07 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x214) [ 169.979337][T22303] loop0: detected capacity change from 0 to 87 [ 169.987565][T22304] loop4: detected capacity change from 0 to 87 [ 169.996021][T22307] loop3: detected capacity change from 0 to 87 [ 170.008882][T22308] loop5: detected capacity change from 0 to 264192 [ 170.019168][T22316] loop2: detected capacity change from 0 to 87 18:54:07 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 170.030156][T22304] FAT-fs (loop4): bogus number of FAT sectors [ 170.036266][T22304] FAT-fs (loop4): Can't find a valid FAT filesystem [ 170.043096][T22308] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 170.064611][T22307] attempt to access beyond end of device [ 170.064611][T22307] loop3: rw=0, want=90, limit=87 18:54:07 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xa8030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 170.091044][T22308] EXT4-fs (loop5): orphan cleanup on readonly fs [ 170.097540][T22308] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 170.109726][T22307] attempt to access beyond end of device [ 170.109726][T22307] loop3: rw=0, want=90, limit=87 [ 170.110840][T22316] attempt to access beyond end of device [ 170.110840][T22316] loop2: rw=0, want=90, limit=87 18:54:07 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) lseek(r0, 0x6, 0x4) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:07 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:07 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x300) [ 170.153907][T22329] loop0: detected capacity change from 0 to 87 [ 170.166268][T22337] loop1: detected capacity change from 0 to 87 [ 170.178478][T22341] loop4: detected capacity change from 0 to 87 18:54:07 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 170.204199][T22341] FAT-fs (loop4): bogus number of FAT sectors [ 170.210321][T22341] FAT-fs (loop4): Can't find a valid FAT filesystem [ 170.223329][T22354] loop3: detected capacity change from 0 to 87 [ 170.264396][T22363] loop5: detected capacity change from 0 to 264192 [ 170.275122][T22369] loop2: detected capacity change from 0 to 87 [ 170.285241][T22363] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 170.328185][T22381] loop0: detected capacity change from 0 to 87 [ 170.340551][T22363] EXT4-fs (loop5): orphan cleanup on readonly fs [ 170.346963][T22363] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:54:08 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:08 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x402) 18:54:08 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:08 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:08 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xab030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 171.064031][T22404] loop5: detected capacity change from 0 to 264192 [ 171.069740][T22405] loop4: detected capacity change from 0 to 87 [ 171.077340][T22409] loop2: detected capacity change from 0 to 87 [ 171.079496][T22407] loop0: detected capacity change from 0 to 87 [ 171.103346][T22404] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:54:08 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:08 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x406) 18:54:08 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 171.166942][T22404] EXT4-fs (loop5): orphan cleanup on readonly fs [ 171.173291][T22404] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 171.221808][T22428] FAT-fs (loop1): bogus number of reserved sectors [ 171.228448][T22428] FAT-fs (loop1): Can't find a valid FAT filesystem [ 171.248852][T22432] loop4: detected capacity change from 0 to 87 18:54:08 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:08 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:08 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xb0030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 171.297457][T22442] loop0: detected capacity change from 0 to 87 [ 171.322956][T22445] loop2: detected capacity change from 0 to 87 [ 171.371822][T22459] loop4: detected capacity change from 0 to 87 [ 171.394148][T22460] loop0: detected capacity change from 0 to 87 18:54:08 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x480) [ 171.431164][T22474] loop5: detected capacity change from 0 to 264192 [ 171.475899][T22474] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 171.506124][T22474] EXT4-fs (loop5): orphan cleanup on readonly fs [ 171.511057][T22486] loop2: detected capacity change from 0 to 87 [ 171.512531][T22474] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:54:09 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:09 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xb8030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:09 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:09 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:09 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x500) [ 172.122167][T22503] loop4: detected capacity change from 0 to 87 [ 172.123384][T22504] loop2: detected capacity change from 0 to 87 [ 172.136781][T22506] loop5: detected capacity change from 0 to 264192 18:54:09 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 172.170238][T22506] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:54:09 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x600) 18:54:09 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:09 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 172.215291][T22506] EXT4-fs (loop5): orphan cleanup on readonly fs [ 172.221690][T22506] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:54:09 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc0000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 172.326733][T22534] loop2: detected capacity change from 0 to 87 [ 172.334685][T22535] loop4: detected capacity change from 0 to 87 [ 172.351752][T22536] FAT-fs (loop1): bogus number of reserved sectors [ 172.358388][T22536] FAT-fs (loop1): Can't find a valid FAT filesystem 18:54:09 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:09 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x604) [ 172.379368][T22546] loop5: detected capacity change from 0 to 264192 [ 172.408527][T22546] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 172.417084][T22555] loop0: detected capacity change from 0 to 87 [ 172.454786][T22546] EXT4-fs (loop5): orphan cleanup on readonly fs [ 172.461262][T22546] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 172.541346][T22572] loop2: detected capacity change from 0 to 87 18:54:10 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:10 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:10 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000000380)="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", 0x1000, 0x0, &(0x7f0000001380)="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"}) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e009dae170000267144a4627573"], 0xe) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x54021, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0, r6}, {r5}, {r5}, {r5, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {r5}, {r4}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {}, {r4}, {}, {}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r5}, {}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5}, {}, {r4, r6}, {r4}, {r5, r6}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {r4, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {r5, r6}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r5}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r5}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {r5}, {r5, r6}, {}, {r5}, {r4}, {}, {r4, r6}, {r5}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {r5}, {r5}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r5}, {r4}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {r4, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000045dc0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000045fc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r7}], 0x40, "22008d5f65b4e2"}) 18:54:10 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc0ed0000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:10 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:10 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x700) [ 173.203743][T22592] loop3: detected capacity change from 0 to 87 [ 173.208719][T22593] loop0: detected capacity change from 0 to 87 [ 173.213580][T22594] loop4: detected capacity change from 0 to 87 [ 173.218401][T22597] loop2: detected capacity change from 0 to 87 [ 173.230071][T22598] loop5: detected capacity change from 0 to 264192 [ 173.252218][T22598] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 173.282544][T22598] EXT4-fs (loop5): orphan cleanup on readonly fs [ 173.288925][T22598] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:54:10 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:10 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r2 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x4100) lseek(r3, 0x1200, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[], 0x8) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r2, 0xad701000) sendfile(r3, r4, 0x0, 0x8400fffffffa) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x400, 0x113000) sendmsg$nl_generic(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x15c, 0x28, 0x100, 0x70bd27, 0x25dfdbfb, {0x7}, [@generic="3f64a0cc8fee0baafa730a53ff2852cabb1ae0ddb32a817d87b0c3da06d4290169dc02506f26c26073513841f008f39cb7fd74e7683580511c9f6c0b1f76a1face46c0e501f643baca7ec8a47f71f00005a9a4bf1a3778d5b21d24a907118343440f1894423e54beb593e1f514048cc1d59fe9e9260a36a02f4a471de7d67fe75a2f70231dd815febbbb26958f2e7113051a93586cf6c0093f028fc550538a", @generic="d4625ca97a3bfee7019d675b1fd739ad14dc536ccd28db8ca7f1c1935e90b42d3d745ecf5d68743e148dbe91b7eeed92f2abbf356834451f22911cfd5f197316b9b60b70e652d064d7048e93e3e93e8a1f58c734b88d40e40182b2cf2d8ca446af17f2070c9e0c8389d46c249bdba7f9c95054f4e933560676d6af269805949e1c8da3ff3bf7abdc203b34fba1d270ec75b5fabc8ebfc9b898637e578cbfdf71202fb7522a4e07207e"]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x8884) write$P9_RREADLINK(r3, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:10 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xff6) 18:54:10 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc1000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:10 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 173.299791][T22598] EXT4-fs mount: 10 callbacks suppressed [ 173.299841][T22598] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.349176][T22619] FAT-fs (loop1): bogus number of reserved sectors [ 173.355704][T22619] FAT-fs (loop1): Can't find a valid FAT filesystem [ 173.367080][T22627] loop4: detected capacity change from 0 to 87 [ 173.374230][T22631] loop2: detected capacity change from 0 to 87 18:54:10 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x1402) 18:54:10 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 173.428434][T22648] loop0: detected capacity change from 0 to 87 [ 173.430546][T22649] loop3: detected capacity change from 0 to 87 [ 173.438306][T22650] loop5: detected capacity change from 0 to 264192 [ 173.457700][T22650] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 173.474664][T22650] EXT4-fs (loop5): orphan cleanup on readonly fs [ 173.481033][T22650] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 173.491896][T22650] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.537597][T22669] loop4: detected capacity change from 0 to 87 [ 173.555490][T22670] loop2: detected capacity change from 0 to 87 18:54:11 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:11 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:11 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc1030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:11 executing program 3: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000080)='./file1\x00', 0x3a3602, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:11 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:11 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x1f00) [ 174.239015][T22698] loop5: detected capacity change from 0 to 264192 [ 174.239090][T22699] loop2: detected capacity change from 0 to 87 [ 174.249196][T22702] loop0: detected capacity change from 0 to 87 [ 174.253352][T22701] loop4: detected capacity change from 0 to 87 [ 174.268661][T22698] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:54:11 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x10, 0x2, 0x7}, 0x200}}, 0x18) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e807300000000000000f74ac000"], 0xe) 18:54:11 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:11 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 174.322503][T22699] handle_bad_sector: 57 callbacks suppressed [ 174.322517][T22699] attempt to access beyond end of device [ 174.322517][T22699] loop2: rw=0, want=90, limit=87 [ 174.337981][T22698] EXT4-fs (loop5): orphan cleanup on readonly fs [ 174.345386][T22698] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 174.356296][T22698] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:11 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xda030000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 174.392277][T22728] loop3: detected capacity change from 0 to 87 [ 174.408254][T22734] loop0: detected capacity change from 0 to 87 [ 174.413504][T22699] attempt to access beyond end of device [ 174.413504][T22699] loop2: rw=2049, want=112, limit=87 [ 174.443537][T22728] attempt to access beyond end of device [ 174.443537][T22728] loop3: rw=0, want=90, limit=87 [ 174.455455][T22728] attempt to access beyond end of device [ 174.455455][T22728] loop3: rw=0, want=90, limit=87 [ 174.457319][T22744] loop4: detected capacity change from 0 to 87 [ 174.487570][T22728] attempt to access beyond end of device 18:54:11 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), 0x0, 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:11 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x4000) [ 174.487570][T22728] loop3: rw=2049, want=104, limit=87 [ 174.528007][ T4989] attempt to access beyond end of device [ 174.528007][ T4989] loop2: rw=1, want=110, limit=87 [ 174.539504][T22746] attempt to access beyond end of device [ 174.539504][T22746] loop3: rw=0, want=104, limit=87 [ 174.551024][T22757] loop5: detected capacity change from 0 to 264192 [ 174.558526][T22753] attempt to access beyond end of device [ 174.558526][T22753] loop3: rw=0, want=104, limit=87 [ 174.565307][T22760] loop0: detected capacity change from 0 to 87 [ 174.577001][T22757] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 174.611123][T22757] EXT4-fs (loop5): orphan cleanup on readonly fs [ 174.617592][T22757] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 174.628462][T22757] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.639631][ T1790] attempt to access beyond end of device [ 174.639631][ T1790] loop3: rw=1, want=102, limit=87 [ 174.670011][T22768] loop2: detected capacity change from 0 to 87 [ 174.708031][T22768] attempt to access beyond end of device [ 174.708031][T22768] loop2: rw=0, want=90, limit=87 18:54:12 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:12 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:12 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x3e}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "36e5a51b386f790094dc3642aa34d8c0"}, @NL80211_ATTR_PMK_LIFETIME={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4885}, 