ca6c52d2415a40e7da0d19f152fb8d98f837c9fb966ac3d135cb766bcde31a2a7f1583e3d122203bed1472df85e654eabc103b37510b143fb56c7ca0239fab4a7dd8da4e7a6b6f83", 0xf9}, {&(0x7f0000007580)="7208b39311d8e34defbe4ea6fb7ea638c2265b7a4baaaa71008eb98f0d9418903d77f82826c61e10b7c244dcc5f2cab3752869e86cae77c3fd4ceb6fe1b2c0a021ca45e188d2ddea4718ffd665dccd9667a0410d3534da9c9250217b4b897c09eedd1f0ca2dbb65bf1bdbc", 0x6b}, {&(0x7f0000007600)}], 0x4, &(0x7f0000008240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8, 0x4000}}, {{&(0x7f0000008300)=@file={0x1, './mnt\x00'}, 0x6e, &(0x7f0000009480)=[{&(0x7f0000008380)="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", 0x1000}, {&(0x7f0000009380)="0858dabc6a55b61ffdda1f137cf15d5b467b2785ea10f76a7eb27d00874ca34addb8d21dbf1a9424a07be980f884bd14368c436f94b393fce2119daa4b5d010bbc6dc9b70e8d020ccb0b8f52aa305270443807230f421561f3940c23d2d6c574415480d9", 0x64}, {&(0x7f0000009400)}, {&(0x7f0000009440)="d6724df2df290e0b2f3da6d9e29439f9789b64eff293ed18f22eb8376135f6337327afa74932133bd8351a16a5465d19970c528663ff5de6763cf9f2a8", 0x3d}], 0x4, &(0x7f0000009600)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}], 0x58, 0x8000}}, {{0x0, 0x0, &(0x7f0000009900)=[{&(0x7f0000009680)="29e6997335b4ce0c651b9373", 0xc}, {&(0x7f00000096c0)="d92443982156a28f3700e6b8fe57730fe831ccd7d300438427418d0ca5381260250085ccf07ed562fabd2883a20a6250", 0x30}, {&(0x7f0000009700)="4073b807a862829c0cf8d1c01e4daaabfead2fa578205619da675e9f68743908819d1f7cd9e6d3230c58fa8e4f603c9dab4bd89ff9d775523f71693617c4a76b7e29de4f8f679badd1deca941c78363ff72ee43176cae917861c68fc3156138b10b87642c3bfb23b910a10b1121774532de9719c508695b4d7d0326f4530861736ed592729688247e97d0cbebd815cea8a3e95c565ebcd4add3b5f88155060d03826e04439792f088ac3d495b00279385bf3e195f874c8df0cf30d88da85a725213bf4f1d224ef384dd335964daf405f9675b26a31fc53fbeb67854dea900f", 0xdf}, {&(0x7f0000009800)="1ae1ccc45f303c3a48f149ce7babfff8e4028802249f5047ed53ca78f4d166b4edb1cf7c1f00b966b0507db368d355f2e5dd9e865bcf459635ef65ae0f55dbbfea6773b20c93bececeab1ae4b866ede4ddb1e3cfa6de8f8f9974aeb44f8c1ec11201f178b71c72df7822418c8b7d3043aa6b3d91d785b29b0c6f96fc92617ebc34d93a92b82960d1fa6ac066a715cc448f078633f30f6a8b7c1d5ed93ad9037901686ef8c9dffcfa7300241ddb0c2d8d002df4c4d49a2d01e36372a48560e9e519e772139fe351245e4f5e9109bed87c2a1636dd6b84b97a", 0xd8}], 0x4, &(0x7f000000dbc0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, r4}}}, @rights={{0x28, 0x1, 0x1, [r0, r5, r6, r0, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r9, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}], 0xf0, 0x40000}}], 0x8, 0x80) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x40042, &(0x7f0000000140)={'trans=xen,', {[{@access_client}], [{@uid_gt}, {@obj_type={'obj_type', 0x3d, 'trusted.overlay.origin\x00'}}]}}) 11:51:52 executing program 6: rt_sigprocmask(0x1, &(0x7f0000000000)={[0x6]}, &(0x7f0000000040), 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) 11:51:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000", 0x28, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:51:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x200000, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x200000, 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0x1) [ 2719.901066] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:51:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000040)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:51:52 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x5003, 0xffff43e2) [ 2719.939836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2719.986181] loop7: detected capacity change from 0 to 264192 [ 2720.034635] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended 11:51:52 executing program 1: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = open(&(0x7f0000001a80)='./file0\x00', 0x2c80, 0x80) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, 0x13, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x26fb971f96e89918) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000440)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0xd, &(0x7f0000000000), 0x4) r3 = fspick(r1, &(0x7f0000001bc0)='./file0\x00', 0x1) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001c80)={{r3}, 0x0, 0x2, @inherit={0x58, &(0x7f0000001c00)=ANY=[@ANYBLOB="010000000082000002000000000000009303000000000000ff07000000000000320000000000000095440000000000004400000000000000ff0100000000000009000000000000000100000001000000550a000000000000"]}, @subvolid=0x4}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000040)=""/110, 0x6e}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000100)=""/158, 0x9e}, {&(0x7f00000001c0)=""/140, 0x8c}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/212, 0xd4}], 0x9, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000017c0)=""/141, 0x8d}, {&(0x7f0000001880)=""/176, 0xb0}], 0x2, &(0x7f0000001940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}], 0x2, 0x100a0, &(0x7f00000003c0)) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) [ 2720.066774] loop2: detected capacity change from 0 to 140 [ 2720.070886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2720.084165] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2720.101051] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2720.102507] EXT4-fs (loop2): group descriptors corrupted! [ 2720.107093] loop5: detected capacity change from 0 to 140 11:51:52 executing program 4: execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000040)='{@(\x00', &(0x7f0000000080)='\'*]\'.!]^(*{:@\x00', &(0x7f00000000c0)='(\xa9i*$%\x00', &(0x7f0000000100)='^%.!#,\x00', &(0x7f0000000140)='$/)+@)\x00', &(0x7f0000000180)='\'[:\x00', &(0x7f00000001c0)=')(#\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\\}\'@\x00', &(0x7f0000000280)='%(!/\x00'], &(0x7f00000003c0)=[&(0x7f0000000340)='#\xf5,-,{\x00', &(0x7f0000000380)='%\x00'], 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') ioprio_set$pid(0x1, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) write$tcp_congestion(r0, &(0x7f0000000440)='dctcp\x00', 0x6) quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x53, 0x200) [ 2720.139927] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2720.167703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:51:52 executing program 6: rt_sigprocmask(0x1, &(0x7f0000000000)={[0x6]}, &(0x7f0000000040), 0x8) [ 2720.194281] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2720.199120] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:51:52 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x11000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:51:52 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f00000012c0)) syncfs(r1) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r3 = accept4$unix(r1, 0x0, &(0x7f0000000180), 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001d80)={'batadv0\x00', &(0x7f0000001d40)=@ethtool_link_settings={0x4c, 0x9, 0x8, 0x20, 0x2, 0x81, 0xff, 0xec, 0x8, 0x5, [0x8001, 0x1000, 0x9, 0xe6, 0xfffffffa, 0x3, 0x3c0, 0x10000], [0x199]}}) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003340)={'syztnl1\x00', &(0x7f00000032c0)={'sit0\x00', r4, 0x1cad7f0fef441860, 0xf9, 0x2, 0x2, 0x34, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x899, 0x6}}) recvfrom(0xffffffffffffffff, &(0x7f00000002c0)=""/4077, 0xfed, 0x40000001, &(0x7f0000000200)=@ll={0x11, 0xd, r5, 0x1, 0x0, 0x6, @local}, 0x80) r6 = syz_mount_image$nfs4(&(0x7f0000001e00), &(0x7f0000001e40)='./mnt\x00', 0x7, 0x3, &(0x7f0000002fc0)=[{&(0x7f0000001e80)="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", 0x1000, 0x5}, {&(0x7f0000002e80)="a66c58fc864021223cfd2aa4d136bafe3213d8e4d2c9c40d2cf46c28b5558d0764a42b8b6bdd3b9829e6427d135c37217a819482ce10ac", 0x37, 0x100}, {&(0x7f0000002ec0)="730e6ef3b2e17d9f8ceab6e7b55bd5228c9452b6641af08e96873dc50cfc88d6019d77d5cd06934c10fe3b98cc06bb003612ce28375df423441069b66ef2d2e2124c5598b836d5ea5d117a6e7e0aa82be84cdcc6deb9278b817f6fd2658c467d2417d1bf54a1ec3660243392322848f031268fb8d489f4c7be9bdd100c2df048d1b96680ce36251cb19a1f01d3028397a360a226664f38c9da5744db7c8f600eef2eb680538591abbe9d9328acf3ca82366bdf6da5b81b57c08018e712fcaab3a63d4d89bbd7d5fa6c70e52d16cdfe23b960f69c43e1d294171edb2faed9ed03f8ac548f92046506db4314ed0262c4170c8a8da099bbaa7c11", 0xf9, 0x7}], 0x1820001, &(0x7f0000003040)) renameat2(r2, &(0x7f0000001dc0)='./mnt\x00', r6, &(0x7f0000003080)='./file0\x00', 0x4) [ 2720.309225] loop0: detected capacity change from 0 to 8 [ 2720.311305] loop7: detected capacity change from 0 to 264192 [ 2720.312817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2720.356406] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2720.359066] loop0: detected capacity change from 0 to 8 [ 2720.382714] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2720.428246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2720.455111] loop7: detected capacity change from 0 to 264192 [ 2720.461791] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2720.467350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2720.472040] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2720.554321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0xf38f}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:52:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f10d69738bda5771ad8e9d89edefd6cebf02f87f29f4ce700e80380138a8155ec52b34b9cbe9061c8ae50cca12f83d40aed2dbf06f0180937163fd8aa9140148ee590b501eea417aaecf5a6d85dc180160d240e16519483c1a1062b9cae67d5e615bcccd6e4a6ee9c47488b4473e5de014810c39160b4d8d1d6ca82e69e44e7638db2"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:52:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:52:00 executing program 4: r0 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) sync_file_range(r0, 0x81, 0x401, 0x0) quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)="9aaf61350d86863d760b8386ed227e1f2f710e45c7d2131a1c6736fbb4df574b17818fbab694fe1ed71f6a17f01068bc4149ba793524", 0x36}, {&(0x7f0000000100)="ee1682086af7969958f733a2206addf67905204cd45fbeef32117cf3633b223b65c1a805f368b3c420ad47ecdee261d2d2361d6331dc3871f546893dc9c4df8b4558f54d65d120f588c3f1cf8a94ab6beab3b2ed1eb65c93f686fa807643d9c0ecb775e676580887bcd33680329bab83391761a8e98e4c0ed74027da526132b3e19b5d54397f32b5d821ef80e0b932493a956823f3ef67af9eabda04dd53ed63ce10892f537613525e96516ae80b81f2777ae16d795a83c2045c62575eff5e10cd3685eb1dd6419f00", 0xc9}, {&(0x7f0000000200)="772e273aeadd55fad6b07cdcf00720ea8d1bc2bb9e76c31b30f205c2f21f2610ac2bdb255e172b222bb85623b966d4b70f9623bc4620c3a0bb6c18ec6817c887294ca18a59069f494d302d804384ba9dcc76d75ff3d23c00a4846553", 0x5c}, {&(0x7f00000002c0)="06c3efc48ee7eb646fe5693568f709afe6e329473aae27d32ef3377e9036f2ab", 0x20}, {&(0x7f0000001500)="9807cffe5cef766586830af0f44b6046361587e6981725d90b488d784913eba947b2cac7065ba93e1dead34b316afa090a1d3927b2e9e27fe41c6674ae90d08870c2fd64c9fe4646e1bc632c6ae7b110900a4ab488a75ae18c8a06cbc541689abccc4bd6", 0x64}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)}, {&(0x7f0000001380)="8020c5951300f30673a0adaf2132dd08badb42b0f70a8ff46d84919c12150189a55a251fce6c65ef0187dae7d28b71da8838ac4a4c2a92ed", 0x38}], 0x8, &(0x7f0000001440)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff8}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x78}, 0x40) 11:52:00 executing program 1: futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) 11:52:00 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), 0x111030, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}], [{@subj_role={'subj_role', 0x3d, '.-*k-($?'}}]}}) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:52:00 executing program 6: rt_sigprocmask(0x0, &(0x7f0000000000)={[0x6]}, &(0x7f0000000040), 0x8) 11:52:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x14000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2728.342352] loop2: detected capacity change from 0 to 140 [ 2728.349921] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2728.350764] EXT4-fs (loop2): group descriptors corrupted! [ 2728.394908] loop5: detected capacity change from 0 to 243 [ 2728.402403] loop7: detected capacity change from 0 to 264192 [ 2728.406687] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2728.407578] EXT4-fs (loop5): group descriptors corrupted! [ 2728.415741] loop5: detected capacity change from 0 to 243 [ 2728.419761] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2728.420545] EXT4-fs (loop5): group descriptors corrupted! [ 2728.437899] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2728.474979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2728.483160] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2728.515715] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:52:10 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="009cf50fbb46b2edb997a2d96d4b2143b4bedc66be0d3a573d0b7c961bb28ad2f4b77a654cab08f683e6a4e3629eac70bb"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './mnt\x00'}) lsetxattr$security_capability(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x5b}, {0x0, 0x101}], 0xffffffffffffffff}, 0x18, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0), &(0x7f0000000280)={0x0, 0xfb, 0x101, 0x3, 0x5, "a5b7e5fb7f549eabb35d947693dd392b", "4780d657c8d97012917d455d524b1921bedfd33aa469fb2dd66f493dcbe5e71c736c7b00f2333fad7e2e5b19bbca436a909b749c9e15f45e08a00fa864d1d5ba396988618615bcf979b1524e86ccd436b8b6fe3f701e61a19c104f7149eed163164b685f900ac7e0c37448e4523cc3df14ca605e2bee4254f3506eb3681f5d4bcb46393e528958c8604d3c47e155174c71d765fca4e781b32baf917ad681687a672a0d48560ca216a077582bebeecd19876ff2711394f51363884d702cda40465e266780a0e07fb7cdfbd133f8ae0b71ed43757532b635c407a2f06f47eaeda17c8d4f883153fde450dfa97d"}, 0x101, 0x2) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) recvmmsg$unix(r1, &(0x7f0000002480)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/38, 0x26}], 0x4, &(0x7f00000006c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000000880)=""/129, 0x81}, {&(0x7f0000000940)=""/142, 0x8e}, {&(0x7f0000000a00)=""/21, 0x15}], 0x4, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/207, 0xcf}, {&(0x7f0000000cc0)=""/92, 0x5c}, {&(0x7f0000000d40)=""/94, 0x5e}, {&(0x7f0000000dc0)=""/63, 0x3f}, {&(0x7f0000000e00)=""/39, 0x27}], 0x5, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000f80), 0x6e, &(0x7f0000001300)=[{&(0x7f0000001000)=""/253, 0xfd}, {&(0x7f0000001100)=""/208, 0xd0}, {&(0x7f0000001200)=""/209, 0xd1}], 0x3, &(0x7f0000001340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000013c0), 0x6e, &(0x7f0000001780)=[{&(0x7f00000014c0)=""/117, 0x75}, {&(0x7f0000001540)=""/174, 0xae}, {&(0x7f0000001600)=""/97, 0x61}, {&(0x7f0000001680)=""/199, 0xc7}], 0x4, &(0x7f00000017c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001940)=""/157, 0x9d}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a40)=""/67, 0x43}, {&(0x7f0000001ac0)=""/215, 0xd7}, {&(0x7f0000001bc0)=""/39, 0x27}], 0x3, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001e00)=""/149, 0x95}, {&(0x7f0000001ec0)=""/204, 0xcc}, {&(0x7f0000001fc0)=""/157, 0x9d}, {&(0x7f0000002080)=""/78, 0x4e}, {&(0x7f0000002100)=""/212, 0xd4}, {&(0x7f0000002200)=""/231, 0xe7}], 0x6, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}], 0x8, 0x40000040, 0x0) 11:52:10 executing program 4: quotactl(0x81, 0xfffffffffffffffc, 0xee01, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0xffff, 0x4}, 0x100, './file0\x00'}) 11:52:10 executing program 6: rt_sigprocmask(0x0, &(0x7f0000000000)={[0x6]}, &(0x7f0000000040), 0x8) 11:52:10 executing program 1: futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x0) 11:52:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x6, 0x0) 11:52:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x18000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:52:10 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./mnt\x00', 0xfffffffffff7fffe, 0xf, 0x0, 0x2080015, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x1000, 0x5}, {0x0, 0x1}], r0}, 0x18, 0x3) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3444e2daa172b958) chown(&(0x7f0000000200)='./mnt\x00', r1, r2) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140), 0x800) getsockname$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) [ 2737.492134] loop5: detected capacity change from 0 to 140 [ 2737.511817] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2737.518279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2737.522655] loop2: detected capacity change from 0 to 140 [ 2737.524081] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2737.561604] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2737.563111] EXT4-fs (loop2): group descriptors corrupted! [ 2737.574121] loop7: detected capacity change from 0 to 264192 11:52:10 executing program 1: ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000000)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x121400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000300)={0x1, 0x1, 0x1000, 0x8f, &(0x7f0000000140)="3fb356e3fbaf46440527d8dcb88d7547dc492a00ed12c0cffb8b177444994a10b72c7e6db6f70b4b841702ab39df9d967ac9489fc4fed6e304565726aaa83fd3af3077d216e2dfc6f4f130b33717d9158ff1f2123d70de1c39784bd9eb261a0607696c047cd5c1de6d9801b08398ff0b7d6ec00c814f2dc4cdab3238c2f54e0426acda1ae1345dd90b76cff5d487d9", 0xe6, 0x0, &(0x7f0000000200)="1fbae6cf1f33ca971bb437f613b420b0d1714eef91219ddbda596ba0392fc689a27c2ccbe9798d30c37a632af9846b4f627758b7b481a063ff591acc8ec6295bed276dc7fa54315eb3e77040e36de410ca7dc52d9431921740076ad2a3dee56899b7afe49268835cd54bd964924211f6b08f12b5ebfdecceece3143849bdc14ca678a09e9f0c086ed1a302cc593d97c6031cff00fa3da3c6a49720ed3727ade17f67d05beb977c73900c24274052ec240e357a33d2183963c77c08b68645f0b65cec18c53613a1b8a57fc1ee30b63daa93c60e999fe1ba1d3d2c8e0cc0cdc2dc7c81f2457d68"}) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000380)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0xd, &(0x7f0000000000), 0x4) [ 2737.623946] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2737.696979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:52:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x3}, {&(0x7f0000000500)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0xffffffffffffff7a, 0x8c60}], 0x0, &(0x7f00000004c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, 0x0, r1) r2 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x3, 0xee00}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2, 0xee00}], {0x10, 0x3}, {0x20, 0x6}}, 0x54, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./mnt\x00', 0xfffffffffffffffc, 0x5, &(0x7f0000000300)=[{&(0x7f00000000c0)="b1", 0x1, 0x5}, {&(0x7f0000000140)="fd183dc07aed0c5c548da70c240155d60ca2e2e8ca521154", 0x18, 0x57}, {&(0x7f0000000180)="ba5bfd13a799fa3c2cdb8273aa179deb35841b75e1f8d8209f25fd27512b263ac740f37e57093872e95b34fd76b5479c879caefdd94a5209c63434a378626430ad43de0f74ed4eda9b9871a426637cd2e89f5d976193f4c1f3ddc27d7d02b05b9a84f1a382", 0x65, 0x80000001}, {&(0x7f0000000280), 0x0, 0xba1}, {&(0x7f00000002c0)="23bc0bc6a1eede9f80b80ee679821725f28349f8c1f668b720b52d553770b1111e7bdac005de9f3e97c8ea850b93a933f3a29e31b838042844a0ccccb9cc8f", 0x3f}], 0x22, &(0x7f0000000380)={[{@huge_never}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsname={'fsname', 0x3d, '/'}}, {@fsmagic={'fsmagic', 0x3d, 0xba36}}, {@audit}, {@appraise_type}]}) 11:52:10 executing program 6: rt_sigprocmask(0x0, &(0x7f0000000000)={[0x6]}, &(0x7f0000000040), 0x8) [ 2737.748753] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:10 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x10001}}, './file0\x00'}) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x200) [ 2737.779186] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:52:10 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./mnt\x00', 0x0, 0xee00) [ 2737.872336] loop2: detected capacity change from 0 to 140 [ 2737.877823] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2737.879357] EXT4-fs (loop2): group descriptors corrupted! 