Extracting prog: 4m2.486848567s Minimizing prog: 1h13m12.757663687s Simplifying prog options: 0s Extracting C: 32.460740344s Simplifying C: 14m55.342232843s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink-sendmmsg-socket$nl_route-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-setsockopt$sock_int-sendmsg$inet-setsockopt$SO_J1939_FILTER-syz_usb_connect$uac1 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x3, {0x2, 0x0, 0x4}, {0x0, 0xff, 0x4}, 0x1}], 0x20) syz_usb_connect$uac1(0x2, 0xdc, 0x0, 0x0) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink-sendmmsg-socket$nl_route-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-setsockopt$sock_int-sendmsg$inet-setsockopt$SO_J1939_FILTER-syz_usb_connect$uac1 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x3, {0x2, 0x0, 0x4}, {0x0, 0xff, 0x4}, 0x1}], 0x20) syz_usb_connect$uac1(0x2, 0xdc, 0x0, 0x0) program crashed: kernel BUG in ext4_mb_normalize_request single: successfully extracted reproducer found reproducer with 30 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink-sendmmsg-socket$nl_route-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-setsockopt$sock_int-sendmsg$inet-setsockopt$SO_J1939_FILTER detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x3, {0x2, 0x0, 0x4}, {0x0, 0xff, 0x4}, 0x1}], 0x20) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink-sendmmsg-socket$nl_route-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-setsockopt$sock_int-sendmsg$inet detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink-sendmmsg-socket$nl_route-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939-setsockopt$sock_int detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink-sendmmsg-socket$nl_route-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-bind$can_j1939 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink-sendmmsg-socket$nl_route-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink-sendmmsg-socket$nl_route-socket$can_j1939 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink-sendmmsg-socket$nl_route detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink-sendmmsg detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdyeC34Vwx0MGQUvfAmctKTLluSNuuypTOfD5zyvuec5D1PznnevidvQgIYWhPZn0LEixHxVRJxMCKSfNto5Bsn1vdbu391NluSqNc//jNp7JfVm8/VfNz+vPJCRPzyRcTxQnu71ZXVhVK5nC7l9cna4qXJ6srqiQuLpfl0Pr04PTNz6s2Z6Xfefqtvsb529u9vP7r9/qkvj65989PdQzeTOB0H8m2tcTyBa62ViZjIX5OxOP3IjlN9aGwnSQZ9AGzLSJ7nY5H1AQdjJM964L/v84ioA0Mqkf8wpJrjgOa9fZ/ug58b995bvwFqj390/b2R2NO4N9q3ljx0Z5Td7473of2sjZ//uHUzW6J/70MAbOna9Yg4OTra3v8lef+3fSd72OfRNvR/8OzczsY/r3ca/xQ2xj/RYfyzv0PubsfW+V+424dmusrGf+92HP9uTFqNj+S1/zXGfGPJ+QvlNOvb/h8Rx2Jsd1bfbD7n1NqderdtreO/bMnab44F8+O4O7r74cfMlWqlJ4m51b3rES91HP8mG+c/6XD+s9fjbKcn/LV91ZH01ivd2t86/qer/kPEqx3P/4MZrWTz+cnJxvUw2bwq2v1148hv3dofdPzZ+d+3efzjSet8bfXx2/h+zz9pt20PxR+9X/+7kk8a5V35uiulWm1pKmJX8mH7+ukHj23Wm/tn8R87unn/1+n63xsRn/YY/43DP77cU/wDOv9zj3X+H79w54PPvuvWfm/93xuN0rF8TS/9X68H+CSvHQAAAAAAAOw0hYg4EEmhuFEuFIrF9c93HI59hXKlWjt+vrJ8cS4a35Udj7FCc6b7YMvnIabyz8M269OP1Gci4lBEfD2yt1EvzlbKc4MOHgAAAAAAAAAAAAAAAAAAAHaI/V2+/5/5fWTQRwc8dX7yG4bXlvnfj196AnYk//9heMl/GF7yH4aX/IfhJf9heMl/GF7yH4aX/AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+OnvmTLbU1+5fnc3qc5dXlhcql0/MpdWF4uLybHG2snSpOF+pzJfT4mxlcavnK1cql6amY/nKZC2t1iarK6vnFivLF2vnLiyW5tNz6dgziQoAAAAAAAAAAAAAAAAAAACeL9WV1YVSuZwuKShsqzC6Mw5Doc+FQfdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDAvwEAAP//haM4fQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched-socket$netlink detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) socket$netlink(0x10, 0x3, 0x0) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX-sendmsg$nl_route_sched detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdyeC34Vwx0MGQUvfAmctKTLluSNuuypTOfD5zyvuec5D1PznnevidvQgIYWhPZn0LEixHxVRJxMCKSfNto5Bsn1vdbu391NluSqNc//jNp7JfVm8/VfNz+vPJCRPzyRcTxQnu71ZXVhVK5nC7l9cna4qXJ6srqiQuLpfl0Pr04PTNz6s2Z6Xfefqtvsb529u9vP7r9/qkvj65989PdQzeTOB0H8m2tcTyBa62ViZjIX5OxOP3IjlN9aGwnSQZ9AGzLSJ7nY5H1AQdjJM964L/v84ioA0Mqkf8wpJrjgOa9fZ/ug58b995bvwFqj390/b2R2NO4N9q3ljx0Z5Td7473of2sjZ//uHUzW6J/70MAbOna9Yg4OTra3v8lef+3fSd72OfRNvR/8OzczsY/r3ca/xQ2xj/RYfyzv0PubsfW+V+424dmusrGf+92HP9uTFqNj+S1/zXGfGPJ+QvlNOvb/h8Rx2Jsd1bfbD7n1NqderdtreO/bMnab44F8+O4O7r74cfMlWqlJ4m51b3rES91HP8mG+c/6XD+s9fjbKcn/LV91ZH01ivd2t86/qer/kPEqx3P/4MZrWTz+cnJxvUw2bwq2v1148hv3dofdPzZ+d+3efzjSet8bfXx2/h+zz9pt20PxR+9X/+7kk8a5V35uiulWm1pKmJX8mH7+ukHj23Wm/tn8R87unn/1+n63xsRn/YY/43DP77cU/wDOv9zj3X+H79w54PPvuvWfm/93xuN0rF8TS/9X68H+CSvHQAAAAAAAOw0hYg4EEmhuFEuFIrF9c93HI59hXKlWjt+vrJ8cS4a35Udj7FCc6b7YMvnIabyz8M269OP1Gci4lBEfD2yt1EvzlbKc4MOHgAAAAAAAAAAAAAAAAAAAHaI/V2+/5/5fWTQRwc8dX7yG4bXlvnfj196AnYk//9heMl/GF7yH4aX/IfhJf9heMl/GF7yH4aX/AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+OnvmTLbU1+5fnc3qc5dXlhcql0/MpdWF4uLybHG2snSpOF+pzJfT4mxlcavnK1cql6amY/nKZC2t1iarK6vnFivLF2vnLiyW5tNz6dgziQoAAAAAAAAAAAAAAAAAAACeL9WV1YVSuZwuKShsqzC6Mw5Doc+FQfdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDAvwEAAP//haM4fQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x2}, {0xe}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}}, 0x2854) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched-getsockopt$PNPIPE_IFINDEX detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg-sendmsg$nl_route_sched detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdyeC34Vwx0MGQUvfAmctKTLluSNuuypTOfD5zyvuec5D1PznnevidvQgIYWhPZn0LEixHxVRJxMCKSfNto5Bsn1vdbu391NluSqNc//jNp7JfVm8/VfNz+vPJCRPzyRcTxQnu71ZXVhVK5nC7l9cna4qXJ6srqiQuLpfl0Pr04PTNz6s2Z6Xfefqtvsb529u9vP7r9/qkvj65989PdQzeTOB0H8m2tcTyBa62ViZjIX5OxOP3IjlN9aGwnSQZ9AGzLSJ7nY5H1AQdjJM964L/v84ioA0Mqkf8wpJrjgOa9fZ/ug58b995bvwFqj390/b2R2NO4N9q3ljx0Z5Td7473of2sjZ//uHUzW6J/70MAbOna9Yg4OTra3v8lef+3fSd72OfRNvR/8OzczsY/r3ca/xQ2xj/RYfyzv0PubsfW+V+424dmusrGf+92HP9uTFqNj+S1/zXGfGPJ+QvlNOvb/h8Rx2Jsd1bfbD7n1NqderdtreO/bMnab44F8+O4O7r74cfMlWqlJ4m51b3rES91HP8mG+c/6XD+s9fjbKcn/LV91ZH01ivd2t86/qer/kPEqx3P/4MZrWTz+cnJxvUw2bwq2v1148hv3dofdPzZ+d+3efzjSet8bfXx2/h+zz9pt20PxR+9X/+7kk8a5V35uiulWm1pKmJX8mH7+ukHj23Wm/tn8R87unn/1+n63xsRn/YY/43DP77cU/wDOv9zj3X+H79w54PPvuvWfm/93xuN0rF8TS/9X68H+CSvHQAAAAAAAOw0hYg4EEmhuFEuFIrF9c93HI59hXKlWjt+vrJ8cS4a35Udj7FCc6b7YMvnIabyz8M269OP1Gci4lBEfD2yt1EvzlbKc4MOHgAAAAAAAAAAAAAAAAAAAHaI/V2+/5/5fWTQRwc8dX7yG4bXlvnfj196AnYk//9heMl/GF7yH4aX/IfhJf9heMl/GF7yH4aX/AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+OnvmTLbU1+5fnc3qc5dXlhcql0/MpdWF4uLybHG2snSpOF+pzJfT4mxlcavnK1cql6amY/nKZC2t1iarK6vnFivLF2vnLiyW5tNz6dgziQoAAAAAAAAAAAAAAAAAAACeL9WV1YVSuZwuKShsqzC6Mw5Doc+FQfdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDAvwEAAP//haM4fQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xc, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet-recvmsg detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP-getsockname$packet detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket-sendmsg$TIPC_NL_UDP_GET_REMOTEIP detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO-socket detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) socket(0x10, 0x803, 0x0) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0-ioctl$FBIOPUT_VSCREENINFO detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x20}, {0x40000000}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat-openat$fb0 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper-openat detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x130) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-pwrite64 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-openat-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-mmap-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdyeC34Vwx0MGQUvfAmctKTLluSNuuypTOfD5zyvuec5D1PznnevidvQgIYWhPZn0LEixHxVRJxMCKSfNto5Bsn1vdbu391NluSqNc//jNp7JfVm8/VfNz+vPJCRPzyRcTxQnu71ZXVhVK5nC7l9cna4qXJ6srqiQuLpfl0Pr04PTNz6s2Z6Xfefqtvsb529u9vP7r9/qkvj65989PdQzeTOB0H8m2tcTyBa62ViZjIX5OxOP3IjlN9aGwnSQZ9AGzLSJ7nY5H1AQdjJM964L/v84ioA0Mqkf8wpJrjgOa9fZ/ug58b995bvwFqj390/b2R2NO4N9q3ljx0Z5Td7473of2sjZ//uHUzW6J/70MAbOna9Yg4OTra3v8lef+3fSd72OfRNvR/8OzczsY/r3ca/xQ2xj/RYfyzv0PubsfW+V+424dmusrGf+92HP9uTFqNj+S1/zXGfGPJ+QvlNOvb/h8Rx2Jsd1bfbD7n1NqderdtreO/bMnab44F8+O4O7r74cfMlWqlJ4m51b3rES91HP8mG+c/6XD+s9fjbKcn/LV91ZH01ivd2t86/qer/kPEqx3P/4MZrWTz+cnJxvUw2bwq2v1148hv3dofdPzZ+d+3efzjSet8bfXx2/h+zz9pt20PxR+9X/+7kk8a5V35uiulWm1pKmJX8mH7+ukHj23Wm/tn8R87unn/1+n63xsRn/YY/43DP77cU/wDOv9zj3X+H79w54PPvuvWfm/93xuN0rF8TS/9X68H+CSvHQAAAAAAAOw0hYg4EEmhuFEuFIrF9c93HI59hXKlWjt+vrJ8cS4a35Udj7FCc6b7YMvnIabyz8M269OP1Gci4lBEfD2yt1EvzlbKc4MOHgAAAAAAAAAAAAAAAAAAAHaI/V2+/5/5fWTQRwc8dX7yG4bXlvnfj196AnYk//9heMl/GF7yH4aX/IfhJf9heMl/GF7yH4aX/AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+OnvmTLbU1+5fnc3qc5dXlhcql0/MpdWF4uLybHG2snSpOF+pzJfT4mxlcavnK1cql6amY/nKZC2t1iarK6vnFivLF2vnLiyW5tNz6dgziQoAAAAAAAAAAAAAAAAAAACeL9WV1YVSuZwuKShsqzC6Mw5Doc+FQfdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDAvwEAAP//haM4fQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-ioctl$SNDCTL_MIDI_PRETIME-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat$sequencer-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x301880, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES64=r1, @ANYRESDEC], 