0x8000) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000240)) 18:54:12 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:12 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x8004) 18:54:12 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xdaffffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 175.228794][T22799] loop5: detected capacity change from 0 to 264192 [ 175.237712][T22802] FAT-fs (loop0): bogus number of reserved sectors [ 175.245234][T22801] loop4: detected capacity change from 0 to 87 [ 175.249499][T22802] FAT-fs (loop0): Can't find a valid FAT filesystem [ 175.257816][T22809] loop3: detected capacity change from 0 to 87 [ 175.267535][T22799] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 175.272120][T22811] loop2: detected capacity change from 0 to 87 [ 175.297599][T22799] EXT4-fs (loop5): orphan cleanup on readonly fs [ 175.303950][T22799] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 175.315032][T22799] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:12 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:12 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) r1 = fsmount(r0, 0x0, 0xd) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x4, 0x13a, &(0x7f0000000380)}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:12 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xf60f) 18:54:12 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 175.421549][T22837] loop4: detected capacity change from 0 to 87 [ 175.434488][T22838] FAT-fs (loop0): bogus number of reserved sectors [ 175.441041][T22838] FAT-fs (loop0): Can't find a valid FAT filesystem [ 175.455689][T22850] loop2: detected capacity change from 0 to 87 18:54:12 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe2ffffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:12 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 175.470770][T22852] loop3: detected capacity change from 0 to 87 [ 175.556157][T22872] loop4: detected capacity change from 0 to 87 [ 175.563661][T22874] loop5: detected capacity change from 0 to 264192 [ 175.581618][T22874] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 175.635784][T22874] EXT4-fs (loop5): orphan cleanup on readonly fs [ 175.642170][T22874] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 175.653100][T22874] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:13 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:13 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:13 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xff0f) 18:54:13 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="404f0499b3e00f0440067e68d2cca3cdcb3bf342a6155e78614b0d0109a2591d62dacc2bc2be3ffdbe7315d37c37c25e3c4fb4cb40eb3b516bc4ba4776974511b9429d00"/77], 0xe) 18:54:13 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:13 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf0ffffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 176.263107][T22897] loop3: detected capacity change from 0 to 87 [ 176.268116][T22896] loop4: detected capacity change from 0 to 87 [ 176.280930][T22903] loop5: detected capacity change from 0 to 264192 [ 176.288819][T22898] loop2: detected capacity change from 0 to 87 [ 176.297386][T22901] FAT-fs (loop0): bogus number of reserved sectors [ 176.303900][T22901] FAT-fs (loop0): Can't find a valid FAT filesystem 18:54:13 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xb61, 0x121900) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 176.324654][T22903] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 176.339317][T22903] EXT4-fs (loop5): orphan cleanup on readonly fs [ 176.345698][T22903] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 176.356623][T22903] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:13 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:13 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x80040) 18:54:13 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 176.464345][T22932] loop3: detected capacity change from 0 to 87 [ 176.499105][T22945] loop2: detected capacity change from 0 to 87 [ 176.501300][T22946] loop4: detected capacity change from 0 to 87 18:54:13 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:13 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x1000000) [ 176.768065][T22967] loop2: detected capacity change from 0 to 87 18:54:14 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:14 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:14 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:14 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) creat(&(0x7f0000000180)='./file1\x00', 0x84) lseek(r0, 0x1200, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x62202, 0x8) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000100)='./file1\x00', 0x105002, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000001700000500232e2f627573"], 0xe) 18:54:14 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:14 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x2000000) 18:54:14 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x2040000) [ 177.264240][T22989] loop3: detected capacity change from 0 to 87 [ 177.273288][T22993] loop2: detected capacity change from 0 to 87 [ 177.277005][T22990] loop5: detected capacity change from 0 to 264192 [ 177.299527][T23000] loop4: detected capacity change from 0 to 87 18:54:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x100000001) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 177.346743][T22990] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 177.381042][T22990] EXT4-fs (loop5): orphan cleanup on readonly fs 18:54:14 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 177.387437][T22990] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 177.398399][T22990] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.422106][T23015] loop2: detected capacity change from 0 to 87 18:54:14 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:14 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xf9fdffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 177.457106][T23023] loop0: detected capacity change from 0 to 87 [ 177.467995][T23024] loop3: detected capacity change from 0 to 87 [ 177.479320][T23029] loop1: detected capacity change from 0 to 87 [ 177.486802][T23024] FAT-fs (loop3): Unrecognized mount option "msdos" or missing value [ 177.495880][T23023] FAT-fs (loop0): bogus number of reserved sectors 18:54:14 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x3000000) [ 177.502930][T23023] FAT-fs (loop0): Can't find a valid FAT filesystem [ 177.521141][T23029] FAT-fs (loop1): bogus number of reserved sectors [ 177.521684][T23024] loop3: detected capacity change from 0 to 87 [ 177.527695][T23029] FAT-fs (loop1): Can't find a valid FAT filesystem [ 177.557978][T23024] FAT-fs (loop3): Unrecognized mount option "msdos" or missing value [ 177.568824][T23052] loop4: detected capacity change from 0 to 87 [ 177.587756][T23063] loop5: detected capacity change from 0 to 264192 [ 177.604698][T23066] loop2: detected capacity change from 0 to 87 [ 177.619621][T23063] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 177.677315][T23063] EXT4-fs (loop5): orphan cleanup on readonly fs [ 177.683671][T23063] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 177.694555][T23063] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:15 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:15 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:15 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:15 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000380)=""/252, 0xfc}], 0x2, 0x8, 0x0) fcntl$setstatus(r1, 0x4, 0x4100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa81a, 0x3) lseek(r0, 0x7f, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000080)={0xe, 0x17, 0xfffe, {0x5, './bus'}}, 0xe) open(&(0x7f0000000240)='./bus\x00', 0x111500, 0x0) 18:54:15 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x4000000) 18:54:15 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfbffffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 178.335288][T23096] loop3: detected capacity change from 0 to 87 [ 178.342509][T23101] loop2: detected capacity change from 0 to 87 [ 178.349433][T23098] loop0: detected capacity change from 0 to 87 [ 178.349477][T23097] loop4: detected capacity change from 0 to 87 [ 178.371681][T23098] FAT-fs (loop0): bogus number of reserved sectors [ 178.377817][T23106] loop5: detected capacity change from 0 to 264192 [ 178.378324][T23098] FAT-fs (loop0): Can't find a valid FAT filesystem 18:54:15 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x5000000) 18:54:15 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) close(r0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:15 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 178.435125][T23106] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 178.468811][T23106] EXT4-fs (loop5): orphan cleanup on readonly fs 18:54:15 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfc120000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 178.475177][T23106] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 178.486130][T23106] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.490719][T23123] loop1: detected capacity change from 0 to 87 [ 178.517743][T23123] FAT-fs (loop1): bogus number of reserved sectors [ 178.524263][T23123] FAT-fs (loop1): Can't find a valid FAT filesystem 18:54:15 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 178.535188][T23131] loop2: detected capacity change from 0 to 87 [ 178.539809][T23138] loop4: detected capacity change from 0 to 87 18:54:15 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 178.596752][T23156] loop0: detected capacity change from 0 to 87 [ 178.605609][T23158] loop3: detected capacity change from 0 to 87 [ 178.618086][T23162] loop5: detected capacity change from 0 to 264192 [ 178.626553][T23156] FAT-fs (loop0): bogus number of reserved sectors [ 178.633146][T23156] FAT-fs (loop0): Can't find a valid FAT filesystem [ 178.635316][T23162] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 178.654059][T23162] EXT4-fs (loop5): orphan cleanup on readonly fs [ 178.660437][T23162] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 178.671305][T23162] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.677327][T23174] loop4: detected capacity change from 0 to 87 18:54:16 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:16 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x6000000) 18:54:16 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:16 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:16 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) inotify_add_watch(r0, &(0x7f0000000080)='./bus\x00', 0x40000021) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:16 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 179.366339][T23200] loop5: detected capacity change from 0 to 264192 [ 179.367215][T23202] loop3: detected capacity change from 0 to 87 [ 179.380025][T23204] loop0: detected capacity change from 0 to 87 [ 179.382924][T23201] loop4: detected capacity change from 0 to 87 [ 179.387484][T23206] loop2: detected capacity change from 0 to 87 [ 179.402497][T23204] FAT-fs (loop0): bogus number of reserved sectors [ 179.409046][T23204] FAT-fs (loop0): Can't find a valid FAT filesystem [ 179.443295][T23202] handle_bad_sector: 70 callbacks suppressed [ 179.443312][T23202] attempt to access beyond end of device [ 179.443312][T23202] loop3: rw=0, want=90, limit=87 [ 179.461951][T23202] attempt to access beyond end of device [ 179.461951][T23202] loop3: rw=0, want=90, limit=87 [ 179.474018][T23200] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 179.485142][T23206] attempt to access beyond end of device 18:54:16 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:16 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 179.485142][T23206] loop2: rw=0, want=90, limit=87 [ 179.495345][T23200] EXT4-fs (loop5): orphan cleanup on readonly fs [ 179.501879][T23200] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 179.512782][T23200] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.525005][ T4989] attempt to access beyond end of device [ 179.525005][ T4989] loop3: rw=1, want=230, limit=87 18:54:16 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:16 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfeffffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:16 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x6040000) [ 179.546420][T23206] attempt to access beyond end of device [ 179.546420][T23206] loop2: rw=2049, want=112, limit=87 [ 179.591506][ T22] attempt to access beyond end of device [ 179.591506][ T22] loop2: rw=1, want=110, limit=87 [ 179.604102][T23241] loop3: detected capacity change from 0 to 87 [ 179.611256][T23243] loop0: detected capacity change from 0 to 87 [ 179.621211][T23234] loop1: detected capacity change from 0 to 87 18:54:16 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x80, 0xfffffffffffffff8, 0x6}) sendfile(r2, r0, 0x0, 0x180400) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) [ 179.644952][T23243] FAT-fs (loop0): bogus number of reserved sectors [ 179.651481][T23243] FAT-fs (loop0): Can't find a valid FAT filesystem [ 179.665010][T23259] loop4: detected capacity change from 0 to 87 [ 179.679009][T23234] FAT-fs (loop1): bogus number of reserved sectors [ 179.685603][T23234] FAT-fs (loop1): Can't find a valid FAT filesystem [ 179.694465][T23262] loop5: detected capacity change from 0 to 264192 [ 179.718033][T23269] loop2: detected capacity change from 0 to 87 [ 179.733215][T23262] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 179.769589][T23281] loop3: detected capacity change from 0 to 87 [ 179.779762][T23262] EXT4-fs (loop5): orphan cleanup on readonly fs [ 179.786134][T23262] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 179.797058][T23262] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.829959][T23269] attempt to access beyond end of device [ 179.829959][T23269] loop2: rw=0, want=90, limit=87 [ 179.875031][T23269] attempt to access beyond end of device [ 179.875031][T23269] loop2: rw=2049, want=112, limit=87 [ 179.922200][ T2125] attempt to access beyond end of device [ 179.922200][ T2125] loop2: rw=1, want=110, limit=87 18:54:17 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:17 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:17 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:17 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xff0f0000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:17 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:17 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x7000000) [ 180.450300][T23311] loop3: detected capacity change from 0 to 87 [ 180.458190][T23310] loop5: detected capacity change from 0 to 264192 [ 180.460049][T23312] loop0: detected capacity change from 0 to 87 [ 180.471210][T23315] loop4: detected capacity change from 0 to 87 [ 180.473985][T23316] loop2: detected capacity change from 0 to 87 18:54:17 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 180.497780][T23310] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 180.518655][T23312] FAT-fs (loop0): bogus number of reserved sectors [ 180.525205][T23312] FAT-fs (loop0): Can't find a valid FAT filesystem [ 180.530169][T23316] attempt to access beyond end of device [ 180.530169][T23316] loop2: rw=0, want=90, limit=87 18:54:17 