11:52:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x1f000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:52:10 executing program 6: rt_sigprocmask(0x1, 0x0, &(0x7f0000000040), 0x0) 11:52:10 executing program 4: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x3, 0x1, 0x2, 0x80000000, 0x26, "0089e8956d5f7e5aaf425144efa4d0132fda5b06b0ce8cd28ce4580713933ef3cefbcc0c8f9d"}, 0x2f, 0x2) quotactl(0x0, 0xfffffffffffffffc, r0, 0x0) 11:52:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2738.057720] loop2: detected capacity change from 0 to 140 [ 2738.083499] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz-executor.2: iget: bad extended attribute block 214 [ 2738.092713] loop7: detected capacity change from 0 to 264192 [ 2738.092783] EXT4-fs (loop2): get root inode failed [ 2738.094424] EXT4-fs (loop2): mount failed [ 2738.110613] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2738.129883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2738.158178] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2738.237532] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2738.401074] loop5: detected capacity change from 0 to 32765 [ 2738.405243] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2738.517417] loop5: detected capacity change from 0 to 32765 [ 2738.522016] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 11:52:19 executing program 6: rt_sigprocmask(0x1, 0x0, &(0x7f0000000040), 0x0) 11:52:19 executing program 1: mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 11:52:19 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000088, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./mnt\x00', 0x624001, 0x40) 11:52:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfffffffffffffffe, 0x3, &(0x7f0000000080)=[{&(0x7f0000000280)="1900000040000000030000002b0000000500005155c4c60400000000001b0000002000000020000010000000000000009f09c75f0000ffff53efb8e50798eaf5a0303ee28bb4cf4fe6dfeae6328a494506c26bc1bd9895d869941478cd1a13c3119e29379bf6b2011503530fdbb439c6aee2c6b843bd2156ff860a4575bff9f2216a58dc19cd43f5492c85740a4cb14b5197fc76afda1df76d9904154a211ab73f96bb3e31280e9f344521e1cf328920febcc39c89a21d64246a", 0xba, 0x400}, {&(0x7f0000000140)="00000000000000000000000000ad91b30000000000000000000000000000005178aedb0300000013000000230000002ba1f5d3f7adc5176f62e6134cd4f299f32465ea8165b5213990494735f4fec94d3aec2e653b52497a092dd8ec890cb96297f1dbfd01e991a0af4d2005383866b86bd315e52ceef96577b892de2e7130fa788a893f728a3933757af591059a973972c591cd5ae0836618aef4da56f1eeab7269e5c7c9c465d57bd386c5ade2875799a6266023fbec8dbd1dbe9ed70180b52f51f282b8b3bf1de9b5d83681255e059fc214357f6e8334bae579a23b", 0xdd, 0x8001}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x2}], 0x100000, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@sb={'sb', 0x3d, 0x7fffffff}}, {@dioread_nolock}, {@i_version}]}) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:52:19 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000100)='./mnt\x00', 0x6, 0x3, &(0x7f0000000580)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000000280)="0000a5070000100000000000000000000000000000000000000000c99b0000ed410000000400000000c75f47149a1d34e7d598bfe01c9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000040029fa41a19e1638d1d1135653a32a5929d69ea88f8ad2a411bdbacf614ffab92b8cb82e337587113d74d93a0e3bfa70af632782e7ed74b5ef52b2d2d280985b878276e42f89d5e4de9a1654bd3e42a29356bd250bc0a5dd8c12d3", 0xfeb2, 0x8c60}], 0x0, &(0x7f0000000200)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x110, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "8c14b35f1ed0c3b3aa223fa466b784d378d69c4efb073e17e628b236a24368d9c26ea039101d4e500022ab9a5df8c4692516555441045919a2ac90bb848f1a8b943d49ecc1c8c1d68b11a9f375ad98734915d64a9552410d508cdc49f7fe3a5d8f9b8ef43015bbd4ec86da6a660af1a494c950d41c7c637e2c3baf69b49a4dacc51ff6639e8bc9806785e197e570a60aba9159be89562c5f668263a26cbc6906092c0d2d4fae51a388f211f0845f9c6fb7508519cce953706d6c8d6b4c3beccdb71e348b9df6bf2ceadec5875ad70d28de82f762e6bfbc85ef38a496f899565c80c830"}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000801}, 0x1d8cc01dcf046d0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001280)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './mnt\x00'}) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, 0x0, 0x101, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40c1}, 0x9ce978636ca47d70) recvmsg(r3, &(0x7f0000000d40)={&(0x7f0000000940)=@alg, 0x80, &(0x7f0000000c80)=[{&(0x7f00000009c0)=""/89, 0x59}, {&(0x7f0000000a40)=""/10, 0xa}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/65, 0x41}, {&(0x7f0000000c00)=""/50, 0x32}, {&(0x7f0000000c40)=""/7, 0x7}], 0x6, &(0x7f0000000d00)=""/62, 0x3e}, 0x10000) newfstatat(0xffffffffffffff9c, &(0x7f00000012c0)='./mnt\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x22040080) fstat(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000014c0)={{}, {0x1, 0x7}, [{0x2, 0x0, 0xee01}], {0x4, 0x4}, [{0x8, 0x1, r2}, {0x8, 0x2, r4}, {0x8, 0x1, r5}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x1, 0xee00}, {0x8, 0x5}, {0x8, 0x2, r6}], {0x10, 0x1}, {0x20, 0x6}}, 0x64, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x164, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x164}, 0x1, 0x0, 0x0, 0x1}, 0x10) 11:52:19 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f0000000040)) quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) 11:52:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:52:19 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x20000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:52:19 executing program 1: futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x1, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000080)=0x1, 0x2) [ 2747.023973] loop2: detected capacity change from 0 to 140 [ 2747.040839] loop7: detected capacity change from 0 to 264192 [ 2747.045593] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2747.046999] EXT4-fs (loop2): group descriptors corrupted! [ 2747.052316] loop5: detected capacity change from 0 to 264192 [ 2747.073819] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2747.087397] loop5: detected capacity change from 0 to 264192 [ 2747.097053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:52:19 executing program 6: rt_sigprocmask(0x1, 0x0, &(0x7f0000000040), 0x0) 11:52:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x220002, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000140)={0x9c, 0x29, 0x2, {0x5, [{{0x2, 0x4, 0x7}, 0x7f, 0x40, 0x5, './mnt'}, {{0x8, 0x1, 0x7}, 0xff, 0x40, 0x5, './mnt'}, {{0x40, 0x2, 0x1}, 0x1, 0x5, 0x5, './mnt'}, {{0x4, 0x0, 0x5}, 0x5, 0xae, 0x5, './mnt'}, {{0x2, 0x2, 0x7}, 0x7, 0x7, 0x5, './mnt'}]}}, 0x9c) [ 2747.129517] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:52:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fca5a02eca91b72896ae05dcf91e831ea4de4395bd59d045155aa5c4a1eed1ae853da1324ff32ebc072cc19d99d705374cfbba09819ef58842d1cdb3de0164493b2e7064c7dd3baf64924ce36b14d5d7599013f5a2a46acf3857cad0621a458e5920368014ceccaec46eb0ed3572"]) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:52:19 executing program 4: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @empty}, &(0x7f0000000100)=0xc) lstat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000240)) quotactl(0x0, 0xfffffffffffffffc, r0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0xe, 0x1) 11:52:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2747.177376] loop5: detected capacity change from 0 to 140 [ 2747.183880] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2747.188823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2747.193100] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap 11:52:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40010003, &(0x7f0000000080)=@ax25={{0x3, @null, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f0000000240)='selinuxfs\x00', 0x100002, 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0xc) umount2(&(0x7f0000000200)='./mnt/file0\x00', 0x1) getsockname$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000040)=0x6e) [ 2747.278843] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2747.328180] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2747.347534] loop2: detected capacity change from 0 to 140 [ 2747.378950] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2747.380566] EXT4-fs (loop2): group descriptors corrupted! 11:52:29 executing program 6: rt_sigprocmask(0x1, &(0x7f0000000000), &(0x7f0000000040), 0x8) 11:52:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:52:29 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xa) futimesat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0xea60}}) 11:52:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x62004, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000002c0)={0x3b, 0x1a, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0xffffffc1}, @calipso={0x7, 0x40, {0x2, 0xe, 0x8, 0x1, [0xfff, 0x400, 0x0, 0x7, 0x101, 0x2, 0x100]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0x8, [0x8, 0x8, 0x49dc70a2, 0x40, 0x2d]}}, @calipso={0x7, 0x40, {0x3, 0xe, 0x20, 0x101, [0x2, 0x2, 0x401, 0x3, 0x100, 0xb7, 0x0]}}, @hao={0xc9, 0x10, @mcast1}]}, 0xe0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) fchown(r0, r2, 0xee00) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:52:29 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x20100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:52:29 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x3, 0x0, &(0x7f0000000200), 0x805005, &(0x7f0000000280)=ANY=[]) unlinkat(r0, &(0x7f0000000040)='./mnt\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 11:52:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:52:29 executing program 1: ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000000)) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000140)) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)="8fe26f315e424e72acb8facef14d058037aa286b47d78744fe2d85d68544da15d995df389d9e89c7368e91b337beba68f666d1280c034be5059757bd2a93304da63cd1122d6e3def6a", 0x49}, 0x68) clock_gettime(0x5, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040), 0x102, 0x1, &(0x7f00000000c0)={r0, r1+10000000}, &(0x7f0000000100)=0x6, 0x2) 11:52:29 executing program 6: rt_sigprocmask(0x1, &(0x7f0000000000), 0x0, 0x8) [ 2756.935934] loop5: detected capacity change from 0 to 140 [ 2756.937086] loop7: detected capacity change from 0 to 264192 [ 2756.944642] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2756.947117] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2756.948185] loop2: detected capacity change from 0 to 140 [ 2756.958021] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2756.959721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2756.969612] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2756.975212] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2756.980774] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2756.982418] EXT4-fs (loop2): group descriptors corrupted! [ 2757.017267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x7fffffffffffc, 0x3, &(0x7f0000000200)=[{&(0x7f0000000280)="1000000040000000030000002b000000050000000100000000000000010000000020000009c75f0000ffff53efdc2077864aee2862bf4b00e8f698844feaeba27ed31ee196e20b38513225af3f3fae5c8fad0707e5891fc4392dbc054af3428fdc79b9ed4e0b6695b441ed838c67eccf074a67a4d463e64b93d88325be3e6afc1968a7105e69d3912c7e20213093d0de34bf782647e72b13ff9445df9b63019c461aa37d123a36fb547ca1b3c0637919cfcd3911b6ea653e135b5bb3e7067725f05d1fcdbf793c64dbc57b247ddb2bf3f6121300"/224, 0xe0, 0x1}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise}]}) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:52:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000980)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/115, 0x73}, {&(0x7f00000007c0)=""/235, 0xeb}, {&(0x7f00000000c0)=""/18, 0x12}], 0x9, &(0x7f0000000200)=""/20, 0x14}, 0x41) lstat(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)) [ 2757.051308] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:29 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x23000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:52:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b000000050300000100000000000000000000000020000000200000100000009f09c75f0000ffff53ef", 0x36, 0x400}, {&(0x7f0000000080)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x80008c60}], 0x0, &(0x7f0000000040)={[], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}]}) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./mnt\x00', &(0x7f0000000140), &(0x7f0000000280)={0x0, 0xfb, 0xaa, 0x0, 0x5, "277cd31ae563f71be9dc1547d918d6c5", "896cefb38e475fa63c3b9c924d7a677bcdf2739b34878ae3f24a7dbcf17156fa529945f217cbb80dcdc300f259dd0bf1736ac557b3db3d3decc2e5b846f7a4e1a6c5f2cf789645dea2a4e18bb8c66dd6ac24662ded76a58cb99c758775221f9f1120ee0b155389e1852ffd3e4b5915bde4f5318321a9c4534fe918c0f7a1448b77d5a172eefc520905fe3636d257edc7414c40ba43"}, 0xaa, 0x2) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:52:29 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80000, 0x976d1b1413e708d2) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) unlinkat(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x8a3017977790a455) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x80000, 0x0) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="872d4325390fd052bc4a6d30c1f8d00335fe2de94cb457fe0d8d62fcce585380cc1102302d5e3719b7abc373afe30df22ed15b14fd5858fd6a96d04854123a8d9cfaf608a95fbb41c91e7d68c13a13fceddacb7b658462118f467aa3b63aa116b88058acb4d7e8e942209b72f3ec72f8f7405b0b57b9345122d645d0eb057a3be74966bac4b4680402f7b910e8ca21a0ce59fecdfd86905c142b848898a454e054cf9abba35e5a69f37edee178116cc31418e8", 0xb3}, {&(0x7f00000002c0)="5451323178f458233ff2cdfeafbc485256d1dab9393f967f7fbc7282a42a0c792c5f3b794061e0ffa7dad7a4e30d0c75360b6b125e85c99e9c257f3aecd0b131cbf0b83cb76a5feb5167c58f07e0e5c445c383306ceda2b3881e205b53ad6286d937dc1cbc4bb659c8ef7972d45e896ecbb82d15d03481939fe961", 0x7b}], 0x2, 0x8, 0x9, 0x2) sendto$unix(0xffffffffffffffff, &(0x7f0000000080)="68df5b3b1d1d12fbdf421472764349f4407ce02c4b531c5559b976c30a969997b800f2062f9a65d126c831181e69cf0823918e1736aa2f452da6096b462b5867300dff6172e364ebb03ed9e11b161d0b6a7a53228a11649f3a54968fca5c8dff3a58066fac5981e34558aa4bcf73cf51d898041d8b86c709633eaece5a", 0x7d, 0x8800, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 11:52:29 executing program 1: futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x1) 11:52:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:52:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10040000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2757.162287] loop2: detected capacity change from 0 to 140 [ 2757.168618] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2757.169392] EXT4-fs (loop2): group descriptors corrupted! [ 2757.175955] loop5: detected capacity change from 0 to 264192 [ 2757.180509] loop6: detected capacity change from 0 to 264192 [ 2757.202126] loop7: detected capacity change from 0 to 264192 [ 2757.214247] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 2757.215574] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2757.236206] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2757.248193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2757.250793] loop5: detected capacity change from 0 to 264192 [ 2757.252146] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 2757.261116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2757.273342] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz-executor.6: bg 0: block 3: invalid block bitmap [ 2757.275421] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2757.319070] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2757.328943] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:39 executing program 6: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1002, 0x8a) syslog(0x4, 0x0, 0x0) 11:52:39 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x24000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:52:39 executing program 4: quotactl(0x41b, 0xfffffffffffffffc, 0xee01, 0x0) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r5 = getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x3, r0}, {0x2, 0x6, r1}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6, r2}, {0x2, 0x4, 0xee01}], {0x4, 0x5}, [{0x8, 0x4, r4}, {0x8, 0x3, r5}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x3}, {0x20, 0x1}}, 0x7c, 0x1) r6 = accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80c00) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000003c0)={{r6}, "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"}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) 11:52:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:52:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000000240), 0x0, 0x10) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000280), 0xd84ac7cdb6f92a9c, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000300)=0x2, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 11:52:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x60800, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x195) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'security.', 'selinuxfs\x00'}) lsetxattr$security_capability(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f00000003c0)=@v2={0x2000000, [{0x2, 0x1}, {0x2, 0x80}]}, 0x14, 0x2) unlink(&(0x7f0000000400)='./mnt\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004", 0x4d, 0x8c60}], 0x0, &(0x7f0000010f60)) getxattr(&(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=@known='trusted.overlay.opaque\x00', &(0x7f00000002c0)=""/230, 0xe6) listxattr(&(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)=""/91, 0x5b) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:52:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030500000000000005000000010000000000000000000000342000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="00000000000000000000000000496924c9497568570000000000007ee7b1e495e13689e413000000230000002b", 0x2d, 0xf9aa}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="007930585b955749789e00a772100f2cbda050e1b401ade9bc3dc82e8650e190baf92e7e1fc9643ecbc18e74e682e73542fda9e3d1b42e5ed796c4fab0a22313c10030df143eea39fa840578624dfd796dd2639305e83f2f479886ad2ff288668d932fd3f2ee8dfbb8ee12c1a09aecf0b84eaf7a42cbbf7bc542668a83aa0338d34e13be6bd971c72245fb2b4edce37c0b4141dedc14de978b47685d839645d4e2492ca6c11cd4170701ffc188ab286e602495e281e23e00ec3f566b2a35970ed8e7a7cb762200"/210]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2766.617604] loop5: detected capacity change from 0 to 249 11:52:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="eb1c089bfee1c40d50026de586fce1f3a11664a1c45318bbab6b22ac4a"]) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), &(0x7f0000000140)={0x0, 0xfb, 0x57, 0x0, 0x0, "aec7df35a96db1956beda7ffdfeaa678", "cd4c938c4d61bd73c1a55335b6058600066a6760d10abf2f438604084369ae78ee6e4f8fec3f9230e8983858b95db75eb73748adcdc6295f5aa8cb3ec66b874bf8e4"}, 0x57, 0x2) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2766.633712] EXT4-fs (loop5): #blocks per group too big: 8244 [ 2766.644160] loop5: detected capacity change from 0 to 249 [ 2766.650093] EXT4-fs (loop5): #blocks per group too big: 8244 11:52:39 executing program 6: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1002, 0x8a) syslog(0x4, 0x0, 0x0) [ 2766.683841] loop2: detected capacity change from 0 to 140 [ 2766.685701] loop0: detected capacity change from 0 to 140 [ 2766.689635] loop7: detected capacity change from 0 to 264192 [ 2766.701639] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2766.703318] EXT4-fs (loop2): group descriptors corrupted! [ 2766.708800] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 2766.729388] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2766.742933] EXT4-fs (loop0): get root inode failed [ 2766.744023] EXT4-fs (loop0): mount failed 11:52:39 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x3, &(0x7f0000000240)=[{&(0x7f0000000100)="039ff8c50213c94adfd84df1c5a08e2a", 0x10, 0x8000}, {&(0x7f0000000140)="d98f1a30bd90d52dc28534925ffb7741cc04f1205d6058d81bf5d39a7e08b793b31689390fca2c5076443828d6b83478702829a2918915ee51f678369ac4618a409f5fbccd63fbe6c97f02c18e5c807b19c25b4c", 0x54, 0x613c8c97}, {&(0x7f00000001c0)="1ec3894221aa779ac46b26f0a7d3d3492b062a26aeb62e3bd6167c086b2069232f479483e9741c48513099916c63c08e024c05c681347039a2461131d4390fdc453d7740e0f25e98dcd8380633860d408fcc9bc1b13423de1776fed8b41dd9542c405c4e2b2ee1d3f9f7d0f001029d1b572a04f918", 0x75, 0xfffffffffffffffd}], 0x902030, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@nonumtail}], [{@uid_lt}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@hash}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000340)) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/118, 0x76) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x6, 0x0) futex(0x0, 0x1, 0x0, 0x0, 0x0, 0xf7fffffc) 11:52:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) readlinkat(r1, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/38, 0x26) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2766.758108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2766.777121] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2766.808740] loop0: detected capacity change from 0 to 140 11:52:39 executing program 4: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) 11:52:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2766.841354] loop2: detected capacity change from 0 to 140 [ 2766.845746] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2766.847369] EXT4-fs (loop2): group descriptors corrupted! [ 2766.859529] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) 11:52:39 executing program 6: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1002, 0x8a) syslog(0x4, 0x0, 0x0) 11:52:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/21, 0x15, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2766.897533] EXT4-fs (loop0): get root inode failed [ 2766.898350] EXT4-fs (loop0): mount failed 11:52:39 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="c929943424e3ff890dde4bb6c300"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, 0x0, r2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001980)={0xfffffffffffffffc, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000340)=""/86, 0x56}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001540)=""/195, 0xc3}, {&(0x7f0000001a40)=""/140, 0x8c}, {&(0x7f0000001400)}, {&(0x7f0000001700)=""/199, 0xc7}, {&(0x7f0000001800)=""/180, 0xb4}], 0x8, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x40}, 0x2120) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, 0x0, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, 0x0, r7) setxattr$system_posix_acl(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000019c0)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x2}], {0x4, 0x4}, [{}, {0x8, 0x0, 0xee01}, {0x8, 0x3, r1}, {0x8, 0x1, r2}, {0x8, 0x3, r3}, {0x8, 0x3, r5}, {0x8, 0x6}, {0x8, 0x3, r7}, {0x8, 0x2, 0xee01}], {0x10, 0x1}, {0x20, 0x4}}, 0x7c, 0x1) r8 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x44000) pwritev2(r8, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xb) openat(r8, &(0x7f00000000c0)='./mnt\x00', 0x8b040, 0x180) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='.