0x841, 0x1) program crashed: kernel BUG in ext4_mb_normalize_request testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program crashed: KASAN: use-after-free Read in ext4_find_extent testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdyeC34Vwx0MGQUvfAmctKTLluSNuuypTOfD5zyvuec5D1PznnevidvQgIYWhPZn0LEixHxVRJxMCKSfNto5Bsn1vdbu391NluSqNc//jNp7JfVm8/VfNz+vPJCRPzyRcTxQnu71ZXVhVK5nC7l9cna4qXJ6srqiQuLpfl0Pr04PTNz6s2Z6Xfefqtvsb529u9vP7r9/qkvj65989PdQzeTOB0H8m2tcTyBa62ViZjIX5OxOP3IjlN9aGwnSQZ9AGzLSJ7nY5H1AQdjJM964L/v84ioA0Mqkf8wpJrjgOa9fZ/ug58b995bvwFqj390/b2R2NO4N9q3ljx0Z5Td7473of2sjZ//uHUzW6J/70MAbOna9Yg4OTra3v8lef+3fSd72OfRNvR/8OzczsY/r3ca/xQ2xj/RYfyzv0PubsfW+V+424dmusrGf+92HP9uTFqNj+S1/zXGfGPJ+QvlNOvb/h8Rx2Jsd1bfbD7n1NqderdtreO/bMnab44F8+O4O7r74cfMlWqlJ4m51b3rES91HP8mG+c/6XD+s9fjbKcn/LV91ZH01ivd2t86/qer/kPEqx3P/4MZrWTz+cnJxvUw2bwq2v1148hv3dofdPzZ+d+3efzjSet8bfXx2/h+zz9pt20PxR+9X/+7kk8a5V35uiulWm1pKmJX8mH7+ukHj23Wm/tn8R87unn/1+n63xsRn/YY/43DP77cU/wDOv9zj3X+H79w54PPvuvWfm/93xuN0rF8TS/9X68H+CSvHQAAAAAAAOw0hYg4EEmhuFEuFIrF9c93HI59hXKlWjt+vrJ8cS4a35Udj7FCc6b7YMvnIabyz8M269OP1Gci4lBEfD2yt1EvzlbKc4MOHgAAAAAAAAAAAAAAAAAAAHaI/V2+/5/5fWTQRwc8dX7yG4bXlvnfj196AnYk//9heMl/GF7yH4aX/IfhJf9heMl/GF7yH4aX/AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+OnvmTLbU1+5fnc3qc5dXlhcql0/MpdWF4uLybHG2snSpOF+pzJfT4mxlcavnK1cql6amY/nKZC2t1iarK6vnFivLF2vnLiyW5tNz6dgziQoAAAAAAAAAAAAAAAAAAACeL9WV1YVSuZwuKShsqzC6Mw5Doc+FQfdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDAvwEAAP//haM4fQ==") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdyeC34Vwx0MGQUvfAmctKTLluSNuuypTOfD5zyvuec5D1PznnevidvQgIYWhPZn0LEixHxVRJxMCKSfNto5Bsn1vdbu391NluSqNc//jNp7JfVm8/VfNz+vPJCRPzyRcTxQnu71ZXVhVK5nC7l9cna4qXJ6srqiQuLpfl0Pr04PTNz6s2Z6Xfefqtvsb529u9vP7r9/qkvj65989PdQzeTOB0H8m2tcTyBa62ViZjIX5OxOP3IjlN9aGwnSQZ9AGzLSJ7nY5H1AQdjJM964L/v84ioA0Mqkf8wpJrjgOa9fZ/ug58b995bvwFqj390/b2R2NO4N9q3ljx0Z5Td7473of2sjZ//uHUzW6J/70MAbOna9Yg4OTra3v8lef+3fSd72OfRNvR/8OzczsY/r3ca/xQ2xj/RYfyzv0PubsfW+V+424dmusrGf+92HP9uTFqNj+S1/zXGfGPJ+QvlNOvb/h8Rx2Jsd1bfbD7n1NqderdtreO/bMnab44F8+O4O7r74cfMlWqlJ4m51b3rES91HP8mG+c/6XD+s9fjbKcn/LV91ZH01ivd2t86/qer/kPEqx3P/4MZrWTz+cnJxvUw2bwq2v1148hv3dofdPzZ+d+3efzjSet8bfXx2/h+zz9pt20PxR+9X/+7kk8a5V35uiulWm1pKmJX8mH7+ukHj23Wm/tn8R87unn/1+n63xsRn/YY/43DP77cU/wDOv9zj3X+H79w54PPvuvWfm/93xuN0rF8TS/9X68H+CSvHQAAAAAAAOw0hYg4EEmhuFEuFIrF9c93HI59hXKlWjt+vrJ8cS4a35Udj7FCc6b7YMvnIabyz8M269OP1Gci4lBEfD2yt1EvzlbKc4MOHgAAAAAAAAAAAAAAAAAAAHaI/V2+/5/5fWTQRwc8dX7yG4bXlvnfj196AnYk//9heMl/GF7yH4aX/IfhJf9heMl/GF7yH4aX/AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+OnvmTLbU1+5fnc3qc5dXlhcql0/MpdWF4uLybHG2snSpOF+pzJfT4mxlcavnK1cql6amY/nKZC2t1iarK6vnFivLF2vnLiyW5tNz6dgziQoAAAAAAAAAAAAAAAAAAACeL9WV1YVSuZwuKShsqzC6Mw5Doc+FQfdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDAvwEAAP//haM4fQ==") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdyeC34Vwx0MGQUvfAmctKTLluSNuuypTOfD5zyvuec5D1PznnevidvQgIYWhPZn0LEixHxVRJxMCKSfNto5Bsn1vdbu391NluSqNc//jNp7JfVm8/VfNz+vPJCRPzyRcTxQnu71ZXVhVK5nC7l9cna4qXJ6srqiQuLpfl0Pr04PTNz6s2Z6Xfefqtvsb529u9vP7r9/qkvj65989PdQzeTOB0H8m2tcTyBa62ViZjIX5OxOP3IjlN9aGwnSQZ9AGzLSJ7nY5H1AQdjJM964L/v84ioA0Mqkf8wpJrjgOa9fZ/ug58b995bvwFqj390/b2R2NO4N9q3ljx0Z5Td7473of2sjZ//uHUzW6J/70MAbOna9Yg4OTra3v8lef+3fSd72OfRNvR/8OzczsY/r3ca/xQ2xj/RYfyzv0PubsfW+V+424dmusrGf+92HP9uTFqNj+S1/zXGfGPJ+QvlNOvb/h8Rx2Jsd1bfbD7n1NqderdtreO/bMnab44F8+O4O7r74cfMlWqlJ4m51b3rES91HP8mG+c/6XD+s9fjbKcn/LV91ZH01ivd2t86/qer/kPEqx3P/4MZrWTz+cnJxvUw2bwq2v1148hv3dofdPzZ+d+3efzjSet8bfXx2/h+zz9pt20PxR+9X/+7kk8a5V35uiulWm1pKmJX8mH7+ukHj23Wm/tn8R87unn/1+n63xsRn/YY/43DP77cU/wDOv9zj3X+H79w54PPvuvWfm/93xuN0rF8TS/9X68H+CSvHQAAAAAAAOw0hYg4EEmhuFEuFIrF9c93HI59hXKlWjt+vrJ8cS4a35Udj7FCc6b7YMvnIabyz8M269OP1Gci4lBEfD2yt1EvzlbKc4MOHgAAAAAAAAAAAAAAAAAAAHaI/V2+/5/5fWTQRwc8dX7yG4bXlvnfj196AnYk//9heMl/GF7yH4aX/IfhJf9heMl/GF7yH4aX/AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+OnvmTLbU1+5fnc3qc5dXlhcql0/MpdWF4uLybHG2snSpOF+pzJfT4mxlcavnK1cql6amY/nKZC2t1iarK6vnFivLF2vnLiyW5tNz6dgziQoAAAAAAAAAAAAAAAAAAACeL9WV1YVSuZwuKShsqzC6Mw5Doc+FQfdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDAvwEAAP//haM4fQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdyeC34Vwx0MGQUvfAmctKTLluSNuuypTOfD5zyvuec5D1PznnevidvQgIYWhPZn0LEixHxVRJxMCKSfNto5Bsn1vdbu391NluSqNc//jNp7JfVm8/VfNz+vPJCRPzyRcTxQnu71ZXVhVK5nC7l9cna4qXJ6srqiQuLpfl0Pr04PTNz6s2Z6Xfefqtvsb529u9vP7r9/qkvj65989PdQzeTOB0H8m2tcTyBa62ViZjIX5OxOP3IjlN9aGwnSQZ9AGzLSJ7nY5H1AQdjJM964L/v84ioA0Mqkf8wpJrjgOa9fZ/ug58b995bvwFqj390/b2R2NO4N9q3ljx0Z5Td7473of2sjZ//uHUzW6J/70MAbOna9Yg4OTra3v8lef+3fSd72OfRNvR/8OzczsY/r3ca/xQ2xj/RYfyzv0PubsfW+V+424dmusrGf+92HP9uTFqNj+S1/zXGfGPJ+QvlNOvb/h8Rx2Jsd1bfbD7n1NqderdtreO/bMnab44F8+O4O7r74cfMlWqlJ4m51b3rES91HP8mG+c/6XD+s9fjbKcn/LV91ZH01ivd2t86/qer/kPEqx3P/4MZrWTz+cnJxvUw2bwq2v1148hv3dofdPzZ+d+3efzjSet8bfXx2/h+zz9pt20PxR+9X/+7kk8a5V35uiulWm1pKmJX8mH7+ukHj23Wm/tn8R87unn/1+n63xsRn/YY/43DP77cU/wDOv9zj3X+H79w54PPvuvWfm/93xuN0rF8TS/9X68H+CSvHQAAAAAAAOw0hYg4EEmhuFEuFIrF9c93HI59hXKlWjt+vrJ8cS4a35Udj7FCc6b7YMvnIabyz8M269OP1Gci4lBEfD2yt1EvzlbKc4MOHgAAAAAAAAAAAAAAAAAAAHaI/V2+/5/5fWTQRwc8dX7yG4bXlvnfj196AnYk//9heMl/GF7yH4aX/IfhJf9heMl/GF7yH4aX/AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+OnvmTLbU1+5fnc3qc5dXlhcql0/MpdWF4uLybHG2snSpOF+pzJfT4mxlcavnK1cql6amY/nKZC2t1iarK6vnFivLF2vnLiyW5tNz6dgziQoAAAAAAAAAAAAAAAAAAACeL9WV1YVSuZwuKShsqzC6Mw5Doc+FQfdMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDAvwEAAP//haM4fQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, 0x0, 0x0, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140), 0x0, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), 0x0, 0x841, 0x1) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[], 0x841, 0x1) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent simplifying C reproducer testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Write in ext4_ext_insert_extent a never seen crash title: KASAN: use-after-free Write in ext4_ext_insert_extent, ignore testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_ext_insert_extent a never seen crash title: KASAN: use-after-free Read in ext4_ext_insert_extent, ignore testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Write in ext4_ext_insert_extent a never seen crash title: KASAN: use-after-free Write in ext4_ext_insert_extent, ignore testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program did not crash testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper program crashed: KASAN: use-after-free Read in ext4_find_extent testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program crashed: KASAN: use-after-free Read in ext4_find_extent validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program crashed: KASAN: use-after-free Read in ext4_find_extent validation run: crashed=true testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat-pwrite64-openat-pwrite64-setxattr$trusted_overlay_upper detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@nobh}, {@quota}, {@delalloc}]}, 0x1, 0x559, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC], 0x841, 0x1) program crashed: KASAN: use-after-free Read in ext4_find_extent validation run: crashed=true reproducing took 1h36m35.773249772s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in ext4_ext_binsearch fs/ext4/extents.c:841 [inline] BUG: KASAN: use-after-free in ext4_find_extent+0xae6/0xcc0 fs/ext4/extents.c:956 Read of size 4 at addr ffff88805395e400 by task kworker/u4:5/125 CPU: 0 UID: 0 PID: 125 Comm: kworker/u4:5 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: writeback wb_workfn (flush-7:0) Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 ext4_ext_binsearch fs/ext4/extents.c:841 [inline] ext4_find_extent+0xae6/0xcc0 fs/ext4/extents.c:956 ext4_ext_map_blocks+0x278/0x69c0 fs/ext4/extents.c:4208 ext4_map_create_blocks fs/ext4/inode.c:613 [inline] ext4_map_blocks+0x82c/0x16f0 fs/ext4/inode.c:816 mpage_map_one_extent fs/ext4/inode.c:2380 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2474 [inline] ext4_do_writepages+0x222f/0x4500 fs/ext4/inode.c:2932 ext4_writepages+0x203/0x350 fs/ext4/inode.c:3026 do_writepages+0x32e/0x550 mm/page-writeback.c:2598 __writeback_single_inode+0x133/0x1240 fs/fs-writeback.c:1737 writeback_sb_inodes+0x93a/0x1870 fs/fs-writeback.c:2030 wb_writeback+0x42b/0xaa0 fs/fs-writeback.c:2216 wb_do_writeback fs/fs-writeback.c:2363 [inline] wb_workfn+0x3f9/0xed0 fs/fs-writeback.c:2403 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x30e pfn:0x5395e flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) raw: 04fff00000000000 dead000000000100 dead000000000122 0000000000000000 raw: 000000000000030e 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5402, tgid 5402 (syz-executor), ts 110635817555, free_ts 111181985962 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x234/0x290 mm/page_alloc.c:1846 prep_new_page mm/page_alloc.c:1854 [inline] get_page_from_freelist+0x24e0/0x2580 mm/page_alloc.c:3915 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5210 