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)={0x100c0, 0x8, 0x8}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="e5372c0edc4d35abaa56f4c2882c47734799d96af75c9bce02eb6e47cc031249362e953dd415fa89f9f740931906b94c1a3a744f5cda3d40315a5fb9ef1c9937d705d100000000e9c482865f851d1707b32addffdc6185df9558ab94d3387bab5edb124c0084cfcf31eb4e3567ae18bbf4196895"], 0xe) 18:54:17 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffbffff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:17 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffff) 18:54:17 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 180.569654][T23310] EXT4-fs (loop5): orphan cleanup on readonly fs [ 180.576021][T23310] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 180.586887][T23310] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.610783][T23340] loop1: detected capacity change from 0 to 87 [ 180.654053][T23355] loop4: detected capacity change from 0 to 87 [ 180.657994][T23356] loop3: detected capacity change from 0 to 87 [ 180.663739][T23358] loop0: detected capacity change from 0 to 87 [ 180.687297][T23340] FAT-fs (loop1): bogus number of reserved sectors [ 180.693866][T23340] FAT-fs (loop1): Can't find a valid FAT filesystem 18:54:17 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 180.699056][T23374] loop2: detected capacity change from 0 to 87 [ 180.707436][T23358] FAT-fs (loop0): bogus number of reserved sectors [ 180.713945][T23358] FAT-fs (loop0): Can't find a valid FAT filesystem [ 180.737145][T23377] loop5: detected capacity change from 0 to 264192 [ 180.773169][T23377] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 180.821334][T23396] loop4: detected capacity change from 0 to 87 [ 180.834652][T23377] EXT4-fs (loop5): orphan cleanup on readonly fs [ 180.841035][T23377] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 180.851932][T23377] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:18 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:18 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x10000000) 18:54:18 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:18 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:18 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140)) fcntl$setstatus(r0, 0x4, 0x4100) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = getuid() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {}, [], {}, [{0x8, 0x0, r5}], {0x10, 0x6}}, 0x2c, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {}, [], {}, [{0x8, 0x0, r6}], {0x10, 0x6}}, 0x2c, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x3, r4}, {0x2, 0x3, r4}, {0x2, 0x7}, {}, {0x2, 0x1, r4}], {0x4, 0x1}, [{0x8, 0x6, r5}, {0x8, 0x4}, {0x8, 0x1, r6}, {0x8, 0x5, r7}, {0x8, 0x2, r5}], {0x10, 0x4}, {0x20, 0xafad290d7e8aeade}}, 0x7c, 0x1) fchown(r1, r2, r5) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r8, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r0, &(0x7f0000000100)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) 18:54:18 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffff0300, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 181.466749][T23417] loop5: detected capacity change from 0 to 264192 [ 181.483770][T23417] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 181.501006][T23425] loop4: detected capacity change from 0 to 87 [ 181.505266][T23423] loop0: detected capacity change from 0 to 87 [ 181.512282][T23426] loop2: detected capacity change from 0 to 87 [ 181.517098][T23424] loop3: detected capacity change from 0 to 87 [ 181.547195][T23423] FAT-fs (loop0): bogus number of reserved sectors [ 181.553759][T23423] FAT-fs (loop0): Can't find a valid FAT filesystem 18:54:18 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:18 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:18 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x14020000) 18:54:18 executing program 3: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4100) lseek(r1, 0x1200, 0x0) r2 = openat(r1, &(0x7f0000000200)='./file1\x00', 0x6200, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0x8001, 0x0, 'client0\x00', 0x6, "c7ad5cce43d07432", "42888c55cd76aee754382198e2a099118e7606d0adb5f1bca0c18a578599582e", 0x9, 0x5}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) mmap(&(0x7f00003bf000/0x4000)=nil, 0x4000, 0x4, 0x80b9bdcb60dcdd55, r3, 0x1d697000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) write$P9_RREADLINK(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000017000005002e2f6275738a4184d2f987ae2cb7d85bf7c71814973a3e96f89e40b4d3b5ce1b966064fb7c3846a614bf"], 0xe) r5 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\x00\xaen/\xce4\x00\x001foCe\xd0\x04\x00\x00\x00\x8at\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x00dE\x8bqa\xda>mRv_\xa6%\x1dz\xd0\x11\xe3\x05N\xa1\x84\xea#P\x04\xca\xae\xeb?;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6Ww\xbe\x7f\xe8F\x15%\xad\t\xeeD\xb8\xf9\xa8\x06\xa7\xdc\x06\x7f\x00\xc3\x17\x96\x13[\\A\x1dO\x03~Dk\xeb\x80\f\xed\xe4\xe1[\xbd\x9d^\xffj\x9c\x14\xda\xb6v\x1d*1>\x8f\xfc\xcd\x9b3\xa2N*]\x00\x00\x00', 0x2) fcntl$addseals(r5, 0x409, 0x12) mmap(&(0x7f00006d2000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x5) [ 181.577300][T23417] EXT4-fs (loop5): orphan cleanup on readonly fs [ 181.583651][T23417] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 181.594611][T23417] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:18 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffff1f00, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 181.651736][T23454] loop0: detected capacity change from 0 to 87 [ 181.678018][T23454] FAT-fs (loop0): bogus number of reserved sectors [ 181.684542][T23454] FAT-fs (loop0): Can't find a valid FAT filesystem [ 181.697166][T23456] loop4: detected capacity change from 0 to 87 [ 181.700316][T23466] loop3: detected capacity change from 0 to 87 [ 181.713103][T23473] loop1: detected capacity change from 0 to 87 [ 181.724768][T23470] loop2: detected capacity change from 0 to 87 [ 181.739379][T23473] FAT-fs (loop1): bogus number of reserved sectors 18:54:18 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 181.745914][T23473] FAT-fs (loop1): Can't find a valid FAT filesystem [ 181.761201][T23484] loop5: detected capacity change from 0 to 264192 [ 181.792928][T23488] loop0: detected capacity change from 0 to 87 [ 181.795326][T23484] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 181.827783][T23488] FAT-fs (loop0): bogus number of reserved sectors [ 181.834305][T23488] FAT-fs (loop0): Can't find a valid FAT filesystem [ 181.872334][T23484] EXT4-fs (loop5): orphan cleanup on readonly fs [ 181.878819][T23484] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 181.889708][T23484] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:19 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:19 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:19 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x480) 18:54:19 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x1f000000) 18:54:19 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:19 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffe000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 182.581148][T23523] loop5: detected capacity change from 0 to 264192 [ 182.588169][T23525] loop4: detected capacity change from 0 to 87 [ 182.594006][T23524] loop2: detected capacity change from 0 to 87 [ 182.595080][T23528] loop3: detected capacity change from 0 to 87 [ 182.604050][T23529] loop0: detected capacity change from 0 to 87 [ 182.615513][T23523] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:54:19 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:19 executing program 3 (fault-call:12 fault-nth:0): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 182.667146][T23523] EXT4-fs (loop5): orphan cleanup on readonly fs [ 182.673535][T23523] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 182.684434][T23523] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.704681][T23529] FAT-fs (loop0): bogus number of reserved sectors 18:54:19 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffee07, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 182.711318][T23529] FAT-fs (loop0): Can't find a valid FAT filesystem 18:54:20 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x40000000) 18:54:20 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffbff, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 182.754569][T23549] loop4: detected capacity change from 0 to 87 18:54:20 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, 0x0, 0x0, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 182.801363][T23559] loop3: detected capacity change from 0 to 87 [ 182.846187][T23559] FAULT_INJECTION: forcing a failure. [ 182.846187][T23559] name failslab, interval 1, probability 0, space 0, times 0 [ 182.853032][T23570] loop5: detected capacity change from 0 to 264192 [ 182.858903][T23559] CPU: 1 PID: 23559 Comm: syz-executor.3 Not tainted 5.14.0-syzkaller #0 [ 182.873756][T23559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.874677][T23577] loop2: detected capacity change from 0 to 87 [ 182.883808][T23559] Call Trace: [ 182.883817][T23559] dump_stack_lvl+0xb7/0x103 [ 182.883841][T23559] dump_stack+0x11/0x1a [ 182.901922][T23559] should_fail+0x23c/0x250 [ 182.906379][T23559] ? mempool_alloc_slab+0x16/0x20 [ 182.911399][T23559] __should_failslab+0x81/0x90 [ 182.916159][T23559] should_failslab+0x5/0x20 [ 182.920654][T23559] kmem_cache_alloc+0x46/0x2e0 [ 182.925406][T23559] mempool_alloc_slab+0x16/0x20 [ 182.930254][T23559] ? mempool_free+0x130/0x130 [ 182.935039][T23559] mempool_alloc+0x8c/0x300 [ 182.939565][T23559] ? fat_bmap+0x258/0x290 [ 182.943883][T23559] bio_alloc_bioset+0xcc/0x530 [ 182.948644][T23559] ? fat_flush_inodes+0x57/0x160 [ 182.953571][T23559] submit_bh_wbc+0x130/0x330 [ 182.958157][T23559] block_read_full_page+0x78c/0x870 [ 182.963372][T23559] ? fat_block_truncate_page+0x30/0x30 [ 182.968813][T23559] ? __wake_up+0x8d/0xc0 [ 182.973050][T23559] ? __d_rehash+0x125/0x180 [ 182.977572][T23559] do_mpage_readpage+0xe26/0x10b0 [ 182.982592][T23559] ? avc_has_perm_noaudit+0x19a/0x240 [ 182.988035][T23559] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 182.993830][T23559] ? avc_has_perm+0x59/0x150 [ 182.998434][T23559] ? avc_has_perm+0xc8/0x150 [ 183.003057][T23559] ? fat_block_truncate_page+0x30/0x30 [ 183.008566][T23559] mpage_readpage+0x57/0xd0 [ 183.013055][T23559] ? fat_block_truncate_page+0x30/0x30 [ 183.018553][T23559] fat_readpage+0x18/0x20 [ 183.022950][T23559] filemap_read_page+0x6f/0x210 [ 183.027797][T23559] filemap_read+0xcbc/0x1210 [ 183.032377][T23559] ? iov_iter_gap_alignment+0x154/0x170 [ 183.038034][T23559] ? avc_policy_seqno+0x22/0x30 [ 183.042933][T23559] ? selinux_file_permission+0x22e/0x530 [ 183.048620][T23559] generic_file_read_iter+0x75/0x2c0 [ 183.053916][T23559] ? iov_iter_init+0xb1/0xf0 [ 183.058495][T23559] vfs_read+0x651/0x730 [ 183.062710][T23559] ksys_read+0xce/0x180 [ 183.066855][T23559] __x64_sys_read+0x3e/0x50 [ 183.071417][T23559] do_syscall_64+0x3d/0x90 [ 183.075902][T23559] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 183.081784][T23559] RIP: 0033:0x4665f9 [ 183.085670][T23559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 183.105286][T23559] RSP: 002b:00007f5f88a70188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.113769][T23559] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 183.121726][T23559] RDX: 000000007ffff000 RSI: 0000000020000180 RDI: 0000000000000007 [ 183.129678][T23559] RBP: 00007f5f88a701d0 R08: 0000000000000000 R09: 0000000000000000 [ 183.137740][T23559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.145774][T23559] R13: 00007ffc720f5e4f R14: 00007f5f88a70300 R15: 0000000000022000 [ 183.164996][T23570] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 183.182963][T23576] loop1: detected capacity change from 0 to 87 [ 183.195460][T23590] loop4: detected capacity change from 0 to 87 [ 183.202182][T23570] EXT4-fs (loop5): orphan cleanup on readonly fs [ 183.208602][T23570] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 183.219577][T23570] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.231309][T23576] FAT-fs (loop1): bogus number of reserved sectors [ 183.237259][T23559] Buffer I/O error on dev loop3, logical block 44, async page read [ 183.237851][T23576] FAT-fs (loop1): Can't find a valid FAT filesystem [ 183.274868][T23559] Buffer I/O error on dev loop3, logical block 44, async page read 18:54:20 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:20 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:20 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdf9, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:20 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:20 executing program 3 (fault-call:12 fault-nth:1): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:54:20 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x40000800) [ 183.698338][T23615] loop5: detected capacity change from 0 to 264192 [ 183.707666][T23615] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 183.732605][T23622] loop2: detected capacity change from 0 to 87 [ 183.734501][T23623] loop3: detected capacity change from 0 to 87 [ 183.747707][T23626] loop0: detected capacity change from 0 to 87 [ 183.754307][T23627] loop4: detected capacity change from 0 to 87 [ 183.776914][T23615] EXT4-fs (loop5): orphan cleanup on readonly fs [ 183.779467][T23626] FAT-fs (loop0): bogus number of reserved sectors 18:54:21 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfd, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 183.783266][T23615] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 183.789784][T23626] FAT-fs (loop0): Can't find a valid FAT filesystem [ 183.800757][T23615] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:21 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x80040000) 18:54:21 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 183.850883][T23623] FAULT_INJECTION: forcing a failure. [ 183.850883][T23623] name failslab, interval 1, probability 0, space 0, times 0 [ 183.863709][T23623] CPU: 1 PID: 23623 Comm: syz-executor.3 Not tainted 5.14.0-syzkaller #0 [ 183.872126][T23623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.875210][T23643] loop1: detected capacity change from 0 to 87 [ 183.882175][T23623] Call Trace: [ 183.882184][T23623] dump_stack_lvl+0xb7/0x103 [ 183.896340][T23623] dump_stack+0x11/0x1a [ 183.900554][T23623] should_fail+0x23c/0x250 [ 183.901705][T23643] FAT-fs (loop1): bogus number of reserved sectors [ 183.904974][T23623] ? mempool_alloc_slab+0x16/0x20 [ 183.911475][T23643] FAT-fs (loop1): Can't find a valid FAT filesystem [ 183.916476][T23623] __should_failslab+0x81/0x90 [ 183.916501][T23623] should_failslab+0x5/0x20 [ 183.932273][T23623] kmem_cache_alloc+0x46/0x2e0 [ 183.937040][T23623] mempool_alloc_slab+0x16/0x20 [ 183.941925][T23623] ? mempool_free+0x130/0x130 [ 183.946581][T23623] mempool_alloc+0x8c/0x300 [ 183.951077][T23623] ? submit_bio_noacct+0x7bb/0x7e0 [ 183.956168][T23623] ? bio_truncate+0x400/0x420 [ 183.960821][T23623] bio_alloc_bioset+0xcc/0x530 [ 183.965575][T23623] submit_bh_wbc+0x130/0x330 [ 183.970146][T23623] block_read_full_page+0x78c/0x870 [ 183.975335][T23623] ? fat_block_truncate_page+0x30/0x30 [ 183.980781][T23623] ? __wake_up+0x8d/0xc0 [ 183.985000][T23623] ? __d_rehash+0x125/0x180 [ 183.989505][T23623] do_mpage_readpage+0xe26/0x10b0 [ 183.994516][T23623] ? avc_has_perm_noaudit+0x19a/0x240 [ 