\x00', &(0x7f0000000080), &(0x7f0000000140)={0x0, 0xfb, 0x5d, 0x7, 0x44, "00feed7b81d35cae7de384c37e9423cf", "55cfa0bd34c486da00791adba5ec08bc70162d5b49a8483ae5b580a52b4e4d7660b68a329de6d20dc908f50b75895324c8c5606be0f5697c72ece7f6b0e5337affeced3aa5e5e484"}, 0x5d, 0x3) [ 2766.934261] loop1: detected capacity change from 0 to 31884 [ 2766.935776] loop2: detected capacity change from 0 to 140 [ 2766.943231] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2766.944866] EXT4-fs (loop2): group descriptors corrupted! [ 2766.953913] loop1: detected capacity change from 0 to 31884 [ 2766.955331] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:39 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x27000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2766.994361] loop5: detected capacity change from 0 to 140 11:52:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/21, 0x15, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2767.043359] ext4: Unknown parameter 'É)”4$ãÿ‰ÞK¶Ã' 11:52:39 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r0, 0x202, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x73}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44082}, 0x20000001) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r1, 0x3, 0x4, 0xfff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000001640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000540)={0x10ac, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x20, 0xf0, @broadcast, 0x0, @device_b, 0x4, 0x5, @broadcast, 0x9}}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x28, 0xfa, "799286196214cd0596b8c34315dba851d3ed518ac69585cd50ba11aca700c75e83ea848a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "c6b4eacc03af"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "1978612f8ade4fac1bf17a78c62372945c8bcf83968c6c868a6aa0ace9eb68bdea82b4cbdf713458cd59860e7d4da77a56f2fb467c8e2f46347b9787aeb9cb825d0dca4a5be008e49232cd61cc79229d956f4d0a4166526d070d1a12bd881a90cc7823317fdf1d7db14d8ddf2cfd9d039cc980965b51f5d6c23107a14fdc92886eb19beba04d7a7c12dde36d4e88ec16c94ae7b62d13c1282e0bb014ba889d1a02b08cef72571bb9e16dfde723c67ae7c381d6da0477873bece6bfa04f8e8f3bf852aeaa25c6e30e502c5d654be01f53a4d33dd9ee02917e2b086aa4a4631e03375a7adb611ae368493ca26127681925d211cef634e9f29dd1b82b03f5a5fbccd9d2c8536b11935696408b163b0a950383fc83e7f7cb58dfaeee9eeed4c036d79dac13aee69c1eea9ecac325a5639072bbbc5f9275ff35d34b72b7ae0c5082567c280306efcc0b51137e2589bd826a8143836c14ebf141d509bfce0dbf77e5b9a7e789bc5dbf564b3fdd90a5b114914febab736c4b0579b333975d365354ff60804f2e2c2ed06dae8227ad107bee16f31191abfcb21d862691288be6fb6f2c6f04a2ca327d26c4d1f451189ee243b1178ec708da11d1bfc3e0c473983b588b434ef745d07b8037b6e0c94234ed56d438bc839e782ef9a14d7425574ad335b2719dd2ea6ce0a9546757ad6689dbbf6f0b6542082c709879af927dd847804a2119dbc0f4f65f8d34535926c03c021db703f15497e48c0d50a5a544aca10bf9c0f5affcaab95f7dd27d584074b750e88d3c6d566f57c4c14570bd8b1c4eeb3ae95dc375ce0c3a75c6945636f642d4fc2e77b8e37fc9bad9980f0044c98a4c53b884f9a4b2f7f23a9d5dc783389431320c4245776a2048ca45e0b6df897a9119d17bd19f7752de7f5d460cbaa6db84fbcf56527c95aabb5d16a12919ae5bca47717401dbdc06dcbb0219595e8a57601d0dc1de51ad0c99cf93cbde0f63d527fdd37d90b1f887b92e4f70106ea4a095d85b270dcf8da1227056fae7e76a911080df42ea586e3ec6a976b32a5892a5d3bf4b7bbc8589187fa1d1837207c2211278da71bcf2317a848b525a1c9065fc0dfb31e59ab19bf96de7c9213918c610ca9259af569ffebcab701ca0d202aaf7812b4c64c8ecd599bbf1fbfe85c2e5181a6eebc597e831d171a72a8eac5fed43b60460bc6e916b03f52c12984d8239ebe7d0c807498037ebda4e2f2e508c5a0494e2563c807d8caac34b194b4b65710c54680aaaee582551bc67b4e3ab7a042fdd218c8d383132ec521452a9b9c468b22c06524b7f56828577c7af291f4fa26cdd35c8b4f76ef0c7f81e910bd8276c49ce46d7b5a9670d0acbf01bd2a86fb514e9b84cbf29031d438d33e282086ea4f7f49538dc773bfbbc71901fd82294f8e6802773f1d49554215c4ccf08dcb53e8e15ff2f4f1d87b7073e4373c6d48aa5a464c3906839c4cc434c434e331e8f28a054983e80dce0821679a59da9eb7b4db4669fcb1532f4182db64cbd90c5294d7e2c339cea37b359b642105852abeb4cc0d88a7a50079f14a16aea56bc0c85a76e8dd71d3b7d6388cb902a7f6cbf0dbe3c099ed4ba5be165c4f82bf4d473fc2d66fe54d706382b36eb2795c8728cc01cc1f5e2a578005eafea1301d8716fc8c8f069c77f4f03063e6c6219a8a8dfaf063daf5a7d0a2ffe203c5e0fd6af6de9d9efc095b9c259a965e301957b588e11bc9d7bdb881c2c138756d410d1d1b232e9472dbb331e5fa156fcc3ea7aee3dae4a28f3c4ec8b580de6b71a873149f2d1f0c32df19b75cdb09c30dc5e652866660d9fab22c10da1cb9351d7d10f51d6385fcca138412019324c86719bb35fa1c32fbe79b0c04c4f6a82a587d0a08590560d5d3446e2b56da133ded62d00e8e858cf203e78af596fc0cbd9581493ca5a6d0c5e38b2fc3643391a982dbc45734c7181b469bfbdb8ed185df6b2594cb985851e88cf624e2a595a9e103414ccc6d71ef3af914bb9a0f30ec4f1dc22934e3471d83730e0a73c60323021913d9085d15c0b7ef5c983eee16e09349874b1f52a199bed0d7862c78b66eafa8b8e3e263cc8ed6ed117d2393fe553282e1be1c7bdff1e110685857775526544bd89f37c4bb761c768b9486b4f928ea910159333b3a661772f450f6be2db925d7ec9b05198953dcdf8f6a693e3bd78954f6d6a3e50d3b0dbe583d76a75aed55f41f2a4b7c18c4c4985eef86a243776d9b9531ebbcd46bb2454b28c37874b26f335a6a8c21a893c8e85a837b74bc2c28f2aa636dc9e27e6e4206dc7cde027c8091dcbdb6854ff127122c81b36fb107c66db7cf064027512d64da7409a99702ed69c50033735d23a85289b78811e7287555df2a592f0259c20e22e35f0544cc4060234753f3a8031b1c2ab31afdc74d49a0ce8f99c0a78cb9956130500516a3a9a5e18e17103e856a48ce132bea8f02be2267f62b2226a2eecc3a91d0a6475d07bbef68d6d87dac113f3abfd85d5253c784695fa624413a8ca8ee8094b718efef0c2b9bd72e2b9e310d2ad4f3e6a0217f06d54791e3b7184fd63b1b8ff3d48a07a2bcac6f84f0c712bb66d9f047efc05aa6f12c456e9aad37a05b80c580b7a3339c433425b6a186faee8403de5446e02417b67ef9a940a4c6980211d0568e7f39fee90cf9c43abc69207e17a689874789fdb2c1cb1a0b4ccb4aa63e934684896ee028fdb912732348b860ef390041c15b6a63dd5948d43306fcb0a50e52351505e835dda8deabf45db989288a4b11f261c1b96fecfad47df6a64bfe175e8f60d0157515b460e8c2d345913ccf219ae60edf3abd266f721712507db0b8c1846015ff7f2463ad11619c0377c4a10182867ac9d5145c2de6012f1f49be75eb70546ceb5d61acbbf50929d9412d6eaba7bc2976474afe88b7da7f0883474daa554fda37fac7bb6e629df561435eaf7e59171ce960c9284f86e1d77b13ce41556e341c233638f100e4a723c344e245bea9924444e5766f501cb8f9ef3f8ab1fc0d7cb810b2cb88730d1d7445f26b401c2e07c420d58ce1f6ff387ab15df4cef176dd3ba9280e3de3eedfe52a2a2ce0d6cde224f41204ba9d8e257883d12457bdb2b0f4a5c4fffef1dc9d1b51803c29ba8e5e17b05b93a79b4d1a46648605f68cc792943e8f6fe53cfc0b901337ff5dd85655de87d47b55ebc20637bdb99ad66624785fc3df6e2073831a79ac17f5c29fea09c5e519d85365f6e37fbef6c6c9e5ddd2f6ae113917f431011d49c254ac4d28ba052b6af7325448aeae8b19a132854f51521b045e5b2d1e22234d1baf21dcbd0372323e15f9e201515a3ff32404f6db50c2fc5247a195eba811023afc1ba3a935c87582ec6d323b61501243d9a96eae88ae6fe0cca49afe5dc614c43361622d8c739d6844bf4f9b4cf3bf51726f149635aa70dd3511e2be11f3e18b4e3cbec1c1843cc56d6cd891168040aaefbd988a017e683847cb5c1479040c97bf88ae9de6c8bb14cea94f9693351d636082a839b85d00bd4567d247a63ac48c2c8f7dd4419056f05a89f089c7463641cb45d261b535f7859d8dc91f0abe989cf29b18278fe2c3a138a704a68a072a511657f7b4eff1fbc2c2a70f6a549d08e77111dbe83fa4b00dfe23ec6227b75937e9a33badf8df7a412f682b272be43fb7e8d2cd6b5e309cd82acdcd44308290fdd460b64cd302f16691c30b539d64d1f4a425978d562aa810ae6597971ac75ac0b0d79c08161125e73fa8624b654aa13fb285511ad80ee5aadf556c656d56496c01ddc6a1f7b46e6513b311dd90ae470e00f0b82bb32f0b49f58498c4958d17afdca3aaf2edf4ca75b66e518fb4e9c522f0ae573ace4653ee97a7e8151e68438759bb861b56078b86ad41a65d1ae93778a37cb0affdd9228d9f3c670ab26788b94b2e064b1feab8553e3e68d07ee17063329203b496b9580c303b1bfe979e8fccf4b05dd92c25b7b3902a83a1c1eb87667ac0d655cc904d8f6a5df419b0b9130ede0dd97e7c6e241fe33b1fe7f23aef5885c209918c80b3e5971b2a215ed9adda8e4ef745cb22100af8ae40e7bddc9a96b0745ab002b81cc9ca07b9eec35c6b98ce8a036a83f43bd128929698a45489bf7cfe00560d418c2d2993e110f9e054426237d4b27ce30344060c638e98ba71f88dee9ada2439f2845ef5b47327c0a16b12f7dc18febf7142eb8b7040d5a7b803cb704cd0bb5387a6e2f8a9b2dfc73d9edc5f5cdfd92e272093229635db232c76f8bbd9129ef36fd035ececf350ca3ab9e7c812f65a7ea6679f71fa78fea3e2d6e5f9ffc7df5cb025c206cf8f50bf8c6010db1c05230ee19fd79c4f850294264f45935e44a1d74a766cefc116d6df4ee7f9130a9ea2cd5d82e73c95aa4475354f9e4be22b0ec36e7ea9e3c4d73e288caa9e5833bec774064173602a34efe766a075a66677288ec348a20d44daeee82da0eeb8294ab20e8adf60c9621e7bdc33dcba9a62331f33f23a051504ce500d9c7362b89c09257782bb8544cb0d0529984d153fa322e309bb2e11d350a40129a84669443b6ddd159084575a5941e7f9c54590aa85224396d02fb883228b08306878eb678862f1d14ac74f45440efd8106e0242d7a24deced906760f98038c148f3e54cf6dc0d70d58738357ca7d9197d84baaaff3c61565c89bec38368ff60643cf7a90ecddcc99c266941386747915d28d1e6805ea5b86ed7947bfa16ded462b7ffadbbea44c2d5de7c8033cdbf00e57f254b9c30867d55aeccf4e475801cd2e806d9496f205b7189cad12b433c8be9bbf4ca21cca681f80467c8f5eb1d36fb45b60c37f82acd042636335af06b6765e9871c51df5daff8de53d64d312d79edb01ea8408eea13353e57524fcf7093f6622457c4a1889d95d19c6bf6619e6b304268c1c756e54f304b3cc52bb1e709bb068bab4043e15e9df6a8c01491cae439283cf941509268f77f8c24f2bd6ef91ffe566fbbd85a48dfe745b30663def51d37927f8dff717e212ef02d98e20bdfe1d1d1cef99820ac991a77937daf24e42f2eb3386c8e28596b8a4276c791c27be1a0f4fc771a8314430a56f4dc6664ba6b4aedc6b47ef0882a780abdde57c8109bd243bc3ee4d97abfd93d4a5069da63ab83fca77a01d771e4cfa6eb9b7460bf494148a6d6c664eb5dcda936ca204e3551eac8a68a74fc959bf57d2cc046155f9aef9febf181169e756af43344c75e6056e47bb7c53b0c338827521d30f17980cde794dccaf17b20fb1fdc93a0c3b2f95e9f48a892b019c902ad089e0f456014d5379dce293adfd183bb6c1113d99f6ae4caf10e3feb63ca0c94023fe2fc4e8d2205d1e31d7243d28c97d1dc71d7bd47c05629e02f4e2fd273983b9164d6b67879ef8a8cb2bb2f0d30024b2638d9f5a66447661484d6697ab4de901c289b2fc03889395c8a90c8955c6612749e7815c90270566c82a63797c1b8ffaa34cc3e74296d8dc569026bde1891d8033e17191103801e39994b54ae02f70eb9f2298257e7662efbe3db5833fba3932a549bd5c4fb41ea5773b38f0112c70fe19e11b2ab5d23d14904302c6b6c2f7178429f1a77179a9d5ad53544ec7df1eb280004c843e07c2f17e74bb962e1541c3793b10e4b69d4c1dd4beb4cedaac5f108d6dc4e9bb552696974393212cd6a75fe8a2c7b5b5a8b44d4c75307e3f8baeec6027f4105546ce643ed9d9a5ca9606a4f710f753c3e40ad127208867910e3e920ace16ab3aae5aded82b7ecc5a4100332f30241e6bae2b151e3"}]]}, 0x10ac}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000000) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x44000) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) r8 = openat$incfs(r7, &(0x7f0000000240)='.log\x00', 0x301403, 0x4c) sendmsg$NL80211_CMD_UPDATE_FT_IES(r8, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x55}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@challenge={0x10, 0x1, 0x7b}, @channel_switch={0x25, 0x3, {0x0, 0xb1, 0x5}}]}, @NL80211_ATTR_IE={0x6, 0x2a, [@supported_rates]}, @NL80211_ATTR_IE={0x35, 0x2a, [@chsw_timing={0x68, 0x4, {0x0, 0x8}}, @ibss={0x6, 0x2, 0xff}, @prep={0x83, 0x25, @ext={{}, 0x4, 0x0, @device_a, 0x8, @device_a, 0x9, 0x8, @device_b, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040081}, 0x488d0) [ 2767.115083] loop5: detected capacity change from 0 to 140 [ 2767.135063] ext4: Unknown parameter 'É)”4$ãÿ‰ÞK¶Ã' 11:52:39 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x9ca1fe11226fb8b3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) openat2(r2, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)={0x0, 0x21, 0x1}, 0x18) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2767.186813] loop7: detected capacity change from 0 to 264192 [ 2767.208323] loop2: detected capacity change from 0 to 140 [ 2767.236557] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2767.238217] EXT4-fs (loop2): group descriptors corrupted! [ 2767.243734] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2767.278280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2767.305762] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2767.411667] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:50 executing program 0: mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:52:50 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 11:52:50 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x3b9ac9ff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:52:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 11:52:50 executing program 6: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1002, 0x8a) 11:52:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x80000000000007e0}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000140)={[{@test_dummy_encryption}, {@errors_continue}, {@data_err_abort}, {@nogrpid}, {@usrquota}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x7fff}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./mnt\x00', 0x5, 0x2, &(0x7f0000001400)=[{&(0x7f0000000340)="f9cef541d633f1894e672848ceacea2c6610953a1025940377dea14f81caa6d1af94c5cbec8f30a08eb20b2094c90fcbef77d4da112fa1cee0c51ab05a2b78b2f0f264d95f683c9088a1dff3099e706592d0a4abbae5c4acefe8f835e1b8ce67c1fd74210badcb1f85f01c0e8006f052c0bd09a85263ed2396c1ac40c44c161cec46cfba4cf369b25858adfd7098dbcef6622803507eeaffba9107a8deefd763b85842cf5de677dd0a8347ee3261", 0xae, 0x6}, {&(0x7f0000000400)="eca4cbfd67e6e47998828a49fe43a8052c3b7cb8fa1f2f34773c5ce636003369e43236050ef220491379dac8b1efa5f661e7e53027a4401bc70af2cd58a1308415c4c0ee94d57522a179d226d86807884476118a664a0f0c63ba3e1e3316fd21422b0ca46dba2a024c7f343350b27b685b71f13bf5cae3abc13f0a16b639ad62143772cf7aa7311aea34769fff85409eb968b70d59d7ae45939dd560b1f6e97212ba75885c5a6a25509b85e08eb88f4bbb3bb894febb37f8a4fc94920ccc93ded6a9f465f101d7d1f8bfde719ecf0dd27b04e778d4e109427e1a63e5106f7a280269ad5a689d786ecbe7e9d6a2dbf12ce4b30fe3b91a14872aa69a41e0bfd26512ecd5860041f62e861acfecaafe26063c0e0a934f9cd4d943a8e2704a25c012cc73f25fe9397b62ba4733682449fbfc6323d256135aae38e15ed05f2329934f4370a11a5f1f839d2180b87292f261d39da1004706ab99b26040739d2a7b57f37e39ce7b43bbc49749e411459fcd84bf9cfd68c668fcd44abe9f8ddfe8da5a918e29eb262278391acdadd976ebc42bfe113a2ec57e1d9b8fba621512fb53ba28b49f2f7d6eb153ba004296a455f2cd1c649b09ddb1a52816107d019676c8c9b5dfbfb296364e3c019f76ac2958d7b9220e7638a7701295a1e1c3ae554679e13c744ae4ac92843b35bb300b5649eacee36492f24f3a5ba717df3179ba7a4d96d7f191a2f7dceffccd55916798b502ca80303172c6a30ec1fc1fd8da8df5525189f35fa5cc3f906120f06095283f0472b37b7fcb4b0de6a9133d893d9690279a79e763de635dbb399d10451628a2f3867ac6207b24614e52e530cdcadcdf55544d77689f682dea253134eb8972e1d381832ffaf2c89b73f03cd4a6cb4746d23668f2d30276b88945e7c499683fcf8ed1bc78735a12ca62940024c07b32181c4840c2d229c29bf43f3d098c89ed7b02dbff9ec62a96c77ebeb7743f61caba52130f4871407798dba7759544b05248f1312526d1faa86119fafd41a98d6262053acd5a8146b34ea12d80d65762adda87189ba52c573d8341cacfd29091bc4d335de09eda1a4fa9a481f8b26412077309995212a926a1b213e8a1caea24736449e1a12a259664c77be0b9bbfd4a795d0225cc8edad779ad49d2df3b5345a598ba2d741d29d934e9865575fa275fe07282547f2df646987e72426343aa86f7e8755899669ca77b65577cd8ff00b974db065b915b82fbef0402c469d9175cd497a1e54df6215adb0216d5ab83080ef09141cf9a8cc42916d167c1264694f98b6863dd142c1a8dba314effb580dc320e2479efe5e1c3192f6e34a6a07d7d29b469d2f659386d416d518c16089c858400973f12b00db137a8736c2566142324992da382bf4e12f81c219a33c7ab1a1f78278d044b088846c4d0e931e7e3eb6a5e0095afcd3ad4a9c5efd7fbcb126934e6af1a4fc17ca8b8cbf4d2bb9275b4fb88d03cbe7811c5405cf0ee15871776137c4b1e6cf01862cc07775d1dc27d6a5290f33e3f991672866afee97f8e0f46aa8e8f669d920610781390909d34a674e1da2e08594510cfee22877a4098f5ab433cfab2f589cad9624a8a27539cb1da8daec62c904ff0014e3b7f6623b4c96e3f9bd90a5561cdc26d67c2ab291235c19e9f182bbbb7fe6b2887d10a04d16b5cbc9b7fefdda434a73eef08833330824ab9116379c6674e812c47199365db8c07ef0a88ea5625542a36dde042c8eaae68cdcbd3cea704831027f031b854ea007c63f328fe5ffb33a924c27fb69a5787274c37956fcec71e314be1b810273b736cd8e561dc944d93646b7143ae8f700a7333ef39c3299832bc1f50a69c4751d72606447a0161e54a0c6da275eaec5630a4d9768285ecc6715e151ba8a4ddf31adf182d170bd9e4c66db00aabc8b8511ea003f7c1ec473b6c215f22b812895099b97c54e3c75a6cef3671a0366f1b0a821a1fa885db541fae613d2ac66be00f99fc53eab1ebf81e2ac77afc8551455e080e14d755067e728aa6f656ee1821243994a110216daae8ae4403a6f9146e487cf253a410d8884441dc23a446855c32313bbf9418bf0a22e94a703149ddfc3ef2e8db87ac6d384c47af0638f3b6ed4bf3bc585e0ca36934c8ad26f957f3df9a7ef908cb5705128b15c16356117f6c1b34b93570b08455b08a3760ba165fb1a4b89d2141b85735cdbad5d2bdfd59b62bf58e73cb2e4b73374a6a6593bdcc025c74fbc034e7fdc1b0f742298f3ca8b29870501d000486d1f44eb723e605da8cc0de843e19c3c6d914b96f32a0e2a793cabb5387b21111aec3e325ec54f573a4fe0495414c90a2406b313092628f4bf7338196976ac6f1cb6d817a68b487e32d5d79eb8c4729f1850f91b13278e504df54a5b29da43ef398858303ba86e78b4dc8981b6fd0197bb3bbb89c678b2139ac63f3c02e4d570661521da426adcb9a210e0cbeea85c0a90efa233886ef976d92c6ad3284b49101cf050eb417c9e41dc8220d915b718ac85b689ff134f7045cc54bf73b9588ba34aa473354b06bda44afee66edcb98ea77eba331b77f7a4e7b3a3daba8a8a92c0e7d8af8f0b2b3ffc5446493c25a479ad64ff747715b964c12b702d9d7efe83246f8f45a1c04a845d70039bfbd88b270d24def269a99dcf62c15ff2db76a9ff558146d7924e1764e71179d3dee42c0753baae17f027693f03dc47b250bd9bb4ef2888a779fd2084c7ca128d85a0c19f0b2b73ccb9795115965d6483d9119a35302d64c7c42bbde419e56fef5a9aa5f91852e05a6e325729970dbe781146f529873e7a3f22a3d9dfb3c442f7e1268b328ac2510b45bcfed19acaaba0a60a99b71b9c838c29e350b41dccc9bd4c10adabb0f7459ac050b05e1054102b7afa27dde35b109aca3972d0c72a5423d4ae0a6604378ec2357f9f7f03677e02a2582e458f499d5eea2e8c9584bba2c25872f5417645ac439ff29a66aed113721ec2166eb040b18a46d6bb38a2bad35fce1a346ee45d20eb5bd721627b1f334f3f52e3937c683d8278755af3ba8d0cd9d4ef922f62b25cf424be1decf049d0d2cb1ba710ce972f44be4963360f2993977e53fc0b80fa280cca12e0fb0fe141278f65b10a0c2a706f4ee7d9bebe525b5cc7babdc6a2c178fbcafe29e85d46811517c5cbb713f49112a92371ae63d6fe07cc26100f5d8df19d3858ccce8f270c5c5157d2ea4f419a78a1c1056d0460a23a696a7d28cf7c859e9f5161a102031714e726548cd5495f75c668bf2902ecdda1d267fbcf892f069a6142eb867b8d699026b9838acc29596904a04c5911145849f15ab428d66efbd0d74917f36eb11675ea93cc155e66a697950c80dc432101fc97d5eab2f466caa09d9656f105076a47191695e7b988d056265294d5bd7a05922bf8d18b0226ab48fa702a32