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2486 folio_alloc_mpol_noprof mm/mempolicy.c:2505 [inline] vma_alloc_folio_noprof+0xe4/0x200 mm/mempolicy.c:2540 folio_prealloc+0x30/0x180 mm/memory.c:-1 do_cow_fault mm/memory.c:5779 [inline] do_fault mm/memory.c:5891 [inline] do_pte_missing+0x522/0x3330 mm/memory.c:4401 handle_pte_fault mm/memory.c:6273 [inline] __handle_mm_fault mm/memory.c:6411 [inline] handle_mm_fault+0x1b26/0x32b0 mm/memory.c:6580 do_user_addr_fault+0xa7c/0x1380 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x71/0xd0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 page last free pid 5403 tgid 5403 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] free_unref_folios+0xdb3/0x14f0 mm/page_alloc.c:3000 folios_put_refs+0x584/0x670 mm/swap.c:1002 free_pages_and_swap_cache+0x277/0x520 mm/swap_state.c:355 __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline] tlb_batch_pages_flush mm/mmu_gather.c:149 [inline] tlb_flush_mmu_free mm/mmu_gather.c:397 [inline] tlb_flush_mmu+0x3a0/0x680 mm/mmu_gather.c:404 tlb_finish_mmu+0xc3/0x1d0 mm/mmu_gather.c:497 exit_mmap+0x439/0xb10 mm/mmap.c:1290 __mmput+0x118/0x430 kernel/fork.c:1173 exit_mm+0x169/0x230 kernel/exit.c:581 do_exit+0x627/0x22f0 kernel/exit.c:959 do_group_exit+0x21c/0x2d0 kernel/exit.c:1112 get_signal+0x1285/0x1340 kernel/signal.c:3034 arch_do_signal_or_restart+0x9a/0x7a0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline] exit_to_user_mode_loop+0x87/0x4e0 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x2b7/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff88805395e300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88805395e380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff >ffff88805395e400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff88805395e480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88805395e500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: use-after-free in ext4_ext_binsearch fs/ext4/extents.c:841 [inline] BUG: KASAN: use-after-free in ext4_find_extent+0xae6/0xcc0 fs/ext4/extents.c:956 Read of size 4 at addr ffff88805395e400 by task kworker/u4:5/125 CPU: 0 UID: 0 PID: 125 Comm: kworker/u4:5 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: writeback wb_workfn (flush-7:0) Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 ext4_ext_binsearch fs/ext4/extents.c:841 [inline] ext4_find_extent+0xae6/0xcc0 fs/ext4/extents.c:956 ext4_ext_map_blocks+0x278/0x69c0 fs/ext4/extents.c:4208 ext4_map_create_blocks fs/ext4/inode.c:613 [inline] ext4_map_blocks+0x82c/0x16f0 fs/ext4/inode.c:816 mpage_map_one_extent fs/ext4/inode.c:2380 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2474 [inline] ext4_do_writepages+0x222f/0x4500 fs/ext4/inode.c:2932 ext4_writepages+0x203/0x350 fs/ext4/inode.c:3026 do_writepages+0x32e/0x550 mm/page-writeback.c:2598 __writeback_single_inode+0x133/0x1240 fs/fs-writeback.c:1737 writeback_sb_inodes+0x93a/0x1870 fs/fs-writeback.c:2030 wb_writeback+0x42b/0xaa0 fs/fs-writeback.c:2216 wb_do_writeback fs/fs-writeback.c:2363 [inline] wb_workfn+0x3f9/0xed0 fs/fs-writeback.c:2403 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x30e pfn:0x5395e flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) raw: 04fff00000000000 dead000000000100 dead000000000122 0000000000000000 raw: 000000000000030e 0000000000000000 00000000ffffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5402, tgid 5402 (syz-executor), ts 110635817555, free_ts 111181985962 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x234/0x290 mm/page_alloc.c:1846 prep_new_page mm/page_alloc.c:1854 [inline] get_page_from_freelist+0x24e0/0x2580 mm/page_alloc.c:3915 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5210 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2486 folio_alloc_mpol_noprof mm/mempolicy.c:2505 [inline] vma_alloc_folio_noprof+0xe4/0x200 mm/mempolicy.c:2540 folio_prealloc+0x30/0x180 mm/memory.c:-1 do_cow_fault mm/memory.c:5779 [inline] do_fault mm/memory.c:5891 [inline] do_pte_missing+0x522/0x3330 mm/memory.c:4401 handle_pte_fault mm/memory.c:6273 [inline] __handle_mm_fault mm/memory.c:6411 [inline] handle_mm_fault+0x1b26/0x32b0 mm/memory.c:6580 do_user_addr_fault+0xa7c/0x1380 arch/x86/mm/fault.c:1336 handle_page_fault arch/x86/mm/fault.c:1476 [inline] exc_page_fault+0x71/0xd0 arch/x86/mm/fault.c:1532 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:618 page last free pid 5403 tgid 5403 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] free_unref_folios+0xdb3/0x14f0 mm/page_alloc.c:3000 folios_put_refs+0x584/0x670 mm/swap.c:1002 free_pages_and_swap_cache+0x277/0x520 mm/swap_state.c:355 __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline] tlb_batch_pages_flush mm/mmu_gather.c:149 [inline] tlb_flush_mmu_free mm/mmu_gather.c:397 [inline] tlb_flush_mmu+0x3a0/0x680 mm/mmu_gather.c:404 tlb_finish_mmu+0xc3/0x1d0 mm/mmu_gather.c:497 exit_mmap+0x439/0xb10 mm/mmap.c:1290 __mmput+0x118/0x430 kernel/fork.c:1173 exit_mm+0x169/0x230 kernel/exit.c:581 do_exit+0x627/0x22f0 kernel/exit.c:959 do_group_exit+0x21c/0x2d0 kernel/exit.c:1112 get_signal+0x1285/0x1340 kernel/signal.c:3034 arch_do_signal_or_restart+0x9a/0x7a0 arch/x86/kernel/signal.c:337 __exit_to_user_mode_loop kernel/entry/common.c:41 [inline] exit_to_user_mode_loop+0x87/0x4e0 kernel/entry/common.c:75 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:226 [inline] syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:256 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:159 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:194 [inline] do_syscall_64+0x2b7/0xf80 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff88805395e300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88805395e380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff >ffff88805395e400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ^ ffff88805395e480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ffff88805395e500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ==================================================================