183.999936][T23623] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 184.005735][T23623] ? avc_has_perm+0x59/0x150 [ 184.010441][T23623] ? avc_has_perm+0xc8/0x150 [ 184.015006][T23623] ? fat_block_truncate_page+0x30/0x30 [ 184.020441][T23623] mpage_readpage+0x57/0xd0 [ 184.024924][T23623] ? fat_block_truncate_page+0x30/0x30 [ 184.030463][T23623] fat_readpage+0x18/0x20 [ 184.034785][T23623] filemap_read_page+0x6f/0x210 [ 184.039720][T23623] filemap_read+0xcbc/0x1210 [ 184.044307][T23623] ? iov_iter_gap_alignment+0x154/0x170 [ 184.049863][T23623] ? avc_policy_seqno+0x22/0x30 [ 184.054705][T23623] ? selinux_file_permission+0x22e/0x530 [ 184.060334][T23623] generic_file_read_iter+0x75/0x2c0 [ 184.065616][T23623] ? iov_iter_init+0xb1/0xf0 [ 184.070277][T23623] vfs_read+0x651/0x730 [ 184.074456][T23623] ksys_read+0xce/0x180 [ 184.078601][T23623] __x64_sys_read+0x3e/0x50 [ 184.083189][T23623] do_syscall_64+0x3d/0x90 [ 184.087656][T23623] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 184.093596][T23623] RIP: 0033:0x4665f9 [ 184.097476][T23623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 184.117078][T23623] RSP: 002b:00007f5f88a70188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.125483][T23623] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 184.133446][T23623] RDX: 000000007ffff000 RSI: 0000000020000180 RDI: 0000000000000007 [ 184.141562][T23623] RBP: 00007f5f88a701d0 R08: 0000000000000000 R09: 0000000000000000 18:54:21 executing program 3 (fault-call:12 fault-nth:2): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 184.149527][T23623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.157488][T23623] R13: 00007ffc720f5e4f R14: 00007f5f88a70300 R15: 0000000000022000 [ 184.165731][T23623] Buffer I/O error on dev loop3, logical block 44, async page read [ 184.173709][T23623] Buffer I/O error on dev loop3, logical block 44, async page read 18:54:21 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 184.245046][T23667] loop4: detected capacity change from 0 to 87 [ 184.256789][T23668] loop2: detected capacity change from 0 to 87 [ 184.259777][T23676] loop0: detected capacity change from 0 to 87 [ 184.264527][T23673] loop5: detected capacity change from 0 to 264192 [ 184.285038][T23681] loop3: detected capacity change from 0 to 87 18:54:21 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 184.318622][T23676] FAT-fs (loop0): invalid media value (0x00) [ 184.324648][T23676] FAT-fs (loop0): Can't find a valid FAT filesystem [ 184.341252][T23673] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 184.355069][T23681] Buffer I/O error on dev loop3, logical block 44, async page read [ 184.374397][T23681] FAULT_INJECTION: forcing a failure. [ 184.374397][T23681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.387472][T23681] CPU: 1 PID: 23681 Comm: syz-executor.3 Not tainted 5.14.0-syzkaller #0 [ 184.395921][T23681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.406059][T23681] Call Trace: [ 184.409328][T23681] dump_stack_lvl+0xb7/0x103 [ 184.413907][T23681] dump_stack+0x11/0x1a [ 184.418045][T23681] should_fail+0x23c/0x250 [ 184.422872][T23681] should_fail_usercopy+0x16/0x20 [ 184.427958][T23681] copy_page_to_iter+0x272/0x940 [ 184.432897][T23681] filemap_read+0xed6/0x1210 [ 184.437533][T23681] ? iov_iter_gap_alignment+0x153/0x170 [ 184.443133][T23681] ? avc_policy_seqno+0x22/0x30 [ 184.448008][T23681] ? selinux_file_permission+0x22e/0x530 [ 184.453660][T23681] generic_file_read_iter+0x75/0x2c0 [ 184.458944][T23681] ? iov_iter_init+0xb1/0xf0 [ 184.463536][T23681] vfs_read+0x651/0x730 [ 184.467696][T23681] ksys_read+0xce/0x180 [ 184.471846][T23681] __x64_sys_read+0x3e/0x50 [ 184.476351][T23681] do_syscall_64+0x3d/0x90 [ 184.480784][T23681] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 184.486674][T23681] RIP: 0033:0x4665f9 [ 184.490550][T23681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 184.510672][T23681] RSP: 002b:00007f5f88a70188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.519087][T23681] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 184.527088][T23681] RDX: 000000007ffff000 RSI: 0000000020000180 RDI: 0000000000000007 [ 184.535090][T23681] RBP: 00007f5f88a701d0 R08: 0000000000000000 R09: 0000000000000000 [ 184.543055][T23681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.551017][T23681] R13: 00007ffc720f5e4f R14: 00007f5f88a70300 R15: 0000000000022000 [ 184.563224][T23673] EXT4-fs (loop5): orphan cleanup on readonly fs [ 184.569568][T23673] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 184.580498][T23673] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.631217][T23703] loop4: detected capacity change from 0 to 87 18:54:21 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:21 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xe5ffffff) 18:54:21 executing program 3 (fault-call:12 fault-nth:3): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:54:21 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:21 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:21 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 184.763572][T23725] loop0: detected capacity change from 0 to 87 [ 184.764339][T23727] loop4: detected capacity change from 0 to 87 [ 184.774178][T23726] loop5: detected capacity change from 0 to 264192 [ 184.777662][T23728] loop3: detected capacity change from 0 to 87 [ 184.797209][T23731] loop2: detected capacity change from 0 to 87 [ 184.805897][T23728] handle_bad_sector: 46 callbacks suppressed 18:54:22 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) [ 184.805911][T23728] attempt to access beyond end of device [ 184.805911][T23728] loop3: rw=0, want=90, limit=87 [ 184.824430][T23726] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 184.835785][T23725] FAT-fs (loop0): invalid media value (0x00) [ 184.840413][T23728] attempt to access beyond end of device [ 184.840413][T23728] loop3: rw=0, want=90, limit=87 [ 184.841785][T23725] FAT-fs (loop0): Can't find a valid FAT filesystem 18:54:22 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 184.852198][T23728] Buffer I/O error on dev loop3, logical block 44, async page read [ 184.893015][T23728] FAULT_INJECTION: forcing a failure. [ 184.893015][T23728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.906377][T23728] CPU: 0 PID: 23728 Comm: syz-executor.3 Not tainted 5.14.0-syzkaller #0 [ 184.908168][T23731] attempt to access beyond end of device [ 184.908168][T23731] loop2: rw=0, want=90, limit=87 [ 184.914786][T23728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.914799][T23728] Call Trace: [ 184.914806][T23728] dump_stack_lvl+0xb7/0x103 [ 184.943161][T23728] dump_stack+0x11/0x1a [ 184.947325][T23728] should_fail+0x23c/0x250 [ 184.951750][T23728] __alloc_pages+0x102/0x320 [ 184.952526][T23756] loop1: detected capacity change from 0 to 87 [ 184.956409][T23728] alloc_pages_vma+0x513/0x680 [ 184.956438][T23728] ? bio_truncate+0x400/0x420 [ 184.956455][T23728] wp_page_copy+0x14c/0x10c0 [ 184.976572][T23728] ? submit_bio+0x10c/0x190 [ 184.981109][T23728] ? submit_bh_wbc+0x2f3/0x330 [ 184.985879][T23728] do_wp_page+0x5a8/0xba0 [ 184.990208][T23728] handle_mm_fault+0xb11/0x1a50 [ 184.995088][T23728] do_user_addr_fault+0x609/0xbe0 [ 185.000121][T23728] exc_page_fault+0x91/0x220 [ 185.004698][T23728] asm_exc_page_fault+0x1e/0x30 [ 185.009539][T23728] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 185.016196][T23728] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 185.035812][T23728] RSP: 0018:ffffc9000eb2fb48 EFLAGS: 00010206 [ 185.041866][T23728] RAX: ffff888104681a68 RBX: 0000000020000180 RCX: 0000000000000180 [ 185.049819][T23728] RDX: 0000000000001000 RSI: ffff8881358e1e80 RDI: 0000000020001000 [ 185.057788][T23728] RBP: 00007ffffffff000 R08: 0000000000000000 R09: 0001ffffffffffff [ 185.065844][T23728] R10: 00018881358e1fff R11: 00000000a2704302 R12: 00007ffffffff000 [ 185.073802][T23728] R13: 0000000000000000 R14: ffff8881358e1000 R15: 0000000000001000 [ 185.081760][T23728] copy_page_to_iter+0x2ef/0x940 [ 185.086789][T23728] filemap_read+0xed6/0x1210 [ 185.091379][T23728] ? iov_iter_gap_alignment+0x153/0x170 [ 185.096922][T23728] ? avc_policy_seqno+0x22/0x30 [ 185.101756][T23728] ? selinux_file_permission+0x22e/0x530 [ 185.107380][T23728] generic_file_read_iter+0x75/0x2c0 [ 185.112670][T23728] ? iov_iter_init+0xb1/0xf0 [ 185.117254][T23728] vfs_read+0x651/0x730 [ 185.121472][T23728] ksys_read+0xce/0x180 [ 185.125623][T23728] __x64_sys_read+0x3e/0x50 [ 185.130111][T23728] do_syscall_64+0x3d/0x90 [ 185.134664][T23728] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 185.140550][T23728] RIP: 0033:0x4665f9 [ 185.144437][T23728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.164026][T23728] RSP: 002b:00007f5f88a70188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.172459][T23728] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 185.180497][T23728] RDX: 000000007ffff000 RSI: 0000000020000180 RDI: 0000000000000007 [ 185.188450][T23728] RBP: 00007f5f88a701d0 R08: 0000000000000000 R09: 0000000000000000 [ 185.196402][T23728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.204412][T23728] R13: 00007ffc720f5e4f R14: 00007f5f88a70300 R15: 0000000000022000 [ 185.212994][T23726] EXT4-fs (loop5): orphan cleanup on readonly fs [ 185.219349][T23726] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 185.230262][T23726] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:22 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xf60f0000) [ 185.230918][T23731] attempt to access beyond end of device [ 185.230918][T23731] loop2: rw=2049, want=104, limit=87 [ 185.275489][T23767] loop0: detected capacity change from 0 to 87 [ 185.297953][T23770] loop4: detected capacity change from 0 to 87 [ 185.320466][T23767] FAT-fs (loop0): invalid media value (0x00) [ 185.326494][T23767] FAT-fs (loop0): Can't find a valid FAT filesystem [ 185.333854][T23777] loop2: detected capacity change from 0 to 87 18:54:22 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x12) 18:54:22 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffff85, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 185.375607][T23777] attempt to access beyond end of device [ 185.375607][T23777] loop2: rw=0, want=90, limit=87 [ 185.410577][T23756] FAT-fs (loop1): bogus number of reserved sectors [ 185.417128][T23756] FAT-fs (loop1): Can't find a valid FAT filesystem 18:54:22 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 185.435372][T23728] attempt to access beyond end of device [ 185.435372][T23728] loop3: rw=0, want=90, limit=87 [ 185.445810][T23728] Buffer I/O error on dev loop3, logical block 44, async page read [ 185.465492][ T2125] attempt to access beyond end of device [ 185.465492][ T2125] loop2: rw=1, want=230, limit=87 [ 185.478394][T23805] loop4: detected capacity change from 0 to 87 [ 185.485714][T23806] loop0: detected capacity change from 0 to 87 [ 185.498320][T23806] FAT-fs (loop0): invalid media value (0x00) [ 185.504387][T23806] FAT-fs (loop0): Can't find a valid FAT filesystem [ 185.517258][T23813] loop5: detected capacity change from 0 to 264192 [ 185.543227][T23813] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 185.553457][T23813] EXT4-fs (loop5): orphan cleanup on readonly fs [ 185.559820][T23813] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 185.570669][T23813] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:23 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:23 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xf6ffffff) 18:54:23 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, 0x0, 0x12) 18:54:23 executing program 3 (fault-call:12 fault-nth:4): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:54:23 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:23 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffff8c, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 185.795801][T23841] loop2: detected capacity change from 0 to 87 [ 185.803709][T23843] loop4: detected capacity change from 0 to 87 [ 185.820246][T23851] loop3: detected capacity change from 0 to 87 [ 185.826877][T23849] loop5: detected capacity change from 0 to 264192 18:54:23 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, 0x0, 0x12) [ 185.846618][T23852] loop0: detected capacity change from 0 to 87 [ 185.859375][T23849] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 185.860191][T23841] attempt to access beyond end of device [ 185.860191][T23841] loop2: rw=0, want=90, limit=87 [ 185.885085][T23851] attempt to access beyond end of device [ 185.885085][T23851] loop3: rw=0, want=90, limit=87 [ 185.904046][T23849] EXT4-fs (loop5): orphan cleanup on readonly fs [ 185.909569][T23867] loop1: detected capacity change from 0 to 87 [ 185.910459][T23849] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 185.927482][T23849] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.938997][T23841] attempt to access beyond end of device [ 185.938997][T23841] loop2: rw=2049, want=112, limit=87 [ 185.944842][T23852] FAT-fs (loop0): invalid media value (0x00) [ 185.955901][T23852] FAT-fs (loop0): Can't find a valid FAT filesystem [ 185.976955][T23867] FAT-fs (loop1): bogus number of reserved sectors [ 185.983481][T23867] FAT-fs (loop1): Can't find a valid FAT filesystem [ 185.992402][T23871] FAULT_INJECTION: forcing a failure. [ 185.992402][T23871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.005453][T23871] CPU: 1 PID: 23871 Comm: syz-executor.3 Not tainted 5.14.0-syzkaller #0 [ 186.013862][T23871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.024076][T23871] Call Trace: [ 186.027337][T23871] dump_stack_lvl+0xb7/0x103 [ 186.031953][T23871] dump_stack+0x11/0x1a [ 186.036093][T23871] should_fail+0x23c/0x250 [ 186.040514][T23871] should_fail_usercopy+0x16/0x20 [ 186.045582][T23871] copy_page_to_iter+0x272/0x940 [ 186.050519][T23871] filemap_read+0xed6/0x1210 [ 186.055108][T23871] ? iov_iter_gap_alignment+0x153/0x170 [ 186.060755][T23871] ? avc_policy_seqno+0x22/0x30 [ 186.065593][T23871] ? selinux_file_permission+0x22e/0x530 [ 186.071302][T23871] generic_file_read_iter+0x75/0x2c0 [ 186.076628][T23871] ? iov_iter_init+0xb1/0xf0 [ 186.081226][T23871] vfs_read+0x651/0x730 [ 186.085397][T23871] ksys_read+0xce/0x180 [ 186.089539][T23871] __x64_sys_read+0x3e/0x50 [ 186.094052][T23871] do_syscall_64+0x3d/0x90 [ 186.098466][T23871] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 186.104347][T23871] RIP: 0033:0x4665f9 [ 186.108226][T23871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 186.128002][T23871] RSP: 002b:00007f5f88a4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.136402][T23871] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 186.144369][T23871] RDX: 000000007ffff000 RSI: 0000000020000180 RDI: 0000000000000007 18:54:23 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xfeffffff) 18:54:23 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffffda, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:23 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 186.152319][T23871] RBP: 00007f5f88a4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 186.160294][T23871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.168262][T23871] R13: 00007ffc720f5e4f R14: 00007f5f88a4f300 R15: 0000000000022000 [ 186.189299][T23879] loop4: detected capacity change from 0 to 2176 18:54:23 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, 0x0, 0x12) [ 186.232762][T23897] loop2: detected capacity change from 0 to 87 [ 186.264043][T23905] loop5: detected capacity change from 0 to 264192 18:54:23 