b75e57c7645f8253074b51ec0f5ffe1a4136930d086f954475ce0ba66a77be24617f5721167cd7106b103fc9cd14974e7b038d4cf00a8cce3eeb1cea08ecb74c701e5536d361aa0347e9990b49d26310f9d72a600943dd2f61c20c914a1262857aab994eb557eaff27d6357b8a68dd9498a1a4820d22e6de15c31e53e202e69bca78e47b5bf3afbd56244459ba5d357b8671f261bf8d2f6cefb593bda82d924636c154eee8d79172fe035e394e3b22af5abe854ac6a1fc1e4d2d24af15f371e713ccc4fe548b11dfc559fb25b4280d25c0286e6296883f7d1c940166e8556aa120535c8ce6cfa3ce1e04f194da10771e2b592b4ef5138caa1f484b05d5c5c1a84d2b8cb7fa4a3e60c4af8585678705aeee5a20b04a599108a8b39ef1ee99b69ceb64a8a1df1ede45852758527d15a060ef34df254b4adbbb7d8bfb9ba0fe87025dae52cc9fd39e09266c6d956f63e061c98cf82a1665911cb5a4edcdc967cf536acaa9e58bb054abc69106cadaad4861bf1e330792b1537be94fd30f8e7b63dd75d9c933e7ce2cf2f896226d3bcbb1a4ee15d5bc3619ca527ecf200f57e44582c217971a377b44336170c84ce129dbf62d24c92114f8d6ff00ef9096820b09b1d6571ad692999c4b5fe7a5d6701b608647c5f72e68d1b3e15c5af89a7725d91f38d74d5598fb1504c66c09c7dfa77e6d9e0e053ef4e28f2ced24af62d7c596e2ab84e9520878ae58d378a15fb6221ee2cc95757e02be6314cfc0706cce8f8a745004d01b54066eef6f4f4b240e6f7609cdfd514077b9d1c2ac5fd7e5e8d416a568497be84be12285444de221fe35c4348c63407eb5716ea03fc1b56805899697c021445c79a8c898581790ed1db7820099fdd7a2551104da69d237714298c1b9e1064f597479d1ce8c2909a02415b9dee10316c93e748c6bde15803b49f30831b3334ca92de01d124c17ca79d1bb053f59fc77905e14aaa5f57e12025f43af46a1b6638e790ff7fec5466b1b0f5f9f92537ae917f98967b20e6e3b97e956b72aff3c415322088f0a1590b4b2e7ac916f813b48fce2b867f4ca6a19b1f561fda52ef2ecfe0686657d204b5ded9dfa74f1a120dfaff3f486fb860817c743380932af8183da09148e387ebae62484dbb54a9cce67769393837b8360a633796910a66d2a7a38002b87ffd7ade4b2065ff2320e9398610bc89b31dd9f53b7e7bfee0160091b3ab8e3d2234fb5472cff1b2884f1e0e18ea61aa1615be7197f86d4546d6542afb6c123569a01b224b496e309a0eeb03b8a9450254f5a87b4ba9eab28178d33cfa6acdc7da2c84bbaef9f3a54c1beab6d631ebf0cd2c729d583d1911e600a03e1f350b2c061470c48ecbfa7b56e64e4ce063fdc7bd13ea855e996632d157c2cbed0d6267c605820db7753aafb9540c4f8776cfc6b0dd935900ca72d3f63771845807826fbc97582a6faebc1681ad9f81401f6dd75666cb0d1dfe8a7ac4b58bc076249903fe6d32bee87e2b3be40f8a6bfecabbd05da9367455d4a6deaee21ea13f061b8a849d79d3875daf7d6aea462596f1a8f4875147700bc87ad429db6f7e590e9aa216eba7eff09d9f6a2aa96e5772df92bf891f3b01215ac798f8889d20c359514fa00a0a71b17eefcde126ac6832770a2f602e9d9a81d98ad9861fa6aa8777bc6e5798d4ca9a2e062efa47acda275280b7cad648db3b07935c214f2f307d71bd75754ea5806f34b63a1a86de1a63714559d2a337e8d8b857151a664a43e327001ab080a48587a0f40421e2892e5fd4552825a85d86c156a5bdcaed89d7e16678a0ea72593bf71c7ac6c995ffeb8a3a522cce1478795064e9b1819d13d769d01eecc4abcd7dbd12f883a0fc631d400fbb1424e550ec3c7de99dead8d3a09d1f52ab71b7b482a3cf9ebcd7c197ae6f6b8c9ad62a3f14f2de7c8ad05a191505ff5700c78b062549eb6fc9ef3be86a7e99560a5a776c2463241e339523c2abf70427754675cd9d4a6e161c42c46f1489fd918908d7146da9480ff933b3cd4fe8342f892cda0ce9bbe7d8aefa6f592dba4300708b318e1049162ce644fad96085b68fa3ebc62abaaa2db91bac405d481bdf1bd38a34c03d78dd79fc116eb1d98776a6aef9eec6833147e8f224056a03ed282a541059fbef2f7253767cf41e84992c9c3055a9630c7fb5fbf2d8b5a36008cc5645cd5c0fb279112d61c769d31f20966658413fd807444be03f97cfe9f33a6698db00af302b172345cadb62c7512aa2778119a7f20761772ca3f2f6275b176ce603880511b54c16a395f44846f0b6f2da49322f55afc3aef5fe376fdb5a3472d7ae6793992324", 0x1000, 0x3}], 0x40009, &(0x7f00000015c0)={[{@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x266b}}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@fat=@uid={'uid', 0x3d, r0}}, {@nodots}], [{@uid_gt={'uid>', 0xee01}}]}) mkdirat(r1, &(0x7f0000001540)='./mnt\x00', 0x10) chroot(&(0x7f0000001580)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) umount2(&(0x7f0000000280)='./mnt\x00', 0xa) 11:52:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/21, 0x15, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:52:50 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/usblp', 0x88c02, 0xc) ioctl$PIO_FONTX(r1, 0x4b6c, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, r2, 0x0, 0x70bd2c, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x80) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2778.341934] loop7: detected capacity change from 0 to 264192 [ 2778.345313] loop5: detected capacity change from 0 to 8199 [ 2778.354122] EXT4-fs: test_dummy_encryption option not supported [ 2778.368100] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2778.374235] loop5: detected capacity change from 0 to 8 [ 2778.395249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:52:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000, 0x0) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='exfat\x00', 0x846e5a80275c783c, 0x0) 11:52:51 executing program 6: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) [ 2778.436885] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2778.453827] loop2: detected capacity change from 0 to 140 11:52:51 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r0, r1/1000+60000}, {0x77359400}}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c, 0x80000) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0xd, &(0x7f0000000000), 0x4) ppoll(&(0x7f0000000180)=[{r2, 0x1201}, {r3, 0x400}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x4000}, {r4, 0x80}, {0xffffffffffffffff, 0x2210}], 0x6, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x6]}, 0x8) 11:52:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x1001410, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2778.511288] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2778.512874] EXT4-fs (loop2): group descriptors corrupted! 11:52:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178ae", 0x1f, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:52:51 executing program 1: futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x0, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080), 0x0) [ 2778.665865] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2778.688872] loop5: detected capacity change from 0 to 140 [ 2778.703406] loop2: detected capacity change from 0 to 140 [ 2778.721805] loop5: detected capacity change from 0 to 140 [ 2778.729891] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2778.731840] EXT4-fs (loop2): group descriptors corrupted! 11:52:59 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x3f000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:52:59 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) connect(r0, &(0x7f0000000000)=@phonet={0x23, 0x2, 0x0, 0x20}, 0x80) 11:52:59 executing program 1: futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x2, 0x100, 0x1, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0), 0x1) 11:52:59 executing program 6: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) 11:52:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="8f8bab0000000800a95ba59899d4498b2a4f6d326486528ad26272f7fa319ee644d11c15891cbfc7bf38c9ec4fb28288d1d891442b06ec4000b775c6fedd10"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)=""/119, 0x77) 11:52:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178ae", 0x1f, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:52:59 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)=ANY=[@ANYBLOB="4a2d8658988b24f9392990"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000022c0)={0x0, 0x0, "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", "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"}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000052c0)=0x0) r4 = signalfd4(r0, &(0x7f0000005340)={[0x5]}, 0x8, 0x0) clone3(&(0x7f00000054c0)={0x101000800, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x39}, &(0x7f0000000200)=""/27, 0x1b, &(0x7f0000000240)=""/13, &(0x7f0000005300)=[r3], 0x1, {r4}}, 0x58) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000032c0)={r1, r2, "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", "38aca4e6afeeaf052b6d8c2e7892c642c198f35344e61da8ff4d8172c63d93e89fac959d0900da15f03acd421b4738b8b645be5b4c95f395f59c6a36710f2d38551dbfb0ec263dbfa7255905de8afeb91d1e17d3b6b102767692582597b480cf28ccd20415126c2e9f22127951a0039b313b5f97e2b6e357b91c4a3ff9e9f4448fcb5a00fca303dc184794a5254f1eaa8c4176294d6a9f5fa0f3f3446e9d845d4470ac56327b2983839155b1237532c1e3c669b6b4843376f8fa402193b5fa48e09238af67aa90578f7f3e3dcc6f444def6614852da99ddb79765110b595607a406b3206f86d61759b9f05a9bf30af35eb8f2870990ca844d5c3165fc6db605d308bf4500bbbb749a2251a85d07a90ecf206ba6b97228544e251d515c5d2719029e32324ee38017654991a452698c462892cc4db5f55a70383c16b32ae05c3b2d7a50d6624939abf5e65c9f7a73f921e5a760b67a3b877e15c8623e8eaf1969c44918384e81d960430636c6acb4ac3531701abd0a09d1cae3258e51efdbdbf97dc25b82920557f612eb63bed69e02537051b8716e9c758d0f1c0f6560d25a0d05c02874b4a35dda8108425274998a6fcef097a6747fa500ed5eaaa7e7cf676f85a842d1ddb37de14a71b531095aacc1a7f154f6341ea1408853433d4d2586f02f30a46e717bbd8f62d097c8bb57a0e68da31f372791e4c43dd6fde25e780956e7766f39aab2614a62d121935f9c5bf0cc6356ad4edc8ceaad6e3fa69ff6a20dcaf74abfee887195f97a679b7092770725e6cd5ed54187e0b10204c51bf3a022809bc9779feede3300d675df8eac0bb31ba2f0ca1bb2fa29738c606166ecf04cbcbff5dba5652bda24fe8b59b7bb133583438e4c86a05c69652b1d633a85e3363ffac9eb4d07ab20de9009b0166357676dd9b8004be13ea74fe98ecadfd97197a54c4cc743c278600f64bc5d4e10bdfbeee74d53efc4cab533b68a9bddcc968cfc8c10e907ab329f031e764fc1e8092a734ba1b0fd4bf8f9830f25a4cfa8aef5be6d9164c0644c72d4f1ad95823f002fc446a339352b61b78ea204eea283ad752d9878826eda2a2d0d53220029b19417834e11da71ede9c0da06e34acebf30e9f9effe4d27e7e205d291420c7d843b71042c3f9d9a7866393d6e9b72f4c69a2b1dd9172ce5bb58e1aab15ca0c816f6feeb7312c3185a631b8f324c724d34a1eecbcaf80175c737844bc534bd791ffbcf7d1856af5dddb97a0f325fd7a6dec415d3b585dd3006c7c1a2f6df6fccc6dc1bc90c388fe09787e35ce5532490729e84d1ceb01a59858d349d9c79093ec90b574f1602c6f2cb309e2861933b0c578a7234f72f8bd5c9351dcb7a7d37407a01c7fd17392af2e97625b48170661bade186fccece33c645321bd4e6bdfc42d1fc1f4776defff135f15b9ed4671e77ec3c15ffecbb57dc8305f2bfd10489783cf36c75c54efcf203eb178bb80b09df811119bfd62fef9dffdf24428f37eca57b80e8db5ee6225bd9387a6925ce8f21f4846ab1a89ab11957f7d919c52746da95bd27de2d103eceda8f96b898a3bb18c17dde755aaccd8579a4c5fcb0d59c0e99356e42127836de02b1d4f28b7bc4a41b2db6b6c7d83537cf73a2f476ddc07a2de5fa0ca1146b1eb7f788c3b7cbeb536ce95ca79273d86eceda88b9d2c4d1c0ac35aa27c288cbdd43af00b0fe0defe62f15b80734e1a82c2ea5658cb3bb5ae61f9d0dc5c343a63c32229a48d8ddb7bd33b041c2c6f276229e1a44c5be4186c973055f50a4df1a1504fc71f563a18dc5b469a15b943e22b279a5f0b04b31a53f35d81b0d3d40ab2ca74849a94a6cd2461eb9fff896ae46983492fe3601f7ccf1d8bb845551972d3b86e952337834079544713f466cb3a696984c0d6c06cb50be322448a154d1dfec8b0f867b1eb3d9da881aeab046af7f18f8f78cf9eaa8cd6cbcd9011c87252eab7f4a7ecceffba45b4f833f5e405f902ec00894664497f948ef8c21e2f65562bdae08b1018ff9c2970458f3c313de0a1667a9a24a105884024a6bc4cfca658c22c1ea59baf6550216728af1752fc40e9304d7fac5e5ab86ffe1fe92c06de44f85d598a4a7ec9b6239ba2570c35b9073bcf3f3c59118389a7e894f794e0b56e31dba81772a18e2d20957f7d71e10bf289fa2398a1e7e6cd056c11bb8b75e5b30edf307ce5253763e0cb9b81d022cc9266451c503b42671bd5c57e6b70721b1a1200e5a578fa668036ae36fa85323855d726da2ce38f16476d98153b8b6256cb4dc97e3dae1c325333cfa4814355cbcbe52e27dbf677f982c06ddf490afff33a182f4107334f4e4885e8dc698d73c76c31e8aa39d0e04cca11fdc285e8e3472bb79573a71ca34c3c9eddd4a4dda7da76ebab577128638d6d468542c2720e3429cd4960e524aedcb71557028e11f7c87eaf5d787e70a809253ab5bd0dd13fd56a21154e9ca7641ba5f921d98a55a98a32c0ef9889d2b75bd05902fa43221d7b6bf3bb48cb77d5cf39c0757d5e70bb1d3b5a1e8333b59fefab37e3f022f9996dc9c6c4ea2ea781c5e430f6c7922eda906875f935894721dbe6c5da9b77dd045d3055886fc0ddc81ee2ee10c99a98e09a7e44f4a431015c13d21766032c04d224daa626eef9821ea8f3a3b4322bf5cf4481f2e8288a426137864791505555175f7d955ab3c26f9c441ee4ab0cded275e45dbd625e246753cc1e6610a022bea6e59b259f7dcd705320c61e5811b6ecb41eb1953c564a678858581fc1215eb92bc4d83f9ca4be2313a02a15c733eec7dc0625b95dc22f83ce3bb382e3e81357844ab336a404654c70634ed932e8b3f1d739d757229e9500f0e3af34f2e4f8baba00b60ca17aa8a1d15384409e9137745ffe1cd16d556c6d7d5e105e6732ca5b1613df6878c41fe21aef10125f930874f6da57f91443978d023a35e250dff4980d1e88c6cf847f0711d7fe816732a7ac960c990094c4c8d16152c5cb82085d7a4d4fcb59ec0b17d39089336897e4740d10c5add4c9be8fe168ecad60b56fbea1db82536123640eaf79c51851e212217821aac6c2b1abee05d7b719e363177d51ee8ff65da308d61fced402cc9c0b2655f7fcbdc1ffcb615d879b8d5e34949c18427f6c7a137a04679adc8c27c44365b484f6aa0766779a361d966198f5103eedbb171f55fa65f57fd216c09b5f4c75871ef07b9be0ddd446993b744c9bb8d1973902f06dcac9ba384d2d828d0896c29f9431ec616413a30c2f3e9a0a83610446a888cc6532537a1b4a34736860f544c22395c33de1f635c8eb3f2ac5d06c64474960fb6c48b1ebfba8a73357bcdb359d233fdf785e58563762e131007caa54c52701005548603c9da19b133b49e178199889a9eadc1fc0b7c23bc01658b9dd0e7ad98c72bff86511a64c1ca427479e993143f74c96acac2f8b608af3ed59ef26d651004e327188b723baa52aadfeaf5eeb6cd3eb02d50a3332a0ec69cfc810f979d2a2e3b0f94d80057a3f42915f8a6c5dc47254a39ebc669f20231d7819987d14018c05bb29e7367a3c7a0ca4d3e3b3d118d482b41ecd494bf07cd13c810b1c6db9161b19ae4d28665f59cd5e52a586b5ea972cc315314391a64d43af674fed646d7088062336b6ac5a54613d7229e04cce42292861d64856feb65750744cc80cd6cb68414643a52b3a195cae835e3b8021b71d0bddb2dcdf58dc253bb495f09ed94c81f306f9278be722d092b41fb3c444d36dabb5ceb9fbb1f97a6e143c8f2d78f122aefc02daa7d34e20a9612ed4e8d2d3a0b55685674bdb2f6c841ce0abb8ba0ac6d016b4bd0789e2f225950686326f519413fa42ea0ae98528320b78fdadb7c5bff61aa89abc6609834d43d520be27a66ca140dab56cb2daf4b14f0065eeb02595b9b14e362bb772052f9a91ba27dac43db0a92ebeee9420de242225d143c875788a8b3e9b1d4ebc19dd62d603192a7b15e67a0bd5c4f4bd8e62fa6be8062264aba6c77ccb1f1dce1186141bd4e40f75d700a059534c0df249727b60e4f86c233c8f1de0a95f179915a3c6fb6bb98871ac45168cdce0a087b5157f1b973e718e82e6c616000962e5e4bbfe5429218a3bb1949612296625f1a53196fac83c90aa06c125d018ed6f195a70b2d75f25f0b5d219e3c4ee1ad1991e8d0ea87834e43e1b51a0522e0f7f32ec47b9b904eb9733681e274d179e398a5e9d7a5b2e8833c59af54f98e3861d24cf0aab24118656a1a2dfb6d16ad57d7d623d2b5250fa4a996564065180028856023c4fe932a9e6fdbc4265e1d996b5aa5f5f1fc0670c2728f7ae3961517994becddcd380103d16b3784d94be703c09b78ce1ed5c50d5bb0d2c0f34fa104f03364fedec66c8ac7876074a622d1cec433b462b1f912fd570153000e7d7d48fc71a971d552f31fdcceed75b5c662c99dce9d697afe26925d0a38a5a933ff33b3a6de507ba05d082d69d51981709a8a656a6944b0bebb997921241d4cb4cbf83ba872f175b7747967ebad268986e2716a4c669cebc7be336f059f7195c89f028332d47a2ec4a2999ec0149f9047c3286eba46ea0dda958dd3819266e184fd9fec0091d12bc2e1f725ca1704fc3099495809893e3473a518978794f9ee191783e239e27c36bff3a22cdeb4ebcea6e9d5c32f5db1e1dfba1edb3adcdd2f623e96278a8d0f465a6f3d75ebc3cf1f1246c3bfebdf0d855d02dc703d6aa92f62e7bd7458d05d0b70e1b777c28af6ce9ea67c22af8e89eee525579d20e2fb9989859d35e486be0bdd9b90a9aadc5da2fa6c668afa53fb9422772fa7245786299f7847a56f5c6396eb3fc93a1e68a05656803e8f9c8cfe073a20bf3e782431915e329c674682da866dfd0c90c6a12e22d1e99cd7504f9aa773f6fb3babb49f04841cd3eb0ba6a2fca28346ba79c9e0da6386a90b0e943c6bd84889a276fe810100486946bcf606df506cbe219e9adbd8141b5fef0663ab30d846aaf1c6362961fdcf703aeda0845baa760423e4b933363cfac49d7422c356ce3341e61e93def0e187d1c8f1f3d94d821e639201ccbf5200dc222edd7454a4f932f269df8b28b8ad5aa8a60cdc79bfc66578469a6b561646104f854a7ca302207086610e28db5bd6aedf0192c34378821fc3b768f50959a712f0f7ebda78aa124e6e132915cff3c811f5a277d81123a526588aeeb930d210a348d31e3d7b495be88b8a1cdf5be0075b8061f48b6bc473b4f8469efcca64731cf6c01bb934c3a96b540de3d6bfab901ae60e80c214fdaa93c3ca19216a55674dbaa2886511912334d040e32f7324d9a74a4fd95f0fdcc8e065f377908ff19b8aadc3a001b6c59af9e5ef45abd790941c57085207e962b541be969eecbfa0446f39bca18a8c5c09edd"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000042c0)={r1, r6, "3d30ff1f52468be444f90c832b0aea02786f058bc70d4876951e6a2a22f3b10ed64eefcffdb94596f3dc9f28977c6a362f5d2ad6515f9e77245bc720e5f44b5232290eb0e8446246b884d4a8b74eb20d3194fc449e6f834e23a8bc1e171855d6e3671a685f597d893c9ce1791a36b38ec2b03505e05039dfa96738e2ff07e7a50f9cb5229299a8643fa0052db46c9b5026f4a050eea4189aa07f6a5e0527c663774ca4af821af5af9ddbee319fefbfc0cc0ec7eeeb98385c9a50826d6dcd7564a0d881ede17b921de3427e1f4467a9824c2978abc8073dea98a20f3a747ecbf6d69b07d5a4b3de143bd285a455344873edf50985ee3a430b2826e3a8c9bae5a2", "a59008bbf345f2d50a39226bb5210913190800040c26f9f8fde966bef786e31e22ee29a468528c2219042b386bb536902d1a91eca8659f26766ac3b1d71a647c8bc08e4ead90a178573f2389237319622fccb43982537ba6c27ffd9902a060bb993d50fa0d24cd321cecdfb3523c3bec830f14bae2ea41953621e567d696cb1646e76d06f74a9657520e333e6fc70bd82bb1e22e43d66eb083eb5cf73d750cd5d3e24ba3541bc0da91db863a00b6dcd5539b152716bad168201577a3557e55c669bbe05738d25357a2b6248abd9ff05cebddad22da4eb2af7fdad8b3e419026957e83301f6ec4603f74796cea5a013d7a867bb593588167cae2ba74e5aa63afa18b7e56c90a69dcbe13dbab8b230a368681e9908d4abf0cf0f0b548fc564c0670773c5790d4eeb6a7d1d68fce94ba1cd8811ba24a8ae4628ec31adf0f80993872c637f80a8fc5e7f9d954fdb326c97859d36a3d0bbee2f0a3a56ff3ec6547338b57557987d7c60fed2cc69ff1271a6eb82a785c6902c8ef7550f9ded8aa02b0aea3c54abadbe89692cb28c1b9734c0a168a585e52a5211b63d4659867198d5bcc0701428e7c8aa1667d29e6928d1715074426599c6fdd7dff1a9315c1e68d04534ac199e64b29b4b8357c9056606b45aa7b9f4bf00a00b3556a99dca99595512ee848512617a53e064ec7628dad8b95358fb01cea27656a5081f0ef945f145c359c35c6bf61077481c9dea671b696e28e5b1ef4207e1290b39aeb31e588ab2914ae3b1b6eb17290f1376b4d7dceedc6b2f0fb1b011b05d25dffce85ed3845377723befce607b34ea7e217a20ddee13187566a68ba9cee00649587af2783b9c3c16a6f19716adc33a445dc2b460cf678c40b57a64bf77745de7398a6185f590c8daac4bed191d4fa8fc804709a3c13159247b28fd114ce400d4ef646335fbb04b62f6f43375cccb69f661cf7dfa8afb048875a9967c626e6c96656ba00a888c0b8dc53d73bd9430f4cbd05d8399595454544966fb88a547d26c68be9f9b311cfa4114bfec0a97f75d448ae80c91a53180c4d1b3c9e8d02bd7ccc0e3b39de6ae8d35a39e55ea6350e8818f5a0faf21c6985e6fea7225c879985e934140e57030d7e4c50828145a39cbc15d3870be48e79d6ef7068b059ec6a9eaeb2a98f0de5834546310a79c58b4556d75cb8efee65cfbde2d94255777f7e215256fd4c718e82ccf5bd33731479ac14403102c231ba3045aafaec642067dd24598ec871920366f00062f88b2aae2f27a4f3574ac27c218da94d1f49c5f453cd9aa71401236485dbca4fcd1f96fcc829524ca96cfcc804e8206c7af22a4d705bff5a096d16dc3b17ae00e2713dc604139ff647d12b1740fb2138bcea04c8c850369bee724c4633e91a9f414b9120e7385f88455d35cd3859fc7f9ea3f1b4e35a49d1059a56761f2f0d8f99b9193e792a96a2a0b850f3722cf9b3c6552c2424291b2eb78778067fb45770d4f25c114fdef2799a7469acbd790d98509c81f8f8f745e28d2ca135bd622f30a6806597e2a9560140471a931b02f5532b21ef3fdbc757b6f107f44a9b6be3a988b36cec01380008d8a3e3541cdddbf9dda195a52d36ff82268b7d5acede80c659add6c169049fa6fc875f68b667eb1b6413810d0c1ee63ae09f8ff9e3454c963316fd14ac35d53ca4f2e264ebec4632fa5a0d97515da101642d16c0997f4739ddd5de5df1b6281aa006639fa0467f444cd9f8839487ac360ea73a27a4fbcfe00a5ebf0f488064b7262a8551e88babaa605619e13e363e95bba5184a7357b93fb6fb60a844496731b0be4a16bea689a6f76fe00ff7df7140b3594121ac5e70d0ffaf983b60d13ef3684d2ccd5bb44ac7396f46d938066aec635d863940deb50c58fa1c07dd31a5c6bb977fc941fa7d5bdf23831304aeb7913b2ea20366754ceaa1c156fdb7e4bcf8a1f3246dc0725a9adbe54af671ea7c14073fa6e0c2593e6e7b23452251331a869e1b19e731ae5ee976b38a415007c74935fa7ce2ae0ca8e595399ec663d37b9f1adef55fb7c62e8efbaa967b45fe9cc28926817521e19979b61ec3a9bba19ea3d395e75716346a23adfe3dab825b34f08c3219da8fb0a967cf777817ab498b0370d1135bb54e48df39c05302cce32788c8598f1b3db2db68ba0752d20a9072d802b87d1d32a3b42431d138d0f4339360aed79a752e6ca76c182525f41397d5c921de60821cdd873dbaf468508ba77d1d75a49360b666538c02da903e11978ea049a91ace833d5e53b04abeff521712bb61020d8ef84f8a1714e851fc4dab4168598c1224206029033fdde57b16c313748029f9941217f32f8d37f68ac57454069860dc6459dfe18efb0d1c4e29a71597a33f40c74950eef569ec4b7cfaa6091780409d87e5935fc41784697a9dbb9a6ca71f1980bbab7fb742589697b345f775767c7a9e42fdeb772b4bb3e0d0ab23c53f40f0a635a70ac3d184bfa6b021f23177db9ad0427acc1d7b5084743691746b9300db06a0f1e47bf636d4ff48922fdc7bbabe7b0783f5c5b2b7aeb43fbb91e7052989069c79dd820a003f3a872c5e437712673acb9db0f43610a8ca7bcfcdd4605c06158ddccd819c6a03b0e0f05e9337fb068bfc5200b3e21cbbce64402d4a4551f38e164c7d054f10e30348c958d369ab28cc3571f67176f4f859dbceec04c19aadce72a14118b2d809565c45b67bc1ace755585cef2c9ed4013e812050c7541eaa1d331eec3a890704f98fdf6dc12f12f882c1c6bcbe28fcff501bb2374436324403fd228e01957e72116f5ab44c6fdb7cda0316465b9c8d4f08722f6a0ea52d6d4cf7715c669a707e1513eb31b1d049282244949071775bc61fae776b283be4ce48dceb6061471a26e857a2209f3a885092dcdf80d0168ca21aede564b8f30d2fd06ca10dabd486515a55de5f657cec70af4af69d8b8037abb185cc1cda7590ecf6eb6505707bbe28540406c34eb573b7bb53c6bbf751ef7cc094187926ecc716443ec7babacb34eec65ee7182ff2c27f2621da70aee687f1e746ec39f7ab04205728ecde1ea6ace90be1a1881dd3322cca9bf9eefc1d1b2894fdd9633c20551dadbbabe8e1f72f0222c61fd0aa606eed2d5a8162ac8538066700a28aced32ca1f0d24bddc1967af93cfb6d1a90d0485674741635bdef8af988e472cf3466696f9ef20645d3938318147cc635f27f8181b72cd9005763b6bea7bc3972e4e111107183339a0a5dc2c8b0b5b78eeb78d97ca3dc2cbf87e5b094c4a3e21ed7ae44191c3e5c86c328ad145560e55adb257d9b72de481828f79877320579939ea67d82b64645ba7f004fde5be3780d94b610612f71b78280d0f0226ee58862664f808a68bd3832a22e36dec552b3f4f4d1ab422dc8249d7d7269e92e71f0ce2d498bc90b900f6c7aaf15b28903952fb10a123eebe4d9d1042f5f6764dbbf85e869e947aaa7598b7b6610cc19955c6cab3726e109ffbc6fcafeb2fd7662f35a260c63fcf369c796b1bd683b4f305985f479fbe8e762c8bd54b68ed4c4fbe761dc2b7e06c925b53ee895f8d155deaafe80e15dbec7ebd132d4a7a4c19944dd8d8a11199eb4d61913896e78a04e772a0aa207e9a3d2383fe1b2f75d12e472fcfbb52dccdd69d66a2e54f667d1f41f582e8ea32b2e2c2284a8135077b58674cae40ff882ba82e43aaeb29975bd9b2d372b63e7deafd74ae6c731cac65f8cd34ea0397974593e1ae228d9ab07e88a111627acfea02357383e18593ec051bcaac76ce7f1f17baeced5d07203d3b43efcd1564b09ca2b14023d8aecb25ad73855206f9541f7192a50fa5a5cb257a37b6baf0e3b6c11a4ab715350dd5ad2d160220e7349624d7b1fd1ba772affed895c5d8b135ce87b8a2eddea767d39bf4f722b6a5130f89a4311c430e763f1af9ac66673f5450e5848a2c314b15c03be8dcf2f31d71ee60efb6a73c4c32a03b9c787b91587fdf8fe46f94648b598c164efb0f101f8dddea9da861e1601883df09a1e518d8dcc0d844141801c180ddfeff0b676de9c94e812ba202268584ba6688c325caacd63817a49e76bf4820269581d79d4a01c1c84f850230ad4e1250493871534623a1902e628256ada6a1e8a3fcc9c7c2fedc5f107bc51a3cf0131064315b2a2059292559d6459e6e6fed80a7b05c9b880700cb89c806159bcac8b2c80a6bab052b515a5a3269ae1d37b3b5ce4b688f3de054dcbe68a51e3b4057f1439983414170344e4b47b33446f27f994e91c0b4d2ba86cd8b1872a3e3a551592ec4853074b1b6b53378637fb954506b369147675ec6c5f2e55f2effc4e80176cdfd8131b8bdd0e45c708fb26e39fc1ecf1202a7b133b8451f5f1b0b0dcfa73010cb4100a770672d9c7814d5edb6ac81702b585f5b369b94a045d6706cf04ae06a145cf51756f8df296eaa5f1554cffe06801c11fea34de7d203f1ff08f8df08b199694a3df42240638da9862fc97e8721777fa02301757e5e0500e8f992f50765c33dbf4aaae90f11f23eed65bd251a8bbd99a8d96159b15101058849599884dc8162300e3f457eb5873cb5810fe77517c1d7a09509c2e99fee1317d1aad1633356ec79f2b8af3fdef3db29ffc0d344f65f642fb810ef54660533a1924d13bcd592808dca366b236f3c58967c91707607a249d7376e05d526c61d73245f2075e56d480157417c870d2f174435d2beafa4e4ffa218ed54f5bb0e6daa5ae0e9fbf664d8db59e60240fec14cf9b375a3422508eef7a6ba80f0d2cd9557e363f5c67b1c91c09fb08780182b7107bb81b186c846065012894458cfe015e7ac48f40a9a7ffcad697d83dccc4298568a6284f656aca87969cad10cde0bee8ae6474c5d90c35c987900c24dc2731e01aa7a6ff406712aaaa913f96a3bb3f46572e9788ca34fe36454af9a7155f078c5d16a802d05b31eac32cf089504b8b7ea03935f30ae88151dc3379af14b2245c0bd7293755ffd1eaf78cf17bfbba40e181913d1387651898489e136492baca4a2107fceba6d312d0995cb01f5eb7651f46145443981724d4f0289c9600790753baad714eec04efd86e1ac1e3af0b24d52858cc30148282541124d3c9f3c6f43b39dd97a378cb619aa96e0b48d587165309e05cfd107aa3863a95c6fb469364c4eab33ce2c58c284f08765a36de0472b36f0bcf77e834a78be0ee36da1c95f928320a866c31c9d27ade121c3a23be74ea626319295c197ad50ead0f86d85f2e0dc4092c8bc88e922b8cf1594639299e38af1f55ad90863664100a2f322d8e6130ab942e77f0dbf60e108a1976d7447ef80bdb17232c76efd5ba154106b22ad3ee6b3811b81a82d29381f39b5f8f74b0b3e53b379f9389cbc685a61de29b2f99173d6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000002c0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {0x0}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x81, "c8ff6808e4dbb2"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000012c0)={r8, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000053c0)=ANY=[@ANYRES64=r9, @ANYBLOB="07000000000000000400000000000000020000000000000000000000000000000000000000000000a600000000000000ff0300000002000002000000008000000000010000000000010000000200000004f5ffffffffffff0300000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000001c1b57857e644f80f41c8fb83ae8a0d13c5bcadfa13ed92b318f0033245eb800da648177e4e14968e386a427b73dbc3aba9ab88cac5264fc5b4fa02aaa25441293f006b925fb83142f907005682cd32e7e884611b4808422a0f5d6a1c648a490431ab82f7a77a9169715"]) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) [ 2786.909280] loop2: detected capacity change from 0 to 140 [ 2786.917822] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2786.918624] EXT4-fs (loop2): group descriptors corrupted! 11:52:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0x0) [ 2786.958836] loop7: detected capacity change from 0 to 264192 11:52:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x9, 0x0, 0x0, 0x40009, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000040)='ext4\x00', 0x0, 0x0) [ 2786.969220] loop5: detected capacity change from 0 to 140 11:52:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178ae", 0x1f, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2786.982220] ext4: Unknown parameter '‹«' [ 2786.984548] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2787.001256] loop2: detected capacity change from 0 to 140 [ 2787.004491] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2787.005238] EXT4-fs (loop2): group descriptors corrupted! 11:52:59 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xffffffffffffffe0}) [ 2787.018356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2787.029693] No source specified [ 2787.030717] loop5: detected capacity change from 0 to 140 [ 2787.043863] ext4: Unknown parameter '‹«' [ 2787.055416] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2787.239807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:07 executing program 6: syslog(0x0, &(0x7f0000000000)=""/78, 0x4e) 11:53:07 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x40000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:53:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x100000, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:53:07 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0040, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './mnt\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), &(0x7f0000000280)={0x0, 0xfb, 0x1015, 0x3, 0x9, "7f648ec22baffdee5466b476a9b6606f", "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"}, 0x1015, 0x1) 11:53:07 executing program 1: r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)) keyctl$negate(0xd, 0x0, 0xffffffff, r0) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="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", 0xff, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000000200)='blacklist\x00', &(0x7f0000000240)={'syz', 0x0}, r0) 11:53:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) lchown(&(0x7f0000000000)='./file0\x00', r3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x5, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0xc0, &(0x7f00000001c0)=ANY=[@ANYBLOB='smackfsroot=ext4\x00,hash,audit,euid<', @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f686173682c66736e616d653db2215c2c736d4a636b66737472616e736d7574653d7b7d2c007d8917090587c9c71df7fa267f022b52d9529c4c404c4b34470e89cb84c43a4dc886d29e9d61d03801147f515af7f2f2657ef8d725d2300ce4a5df99a267b03c9e2b503b048bd861e50737a18526ee3cb016c7a8a5ab40df0f"]) chown(&(0x7f00000000c0)='./file0\x00', r1, r2) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:53:07 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, 0x0, r2) fchownat(r0, &(0x7f0000000140)='./file0\x00', 0xee00, r2, 0x1000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x44010, &(0x7f00000000c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@cache_loose}], [{@subj_type={'subj_type', 0x3d, '$}'}}, {@euid_gt}]}}) 11:53:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000", 0x24, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:53:07 executing program 6: syslog(0x0, &(0x7f0000000000)=""/78, 0x4e) 11:53:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000280)='nfs\x00', 0x2000, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) mkdirat(r0, &(0x7f0000000000)='./mnt/file0\x00', 0x1ae) lsetxattr$security_evm(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v1={0x2, "7f82"}, 0x3, 0x2) [ 2795.021786] loop5: detected capacity change from 0 to 140 [ 2795.024067] loop2: detected capacity change from 0 to 140 [ 2795.033659] loop7: detected capacity change from 0 to 264192 [ 2795.034329] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 2795.035133] EXT4-fs (loop2): group descriptors corrupted! [ 2795.040529] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2795.052852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:53:07 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000000280)=""/146, 0x92}, {&(0x7f0000000340)=""/85, 0x55}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f00000004c0)=""/188, 0xbc}], 0x9, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x140}, 0x101) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0xfffffffffffffffe, 0xfffffffffffffffc, r0, 0x0) [ 2795.062665] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2795.068474] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2795.075050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:53:07 executing program 1: ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f00000001c0)={0x0, 0x9, 0x67b2}) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f0000000000)=0x2, 0x1, 0x2, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f0000000180)=0x1, 0x0) futex(&(0x7f00000000c0), 0x7, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x2, 0x2) [ 2795.090731] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:53:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000280)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53efc0964c0f97e26a9a19c2a2d91c7a5d409af073e08e70e3088c633d37255ed192b65e60ece2cf5a3a18d668388ebf01c38c6dbec8833fb9634219fd1df7d2c1a3ff8e1a2d36d8390281b75750d87f1ae5947afaf98a29407668e529cbb0154facc6b20fed93a8c565c32d494831632030f234c5ff92b7d5230f1263020ef7ec8937f0f024908a96c34cd2dad07351", 0xc8, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:53:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000", 0x24, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2795.130019] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:07 executing program 6: syslog(0x0, &(0x7f0000000000)=""/78, 0x4e) [ 2795.161759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x204700, 0x0) mount_setattr(r0, &(0x7f0000000080)='./mnt\x00', 0x9800, &(0x7f0000000140)={0x0, 0xf0, 0x1e0000, {r1}}, 0x20) open$dir(&(0x7f0000000040)='./mnt\x00', 0x40400, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:53:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x3, 0x1000}]}, 0xc, 0x3) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./mnt\x00') 11:53:07 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x43000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2795.205700] loop2: detected capacity change from 0 to 140 [ 2795.215597] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 2795.216364] EXT4-fs (loop2): group descriptors corrupted! [ 2795.235157] loop7: detected capacity change from 0 to 264192 11:53:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="5b10252dea0e53a71eec5155d3f6044f9930c45bb027a0df5906213b5b087e1726ffb9ab448cfaa6c9337b01c286926990cc983e866472f3e7709b6ea3d746f9bf5060d168ddc5c73ed13e3a428abf39e0d3b9899e47671ff45ac6d06854e719a582cd641468750c236470b272ce842180c90c5f0663ae239aa42b0247a466b7e7524e5cbf0960e7883c2f0291cd8907a7ffec497a6806cd19b28e6e0c5cbfeb72ce03b2750802761b1acc36"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2795.254739] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2795.272287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2795.282076] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2795.310124] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2804.334764] loop7: detected capacity change from 0 to 264192 11:53:16 executing program 6: syslog(0x2, 0x0, 0x0) 11:53:16 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000080", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf2555000000080001000b00000008000300", @ANYRES32=r3, @ANYBLOB="83f619a1e01a04e91855551e8c8e5e50536417de89f8a818236bbf8873f3ac21857e15db18e53430ac6ed18a3f32950000000000000093eb329595b0dfbec68c2e26c41768fd14a0c33c447941473059e318ef7e892c420f23ed80c746a69e36aa4e952b12aaa05d6a9f2d0ecc9f8600b3e63954872aeef17fdaca4807084e48eb400485f5d83a777cde12c28313377a49faa674edc2224d38792042a861abe01b55f1da3a9bbc6433d6d43015aab2619ead5cc876a6"], 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x8000) chown(&(0x7f0000000000)='./file0\x00', r0, r2) 11:53:16 executing program 1: futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0x3617]}, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, 0x8) clock_gettime(0x2, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x2, 0xc, 0x0, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)=0x1, 0x2) 11:53:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./mnt\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0x6, 0x8}]}, 0xc, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), 0x100) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:53:16 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/15, 0xfdab}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000180)=""/87, 0x57}], 0x4, &(0x7f0000000380)=""/125, 0x7d}, 0x20}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b80)=""/133, 0x85}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000b80)}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/227, 0xe3}], 0x5, &(0x7f0000000800)=""/248, 0xf8}, 0x8}], 0x2, 0x12161, &(0x7f0000000980)={0x0, 0x989680}) 11:53:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000", 0x24, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:53:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x46000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:53:16 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) lchown(&(0x7f0000000040)='./mnt\x00', r0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2804.357163] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2804.363587] loop5: detected capacity change from 0 to 140 [ 2804.368003] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2804.384170] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2804.389571] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2804.405242] loop2: detected capacity change from 0 to 140 [ 2804.405930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:53:17 executing program 3: open_by_handle_at(0xffffffffffffffff, &(0x7f00000012c0)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x80, 0x8, 0x4, 0xf6b7, 0x7}}, 0x200000) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000001300)={0x1, 0x8, 0x80}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001280)={{0x1, 0x1, 0x18, r0}, './mnt\x00'}) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x3, {0xfffffff8}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f00000014c0)="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", 0x1000}], 0x2, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], 0x448}, 0x404c8c1) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000002940)={'syz0', "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"}, 0x101) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001340), 0x0, 0x0, 0x3) [ 2804.417125] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2804.441351] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 2804.442269] EXT4-fs (loop2): group descriptors corrupted! [ 2804.459330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x4e000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:53:17 executing program 6: syslog(0x2, 0x0, 0x0) 11:53:17 executing program 4: ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) preadv2(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000b40)=""/153, 0x99}, {&(0x7f0000000c00)=""/132, 0x84}], 0x2, 0x1, 0xdd9b, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x682221, 0x0) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f00000000c0)) quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) rmdir(&(0x7f0000000040)='./file1\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) close_range(r0, r1, 0x0) [ 2804.515659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000130000", 0x27, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:53:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="100000004000000071a3d61214f7155902fb56d753ae7b030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff6c85", 0x49, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2804.593715] loop5: detected capacity change from 0 to 140 [ 2804.597555] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2804.604884] loop5: detected capacity change from 0 to 140 [ 2804.607365] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 11:53:17 executing program 3: setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000d34a00baf7aed5cb8c268b07"]}) 11:53:17 executing program 6: syslog(0x2, 0x0, 0x0) 11:53:17 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./mnt\x00', &(0x7f0000000140), &(0x7f00000003c0)={0x0, 0xfb, 0xb5, 0x3, 0x0, "65e9a9df5496748e27a837ca3aff49b8", "8a20885a69973251fbca970316e57e4e2508f642bb0887f49e24dee40744856e9ca3f919c2bc94487d54dc657366485684c58221656ae49065ea47390651fe15f66ddb8cdbf77792ffeff736f29dcc34aeb5e82db5c49acc8cd17c0e6acb0b6c6d2471ea0778991f56f0510ca7f697cad6ce401d0c296dd3a63467512f034e380d68a2e7666bf57a6eb8e2c58d6129bbb5eca575db9c906aca0383885a74f2d6"}, 0xb5, 0x2) pivot_root(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./mnt\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x101024, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@noextend}, {@privport}, {@debug={'debug', 0x3d, 0xffffffff}}, {@version_u}, {@posixacl}], [{@uid_lt}, {@subj_user={'subj_user', 0x3d, 'trusted.overlay.origin\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@permit_directio}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted.overlay.origin\x00'}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.origin\x00'}}]}}) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2804.672098] loop2: detected capacity change from 0 to 140 [ 2804.679718] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2804.680496] EXT4-fs (loop2): group descriptors corrupted! [ 2804.694143] loop5: detected capacity change from 0 to 140 11:53:17 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x5c000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2804.729117] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2804.750837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2804.758483] loop7: detected capacity change from 0 to 264192 [ 2804.769238] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2804.779356] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2804.814735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2804.828772] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2804.868946] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2804.884780] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:26 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000000706010226bd7000fbdbdf79030000001c3f4f60fbcfa80e17e6c2e6add1879d2ee043ed3ac1cd3ee4496fb3988f3914ab35c9655fb6b96e3f09cf44a8b6bddff7dd93235b4b03a140b5d77b50130ec0625cc69f471073a7d46b54fd6a415fcd97e957"], 0x50}, 0x1, 0x0, 0x0, 0x4000804}, 0x848) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x5, 0x94, 0xfffffffffffffff8, 0x400000, 0xfffffffffffffffd, 0x628327de], 0x1, &(0x7f0000000040), 0x0, [{}]}, 0x88) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) 11:53:26 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x100}) 11:53:26 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x5, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./mnt\x00', 0x40) unlinkat(r1, &(0x7f0000000040)='./mnt\x00', 0x0) r2 = dup3(r0, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000002c0)={0x45, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "616d88800db406"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000080)={{r3, 0x7, 0x43, 0x81, 0x7, 0xd1, 0x8001, 0x5, 0x2, 0x3, 0x6, 0x5, 0xb9a, 0x2, 0x1}, 0x10, [0x0, 0x0]}) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='overlay\x00', 0x0, 0x0) 11:53:26 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/15, 