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xff0f0000) [ 186.281507][T23904] loop0: detected capacity change from 0 to 87 [ 186.289510][T23905] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 186.314114][T23910] loop4: detected capacity change from 0 to 87 [ 186.331690][T23904] FAT-fs (loop0): invalid media value (0x00) [ 186.332226][T23905] EXT4-fs (loop5): orphan cleanup on readonly fs [ 186.337765][T23904] FAT-fs (loop0): Can't find a valid FAT filesystem [ 186.350673][T23905] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 186.361542][T23905] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.401331][T23924] loop2: detected capacity change from 0 to 87 18:54:23 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:23 executing program 3 (fault-call:12 fault-nth:5): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) 18:54:23 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="361affff165e86b19792f89fbf4f396dd90ffc032db495903dc646cd5c7d190f2f8b070315f4a26e861652963e9f3f75e8af0a4d8ca0756ee9148b1fd769178a2d8f5b7b2f59a3c6e6b50b8022f5836de5fea5cd8c2fa79c8865390fc77f4a4d23db64e14e51b7c4f0a1445b3f38092a9c1c8dbeea52d9944122e233dbd2f70edf4e46d6adcf4296403c60855d8e7a0069169e41844ed461205570c4454527a2f98e987aaa5e24faebb3bb20079b133a726c6e558637f25b10d004f899de38b49d0803ba7d9c7ee0b017203c410c72e4f93ad5c6985a9f6954f1aaff39b56e3915b6a759181dac346ebb0c3d225209354d09312f8f9b8824f77fbb38c7f8f6297a169c7a200c6094b05bbf92", @ANYRES16=r1], 0x12) 18:54:23 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:23 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xffffff0f) 18:54:23 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xffffffe2, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 186.778972][T23950] loop5: detected capacity change from 0 to 264192 [ 186.785912][T23951] loop2: detected capacity change from 0 to 87 [ 186.789431][T23949] loop3: detected capacity change from 0 to 87 [ 186.795826][T23954] loop0: detected capacity change from 0 to 87 [ 186.803325][T23955] loop4: detected capacity change from 0 to 87 [ 186.812249][T23950] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:54:24 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16, @ANYBLOB="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"], 0x12) 18:54:24 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:24 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xffffffe5) [ 186.842181][T23954] FAT-fs (loop0): bogus number of FAT sectors [ 186.848303][T23954] FAT-fs (loop0): Can't find a valid FAT filesystem 18:54:24 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff000) [ 186.909658][T23950] EXT4-fs (loop5): orphan cleanup on readonly fs [ 186.916018][T23950] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 186.918889][T23976] loop1: detected capacity change from 0 to 87 [ 186.926902][T23950] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.940599][T23976] FAT-fs (loop1): bogus number of reserved sectors [ 186.950479][T23976] FAT-fs (loop1): Can't find a valid FAT filesystem 18:54:24 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff0, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:24 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT, @ANYRES16], 0x12) [ 186.972357][T23988] loop4: detected capacity change from 0 to 87 [ 186.979038][T23982] loop0: detected capacity change from 0 to 87 [ 187.009923][T24003] loop3: detected capacity change from 0 to 87 [ 187.019845][T23997] loop2: detected capacity change from 0 to 87 [ 187.033744][T23982] FAT-fs (loop0): bogus number of FAT sectors [ 187.039862][T23982] FAT-fs (loop0): Can't find a valid FAT filesystem [ 187.097797][T24003] Buffer I/O error on dev loop3, logical block 44, async page read [ 187.114475][T24003] Buffer I/O error on dev loop3, logical block 44, async page read [ 187.126231][T24021] loop4: detected capacity change from 0 to 87 18:54:24 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffff6) 18:54:24 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:24 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:24 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT], 0x12) 18:54:24 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:24 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x2000) [ 187.784171][T24042] loop4: detected capacity change from 0 to 87 [ 187.789677][T24043] loop3: detected capacity change from 0 to 87 [ 187.793745][T24044] loop0: detected capacity change from 0 to 87 [ 187.799788][T24047] loop2: detected capacity change from 0 to 87 [ 187.813051][T24048] loop5: detected capacity change from 0 to 264192 18:54:25 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1], 0x12) [ 187.837197][T24044] FAT-fs (loop0): bogus number of FAT sectors [ 187.843295][T24044] FAT-fs (loop0): Can't find a valid FAT filesystem [ 187.853733][T24048] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 18:54:25 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffe) 18:54:25 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x3000) [ 187.909859][T24048] EXT4-fs (loop5): orphan cleanup on readonly fs [ 187.916312][T24048] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 187.927258][T24048] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:25 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:25 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffb, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 187.971178][T24076] loop4: detected capacity change from 0 to 87 18:54:25 executing program 4: r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x12) 18:54:25 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffe, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 188.014861][T24091] loop2: detected capacity change from 0 to 87 [ 188.016434][T24092] loop0: detected capacity change from 0 to 87 [ 188.023489][T24093] loop1: detected capacity change from 0 to 87 [ 188.037155][T24096] loop3: detected capacity change from 0 to 87 [ 188.066476][T24093] FAT-fs (loop1): bogus number of reserved sectors [ 188.072996][T24093] FAT-fs (loop1): Can't find a valid FAT filesystem [ 188.087682][T24096] Buffer I/O error on dev loop3, logical block 44, async page read [ 188.096049][T24107] loop5: detected capacity change from 0 to 264192 18:54:25 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:25 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x100000000000000) [ 188.116418][T24107] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 188.139453][T24122] loop4: detected capacity change from 0 to 87 [ 188.146365][T24107] EXT4-fs (loop5): orphan cleanup on readonly fs [ 188.152787][T24107] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:54:25 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x3618) [ 188.163741][T24107] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.204945][T24136] loop0: detected capacity change from 0 to 87 [ 188.206008][T24139] loop2: detected capacity change from 0 to 87 [ 188.259635][T24148] loop3: detected capacity change from 0 to 87 [ 188.294932][T24148] Buffer I/O error on dev loop3, logical block 44, async page read [ 188.317260][T24148] Buffer I/O error on dev loop3, logical block 44, async page read 18:54:26 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:26 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) 18:54:26 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xedc000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:26 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x200000000000000) 18:54:26 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:26 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7fff6400) [ 188.882853][T24179] loop0: detected capacity change from 0 to 87 [ 188.891122][T24180] loop5: detected capacity change from 0 to 264192 [ 188.895502][T24186] loop4: detected capacity change from 0 to 87 [ 188.902014][T24187] loop2: detected capacity change from 0 to 87 [ 188.904986][T24183] loop3: detected capacity change from 0 to 87 18:54:26 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:26 executing program 4 (fault-call:6 fault-nth:0): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) 18:54:26 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x204000000000000) [ 188.946375][T24180] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 188.981607][T24183] Buffer I/O error on dev loop3, logical block 44, async page read [ 189.011609][T24183] Buffer I/O error on dev loop3, logical block 44, async page read [ 189.024942][T24180] EXT4-fs (loop5): orphan cleanup on readonly fs [ 189.031366][T24180] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 189.040004][T24209] loop0: detected capacity change from 0 to 87 [ 189.042355][T24180] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.073784][T24221] loop4: detected capacity change from 0 to 87 [ 189.087547][T24213] loop1: detected capacity change from 0 to 87 [ 189.089387][T24221] FAULT_INJECTION: forcing a failure. [ 189.089387][T24221] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.107037][T24221] CPU: 1 PID: 24221 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 18:54:26 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff002) [ 189.115630][T24221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.125673][T24221] Call Trace: [ 189.128940][T24221] dump_stack_lvl+0xb7/0x103 [ 189.133537][T24221] dump_stack+0x11/0x1a [ 189.136221][T24213] FAT-fs (loop1): bogus number of reserved sectors [ 189.137687][T24221] should_fail+0x23c/0x250 [ 189.144189][T24213] FAT-fs (loop1): Can't find a valid FAT filesystem [ 189.148579][T24221] __alloc_pages+0x102/0x320 [ 189.148605][T24221] alloc_pages+0x2e8/0x340 [ 189.148626][T24221] __page_cache_alloc+0x4d/0xf0 [ 189.168974][T24221] pagecache_get_page+0x607/0x920 18:54:26 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:26 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 189.174002][T24221] grab_cache_page_write_begin+0x3f/0x70 [ 189.179645][T24221] cont_write_begin+0x501/0x850 [ 189.184682][T24221] ? __list_del_entry_valid+0x54/0xc0 [ 189.190138][T24221] ? __list_add_valid+0x28/0x90 [ 189.195039][T24221] fat_write_begin+0x61/0xf0 [ 189.199715][T24221] ? fat_block_truncate_page+0x30/0x30 [ 189.205266][T24221] generic_perform_write+0x1a6/0x3d0 [ 189.208748][T24232] loop2: detected capacity change from 0 to 87 [ 189.210548][T24221] __generic_file_write_iter+0x174/0x310 [ 189.222306][T24221] ? generic_write_checks+0x250/0x290 [ 189.227753][T24221] generic_file_write_iter+0x75/0x130 [ 189.233126][T24221] vfs_write+0x77d/0x8c0 [ 189.237373][T24221] ksys_write+0xce/0x180 [ 189.241609][T24221] __x64_sys_write+0x3e/0x50 [ 189.246196][T24221] do_syscall_64+0x3d/0x90 [ 189.250647][T24221] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 189.256568][T24221] RIP: 0033:0x4665f9 [ 189.260456][T24221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 189.280265][T24221] RSP: 002b:00007f671f12e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.288686][T24221] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 189.296736][T24221] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000003 [ 189.304695][T24221] RBP: 00007f671f12e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 189.312729][T24221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.320678][T24221] R13: 00007ffdd5415b0f R14: 00007f671f12e300 R15: 0000000000022000 [ 189.404515][T24256] loop3: detected capacity change from 0 to 87 [ 189.413973][T24258] loop5: detected capacity change from 0 to 264192 [ 189.418981][T24261] loop0: detected capacity change from 0 to 87 [ 189.441607][T24256] Buffer I/O error on dev loop3, logical block 44, async page read [ 189.473760][T24256] Buffer I/O error on dev loop3, logical block 44, async page read [ 189.482620][T24258] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 189.498424][T24258] EXT4-fs (loop5): orphan cleanup on readonly fs [ 189.504859][T24258] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 189.515846][T24258] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:27 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:27 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x300000000000000) 18:54:27 executing program 4 (fault-call:6 fault-nth:1): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) 18:54:27 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:27 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff003) 18:54:27 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 189.931619][T24287] loop5: detected capacity change from 0 to 264192 [ 189.938563][T24289] loop3: detected capacity change from 0 to 87 [ 189.941819][T24288] loop0: detected capacity change from 0 to 87 [ 189.945747][T24292] loop2: detected capacity change from 0 to 87 [ 189.957514][T24293] loop4: detected capacity change from 0 to 87 [ 189.965720][T24287] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 189.977512][T24294] ================================================================== [ 189.980290][T24289] handle_bad_sector: 61 callbacks suppressed [ 189.980302][T24289] attempt to access beyond end of device [ 189.980302][T24289] loop3: rw=0, want=90, limit=87 [ 189.985592][T24294] BUG: KCSAN: data-race in copy_page_to_iter / fat_set_state [ 190.009272][T24294] [ 190.011577][T24294] write to 0xffff888137bf1025 of 1 bytes by task 24289 on cpu 1: [ 190.019277][T24294] fat_set_state+0x16c/0x1d0 [ 190.023874][T24294] fat_fill_super+0x263a/0x2a80 [ 190.028703][T24294] msdos_fill_super+0x29/0x30 [ 190.033389][T24294] mount_bdev+0x1e8/0x290 [ 190.037706][T24294] msdos_mount+0x2d/0x40 [ 190.041930][T24294] legacy_get_tree+0x70/0xc0 [ 190.046501][T24294] vfs_get_tree+0x4a/0x1a0 [ 190.050897][T24294] path_mount+0x11ca/0x1d00 [ 190.055384][T24294] __se_sys_mount+0x23d/0x2e0 [ 190.060045][T24294] __x64_sys_mount+0x63/0x70 [ 190.064618][T24294] do_syscall_64+0x3d/0x90 [ 190.069025][T24294] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 190.074903][T24294] [ 190.077296][T24294] read to 0xffff888137bf1000 of 1377 bytes by task 24294 on cpu 0: [ 190.085167][T24294] copy_page_to_iter+0x2e1/0x940 [ 190.090093][T24294] filemap_read+0xed6/0x1210 [ 190.094667][T24294] generic_file_read_iter+0x75/0x2c0 [ 190.099935][T24294] blkdev_read_iter+0xb9/0xf0 [ 190.104590][T24294] vfs_read+0x651/0x730 [ 190.108731][T24294] ksys_read+0xce/0x180 [ 190.112866][T24294] __x64_sys_read+0x3e/0x50 [ 190.117356][T24294] do_syscall_64+0x3d/0x90 [ 190.121757][T24294] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 190.127639][T24294] [ 190.129941][T24294] Reported by Kernel Concurrency Sanitizer on: [ 190.136067][T24294] CPU: 0 PID: 24294 Comm: systemd-udevd Not tainted 5.14.0-syzkaller #0 [ 190.144457][T24294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.154663][T24294] ================================================================== [ 190.170241][T24289] attempt to access beyond end of device [ 190.170241][T24289] loop3: rw=0, want=90, limit=87 [ 190.180783][T24289] Buffer I/O error on dev loop3, logical block 44, async page read [ 190.199914][T24287] EXT4-fs (loop5): orphan cleanup on readonly fs [ 190.206294][T24287] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 190.217173][T24287] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.219016][T24310] FAULT_INJECTION: forcing a failure. [ 190.219016][T24310] name failslab, interval 1, probability 0, space 0, times 0 [ 190.240784][T24310] CPU: 0 PID: 24310 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 190.248186][T24289] attempt to access beyond end of device [ 190.248186][T24289] loop3: rw=0, want=90, limit=87 [ 190.249190][T24310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.249202][T24310] Call Trace: [ 190.249210][T24310] dump_stack_lvl+0xb7/0x103 [ 190.259600][T24289] Buffer I/O error on dev loop3, logical block 44, async page read [ 190.269623][T24310] dump_stack+0x11/0x1a [ 190.269646][T24310] should_fail+0x23c/0x250 [ 190.294069][T24310] ? kcalloc+0x32/0x50 [ 190.295267][T24289] attempt to access beyond end of device [ 190.295267][T24289] loop3: rw=2049, want=104, limit=87 [ 190.298153][T24310] __should_failslab+0x81/0x90 [ 190.313682][T24310] should_failslab+0x5/0x20 [ 190.318203][T24310] __kmalloc+0x66/0x340 [ 190.322347][T24310] kcalloc+0x32/0x50 [ 190.326229][T24310] ext4_find_extent+0x21c/0x7f0 [ 190.331082][T24310] ? __list_del_entry_valid+0x54/0xc0 [ 190.336451][T24310] ext4_ext_map_blocks+0xd9/0x1f10 [ 190.341551][T24310] ? rmqueue+0x4a/0xcc0 [ 190.345692][T24310] ? __down_read_common+0x16d/0x530 [ 190.350875][T24310] ? percpu_counter_add_batch+0x69/0xd0 [ 190.356475][T24310] ? ext4_es_lookup_extent+0x206/0x490 [ 190.361948][T24310] ext4_da_get_block_prep+0x428/0x9b0 [ 190.367313][T24310] __block_write_begin_int+0x4a2/0x1060 [ 190.372911][T24310] ? add_to_page_cache_lru+0x150/0x1b0 [ 190.378382][T24310] ? ext4_da_release_space+0x230/0x230 [ 190.383883][T24310] ? ext4_da_write_begin+0x3f0/0x7f0 [ 190.389165][T24310] ? ext4_da_release_space+0x230/0x230 [ 190.394620][T24310] __block_write_begin+0x2b/0x40 [ 190.399577][T24310] ext4_da_write_begin+0x4a8/0x7f0 [ 190.404720][T24310] generic_perform_write+0x1a6/0x3d0 [ 190.410007][T24310] ext4_buffered_write_iter+0x305/0x400 [ 190.415718][T24310] ext4_file_write_iter+0x2e7/0x11a0 [ 190.420992][T24310] ? avc_policy_seqno+0x22/0x30 [ 190.425847][T24310] ? selinux_file_permission+0x22e/0x530 [ 190.431486][T24310] ? fsnotify_perm+0x5a/0x370 [ 190.436156][T24310] ? security_file_permission+0x7c/0xa0 [ 190.441705][T24310] ? iov_iter_init+0xb1/0xf0 [ 190.446402][T24310] vfs_write+0x77d/0x8c0 [ 190.450629][T24310] ksys_write+0xce/0x180 [ 190.454861][T24310] __x64_sys_write+0x3e/0x50 [ 190.459436][T24310] do_syscall_64+0x3d/0x90 [ 190.463841][T24310] ? irqentry_exit+0xe/0x30 [ 190.468391][T24310] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 190.474274][T24310] RIP: 0033:0x4665f9 [ 190.478151][T24310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 190.498162][T24310] RSP: 002b:00007f671f10d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.506557][T24310] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 190.514608][T24310] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000005 [ 190.522563][T24310] RBP: 00007f671f10d1d0 R08: 0000000000000000 R09: 0000000000000000 18:54:27 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:27 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 190.530527][T24310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.538484][T24310] R13: 00007ffdd5415b0f R14: 00007f671f10d300 R15: 0000000000022000 18:54:27 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff004) 18:54:27 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x400000000000000) 18:54:27 executing program 4 (fault-call:6 fault-nth:2): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) [ 190.593330][T24319] loop1: detected capacity change from 0 to 87 [ 190.602234][ T4989] attempt to access beyond end of device [ 190.602234][ T4989] loop3: rw=1, want=102, limit=87 [ 190.614649][T24319] FAT-fs (loop1): invalid media value (0x00) [ 190.620656][T24319] FAT-fs (loop1): Can't find a valid FAT filesystem [ 190.656323][T24332] loop0: detected capacity change from 0 to 87 [ 190.657841][T24334] loop5: detected capacity change from 0 to 264192 18:54:27 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 190.699538][T24353] loop4: detected capacity change from 0 to 87 [ 190.705896][T24354] loop3: detected capacity change from 0 to 87 [ 190.719839][T24334] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 190.733885][T24352] loop2: detected capacity change from 0 to 87 [ 190.742604][T24354] attempt to access beyond end of device [ 190.742604][T24354] loop3: rw=0, want=90, limit=87 [ 190.757440][T24353] FAULT_INJECTION: forcing a failure. [ 190.757440][T24353] name failslab, interval 1, probability 0, space 0, times 0 [ 190.770506][T24353] CPU: 1 PID: 24353 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 190.778947][T24353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.789251][T24353] Call Trace: [ 190.792515][T24353] dump_stack_lvl+0xb7/0x103 [ 190.797102][T24353] dump_stack+0x11/0x1a [ 190.801260][T24353] should_fail+0x23c/0x250 [ 190.805723][T24353] ? mempool_alloc_slab+0x16/0x20 [ 190.810850][T24353] __should_failslab+0x81/0x90 [ 190.815610][T24353] should_failslab+0x5/0x20 [ 190.820156][T24353] kmem_cache_alloc+0x46/0x2e0 [ 190.824912][T24353] mempool_alloc_slab+0x16/0x20 [ 190.829853][T24353] ? mempool_free+0x130/0x130 [ 190.834521][T24353] mempool_alloc+0x8c/0x300 [ 190.839034][T24353] bio_alloc_bioset+0xcc/0x530 [ 190.843816][T24353] submit_bh_wbc+0x130/0x330 [ 190.848422][T24353] ? __list_del_entry_valid+0x54/0xc0 [ 190.853790][T24353] __sync_dirty_buffer+0x136/0x1e0 [ 190.858905][T24353] sync_dirty_buffer+0x16/0x20 [ 190.863699][T24353] fat_mirror_bhs+0x24b/0x330 [ 190.868366][T24353] fat_alloc_clusters+0x95e/0xa50 [ 190.873401][T24353] ? __list_del_entry_valid+0x54/0xc0 [ 190.878774][T24353] fat_get_block+0x213/0x5a0 [ 190.882661][T24354] attempt to access beyond end of device [ 190.882661][T24354] loop3: rw=0, want=90, limit=87 [ 190.883364][T24353] __block_write_begin_int+0x4a2/0x1060 [ 190.893841][T24354] Buffer I/O error on dev loop3, logical block 44, async page read [ 190.899335][T24353] ? fat_block_truncate_page+0x30/0x30 [ 190.899361][T24353] ? wait_for_stable_page+0x56/0x70 [ 190.917851][T24353] cont_write_begin+0x522/0x850 [ 190.922718][T24353] ? __list_del_entry_valid+0x54/0xc0 [ 190.928095][T24353] ? __list_add_valid+0x28/0x90 [ 190.932948][T24353] fat_write_begin+0x61/0xf0 [ 190.937604][T24353] ? fat_block_truncate_page+0x30/0x30 [ 190.939000][T24352] attempt to access beyond end of device [ 190.939000][T24352] loop2: rw=0, want=90, limit=87 [ 190.943143][T24353] generic_perform_write+0x1a6/0x3d0 [ 190.943176][T24353] __generic_file_write_iter+0x174/0x310 [ 190.964428][T24353] ? generic_write_checks+0x250/0x290 [ 190.969845][T24353] generic_file_write_iter+0x75/0x130 [ 190.975228][T24353] vfs_write+0x77d/0x8c0 [ 190.979531][T24353] ksys_write+0xce/0x180 [ 190.983785][T24353] __x64_sys_write+0x3e/0x50 [ 190.988394][T24353] do_syscall_64+0x3d/0x90 [ 190.992822][T24353] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 190.998791][T24353] RIP: 0033:0x4665f9 [ 191.002675][T24353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.007601][T24354] attempt to access beyond end of device [ 191.007601][T24354] loop3: rw=0, want=90, limit=87 [ 191.022296][T24353] RSP: 002b:00007f671f12e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.022317][T24353] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 191.032793][T24354] Buffer I/O error on dev loop3, logical block 44, async page read [ 191.041132][T24353] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000003 [ 191.041145][T24353] RBP: 00007f671f12e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 191.041158][T24353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.081468][T24353] R13: 00007ffdd5415b0f R14: 00007f671f12e300 R15: 0000000000022000 [ 191.090232][T24334] EXT4-fs (loop5): orphan cleanup on readonly fs [ 191.096679][T24334] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 191.107543][T24334] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.127297][T24364] loop0: detected capacity change from 0 to 87 [ 191.142085][T24352] attempt to access beyond end of device [ 191.142085][T24352] loop2: rw=2049, want=112, limit=87 18:54:28 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:28 executing program 4 (fault-call:6 fault-nth:3): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) 18:54:28 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff005) 18:54:28 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x500000000000000) 18:54:28 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:28 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe0ffff00000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 191.455496][T24408] loop0: detected capacity change from 0 to 87 [ 191.462183][T24409] loop4: detected capacity change from 0 to 87 [ 191.468472][T24407] loop2: detected capacity change from 0 to 87 [ 191.479306][T24416] loop5: detected capacity change from 0 to 264192 [ 191.480764][T24414] loop3: detected capacity change from 0 to 87 [ 191.502604][T24409] FAULT_INJECTION: forcing a failure. [ 191.502604][T24409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.515689][T24409] CPU: 0 PID: 24409 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 191.524238][T24409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.529709][T24425] loop1: detected capacity change from 0 to 87 [ 191.534285][T24409] Call Trace: [ 191.534294][T24409] dump_stack_lvl+0xb7/0x103 [ 191.534317][T24409] dump_stack+0x11/0x1a [ 191.534333][T24409] should_fail+0x23c/0x250 [ 191.557000][T24409] should_fail_usercopy+0x16/0x20 [ 191.562032][T24409] copy_page_from_iter_atomic+0x2c1/0xba0 [ 191.564570][T24425] FAT-fs (loop1): invalid media value (0x00) [ 191.567766][T24409] ? fat_write_begin+0x61/0xf0 [ 191.573736][T24425] FAT-fs (loop1): Can't find a valid FAT filesystem [ 191.578471][T24409] ? fat_block_truncate_page+0x30/0x30 [ 191.578496][T24409] ? fat_write_begin+0x79/0xf0 [ 191.595247][T24409] generic_perform_write+0x1ef/0x3d0 [ 191.600568][T24409] __generic_file_write_iter+0x174/0x310 [ 191.606222][T24409] ? generic_write_checks+0x250/0x290 [ 191.611600][T24409] generic_file_write_iter+0x75/0x130 [ 191.616976][T24409] vfs_write+0x77d/0x8c0 [ 191.621219][T24409] ksys_write+0xce/0x180 [ 191.623198][T24416] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 191.625460][T24409] __x64_sys_write+0x3e/0x50 [ 191.625486][T24409] do_syscall_64+0x3d/0x90 [ 191.643754][T24409] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 191.649673][T24409] RIP: 0033:0x4665f9 18:54:28 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff006) 18:54:28 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 191.653569][T24409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.673258][T24409] RSP: 002b:00007f671f12e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.681780][T24409] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 191.689753][T24409] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000003 [ 191.697715][T24409] RBP: 00007f671f12e1d0 R08: 0000000000000000 R09: 0000000000000000 18:54:29 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x600000000000000) [ 191.705738][T24409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.713700][T24409] R13: 00007ffdd5415b0f R14: 00007f671f12e300 R15: 0000000000022000 [ 191.723144][T24416] EXT4-fs (loop5): orphan cleanup on readonly fs [ 191.729614][T24416] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 191.740499][T24416] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:29 executing program 4 (fault-call:6 fault-nth:4): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) 18:54:29 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 191.815407][T24451] loop0: detected capacity change from 0 to 87 [ 191.829584][T24450] loop3: detected capacity change from 0 to 87 18:54:29 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 191.871868][T24467] loop2: detected capacity change from 0 to 87 [ 191.879869][T24465] loop4: detected capacity change from 0 to 87 [ 191.895341][T24474] loop5: detected capacity change from 0 to 264192 [ 191.918840][T24465] FAULT_INJECTION: forcing a failure. [ 191.918840][T24465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.931950][T24465] CPU: 1 PID: 24465 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 191.940364][T24465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.947397][T24486] loop0: detected capacity change from 0 to 87 [ 191.950415][T24465] Call Trace: [ 191.950425][T24465] dump_stack_lvl+0xb7/0x103 [ 191.964563][T24465] dump_stack+0x11/0x1a [ 191.968719][T24465] should_fail+0x23c/0x250 [ 191.973145][T24465] should_fail_usercopy+0x16/0x20 [ 191.978165][T24465] copy_page_from_iter_atomic+0x2c1/0xba0 [ 191.983951][T24465] ? fat_write_begin+0x61/0xf0 [ 191.988710][T24465] ? fat_block_truncate_page+0x30/0x30 [ 191.994164][T24465] ? fat_write_begin+0x79/0xf0 [ 191.998922][T24465] generic_perform_write+0x1ef/0x3d0 [ 192.004215][T24465] __generic_file_write_iter+0x174/0x310 [ 192.009897][T24465] ? generic_write_checks+0x250/0x290 [ 192.015277][T24465] generic_file_write_iter+0x75/0x130 [ 192.020663][T24465] vfs_write+0x77d/0x8c0 [ 192.024911][T24465] ksys_write+0xce/0x180 [ 192.029164][T24465] __x64_sys_write+0x3e/0x50 [ 192.033748][T24465] do_syscall_64+0x3d/0x90 [ 192.038230][T24465] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 192.044117][T24465] RIP: 0033:0x4665f9 [ 192.047994][T24465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.067607][T24465] RSP: 002b:00007f671f12e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.076024][T24465] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 192.083983][T24465] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000003 [ 192.091950][T24465] RBP: 00007f671f12e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 192.099915][T24465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.107922][T24465] R13: 00007ffdd5415b0f R14: 00007f671f12e300 R15: 0000000000022000 [ 192.132132][T24474] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 192.146017][T24474] EXT4-fs (loop5): orphan cleanup on readonly fs [ 192.152348][T24474] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 192.163336][T24474] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:29 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:29 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff007) 18:54:29 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x604000000000000) 18:54:29 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:29 executing program 4 (fault-call:6 fault-nth:5): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) 18:54:29 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 192.403361][T24514] loop4: detected capacity change from 0 to 87 [ 192.408566][T24513] loop3: detected capacity change from 0 to 87 [ 192.410566][T24516] loop0: detected capacity change from 0 to 87 [ 192.423273][T24523] loop2: detected capacity change from 0 to 87 [ 192.424751][T24515] loop5: detected capacity change from 0 to 264192 [ 192.445648][T24514] FAULT_INJECTION: forcing a failure. [ 192.445648][T24514] name failslab, interval 1, probability 0, space 0, times 0 [ 192.458370][T24514] CPU: 1 PID: 24514 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 192.466849][T24514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.476904][T24514] Call Trace: [ 192.480175][T24514] dump_stack_lvl+0xb7/0x103 [ 192.484772][T24514] dump_stack+0x11/0x1a [ 192.488948][T24514] should_fail+0x23c/0x250 [ 192.493369][T24514] ? mempool_alloc_slab+0x16/0x20 [ 192.498409][T24514] __should_failslab+0x81/0x90 [ 192.503316][T24514] should_failslab+0x5/0x20 [ 192.507814][T24514] kmem_cache_alloc+0x46/0x2e0 [ 192.512463][T24537] loop1: detected capacity change from 0 to 87 [ 192.512618][T24514] ? fat_mirror_bhs+0x325/0x330 [ 192.512637][T24514] mempool_alloc_slab+0x16/0x20 [ 192.512661][T24514] ? mempool_free+0x130/0x130 [ 192.533131][T24514] mempool_alloc+0x8c/0x300 [ 192.537709][T24514] ? fat_get_cluster+0x214/0x870 [ 192.542664][T24514] ? xas_load+0x284/0x2a0 [ 192.546986][T24514] bio_alloc_bioset+0xcc/0x530 [ 192.551815][T24514] __mpage_writepage+0xa40/0x1090 [ 192.556866][T24514] ? __mod_memcg_lruvec_state+0xa7/0x190 [ 192.562504][T24514] ? percpu_counter_add_batch+0x69/0xd0 [ 192.568074][T24514] ? clear_page_dirty_for_io+0x3be/0x450 [ 192.573791][T24514] write_cache_pages+0x4ea/0x820 [ 192.578716][T24514] ? mpage_writepages+0x120/0x120 [ 192.583723][T24514] ? __xa_set_mark+0x279/0x290 [ 192.588471][T24514] ? __mark_inode_dirty+0x103/0x6a0 [ 192.593698][T24514] ? __set_page_dirty+0x160/0x1a0 [ 192.598706][T24514] ? fat_readpage+0x20/0x20 [ 192.603193][T24514] ? fat_block_truncate_page+0x30/0x30 [ 192.608791][T24514] mpage_writepages+0x6d/0x120 [ 192.613540][T24514] ? fat_block_truncate_page+0x30/0x30 [ 192.618983][T24514] fat_writepages+0x20/0x30 [ 192.623467][T24514] do_writepages+0x8b/0x160 [ 192.627960][T24514] file_write_and_wait_range+0x199/0x230 [ 192.633602][T24514] __generic_file_fsync+0x48/0x140 [ 192.638723][T24514] fat_file_fsync+0x48/0x100 [ 192.643293][T24514] ? fat_generic_ioctl+0xb10/0xb10 [ 192.648385][T24514] vfs_fsync_range+0x107/0x120 [ 192.653131][T24514] generic_file_write_iter+0x103/0x130 [ 192.658657][T24514] vfs_write+0x77d/0x8c0 [ 192.662885][T24514] ksys_write+0xce/0x180 [ 192.667161][T24514] __x64_sys_write+0x3e/0x50 [ 192.671770][T24514] do_syscall_64+0x3d/0x90 [ 192.676257][T24514] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 192.682143][T24514] RIP: 0033:0x4665f9 [ 192.686022][T24514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.705613][T24514] RSP: 002b:00007f671f12e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.714008][T24514] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 192.721958][T24514] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000003 [ 192.729912][T24514] RBP: 00007f671f12e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 192.737890][T24514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.745844][T24514] R13: 00007ffdd5415b0f R14: 00007f671f12e300 R15: 0000000000022000 [ 192.762220][T24515] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 192.790856][T24515] EXT4-fs (loop5): orphan cleanup on readonly fs [ 192.797240][T24515] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:54:30 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff008) 18:54:30 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:30 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x700000000000000) 18:54:30 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x204000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 192.808334][T24515] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.839198][T24537] FAT-fs (loop1): invalid media value (0x00) [ 192.845241][T24537] FAT-fs (loop1): Can't find a valid FAT filesystem 18:54:30 executing program 4 (fault-call:6 fault-nth:6): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) [ 192.930802][T24553] loop2: detected capacity change from 0 to 87 [ 192.965734][T24571] loop3: detected capacity change from 0 to 87 [ 192.965904][T24574] loop0: detected capacity change from 0 to 87 18:54:30 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x1000000000000000) [ 192.979754][T24576] loop4: detected capacity change from 0 to 87 [ 192.982805][T24578] loop5: detected capacity change from 0 to 264192 [ 193.011686][T24576] FAULT_INJECTION: forcing a failure. [ 193.011686][T24576] name failslab, interval 1, probability 0, space 0, times 0 [ 193.024455][T24576] CPU: 0 PID: 24576 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 193.032863][T24576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.043067][T24576] Call Trace: [ 193.046348][T24576] dump_stack_lvl+0xb7/0x103 [ 193.051013][T24576] dump_stack+0x11/0x1a [ 193.055170][T24576] should_fail+0x23c/0x250 [ 193.056793][T24578] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 193.059696][T24576] ? mempool_alloc_slab+0x16/0x20 [ 193.073886][T24576] __should_failslab+0x81/0x90 [ 193.078660][T24576] should_failslab+0x5/0x20 [ 193.083159][T24576] kmem_cache_alloc+0x46/0x2e0 [ 193.087916][T24576] ? mempool_alloc_slab+0x16/0x20 [ 193.092939][T24576] mempool_alloc_slab+0x16/0x20 [ 193.097788][T24576] ? mempool_free+0x130/0x130 [ 193.102452][T24576] mempool_alloc+0x8c/0x300 [ 193.106949][T24576] ? fat_get_cluster+0x214/0x870 [ 193.111979][T24576] ? xas_load+0x284/0x2a0 [ 193.116372][T24576] bio_alloc_bioset+0x1af/0x530 [ 193.121278][T24576] __mpage_writepage+0xa40/0x1090 [ 193.126289][T24576] ? __mod_memcg_lruvec_state+0xa7/0x190 [ 193.131941][T24576] ? percpu_counter_add_batch+0x69/0xd0 [ 193.137541][T24576] ? clear_page_dirty_for_io+0x3be/0x450 [ 193.143171][T24576] write_cache_pages+0x4ea/0x820 [ 193.148103][T24576] ? mpage_writepages+0x120/0x120 [ 193.153132][T24576] ? __xa_set_mark+0x279/0x290 [ 193.157881][T24576] ? __mark_inode_dirty+0x103/0x6a0 [ 193.163089][T24576] ? __set_page_dirty+0x160/0x1a0 [ 193.168097][T24576] ? fat_readpage+0x20/0x20 [ 193.172592][T24576] ? fat_block_truncate_page+0x30/0x30 [ 193.178036][T24576] mpage_writepages+0x6d/0x120 [ 193.182842][T24576] ? fat_block_truncate_page+0x30/0x30 [ 193.188298][T24576] fat_writepages+0x20/0x30 [ 193.192870][T24576] do_writepages+0x8b/0x160 [ 193.197365][T24576] file_write_and_wait_range+0x199/0x230 [ 193.203004][T24576] __generic_file_fsync+0x48/0x140 [ 193.208264][T24576] fat_file_fsync+0x48/0x100 [ 193.212837][T24576] ? fat_generic_ioctl+0xb10/0xb10 [ 193.217929][T24576] vfs_fsync_range+0x107/0x120 [ 193.222686][T24576] generic_file_write_iter+0x103/0x130 [ 193.228134][T24576] vfs_write+0x77d/0x8c0 [ 193.232489][T24576] ksys_write+0xce/0x180 [ 193.236718][T24576] __x64_sys_write+0x3e/0x50 [ 193.241375][T24576] do_syscall_64+0x3d/0x90 [ 193.245784][T24576] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 193.251679][T24576] RIP: 0033:0x4665f9 [ 193.255551][T24576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 193.275246][T24576] RSP: 002b:00007f671f12e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.283640][T24576] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 193.291594][T24576] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000003 [ 193.299563][T24576] RBP: 00007f671f12e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 193.307524][T24576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.315477][T24576] R13: 00007ffdd5415b0f R14: 00007f671f12e300 R15: 0000000000022000 18:54:30 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:30 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff009) 18:54:30 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 193.362471][T24578] EXT4-fs (loop5): orphan cleanup on readonly fs [ 193.368863][T24578] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 193.379731][T24578] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:30 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x213000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:30 executing program 4 (fault-call:6 fault-nth:7): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) [ 193.454119][T24607] loop2: detected capacity change from 0 to 87 [ 193.460201][T24615] loop1: detected capacity change from 0 to 87 [ 193.472066][T24618] loop3: detected capacity change from 0 to 87 [ 193.480456][T24615] FAT-fs (loop1): invalid media value (0x00) [ 193.486466][T24615] FAT-fs (loop1): Can't find a valid FAT filesystem [ 193.521491][T24629] loop0: detected capacity change from 0 to 87 [ 193.530806][T24618] buffer_io_error: 8 callbacks suppressed [ 193.530855][T24618] Buffer I/O error on dev loop3, logical block 44, async page read [ 193.541273][T24635] loop5: detected capacity change from 0 to 264192 [ 193.551835][T24639] loop4: detected capacity change from 0 to 87 [ 193.561003][T24618] Buffer I/O error on dev loop3, logical block 44, async page read [ 193.578865][T24639] FAULT_INJECTION: forcing a failure. [ 193.578865][T24639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.591947][T24639] CPU: 0 PID: 24639 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0 [ 193.600363][T24639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.610419][T24639] Call Trace: [ 193.613693][T24639] dump_stack_lvl+0xb7/0x103 [ 193.618288][T24639] dump_stack+0x11/0x1a [ 193.622440][T24639] should_fail+0x23c/0x250 18:54:30 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x1402000000000000) [ 193.626890][T24639] should_fail_usercopy+0x16/0x20 [ 193.630773][T24635] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 193.631926][T24639] _copy_to_user+0x1c/0x90 [ 193.645499][T24639] simple_read_from_buffer+0xab/0x120 [ 193.650879][T24639] proc_fail_nth_read+0xf6/0x140 [ 193.655831][T24639] ? proc_fault_inject_write+0x200/0x200 [ 193.661498][T24639] vfs_read+0x1ea/0x730 [ 193.665681][T24639] ? __fget_light+0x21b/0x260 [ 193.670522][T24639] ? __cond_resched+0x11/0x40 [ 193.675198][T24639] ksys_read+0xce/0x180 18:54:30 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 193.679353][T24639] __x64_sys_read+0x3e/0x50 [ 193.683857][T24639] do_syscall_64+0x3d/0x90 [ 193.688356][T24639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 193.694254][T24639] RIP: 0033:0x41937c [ 193.698143][T24639] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 193.717816][T24639] RSP: 002b:00007f671f12e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.726228][T24639] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 000000000041937c [ 193.734193][T24639] RDX: 000000000000000f RSI: 00007f671f12e1e0 RDI: 0000000000000006 [ 193.742159][T24639] RBP: 00007f671f12e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 193.750125][T24639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.758165][T24639] R13: 00007ffdd5415b0f R14: 00007f671f12e300 R15: 0000000000022000 18:54:31 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) 18:54:31 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff00a) 18:54:31 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x300000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 193.774075][T24635] EXT4-fs (loop5): orphan cleanup on readonly fs [ 193.780465][T24635] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 193.791351][T24635] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.855801][T24666] loop0: detected capacity change from 0 to 87 [ 193.865291][T24673] loop2: detected capacity change from 0 to 87 [ 193.875118][T24680] loop3: detected capacity change from 0 to 87 [ 193.891696][T24682] loop4: detected capacity change from 0 to 87 [ 193.898799][T24686] loop5: detected capacity change from 0 to 264192 18:54:31 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:31 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x1f00000000000000) [ 193.937582][T24686] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 193.938584][T24680] Buffer I/O error on dev loop3, logical block 44, async page read [ 193.977695][T24680] Buffer I/O error on dev loop3, logical block 44, async page read [ 193.989106][T24686] EXT4-fs (loop5): orphan cleanup on readonly fs [ 193.995473][T24686] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 194.006359][T24686] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 194.070261][T24711] loop2: detected capacity change from 0 to 87 [ 194.079767][T24713] loop0: detected capacity change from 0 to 87 18:54:31 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:31 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x55) 18:54:31 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff00b) 18:54:31 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:31 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x4000000000000000) 18:54:31 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x313000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 194.355424][T24739] loop0: detected capacity change from 0 to 87 [ 194.362023][T24740] loop3: detected capacity change from 0 to 87 [ 194.364507][T24744] loop4: detected capacity change from 0 to 87 [ 194.369656][T24745] loop2: detected capacity change from 0 to 87 [ 194.384310][T24741] loop5: detected capacity change from 0 to 264192 [ 194.405069][T24740] Buffer I/O error on dev loop3, logical block 44, async page read 18:54:31 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:31 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x4000080000000000) 18:54:31 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x57) [ 194.451285][T24741] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 194.452248][T24740] Buffer I/O error on dev loop3, logical block 44, async page read 18:54:31 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff00c) [ 194.504646][T24741] EXT4-fs (loop5): orphan cleanup on readonly fs [ 194.511003][T24741] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 194.521959][T24741] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 194.544042][T24779] loop0: detected capacity change from 0 to 87 18:54:31 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:31 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0x8004000000000000) [ 194.551477][T24780] loop1: detected capacity change from 0 to 87 [ 194.556438][T24777] loop2: detected capacity change from 0 to 87 [ 194.571050][T24781] loop4: detected capacity change from 0 to 87 [ 194.578184][T24780] FAT-fs (loop1): invalid media value (0x00) [ 194.584175][T24780] FAT-fs (loop1): Can't find a valid FAT filesystem [ 194.590074][T24793] loop3: detected capacity change from 0 to 87 [ 194.628427][T24804] loop5: detected capacity change from 0 to 264192 [ 194.639217][T24804] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 194.650678][T24793] Buffer I/O error on dev loop3, logical block 44, async page read [ 194.676055][T24793] Buffer I/O error on dev loop3, logical block 44, async page read [ 194.676254][T24804] EXT4-fs (loop5): orphan cleanup on readonly fs [ 194.690314][T24804] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 194.698555][T24820] loop2: detected capacity change from 0 to 87 [ 194.701177][T24804] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:32 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:32 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x92) 18:54:32 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:32 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff00d) 18:54:32 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xe5ffffff00000000) 18:54:32 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x500000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 195.405568][T24844] loop4: detected capacity change from 0 to 87 [ 195.422137][T24847] loop3: detected capacity change from 0 to 87 [ 195.424289][T24848] loop5: detected capacity change from 0 to 264192 [ 195.435120][T24849] loop0: detected capacity change from 0 to 87 [ 195.435370][T24850] loop2: detected capacity change from 0 to 87 [ 195.461827][T24848] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 195.496635][T24847] handle_bad_sector: 70 callbacks suppressed [ 195.496648][T24847] attempt to access beyond end of device 18:54:32 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0xc00) [ 195.496648][T24847] loop3: rw=0, want=90, limit=87 [ 195.519019][T24850] attempt to access beyond end of device [ 195.519019][T24850] loop2: rw=0, want=90, limit=87 [ 195.540529][T24848] EXT4-fs (loop5): orphan cleanup on readonly fs [ 195.546728][T24850] attempt to access beyond end of device [ 