0xfdab}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000180)=""/87, 0x57}], 0x4, &(0x7f0000000380)=""/125, 0x7d}, 0x20}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b80)=""/133, 0x85}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000b80)}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/227, 0xe3}], 0x5, &(0x7f0000000800)=""/248, 0xf8}, 0x8}], 0x2, 0x12161, &(0x7f0000000980)={0x0, 0x989680}) 11:53:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000130000", 0x27, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:53:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1efeeed8b4be6b47d676dac0206d40fc81970a000000000000004bfe979e701fb9ce0614f628b85ef66ca4eda61d717d1b4e81ad2c4421ce00bd131864db7279f6182611ba4df00f08f923a8bab3aa26e5f2a0715d55dca44a6a6bc7b9000000000000000600550e00000000000000006ea2b90209358ab4039e60ea2a02ae476d283bc777da04000000dcb42850976b56f40000000000006916c44484d8f766d87ff601bdd1788be08d768dd7dc179263cadb3f367c5cf3"]) r0 = open$dir(&(0x7f00000005c0)='./mnt\x00', 0x0, 0x40) openat(r0, &(0x7f0000000600)='./mnt\x00', 0x102002, 0x68) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x3, 0x6}, {0x1, 0x2}]}, 0x14, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@mcast2, @in=@remote}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000580)=0xe8) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0), 0x52aed42f5a2fb32b, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq}, {@common=@version_9p2000}, {@common=@version_u}, {@common=@cache_fscache}], [{@smackfsfloor}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) bind(0xffffffffffffffff, &(0x7f0000000280)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) 11:53:26 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000008000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00002e9241873bfa31bb01ebfb36df17384544"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./mnt\x00', 0x80) 11:53:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x60000000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2813.573964] loop2: detected capacity change from 0 to 140 [ 2813.581189] loop7: detected capacity change from 0 to 264192 [ 2813.587733] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2813.588634] EXT4-fs (loop2): group descriptors corrupted! [ 2813.599632] loop5: detected capacity change from 0 to 140 [ 2813.624403] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 11:53:26 executing program 1: futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)) io_setup(0x12, &(0x7f0000000180)=0x0) io_pgetevents(r0, 0x0, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000080), &(0x7f0000000100)={&(0x7f00000000c0)={[0x1f]}, 0x8}) io_pgetevents(r0, 0x3, 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x9964]}, 0x8}) [ 2813.646609] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2813.649224] loop5: detected capacity change from 0 to 140 [ 2813.653293] loop6: detected capacity change from 0 to 140 [ 2813.672697] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 11:53:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb03000000130000", 0x27, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2813.678036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:53:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @multicast, 'veth1_macvtap\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)="12f50ac319b6148ccff713d7ef678c", 0xf}, {&(0x7f0000000280)="6b182dc707d2ad4e64ea737f4d380cac6d2fb006344c5e8d04f8de852409d3fc34a1ab1061172158a2476d7074b5fae0693c0211e4a5845e32f1018a8cd9693ac1c6a60776455081d07ff8057b845314329732be9bbcac24e1e6c6dfc9758127f5144ea8e43e22820faf53b4c478e554920d22db3ba61be430194ddabb1de4edba497ac9b4fdcf05938b73658549a7eec506256d56be9cb1c4090fb7ba57776e76b236f04bf329a199221e988516a0182bc3ef6b6567f6724374f525cae424b716bc9b04c77fb45ab03a9fa697423265f2e0e3a353e8245843e9", 0xda}, {&(0x7f0000000140)}, {&(0x7f0000000180)="99e5fc8f6788786636c350f2c40af3db217a22d1f13354165d92fd37443a98d6668b4774bb1917eb19e0b873da", 0x2d}, {&(0x7f00000001c0)="0fcbbe1137a2980d3474ef049f2cee1b3371879ec1ea6da8817416a3969028f0f86c896493e70fca40e7372edbaa1502b539262f", 0x34}], 0x5, &(0x7f0000000400)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0xabc8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x78}, 0x4) [ 2813.692864] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 11:53:26 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r2, 0x0) chown(&(0x7f0000000080)='./file0/file0\x00', r0, r1) quotactl(0xfffffffffffffffd, 0xfffffffffffffffc, r2, 0x0) [ 2813.707344] loop2: detected capacity change from 0 to 140 11:53:26 executing program 1: futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x4, 0x5, 0x800}], 0x1, 0x0) r1 = semget$private(0x0, 0x2, 0x0) semtimedop(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x8001, 0x1, 0x0]) semtimedop(r0, &(0x7f0000000000)=[{0x2, 0x400}, {0x0, 0xfa9, 0x1000}, {0x0, 0x6, 0x800}, {0x4, 0xf001, 0x800}, {0x1, 0x7, 0x2000}, {0x3, 0xc0e5, 0x800}, {0x0, 0x1dd, 0x1000}], 0x7, &(0x7f0000000040)={0x0, 0x3938700}) [ 2813.733102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2813.737212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:26 executing program 1: futex(0x0, 0xa, 0x4000006, 0x0, 0x0, 0x4001) [ 2813.745181] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2813.746070] EXT4-fs (loop2): group descriptors corrupted! 11:53:26 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './mnt\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000040)=',*\x00', &(0x7f0000000080)='./mnt\x00', r1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, 0x0, r4) r5 = pidfd_getfd(r1, r0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r6, 0x1, 0xd, &(0x7f0000000000), 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r7, 0x1, 0xd, &(0x7f0000000000), 0x4) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x400) r9 = openat$cgroup_type(r1, &(0x7f0000000580), 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000b00)={&(0x7f00000005c0), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000640)=""/127, 0x7f}, {&(0x7f00000006c0)=""/91, 0x5b}, {&(0x7f0000000740)=""/182, 0xb6}, {&(0x7f0000000800)=""/7, 0x7}, {&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f0000000940)}], 0x6, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf8}, 0x40010021) recvmmsg$unix(r1, &(0x7f0000002e80)=[{{&(0x7f0000000b40), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000bc0)=""/71, 0x47}], 0x1}}, {{&(0x7f0000000c80), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d00)=""/204, 0xcc}, {&(0x7f0000000e00)=""/176, 0xb0}, {&(0x7f0000000ec0)=""/103, 0x67}], 0x3}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000f80)=""/180, 0xb4}, {&(0x7f0000001040)=""/119, 0x77}, {&(0x7f00000010c0)=""/220, 0xdc}, {&(0x7f00000011c0)=""/120, 0x78}], 0x5, &(0x7f00000012c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001380)=""/184, 0xb8}], 0x1, &(0x7f0000002500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002580)=@abs, 0x6e, &(0x7f0000002780)=[{&(0x7f00000026c0)=""/129, 0x81}, {&(0x7f0000002600)=""/49, 0x31}], 0x2, &(0x7f00000027c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000002880)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002900)=""/202, 0xca}, {&(0x7f0000002a00)=""/199, 0xc7}, {&(0x7f0000002b00)=""/138, 0x8a}, {&(0x7f0000002bc0)=""/20, 0x14}, {&(0x7f0000002c00)=""/42, 0x2a}, {&(0x7f0000002c40)=""/168, 0xa8}, {&(0x7f0000002d00)=""/8, 0x8}, {&(0x7f0000002d40)=""/6, 0x6}], 0x8, &(0x7f0000002e00)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x6, 0x61, &(0x7f0000003000)={0x77359400}) sendmsg$unix(r1, &(0x7f0000003100)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="b827e5022bfdc1e99619340834a8bd81e490494d9b7147d48003340224636452a80d5b015f5b68c9130647a153c5e644c5e7f021e284cd6aaef9b6db8ee5de44e2def56d629e89dc92b98a63e1e38ba4797b2af91ffca4587bcfdc68fb49667802", 0x61}, {&(0x7f0000000380)="ea8b00745f6c0a9a5568afe6321ed525996400af6e0a474def59b0c7b2b7dbd828d759574c46a3832c56d24d29e2a74acf9365a6f7b23cc877ad42ed09e06cd3d18b081ea621558d16b71ca02ddd6719a7e6f370700dbbff1a8c8d8ef5600a51868b5b453e44581dcbb7da111fb837c294da2759cb98bf373b9e96740699e574adecf584eb85c4679060ab5be9e1a8e4956565c031f9f6eab9defa5d2dc1660a5854149f8687ad2ea69e155a5efd9a00c56e0018d3dbbf9bf92d9d368ca8b989b819f70fac", 0xc5}, {&(0x7f0000000480)="f99e8e8617fbffc13c8f995172867e3ce73f13c00641af0eb247a9", 0x1b}, {&(0x7f00000004c0)="7c42f72db7dfba228c3f569a11a2106884b8d0dc4c", 0x15}], 0x4, &(0x7f0000003040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r4}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, r7]}}, @rights={{0x1c, 0x1, 0x1, [r8, r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}], 0xa0, 0x20000080}, 0x40800) lsetxattr$security_capability(&(0x7f0000000140)='./mnt\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3={0x3000000, [{0x40, 0x81}, {0x8000, 0x20}], r2}, 0x18, 0x2) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2813.792587] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz-executor.6: bg 0: block 3: invalid block bitmap [ 2813.792799] loop7: detected capacity change from 0 to 264192 11:53:26 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/15, 0xfdab}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000180)=""/87, 0x57}], 0x4, &(0x7f0000000380)=""/125, 0x7d}, 0x20}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b80)=""/133, 0x85}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000b80)}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/227, 0xe3}], 0x5, &(0x7f0000000800)=""/248, 0xf8}, 0x8}], 0x2, 0x12161, &(0x7f0000000980)={0x0, 0x989680}) 11:53:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/149, 0x95}, {&(0x7f0000001380)=""/131, 0x83}, {&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000002440)=""/226, 0xe2}], 0x7, &(0x7f0000002540)=""/122, 0x7a}, 0x2002) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:53:26 executing program 1: lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd) [ 2813.854480] loop5: detected capacity change from 0 to 140 11:53:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000", 0x28, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2813.858353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2813.865708] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2813.869546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2813.869943] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2813.876986] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap 11:53:26 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/70, 0x46}], 0x3, &(0x7f0000002200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x58}, 0x101) quotactl(0x0, 0xfffffffffffffffc, r0, 0x0) [ 2813.934690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2813.950802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2814.009414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2814.019402] loop2: detected capacity change from 0 to 140 [ 2814.031747] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2814.032529] EXT4-fs (loop2): group descriptors corrupted! [ 2814.041358] loop6: detected capacity change from 0 to 140 [ 2814.056364] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2814.059332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2814.066069] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz-executor.6: bg 0: block 3: invalid block bitmap [ 2814.086719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:34 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x62020000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:53:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000", 0x28, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:53:34 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) creat(&(0x7f0000000280)='./mnt\x00', 0x12a) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1, 0x0, 0x7, 0xa) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80080400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x5c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) sendfile(r1, r2, &(0x7f0000000300)=0x3, 0x5a) 11:53:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr(&(0x7f00000000c0)='./mnt\x00', &(0x7f0000000140)=@known='security.apparmor\x00', &(0x7f0000000180)='\x00', 0x1, 0x2) r0 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x240040, 0x2) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './mnt\x00'}) 11:53:34 executing program 4: quotactl(0xfffffffffffffffd, 0xfffffffffffffffc, 0xee01, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x7) 11:53:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x200000, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180), 0x80, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}, {@cache_none}, {@debug={'debug', 0x3d, 0x1}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'selinuxfs\x00'}}, {@appraise}, {@uid_gt={'uid>', r0}}, {@smackfshat={'smackfshat', 0x3d, '[\'/]]!///[@'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x33, 0x34, 0x63, 0x33, 0x30, 0x61], 0x2d, [0x38, 0x32, 0x36, 0x33], 0x2d, [0x0, 0x65, 0x35, 0x33], 0x2d, [0x37, 0x66, 0x33, 0x62], 0x2d, [0x61, 0x34, 0x61, 0x31, 0x35, 0x64, 0x61, 0x64]}}}, {@seclabel}, {@euid_gt={'euid>', 0xee00}}, {@dont_hash}, {@permit_directio}, {@euid_eq={'euid', 0x3d, r1}}]}}) 11:53:34 executing program 1: futex(0x0, 0xa, 0xfffffffc, 0x0, 0x0, 0x0) 11:53:34 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/15, 0xfdab}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000180)=""/87, 0x57}], 0x4, &(0x7f0000000380)=""/125, 0x7d}, 0x20}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b80)=""/133, 0x85}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000b80)}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/227, 0xe3}], 0x5, &(0x7f0000000800)=""/248, 0xf8}, 0x8}], 0x2, 0x12161, &(0x7f0000000980)={0x0, 0x989680}) [ 2821.801168] loop2: detected capacity change from 0 to 140 [ 2821.809206] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2821.809984] EXT4-fs (loop2): group descriptors corrupted! 11:53:34 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/15, 0xfdab}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000180)=""/87, 0x57}], 0x4, &(0x7f0000000380)=""/125, 0x7d}, 0x20}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b80)=""/133, 0x85}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000b80)}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/227, 0xe3}], 0x5, &(0x7f0000000800)=""/248, 0xf8}, 0x8}], 0x2, 0x12161, &(0x7f0000000980)={0x0, 0x989680}) [ 2821.839616] loop5: detected capacity change from 0 to 140 11:53:34 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './mnt\x00'}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r3, 0x0) mount$9p_rdma(&(0x7f0000000380), &(0x7f00000003c0)='./mnt/file0\x00', &(0x7f0000000400), 0x1252848, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x7e20eecd}}, {@timeout={'timeout', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x1}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, 'trusted.overlay.redirect\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'trans=fd,'}}, {@euid_gt={'euid>', r3}}]}}) lchown(&(0x7f0000000000)='./file0\x00', r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./mnt/file0\x00', &(0x7f0000000080), 0x100800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@cache_mmap}, {@cache_fscache}, {@version_u}, {@access_user}], [{@hash}, {@uid_lt={'uid<', r2}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2821.856283] 9pnet_fd: p9_fd_create_tcp (19804): problem connecting socket to 127.0.0.1 [ 2821.859032] loop7: detected capacity change from 0 to 264192 [ 2821.870734] loop6: detected capacity change from 0 to 140 [ 2821.872273] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended 11:53:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000", 0x28, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2821.895263] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2821.898635] loop2: detected capacity change from 0 to 140 [ 2821.911399] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2821.915021] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2821.915831] EXT4-fs (loop2): group descriptors corrupted! [ 2821.917763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2821.919647] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2821.927036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2821.938251] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2821.944036] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2821.959988] loop1: detected capacity change from 0 to 140 [ 2821.964415] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz-executor.6: bg 0: block 3: invalid block bitmap [ 2821.990839] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 2822.002536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2822.018255] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2822.022072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz-executor.1: bg 0: block 3: invalid block bitmap [ 2822.024165] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2822.050600] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2822.072720] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:45 executing program 4: quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000000c0)=@v1={0x2, "9cc1c6479582c50a75b82f000000000000000000"}, 0x15, 0x0) 11:53:45 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:53:45 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0xff, 0x401}]}, 0xc, 0x2) unlinkat(r0, &(0x7f0000000000)='./mnt/file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:53:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:53:45 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/15, 0xfdab}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000180)=""/87, 0x57}], 0x4, &(0x7f0000000380)=""/125, 0x7d}, 0x20}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b80)=""/133, 0x85}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000b80)}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/227, 0xe3}], 0x5, &(0x7f0000000800)=""/248, 0xf8}, 0x8}], 0x2, 0x12161, &(0x7f0000000980)={0x0, 0x989680}) 11:53:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:53:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x74550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:53:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)=ANY=[@ANYBLOB="92"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2832.822306] loop5: detected capacity change from 0 to 140 [ 2832.836521] ext4: Unknown parameter '’' [ 2832.861060] loop2: detected capacity change from 0 to 140 [ 2832.863010] loop5: detected capacity change from 0 to 140 [ 2832.873267] loop7: detected capacity change from 0 to 264192 [ 2832.874718] ext4: Unknown parameter '’' [ 2832.889999] loop1: detected capacity change from 0 to 140 [ 2832.894497] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2832.896041] EXT4-fs (loop2): group descriptors corrupted! [ 2832.918829] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2832.921664] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended 11:53:45 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000000)='selinuxfs\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0) statx(r0, &(0x7f00000002c0)='./mnt/file0\x00', 0x800, 0x1, &(0x7f0000000300)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0xd, &(0x7f0000000000), 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mkdirat(r1, &(0x7f0000000040)='./mnt/file0\x00', 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/126, 0x7e, 0x0, &(0x7f0000000200)=""/30, 0x1e}, &(0x7f0000000280)=0x40) 11:53:45 executing program 4: r0 = socket(0x21, 0x1, 0xfffffffd) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000094) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7) quotactl(0x0, 0xfffffffffffffffc, 0xee01, 0x0) 11:53:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfff, 0x2, &(0x7f0000000140)=[{&(0x7f00000001c0)="5ceb5a06ea0efe107c4098250f9f7e68e3ba238fb3ed9180813fa7e931b336efa0295a7d4581218eaaac408e828891a3e31e84020586c98301dc1b52d78c74f753634a0c947c519ba3385cb29d15edbae2a5b6cf903eca58b48a71ce76f6d4d3498def13739f40338b886566d8d59c3cc024dfef946d7c81a5ee53e50626b5faf053809e4271aa26b6d5441ee0b4dbf44e37ef54e987a785a7fa4643db65522f56477dbffda5d7b12c9216df67c42d42b91ad81e", 0xb4, 