195.546728][T24850] loop2: rw=2049, want=112, limit=87 [ 195.546897][T24848] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 195.559183][T24871] attempt to access beyond end of device [ 195.559183][T24871] loop3: rw=0, want=90, limit=87 [ 195.568529][T24848] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.578958][T24871] Buffer I/O error on dev loop3, logical block 44, async page read 18:54:32 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xf60f000000000000) 18:54:32 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 195.617840][ T1802] attempt to access beyond end of device [ 195.617840][ T1802] loop2: rw=1, want=110, limit=87 [ 195.638934][T24877] loop1: detected capacity change from 0 to 87 [ 195.661430][T24892] loop4: detected capacity change from 0 to 87 18:54:32 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x600000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:32 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff00e) 18:54:32 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x1001) [ 195.663491][T24877] FAT-fs (loop1): invalid media value (0x00) [ 195.673647][T24877] FAT-fs (loop1): Can't find a valid FAT filesystem [ 195.682036][T24847] attempt to access beyond end of device [ 195.682036][T24847] loop3: rw=2049, want=104, limit=87 [ 195.700859][T24895] loop2: detected capacity change from 0 to 87 [ 195.709651][T24896] loop0: detected capacity change from 0 to 87 [ 195.732810][ T1790] attempt to access beyond end of device [ 195.732810][ T1790] loop3: rw=1, want=102, limit=87 [ 195.753010][T24895] attempt to access beyond end of device [ 195.753010][T24895] loop2: rw=0, want=90, limit=87 [ 195.778001][T24914] loop5: detected capacity change from 0 to 264192 [ 195.782287][T24920] loop4: detected capacity change from 0 to 87 [ 195.802096][T24914] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 195.817248][T24895] attempt to access beyond end of device [ 195.817248][T24895] loop2: rw=2049, want=112, limit=87 [ 195.829819][T24932] loop3: detected capacity change from 0 to 87 [ 195.860582][T24914] EXT4-fs (loop5): orphan cleanup on readonly fs [ 195.866965][T24914] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 195.877826][T24914] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.900333][ T4989] attempt to access beyond end of device [ 195.900333][ T4989] loop2: rw=1, want=110, limit=87 [ 195.918501][T24932] Buffer I/O error on dev loop3, logical block 44, async page read 18:54:33 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0xfdef) 18:54:33 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:33 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xf6ffffff00000000) 18:54:33 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x604000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:33 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:33 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff00f) 18:54:33 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 196.512073][T24959] loop0: detected capacity change from 0 to 87 [ 196.519049][T24960] loop4: detected capacity change from 0 to 87 [ 196.522623][T24958] loop2: detected capacity change from 0 to 87 [ 196.544893][T24970] loop3: detected capacity change from 0 to 87 [ 196.546612][T24969] loop5: detected capacity change from 0 to 264192 18:54:33 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x8800000) 18:54:33 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff010) 18:54:33 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xfeffffff00000000) 18:54:33 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 196.620794][T24982] loop0: detected capacity change from 0 to 87 [ 196.633794][T24969] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 196.673763][T24993] loop4: detected capacity change from 0 to 87 [ 196.702463][T24969] EXT4-fs (loop5): orphan cleanup on readonly fs [ 196.708835][T24969] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 18:54:34 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x700000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 196.719730][T24969] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.736678][T25006] loop2: detected capacity change from 0 to 87 [ 196.748253][T25009] loop0: detected capacity change from 0 to 87 [ 196.764180][T25011] loop3: detected capacity change from 0 to 87 18:54:34 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x20000392) 18:54:34 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 196.784603][T25017] loop1: detected capacity change from 0 to 87 [ 196.822401][T25017] FAT-fs (loop1): bogus number of FAT sectors [ 196.828514][T25017] FAT-fs (loop1): Can't find a valid FAT filesystem 18:54:34 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xff0f000000000000) 18:54:34 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff011) [ 196.846797][T25035] loop5: detected capacity change from 0 to 264192 [ 196.860111][T25035] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 196.881927][T25035] EXT4-fs (loop5): orphan cleanup on readonly fs [ 196.888320][T25035] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 196.899259][T25035] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.915447][T25040] loop3: detected capacity change from 0 to 87 [ 196.964775][T25061] loop0: detected capacity change from 0 to 87 [ 196.982064][T25063] loop4: detected capacity change from 0 to 87 [ 196.994970][T25064] loop2: detected capacity change from 0 to 87 18:54:34 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:34 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7eeffff00000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:34 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff012) 18:54:34 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xffffff0f00000000) 18:54:34 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:34 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x7ffff000) 18:54:34 executing program 2: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) mkdir(&(0x7f0000000000)='./file0\x00', 0xffffffff00000000) [ 197.630660][T25096] loop2: detected capacity change from 0 to 87 [ 197.637232][T25098] loop0: detected capacity change from 0 to 87 [ 197.642941][T25097] loop3: detected capacity change from 0 to 87 [ 197.645470][T25101] loop4: detected capacity change from 0 to 87 [ 197.665720][T25104] loop5: detected capacity change from 0 to 264192 18:54:34 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:34 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff022) 18:54:34 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0xfffffdef) [ 197.719765][T25104] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 197.759868][T25124] loop2: detected capacity change from 0 to 87 18:54:35 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 197.766719][T25104] EXT4-fs (loop5): orphan cleanup on readonly fs [ 197.773053][T25104] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 197.783947][T25104] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.803966][T25133] loop1: detected capacity change from 0 to 87 [ 197.813634][T25135] loop0: detected capacity change from 0 to 87 [ 197.836089][T25133] FAT-fs (loop1): bogus number of FAT sectors [ 197.842201][T25133] FAT-fs (loop1): Can't find a valid FAT filesystem [ 197.857637][T25149] loop5: detected capacity change from 0 to 264192 [ 197.866880][T25149] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 197.879520][T25153] loop3: detected capacity change from 0 to 87 18:54:35 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 197.885049][T25152] loop4: detected capacity change from 0 to 87 [ 197.894296][T25149] EXT4-fs (loop5): orphan cleanup on readonly fs [ 197.900733][T25149] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 197.911610][T25149] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:35 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0xfffffffffffffdef) 18:54:35 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x900000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) 18:54:35 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff025) 18:54:35 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 197.999558][T25171] loop0: detected capacity change from 0 to 87 [ 198.081114][T25188] loop3: detected capacity change from 0 to 87 [ 198.095283][T25193] loop4: detected capacity change from 0 to 87 [ 198.115807][T25196] loop5: detected capacity change from 0 to 264192 [ 198.125021][T25200] loop0: detected capacity change from 0 to 87 [ 198.171195][T25196] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 198.207950][T25196] EXT4-fs (loop5): orphan cleanup on readonly fs [ 198.214328][T25196] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 198.225187][T25196] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 18:54:35 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:35 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff048) 18:54:35 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0xffffffffffffffff) 18:54:35 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) 18:54:35 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xa00000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 198.702809][T25225] loop4: detected capacity change from 0 to 87 [ 198.709419][T25230] loop3: detected capacity change from 0 to 87 [ 198.717169][T25226] loop0: detected capacity change from 0 to 87 [ 198.721695][T25229] loop5: detected capacity change from 0 to 264192 [ 198.762724][T25230] buffer_io_error: 13 callbacks suppressed [ 198.762803][T25230] Buffer I/O error on dev loop3, logical block 44, async page read 18:54:36 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, 0x0, 0x0, 0xda0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 198.813079][T25229] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 198.831089][T25230] Buffer I/O error on dev loop3, logical block 44, async page read [ 198.857212][T25229] EXT4-fs (loop5): orphan cleanup on readonly fs [ 198.863626][T25229] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 198.874542][T25229] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.876750][T25254] loop1: detected capacity change from 0 to 87 [ 198.886701][T25252] loop0: detected capacity change from 0 to 87 18:54:36 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff04c) 18:54:36 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0x0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 198.962965][T25254] FAT-fs (loop1): bogus number of FAT sectors [ 198.969069][T25254] FAT-fs (loop1): Can't find a valid FAT filesystem 18:54:36 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f0000000180)='./file1\x00', 0x20) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x4, 0x0, 0x0) getsockname(r1, &(0x7f0000000380)=@pppol2tp, &(0x7f0000000280)=0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400)) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)={0x492342, 0x3a, 0x14}, 0x18) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) geteuid() r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0xa7, 0x3, &(0x7f00000005c0)=[{&(0x7f00000004c0)="5df24cb6f658", 0x6}, {&(0x7f0000000b40)="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", 0x1000, 0x1}, {&(0x7f0000000500)="aefab9b272e033e788e8e2a6f345e464471073a9f2f6117256b160a54ea97ac684d188720b41f7c1d1d53766abf592cbb7e34ee704289ace58b96e5858ed38ca3fc73d0d98a276375bd3ce859f721815e18f37f5791a57e5cf694a06e3247fc6c4ec11e4e19aa945f96aa796348baecf4926648e9fae0321ce6b5f8ea300e6ee3c14698c74af6336ac721087bb0ce35cfac3c94a7399f0fc1343e3fc9d8d597be9feccc9e7a385f65247b0c5a74f114d74555213bfa6052682", 0xb9, 0x4}], 0x10c8000, &(0x7f0000000900)={[{}, {@usrquota}, {@bsdgroups}], [{@subj_user={'subj_user', 0x3d, '\xf3\xeaw]\x7fK\xe6H%\x98\xdf+\xfb\xfa\xc3\xce\xe7v\\5jb\xc1\x9e\xba\xb8}\xc8\xb6\x8f\xe8\x19~\xfd.n\x00\x00\x00\x00#U\xd85\x00\x00\x00\x00\x00\x00\x00\xf4\x99\x00(F\xea\x87a\xd0\x06\x00\xfa2\xdb\x93V\xebGV\xb0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'msdos\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x30, 0x31, 0x447b1538aa72a15d, 0x61, 0x30, 0x37, 0x32], 0x2d, [0x66, 0x62, 0x66, 0x66], 0x2d, [0x35, 0x31, 0x34, 0x38], 0x2d, [0x64, 0x33, 0x31, 0x35], 0x2d, [0x63, 0x66, 0x35, 0x35, 0x32, 0x64, 0x38, 0x64]}}}, {@measure}, {@uid_eq}, {@dont_hash}, {@uid_gt={'uid>', r7}}]}) write$cgroup_devices(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="56025ca79f7b8e8166aa0aadfe", @ANYBLOB="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", @ANYRESDEC=r5, @ANYRES32=r4], 0x12) read(0xffffffffffffffff, &(0x7f0000000700)=""/85, 0x55) 18:54:36 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x7f, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xb00000000000000, 0x5, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {0x0, 0x0, 0x4001600}], 0x81, &(0x7f0000000140)=ANY=[]) [ 199.082513][T25282] loop3: detected capacity change from 0 to 87 [ 199.098630][T25285] loop0: detected capacity change from 0 to 87 [ 199.101055][T25287] loop4: detected capacity change from 0 to 87 [ 199.105944][T25286] loop5: detected capacity change from 0 to 264192 18:54:36 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffe, 0xf2, 0x0, @buffer={0x0, 0x27, &(0x7f0000000080)=""/39}, &(0x7f0000000180)="5a493670684438fb39862a6090a77b39c5035e8f5d02fdb5e7243c62c1968dadc9ce51b7406ff373664a6f6caa0b3f3bd7b3c513cab91ab4ce782cd99f7af001f1831562e49d400658273f5437a9a6d0a68195acfc90421d1ba99ac2a0e75354e400a299808b67b5c318f62b33629b83a2e5966d10bec851bc42282e2d93fc0b9df92d76c6b0db59dbf439c8a0d01870e99ef78ae51aceb25a23c0508a260df9c6ef33b5fef90dd0e6ae89a81974841da5bb8480e9f04666dc783eac791e320be5528a3c12c0b9ec2b6d72c3c9fe5fc786594006e47f055d8e848a552ba1d9ba6003a3914cff543e196444ef19452de475cf", &(0x7f0000000380)=""/225, 0x9, 0x8001, 0x1, &(0x7f0000000280)}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) connect(r0, &(0x7f0000000100)=@generic={0xb, "bfe581794788ec481097bb985b03e2e585fdb3589ac304d481150a29b137e3cce8c1121b1cb1453f6d10f7826d346686883f91f2a29252f0431d007dd0ee0b3702ffa8b62de4ca526286acff2186aa6c7da8de9b687a7ce66b3bfe92363801488779b59d4c4b42a84659ea87cfd14a9d70afacd6fbe8ad31f31db6446c4c"}, 0x80) [ 199.136722][T25282] Buffer I/O error on dev loop3, logical block 44, async page read [ 199.162230][T25286] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 199.168496][T25282] Buffer I/O error on dev loop3, logical block 44, async page read 18:54:36 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0x0, 0x0) fstat(r0, &(0x7f00000001c0)) [ 199.226363][T25286] EXT4-fs (loop5): orphan cleanup on readonly fs [ 199.232725][T25286] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz-executor.5: bad orphan inode 33554432 [ 199.243711][T25286] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.294595][T25312] loop4: detected capacity change from 0 to 87 [ 199.299501][T25315] loop0: detected capacity change from 0 to 87 18:54:36 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) 18:54:36 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4100) lseek(r0, 0x1200, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/19, 0x7ffff060) 18:54:36 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0xaea1, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000340)="040005090000000066617400040409000200027400f801", 0x17}], 0x2800010, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x400601, 0x110) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x100000000000008c, 0xda0, 0x0) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[], 0x12) 18:54:36 executing program 0: syz_mo