0x3ff}, {&(0x7f0000000280)="ad24ea59c1aa0ffb2611ab00773c90d68508e573e91b9f3d30cfb2959c1ee42e7ba1debdfe5a438ecce36030631e8fcbf560831e06fade324410e1a91e1b365479", 0x41, 0x7ff}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="008d5495b59b9fd30faecb1d4cb8c58782eb7f2e6cca14d9be47791ae176941ca74a069e1d811672943cb98d76164f49608b1d085d46b241ce7d06f06bc283346705c9dec0f72cb3363a3e47e031c67f8294a482e7b58a892c260190a15435d2e094e6da81ca27c988ef8195a810b31f66968a86dfb037f99d9678a638b9ab29a8c16d96b386183632143cfe12a7af2c91c454881304f715fc10bb442b7174567d96f2cec92e443af5d821dbb50cbad8558b6e6bed8f6c0cde631ac2"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x3) [ 2832.960591] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2832.965891] loop6: detected capacity change from 0 to 140 [ 2832.975198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2832.994554] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2832.996894] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 11:53:45 executing program 5: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2833.015062] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz-executor.1: bg 0: block 3: invalid block bitmap [ 2833.033067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:53:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2833.058494] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz-executor.6: bg 0: block 3: invalid block bitmap [ 2833.077560] loop5: detected capacity change from 0 to 140 [ 2833.111595] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2833.120428] loop2: detected capacity change from 0 to 140 11:53:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x75550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:53:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0x6) rmdir(&(0x7f0000000040)='./mnt\x00') [ 2833.126043] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2833.127508] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2833.129027] EXT4-fs (loop2): group descriptors corrupted! [ 2833.149287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2833.189412] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap 11:53:45 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/15, 0xfdab}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000180)=""/87, 0x57}], 0x4, &(0x7f0000000380)=""/125, 0x7d}, 0x20}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b80)=""/133, 0x85}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000b80)}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/227, 0xe3}], 0x5, &(0x7f0000000800)=""/248, 0xf8}, 0x8}], 0x2, 0x12161, &(0x7f0000000980)={0x0, 0x989680}) 11:53:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2833.220737] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:45 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2833.238379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2833.299685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2833.329800] loop7: detected capacity change from 0 to 264192 [ 2833.338415] loop2: detected capacity change from 0 to 140 [ 2833.352933] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2833.364332] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2833.365735] EXT4-fs (loop2): group descriptors corrupted! [ 2833.373135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2833.387526] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2833.457076] loop1: detected capacity change from 0 to 140 [ 2833.460100] loop6: detected capacity change from 0 to 140 [ 2833.467371] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2833.474907] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 2833.491247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2833.495787] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2833.512363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2833.521124] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz-executor.1: bg 0: block 3: invalid block bitmap [ 2833.586968] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2833.598653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:53:53 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:53:53 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:53:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d}], 0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="4701e3bbfc1de154d20f964a5b1fd7895a931335c3ebfd4dbfc2e06cb4d4e82c95c94123043ae783675a0cdca5771759fbaf12b967bec46e2e14d1c914bbf09582c44e3e9d000000000000000000"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) mkdirat(r0, &(0x7f0000000080)='./mnt\x00', 0x2) 11:53:53 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) lsetxattr$security_capability(&(0x7f0000000040)='./mnt/file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x7f}]}, 0xc, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./mnt/file0/file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',cache=loose,fscontext=root,defcontext=unconfined_u,permit_directio,\x00']) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:53:53 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x76550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:53:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000000c0)={0x6, 'erspan0\x00', {0x3}, 0x5}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000080)=0x7, 0x8, 0x1) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:53:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:53:53 executing program 4: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) [ 2841.182079] loop5: detected capacity change from 0 to 140 [ 2841.190817] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2841.203954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:53:53 executing program 4: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) 11:53:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b000000050000000100000000000000000000000020000000200000100000009f09c75f0000ffff53ef", 0x36, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000080)={[{@dioread_lock}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2841.234473] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2841.242215] loop1: detected capacity change from 0 to 140 [ 2841.243677] loop2: detected capacity change from 0 to 140 [ 2841.246571] loop7: detected capacity change from 0 to 264192 [ 2841.252234] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 2841.259778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2841.270937] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz-executor.1: bg 0: block 3: invalid block bitmap [ 2841.272338] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2841.293785] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2841.314815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2841.347254] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2841.357410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2841.372363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2841.433887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:03 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x77550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:54:03 executing program 4: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) 11:54:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f00000002c0)={0x0, 0xfb, 0xf3, 0xc, 0x3, "b11554dd8e4b0c3e210db5950ead5898", "98c590198f601e95b7515724a42eb1e2bbe451f8856bb637ae07a647ced90677a2553bc0398b92cf0045b54260b00f828f03258353cd2230dc6e433e4348c4abf3b527be7fb5e709269f62d4875c47fc1140a28fd160e332506d8c9fc1a94aa50a30faf02d20cfe033cfda382bf948f9592b9b5509c0b8f49a44a88ac9be1fdf0622165d08e30428c7cf8cd8b50d9fe4ca66e7b7bbba87b902a69965da486e899cab4583e00ada5c42659f5d1872baa7070f4b4b9827e34ddeada6f279d9db056e0913ef2d95dfa172a45977b03d2d6c19aad4443c09dd157d4e06c4121a"}, 0xf3, 0x3) 11:54:03 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) chroot(&(0x7f00000000c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './mnt\x00'}) openat(r1, &(0x7f0000000080)='./mnt\x00', 0x202, 0xc0) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:54:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="1000000040008d51f7e3ea37c6fe08647b55009b54780877fe4a919ea71462feb1282343042d102f0a808dbf0c3402050000000100000000000000000bd900002000000028075f495969e98b", 0x4c, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x20000, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:54:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:54:03 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:54:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2851.039270] loop2: detected capacity change from 0 to 140 [ 2851.047822] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2851.064299] loop5: detected capacity change from 0 to 140 [ 2851.072000] loop7: detected capacity change from 0 to 264192 11:54:03 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:54:03 executing program 0: clock_gettime(0x0, &(0x7f00000036c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003540)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000000140)=""/67, 0x43}], 0x4, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000480), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000500)=""/136, 0x88}], 0x1, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000800)=""/56, 0x38}, {&(0x7f0000000840)=""/7, 0x7}], 0x3}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000940)=""/88, 0x58}, {&(0x7f00000009c0)=""/178, 0xb2}, {&(0x7f0000000a80)=""/18, 0x12}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/76, 0x4c}, {&(0x7f0000000b80)=""/47, 0x2f}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000001d80), 0x6e, &(0x7f0000003300)=[{&(0x7f0000001e00)=""/251, 0xfb}, {&(0x7f0000001f00)=""/229, 0xe5}, {&(0x7f0000002000)=""/242, 0xf2}, {&(0x7f0000002100)=""/91, 0x5b}, {&(0x7f0000002180)=""/114, 0x72}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/196, 0xc4}], 0x7, &(0x7f0000003380)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003400)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003480)=""/100, 0x64}], 0x1}}], 0x6, 0x10021, &(0x7f0000003700)={r0, r1+10000000}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) [ 2851.098297] loop1: detected capacity change from 0 to 140 11:54:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2851.109164] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2851.121693] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 2851.125969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2851.126564] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2851.137467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2851.144165] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2851.147873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2851.149786] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz-executor.1: bg 0: block 3: invalid block bitmap 11:54:03 executing program 4: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) [ 2851.169501] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap 11:54:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./mnt\x00', 0x80, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="fe48d1580b9a3afc677621edeee81d5eb236f577d64109cfa68dcc8b6785de0fe12b409a5a", 0x25, 0x1}], 0xb0000a, &(0x7f0000000280)={[{'ext4\x00'}, {'ext4\x00'}, {':'}, {}, {'/@/'}, {}, {'ext4\x00'}, {'trusted.overlay.origin\x00'}], [{@obj_user={'obj_user', 0x3d, '*'}}, {@dont_measure}, {@uid_lt}]}) mkdirat(r0, &(0x7f0000000300)='./mnt\x00', 0x191) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) mkdirat(r1, &(0x7f0000000080)='./mnt\x00', 0x20) 11:54:03 executing program 4: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) [ 2851.196361] loop2: detected capacity change from 0 to 140 [ 2851.221857] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2851.268579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:54:03 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:54:03 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x78550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:54:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000080)={'L+'}, 0x16, 0x2) [ 2851.338418] loop1: detected capacity change from 0 to 140 [ 2851.340907] loop6: detected capacity change from 0 to 140 [ 2851.345411] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 2851.349867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2851.350897] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2851.356504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:54:04 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)=ANY=[@ANYBLOB="04"]) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000040)={@id={0x2, 0x0, @c}, 0x40, 0x0, '\x00', @a}) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2851.381372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2851.408838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2851.409387] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2851.411165] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2851.457014] loop7: detected capacity change from 0 to 264192 [ 2851.462188] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2851.469944] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2851.474928] loop5: detected capacity change from 0 to 140 [ 2851.476525] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2851.480234] ext4: Unknown parameter '' [ 2851.492135] loop5: detected capacity change from 0 to 140 [ 2851.493787] ext4: Unknown parameter '' [ 2851.520087] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:54:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="88aa017cbb79716b8472229502598f8a356733b7a101425ca91bb63352005e03402e8b176895430a98a246d139c0fb5b31bce8492597ca9766938a9fe79a1f3f3ac0b06019ae58d17a0b79"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:54:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x79550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:54:13 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./mnt\x00', 0x4000, 0xf) lsetxattr$security_capability(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0x2, 0x6}, {0x401, 0x1}]}, 0x14, 0x3) 11:54:13 executing program 4: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) 11:54:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x8ed, 0x80) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x76) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:54:13 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:54:13 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000b40)={&(0x7f0000000580), 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="76770e3a0398bccf5c1c234755d50beb2d632b66c9619184b91a6eb7ce72e7"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="765507f9c5404e140b3e7faea5"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='X'}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x401}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) [ 2860.715079] loop2: detected capacity change from 0 to 140 [ 2860.741799] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2860.750222] loop5: detected capacity change from 0 to 140 [ 2860.753021] loop7: detected capacity change from 0 to 264192 [ 2860.760225] ext4: Unknown parameter 'ˆª|»yqk„r"•YŠ5g3·¡B\©¶3R' [ 2860.769969] loop6: detected capacity change from 0 to 140 [ 2860.785237] loop5: detected capacity change from 0 to 140 [ 2860.789361] ext4: Unknown parameter 'ˆª|»yqk„r"•YŠ5g3·¡B\©¶3R' [ 2860.804768] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended 11:54:13 executing program 4: syslog(0x0, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) [ 2860.814304] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 11:54:13 executing program 3: prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, @out_args}, './mnt\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) listxattr(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)=""/118, 0x76) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./mnt\x00', &(0x7f0000000180), &(0x7f00000001c0)={'U-', 0xfffffffffffffff9}, 0x16, 0x1) [ 2860.837365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2860.853089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:54:13 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="1000000040000000030000002b00000005000000010000000000000000000000002001000020000010000000000000009f09c75f0000ffff53ef8d999bc7e35ecb079be79c107af7ba991713bd9fd9d3595ab48ec6d77b35a5c4733edd0b28c2417d41ad73", 0x65, 0x200}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0xec8}, {&(0x7f00000003c0)="00000000000000000000002054000000000000000000000000000000c99b000001000080000400009f09c75f9f09c75f9f09c75e00000000000003200200000000000800000000000af30100040000000000000002000000010000000400dc96a4bb6451aa267607e18e817afc4a5552ed59531b0209ad287bd3ec767771bae7d09d0b2217782096b43dee33989f", 0x8e, 0x8c60}], 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="61626f72742c6e6f696e69745f697461626c652c6e6f6a6f75726e616c5f636865636b73756d2c6ee686854972e448106f7265636f766572792c6c617a7974696d652c6a6f75726e616c5f706174683d2e2f6d6e742f66696c65302c696e69745f697461626c652c6e6f6d626c6b5f696f5f7375626d69742c626172726965723d3078303030303030303030303030303030362c00"]) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@known='user.incfs.metadata\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./mnt\x00') 11:54:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2860.891053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:13 executing program 0: fchdir(0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x2800004, 0x0) [ 2860.943400] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:13 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:54:13 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2860.965341] loop7: detected capacity change from 0 to 264192 [ 2860.988853] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2860.993150] loop2: detected capacity change from 0 to 140 [ 2861.004662] loop5: detected capacity change from 0 to 140 [ 2861.009073] ext4: Unknown parameter 'n憅IräHorecovery' [ 2861.019604] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2861.020312] loop5: detected capacity change from 0 to 140 [ 2861.021114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2861.023359] ext4: Unknown parameter 'n憅IräHorecovery' 11:54:13 executing program 4: syslog(0x0, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) [ 2861.055721] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:54:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="750062a4ad8bbc73842d"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:54:13 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x3, 0x3}, {0x5, 0x9}], r1}, 0x18, 0x1) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x12) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2861.124376] loop6: detected capacity change from 0 to 140 [ 2861.139837] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2861.147964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2861.179434] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2861.241277] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2861.276396] loop5: detected capacity change from 0 to 140 [ 2861.293816] ext4: Unknown parameter 'u' [ 2861.312921] loop5: detected capacity change from 0 to 140 [ 2861.319828] ext4: Unknown parameter 'u' 11:54:22 executing program 5: setfsuid(0xee01) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x7}], 0x221000, &(0x7f0000000040)=ANY=[@ANYBLOB="f9cdc0e23e9476a1b100"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)=@known='security.apparmor\x00') 11:54:22 executing program 4: syslog(0x0, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) 11:54:22 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x418201, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40030000", @ANYRES16=0x0, @ANYBLOB="0a022bbd7000ffdbdf2511000000380001802c0004001400010002004e24ac14143400000000000000001400020002004e20ac141423000000000000000008000300e9ffffffd4010680e70003005b9b846431f410a66c8d3080b0d442ee53d7a1ee49d149e407251c86a7494533eefa3e96b2723ba83f7bcec44e58d7f9b4203767d86a35a5857f8bd3ba9eef3dbbf65a009279c75dab17dd7115ee3ede22e9af3c28b781797bfc001b2e46c49efa2b13037a492e7a557ca2c1d6898602f40bae6339c1edc963011a1b539d847ab4bbd6e3246c9b0d560f120bac776b54228e2cbeda5f731876ef7b469ae601130cf4d1cd8d56bdacbb0922f63d1a2d47a562c5eb2da5c79b52da7bccfeab954025809abf82c421dae83b5a06d049c32627677d6377ec2b82b144711d5f48206c51f72700e7000300c2bb73d1ec09092bbad258036849aa1670f7f90242427e5ac4df6d9b08722689410b6afd392e55d96501ed571fd27a336611bd22e44c6707bc1a932b19c4c5fede472f4f052a28de660fa354ea770760cef2128eab09c8e9b86e844e1916f3e736b81fdafca481b1d1208ccfa716001dbcc7dd06b8b587108ce46dc10adaa19202b67e7b7ac2156099f3e8f61f00ce50ac371fda5400c1429dfa544e55081c30a51805c5ceef8124ef136a8959b5563b0433e7e99743568823d3cd85d8ec3f220dbeb1973e19100967c56699a29c22130b04714910033700280007800c00040008000000000000000800020005000000080001000900000008000100008000002800028008000100eb48000008000100010400001400038008000200010400000800020008000000180004801400078008000300050000000800010019000000440007800c000400ffffffffffffffff08000200010000000c00040005000000000000000c000400030000000000000008000100020000000c00040009000000000000003c000380080001004004000008000200fa06000008000300060000000800030005000000080001007e3a000008000100f7ffffff08000200f9ffffff0c00038008000100849d00002c000380080001000200000008000200800000000800010009000000080002001f00000008000200020000000000000000000000000000006bb9d9d94cfd6877f1d9aa6252ff9b1e188010d61800b4136d16b67870ca1a63e6a91d07df87c9aab58b3fb0f7ab64a9909a4b227aae0c8f6729f9b812039d427efe21cb49212a103b73639599dd8f51430bf536062a17cac2ba8c4fe92ac61eb5ee4f9c33b197947293"], 0x340}, 0x1, 0x0, 0x0, 0x51}, 0x40040) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@loopback, 0x4e20, 0x20, 0x4e22, 0x6, 0x2, 0x20, 0x60, 0x2c, 0x0, 0xee01}, {0x9, 0x1, 0x1, 0x4, 0x0, 0x6, 0x3ff, 0xf64}, {0x0, 0x6, 0x9de, 0x3b}, 0x2, 0x0, 0x2, 0x0, 0x3, 0x2}, {{@in=@multicast2, 0x4d2, 0x32}, 0x2, @in=@remote, 0x3506, 0x1, 0x0, 0x8, 0x80, 0x8, 0x1fffc000}}, 0xe8) r2 = inotify_init() r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000400)="2520bc91b376b4582dc22856395f0d039957a5804a4c0479f459bba77470cffcb1d1cedb1a448e3cc917c4a2f01128ed80e4ca983046b87e945985b23dee0b887f026815b21f87fdf76cb6c67ba0607ab410f7ef479857ee", 0x58}, {&(0x7f0000000480)="5d971c8f82d4e0280c5c3e55b60d7c159735a3b37fb0777f55863d6bb6f4c5a6fbf7ced89cdbe83dc3666aa6ea513aaa62c10d79116d7ae022f8ecf6af5d47f28d8c3538e977e108b831e5fba04dc42e39d1d4cae62d656ea38049a622b5289012797c6575fb1b29baf972adf6258e07c2feecf0bc20ee60177513b4d00cc310f648", 0x82}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000540)="1d092cce4abacc1668df3c4fb8ec98250e3ec97ef597832c5243a634af726d1336f419eb8faa198a84e49b93afe1354fb3bef9fea5a63f2b2c3f23b6b2ec6d0fdc071e994bf56b740ce9dd78789dbbb2990c32df1d4431513779ad103a1687e6c993ec", 0x63}], 0x4, 0x5257b25bcb1e9953) setsockopt$SO_TIMESTAMP(r3, 0x1, 0xd, &(0x7f0000000000), 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0xd, &(0x7f0000000000), 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000380)=0x401, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r5, 0x1, 0xd, &(0x7f0000000000), 0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r0, r2, r3, r5], 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:54:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:54:22 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:54:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x7a550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:54:22 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:54:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x49, 0x2, 0x9, "d42e3500458735d12a99a6fcea7db4c4", "d42e1ea9aa2ef2776d567a4ec70d4604f8cf45433d2d5973f6d6eae891123b1f64be71cc51a2ca1f63030c075107d3d57809525a"}, 0x49, 0x3) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) [ 2869.419891] loop2: detected capacity change from 0 to 140 [ 2869.421170] loop7: detected capacity change from 0 to 264192 [ 2869.439395] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2869.444745] loop6: detected capacity change from 0 to 140 [ 2869.469402] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2869.481280] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended 11:54:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c9e6584e24a5a3a8064e9ea843edb6e31280"]) pivot_root(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='./mnt\x00') r0 = syz_mount_image$nfs(&(0x7f0000000140), &(0x7f0000000180)='./mnt\x00', 0x4, 0x6, &(0x7f0000000500)=[{&(0x7f0000000280)="7be1199cc292e7c978454612b7ddb1108a86687bc7cfbf48a848226ccb52f098d81885dde9e6da459fd427bc7add68e18c05b11eecdcfc8330aa935bfe932cf21a2f323ce2635521fab470a5452235309ac14b2b497fb791f138ea", 0x5b, 0xa2}, {&(0x7f00000001c0)="f3a579bee5ff5e348ce464c9bf99a599c250f0a0e9b1280adba12233e5d36ec949680b92", 0x24, 0x7f}, {&(0x7f0000000300)="4ad705f861cd35af850ff3a3fd4431626443770997c1bd690c79d20dfc8c9c992522740e11c57e3a8bf506c442d4ac6c93bdf27379e3a829f0fa43770b3de134636e78b2207deaee0571e9f3579bebc7080993a6e9847a24cbcac4062c7cc74ea6a3c10a0a65c1af0c668ed029ec872cd968a8e16dbf9b22f6cb4333a05d62344f3b74505159be44adeb0a86f6babc394dc7e5bd7443bce9dca0d254841e79d710411ea910f15bfa58df5aff2b25940ca1d08ff428ecacb175a80796af0d91503d81599e39b904658236", 0xca, 0x9}, {&(0x7f0000000400)="dfff345ed5b5555ac30f26dfbb4305155d45b8660b8dea46487fb5234bd3b0461eef0ba69900140475fc866da1a30d503bc7a4be686e3743522c57fb3d8443e8745a2faff1fdc7e1cb29a07f6733b58092abaf5b7ddf1701712e3f94501e113cbbfdfce68dd5a22c7e339b3ae386b6c0ec0b4bbaa9eefbedd6ee8ecc1cd06d8c34f0440a395e3e7e57c507afb31ea0bd97a50a0d00a39aa3bdc448f59d2616d63f3d16ce5d2019aaad91ea5cffcb06301a49ed80a30ae3ec", 0xb8, 0x7}, {&(0x7f00000014c0)="8b1821cd9e75fe61ecb33aa82e39a8731c5f47e64758715d82c0206d10e3b0aeb95338e3fffff5eb959b6eabbf74a131ade756b180d0ecbe5b9135a7590a89736ad944ec8502314aab95edc3d4af963fbf34a6cff3a77efd78c78f621777945c8bf2472b93abab611102c35c1e05d8d962640bcc082ac9aba85f748fb35fbbd3408c1d2bf9e06322a7e9974e8c2cd7458f14bddae640e336b2a32a756144aa40b7a48551291a62df7636fd12a45e10b7b7d57e4dec877686cb3759d4bd6ec95a25893573564d3fb5b662a7b1da9de61b44912d511240e8e34d72fbc24ce01683e334a03dcccb69af1376cac1d491374c384b4d4fdb4c97ac0eb171d3bf096b5ec3228dc2d129cdfadd302656ad4f0cfd1803ca424a886403d3d6a692431a01b07db005316ac27d3d2746c64ce9d73256527a5d4348c1af0151236b989846a17a9a56c9c3701bf2e38a9ec5d604bc3fd8aede2995454346de36b51be47d91e8e307a4f11b13b0905a9d4a1b1481914fa49da99b571deea503406c01ee82b21179a9f15833b9b4db3f54aff6239d44b0f854992b57e4fe46e6598e0c365a468390248e481cb09b963efac2ca0a31a549bf9dfd5deb5db604a827f5ec215e780e56d6a6e125e7ed9c7bfcc7bec775617b1995ec2ef4dcc5848208e3baa2ee5fe1cf909fc1dd431008caaf77127a2a7f9696158fe4fbbaabe36b2141b55e12f3a37308354734ddb1eec42a414cacb645c02b4ace6d486bc024bad0ccbff2737ebc99320848d57ba8c7e25a98dd554562babe4723bb13310e5c21fbec8ebbea10ed099690912ca169da59aee20ec897634cd195e34449677afedf92d50f33af9e66caf1cfabc80b43a53391705e4a1e250504434e8b3873850d121bbdb72bf8313f09f8d58d9b5712da3b9eaf17c06223e4bf60ffa3d904a57236d18a564f2e27b71ad19886b0591549f17b4751e1e5f08642c4cb5e3cc32e990e068925e181c501d5b1e528f097081816abea520a26365171bae173e94fb09844db705771273134bba6b31828d43fe82c6c9f3246cfc6a470e44d79a81d2746ba6ed9ed74bfd4bf4e3a9be00e161d8a59a21e545abc23ab5a49868333bb5437b9fb8416091a7f9fe5b58042c495aa76db1d787d9990599a012a60595a16648c1455565b2a365ce69df3e76087de9bbe6f97c5ad634d225c2554e3e06d783815e90a20b6cdd203c210f423a615733575dc0fb82cbc82bb9c7ecdbc12f6516f4779093803a2641fd682b5497ff6fbf0c23559e10aa0032a8892845519d65c06132c5e0a47b007049e7f1629c313f4f688fcd596605b0b6dff66f9fb2ecbf4a0f47fa7972bcf73cdd48de7b5e671ed54893658219ea672d16a9f7e4d3d45df3d0c5882acd9d4bd38b0fb6213152c9e2befecf3d194f5b6d7298855d20afc271b2641bb79d68c8d5257c9ff2d6a2943b465407c38e31e1a09945d4b97863dc51ac6b24f8e40b3d2cb7a81012aab6a2057d03481b94b8b6b969934d2e4741e8a1a2d7ebfd71b6bf871292aa0ec3d9d6a1e2e3b8b67d086a9cdf2fc2cd8e31b33c207dfb14c24bf56f196645b9b17bd1e67fd3f2b57cd6c12922f0dde626b12d597ef46a8cfaa9f3b3e55cf8715928e9f1852a112e78d48041ede1da5705db1045711bd21e79df5b1f1341e231582ba3f3760c20f6dd2de1453d533625a732b8ef3d51ad2e4c90ffa7138f136a4c4390e9ad485f005e149f578d217dc72ee5af6fb67a4f4104d96d8b2da62750ce89458b978ab079a6d3cf7a1f711fa05ec19d21162c0764a20c31c6ef1fb21db836412700ca1880c5bbb7d13941b955e692d58ddc26ccaa11a65e41cde454273881e46dd31719da29967e9233d34637514fb1bb99baba5d92b72bc9f5240e8eb0d495e7246991ef21eea329de20d781a945bc4b0d99c1478dc905a691b2d970de6f939be1ba9fe06a6e1e3014bdfebdfcfd3125621f8c44161e8ecb278e48d212700bc4b730dbe25683af9d53f7f2fe070a8f22b2da8f76d12c4a4ebbcd20506f83c4dc2c7a983ce4aeb170d1788020382faf355216be3c53aa5e1d763ca56096fe66003cfe5d2ffa14ccb96f006ad489b15a95613debef3a74668cbfa87605c68e94bb930c085feb150c161455eb88ee2459a6ce5d7b54f4b744095210d3abe19e1105a0e3857d7a62c311bd4eaf74fa7770407f0b438b4dcce8851a17bd17bcf5781e1131b8d68488d374ebb5d9380b9685c5235b31e7676569f9a1f9f4878a1b2270ba68f7d39cee14ae628a712f2e7346484b30113f47fab3c8a67e13ae244d80f2af056d5f897f699eec666c51e4aab14ff706a383eb979ad5d834d0a974af02be28aa2b20fcdcc7e86e64ac9023fb11aeaca33e4d99161ac2200e06c6d7edac72167b90fc8f4bc9197e7e8aae9222bfe54a278f5a88ea1dcad7272241ac0a062f0954cc2b0324d3710e4422cc11b457e4f4a77b47d9fdd8a2066771c3fd63b2efcf726c54b3cac6447e9a0f8be0d6c415d7751a723f36242f57f68733a48227cfb2ef544882e5fc816c98367aee9a8d4e575e01c21e7a09d690d0a8fbb89b612d88de0b91afdd2465b697dedc0d6c652e886082bdbff214011b130697c141221d5fe3d4e8cb26ef896ab1aa5359274c489cc1dda9efdea4f3be24a839556faa571263c0e6eaffcbfd1a5fc3fa40f9cb5d296bbf8f05d7b12773409da4d3c918945710e0dd1a6a39dea92e6c21f9265a9c78d307bdd828a6bd0c6cf35d64b9e236184e82502c3c3ff8e3078fa00c9428aa0be7b32eb594e25acc47ef591e35be919fda07f9c8971a3288c5e52f4edd3f683e9598d23981fffaff5726354c1d790f25d089d1db898b3caa096588ce8c9675ba4ef94d810e1982119eea7f0fa5b2f0806fa20f20e0b70597e826bf6353c789d6611ba7f2d0f362ce01f8dd7954aaba4ca48e0be6db3378e6fba532bd1320c26b64bd46160669d41e3cad956aa228082a90b07dc2cc082857069bf4cc1af7e07adb48c9a00f20419a4e6d8bf17a2ced2c123f481ca2e062326d9992a0d5b0295255ef0eb3c384e604c77780ffb917ec9ee2424407d94caced4c78993b599e4bef98f848427453dbc8adb5f64d1ba7150570b694abecc709478d9c11d0ab023d76397dca4ae004d66706a5a3fd9d86c7bf69373c9e2f23dec13899c403df75b5a8435df381537cf267697f59de418b581269b695aef17a5e6fabe74a305dcc25b2641e12e7e65bbb3ab0d03d666afeace15b4b88894a1787f0ac3d8ca1cf8afd181fca3ae93ebb8e2cca39c2c96972c0eea29c2edcc65201b6e0de1a81c149af51c7fc57f9bf8d49d058bfa2966002e034c7c97100ec5ae87e2db88e7c2eb7ff7d3512ffb3f6eb602eee4a3086f3eaaadfcf13cbaf9c908ce9d0c94c267ec8743b2de45dc216897132db59522e01f338f76df79eebd8393b7dd3a384ed64d7a04d11aff2362bea67bfe3e449ea6d76ee2fb481b37f31fdce8d63010f1d895433d6d32a967340d0853defc6f1818b021491371068ca16dd1f362b00f6adc8eab0237ee84d145f46972f6edd7d9d1c63dcc68910785dbb321610d38b688038ee043b1a278ece55be86cb53095bf42293d46434b44a5f27df3eb2ba60dcc18f14fa84a479f11d7b94e3cfe0055bb250611ad7200982d20371345411e978aff8c1b1568784c5b0ccb14168dd261a280ad06f7feb99c7e174ec375345d18e2f3cd5cd3f3e055a7f1a6e6c7768acc8242f2f485f2f3433e06afc7358459dad944e8dc11bfb7716aca30f5e9ed2ae32a0c1390528b929db29059f607ce80e06755ec45eada4b40d9555bc57781b790e27056cf2310d9f72ce4e44316e4bd8b064d24df1b9688e21c2af73980cfafef2894a768056162b373953a312e2d77267c731b4646a8045d42c5efcd1e6bdabf0afc5a589a265b2f01660fc33e3a80818d72b584375ced152eca186fac3c6c9d884274df374e1bec37b955ef6145774e9f706500a1de20f0f3a640e4645686e5e7a5856d463cbe10820314a661c69b4092b3816096e35138ae64ef5d89dc36bb7ca3b50e42b1d1d33c73b1b10fd50176677f42082d39e0e71ae3d3016e8237337e91dd9b7187ac68e9496a26f18b4e54e97af2c3768295a2d729bf9293d82086707170f6c63a81a43dcfeb4b64f6ced2003ea709acd1511138aa64f7fb92c8aa476784f09167715c4e9f03e2a752099e53cdf04ea37440d4369a9ae631fb88c5fa45f8d1dc0dd343dce532c6d68d647157141ceb1be4a63ed5dc2c4e5fe4c29a079ca7aabc2521f31ac659a7ab59a3299657765f29b4267e91c00c8bc17d7e1e2764e198807f7724094ea70145dc4d5e751e86b14c69f8822045c1a9cd5db58f664f91ae1413e4ac92607733461465f1c1755187a435c08f56776d869c4f9d751259f04dc928ead6146186506bc293bebf0b83f8bfe429beb8975b1d673f6ac1b890bd894c797d85d998d7be2d1490044c70e186e5b827bd3fa398a624f1e00a7aef8c9f35761ac2c20e3d04d3b270ab86fd8c865e3f86ddb009e402d937587153ae459e07656dd029876eda2b59aaaa9e14c457e471bc194ef586ca58311f8ce145c2764096b87edae662cf6b8bd5620ae3210990937e3e0d0cdb1cb301718e7e6aa56e77ad8258cf2ed2331ce0c42af0f4e292850866fb48758bd02862e9859aec279a7003ab5262750423707f08846c4c44fc2e0962934e008828d0f4cc75f31d868c12ae1d6b175b76f0d6458432038296d85719702771822e969f21d470ed1ccdebae0064c2f5663aacc01cd02ae7c8de28a9b63e18a12dd1328dd7601b0133eaba47dad161770e87bd63de8d0a311e915e676c69702b197d3b15b4fa77aad1de28c3a3c9a9c15449fa6cc03173bdfb50238287afc926b26cc7e10a6eec4e3b0bce373012c35062bbf3d7dbadbff196b772d7e74d88b3fc89dc5c638c293c7cb035de90daa562b81b7755a7850806d30938f8d53990a89a78f5a88c1246d37ad9e8441238bc0ef9583f1382d471cd25735140c8bfba033425cec6e48b0b9274e473faf664b59a4b57322332013d538a3aca0fb0d7e2ecfd5c351ef84503c9641d200a024c3e7981c65eb5346623890f08a171b8edf24844a9d6d499e08bceab2c53fe780c8aedcb29d9ef434b6ac8647cf7a0d47ef68202f1fc293f3af78fc9605fa721da4767482f160eda36d63987e436243f5df1a639b7551a196ef45ac3cda6714b19fcd1a34dc3507ba5bcedfc59825d83331f202fdbe5490a3544ccae49194b6c5dc32bad03d78a75c92df8d134cbb361eeca5aac802232429c6650ae1f03eb556d26218bbbb7f1ed68d9991e0295ee064e1949fa5f3f6835b1fff793733fae1397fc9ee59e4ba8183798435f013727cbf0e9c5f2fb31766bf4272012c47bb7ae98e942710e5128718f292056ccc8e5b610b2aa2016b06442bee28315007a61c82eb2c84fcdc7c1f35b4fe6eb6eaeb488405a4b549d7a6026c3e58d2f7e7f4ff311bd201b78c5b698c3d080b03eb15b657454ff789b523bd9c8e556efffecfa4c27e16b8625617b32c4a744d3c58f6809b52948ef70ff0bda5029f3c014f7e541ab754d1d298d9a9f4b7276f09c24bfe1728b7eff39ede524eb93d9bbe80782c24629855adc9c0219341d0daad6f3d08a85fff1fcdf91afea90ca60e28c7ca684c265d8e269e400c04cce84e20c867055c599409ec6d16beb6412aa7746c539b7af106e92f4ccff9aa96ffb47b6f5c65edcbeae0bad80551605", 0x1000, 0x800}, {&(0x7f00000004c0)="4c80e6d30c242be5bdd8859b6204374ce6cc4e6bb4b49acba5d08caa59c05c726bc5986b58ea4ac5b68d4ef9509a58d64c41447653d3392ecac0d4b2c1ed454e", 0x40, 0x101}], 0x2, &(0x7f00000005c0)={[{','}, {'ext4\x00'}, {'])\xa0'}], [{@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x1ff}}, {@smackfstransmute}, {@seclabel}, {@fowner_gt={'fowner>', 0xee00}}]}) move_mount(r0, &(0x7f0000000680)='./mnt\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x40) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2869.507147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2869.545978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:54:22 executing program 4: syslog(0x2, 0x0, 0x0) syslog(0x0, 0x0, 0x0) 11:54:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x1, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x1, '\x00', @auto="fa9d46a27a3e4bbae1e621b2f2e6d255"}) [ 2869.565427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2869.598736] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:22 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:54:22 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2869.654778] loop5: detected capacity change from 0 to 140 [ 2869.664694] ext4: Unknown parameter 'VÉæXN$¥£¨Nž¨Cí¶ã€' [ 2869.666500] loop7: detected capacity change from 0 to 264192 [ 2869.678120] loop5: detected capacity change from 0 to 12 [ 2869.681295] loop2: detected capacity change from 0 to 140 [ 2869.684055] nfs: Unknown parameter 'ext4' [ 2869.692422] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2869.696159] loop5: detected capacity change from 0 to 140 [ 2869.700157] ext4: Unknown parameter 'VÉæXN$¥£¨Nž¨Cí¶ã€' [ 2869.707932] loop5: detected capacity change from 0 to 12 [ 2869.710927] nfs: Unknown parameter 'ext4' [ 2869.716183] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2869.724691] loop6: detected capacity change from 0 to 140 [ 2869.752226] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2869.760153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2869.781477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2869.797321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:22 executing program 0: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = creat(&(0x7f00000001c0)='./file1\x00', 0x23) pwritev2(r0, &(0x7f0000001440)=[{&(0x7f0000000200)="8cb67fae80fe4491cb0590e2af81bc1342025f82255cf33ea7b74316c1ee5e546d9b638c2c822474b11258c4df11e278e970980bc92ebb0c54c88620f43b2923d0cef4a2fc99277df7e851f34896c162b7063bdeab6501089dfe234c1d9e6702b23586e31d30c92c85144a2c78039218e6fc990a5aa505419df9e4205fa2fbfea39428380c66af1a08", 0x89}, {&(0x7f00000002c0)="81fc70d55b1ce9dafda0d97978322db2257209e2f7b1a8cfe23b1cc44c406bb876c8dbc4f545d067e5c4a15ceb7a273b1d7354787ee7f6407933b85955792375fe14aa68b35b5336e1ef1e142f1a9947382db631958219abbd31ac573235e07af49268814bdcaf39721520131743c4b619537164fea5ddde69bc8dfb5b683523023fb82b6aecf859515ee2f7c24d773139c2547d916deff1499400abe2eb2e7bfbde987458f278c9010e89160189a0c18e5756d82a5377f35640345c8f828d387d9eb484fc47f8fbbd543025fbf461945f2efbaa8ded6719cac673b6f67b0b6aeab5396a77b4e98eaaba57213e03d3238302a01931f78f1a773f00bef92c11ff2b01419b0012384a8608488e4ab1507f3ba38b2a8f33044745705e6b294b2ce70c37a9f9bce8415d5ac011d2f370016eaa84f5e85dd1393e8a7ef7e327fb017b79ab3e1d068d656fb424dd141118ffb9230069f990b5d25bc32bcfcc876b1081c43ac2806562698946ff8e2efa515c9d83c454d57c5f0bfd8e6960b0a5192b9b038d898b30a46625d59f94c3c461ebb0466aa0440823e78ab7ef7a0403e7ec95265f48920d54a17e87fca47df61f9b98170b528170ec8f788930ddd3fe459576972301b3e0e42b9fe5685824875c10db85d128403b7bf578f901e6fc2a8cd611161c423eaced6f8d76be041b6d3992cc58480aa606db411611cf2e093397c7b235667a898aca025949324b55877f4d063b55241269f4b534e4ae8640769ba49815fd054230ca11b0ac4679fc6a4d984a8673395c2e43cc5e8e24ed97e63e9d7a713c9ddce5f6db94e390bf95dd0b1b601e74a9e2b12ec572d6633fe52e5d8180b594d5c4167990cffc9ca448feb41e35f3cd1db9310d324cc463c4db6e650ad3665e89491b4dc7f1c22fc64b2acd54480e5705077226e5df598df8ea3de7d6e9c4f1d2549f5b59c97ad603a91e9c2f25c3dc90de1426005eaf3454d6b3d7998f2b808d9e5e1f25028ea944f417c3fcafca08880059bec2945c7363b48dbc80131b3dfd922d33d547d6dcf9a949a1bd0fd36a99d4ab9bdfb8217669e7079bb58dabf1bd62987ea442249ae52f92d358560a8b3fa4dd01bd589a7d8fdbd715b7caa5efd9215961f0728914d38134d83004c611a7932f97e3dc771ffc6f7876b78200c0deb11018d27718e5452b9bba61217c1156ced3751153d3e44fb9c2ee0a47615f10a9f4e9794c7b1ff189967edcbc2341be64f81bc1d53f5b08ce932b9c2a6c9cc7d9a2726b8c0cd635b74c70d3b5585c47e61b548b516fb913ed472b49cef34d740c94d796990436a109033ca0faea2eea630a71b71df44aa28b152f1df360855df5417db0465d3e624e280f751c547f550afd6a1db46cee59ea0d425fff3c5394b8a5c0e39733f0372715796cc77dbc8105b615be8c3651e0fd903636e46f1cfda7294c1a67b5c5f46006a234cc99fe732d4f28f72e73016ee475274af07a0c3f208808a1a3c0f2a21638e7f13d9bcd30149d4fdae9736f11fe0e0be94620094f53809f255a9a7b3b6aa90a4310ca0a67e58c512ee44646ee78c3636c9788f79be199d5ce5a861f39d7380ff5469c86717a9ea91e5dfb016068243b16f1ba2983ee2f0acb6d1cb857731b2b75239ea6f8f51d6fd1f9b1f96e1cf5e9ea44f1f5382cddf7e96fe22f4ff1f9628c67439c2f263a5a4a6cfd431cd06684bc568ec0f301dd9b41b4ba9992a040336410c17d3f8e0373c974a92219d0b333e3db7bddc97057c45bdfe4323a84b7628b6e57425a06df8a9f3d252bdb740fec6231b8501021610fde38623afaff99bf5bfac1fffb11cd29abc99b099ba7379f32604c269cd14d742b85d7b8f685a871d614f9020c98de4b9cfd1624a72fd3b9fb0c7a995f5d487296b1c66d185a9fcb1bbcb1baddfbef5f5846d1036342055e97ee01876c00643094527f2c76814c1bb97722c79c78e3572e68d816fb11ecf0d99a3675a7cbdc8e1ba772ce839440553fdd0361bcb38613e6438d1928d0e9d2ad75e37c57080eefe6e9dff62509d6570b675648c30ca1ee4abd5432e811e004a9eec65346230fb3a6c58befccb34e4241e0974c25eb1c9e718010c26726ccdd5ed1ad8857e1006e00d64bdfd9654186e83b38c2c4e4c5e316cb99f72081b000317ebbcb4eefdd7524a374c735deb1b0e64d5fa3b41a93192dd38305c5102eb7b3bc7f1ef53c8f7d700808fd57c4b7acbc87dfa2309a3b6b28977431a204c7087113678dbbb258c2e2cfed4e4cbda83f8079c8fc9e157206ffcc02a66aa990d6b08ad9ae61064809c60d0bc56469e43a2b30ec75b5bc295b5f0854ed11eba8960c338362e7248084faef5b7a2d33f8dd2d7567668a451ab6788f1783cd91a02a9b60e652b53d53ab6d81bec883d1da2ce278804b62e45a3cd42d30ce6fe86c43ef935ef12a5de26f49d1dd8e092121d54a457438cee5cc2e10a1c7eb58f1ee6534fc091b3b54f6e80b8d39673682514200fc78a57e7451d268b1d0b9fbcf4f2bcbda3071eea1dcaf53f9fbe8e91ae43c67741beaf1894928e221e791979b636e06750d52a491b6d4cde76c16a6054493c8743abfacf8af59f2192b21ce0af79b883764a912885e974a0ccaafb559675276c855c2939a3cf8ff08fbc9c35ca90b7139cad91d0025513f6206fca60468ecd0728ad4c02f2ff3d26216a76d9b09179a77578947023054e136c04a72ba5d7faa053690fac66f1c81111402aa00ecf4eaa80fc6c4d3b7b0673efd30dd6c5dbbe64c1bc34ea49cabf13e85220a892f721be400ed4bc615ef8f5359a74fbb0426ba115bfa690eb411d822e7d89ff511fb6f80bb1c04aa74e8d682704a8099462e43375dc5cec167dd2b99a761381f55ffb8e479cfae8c6437bb48a8f5c3d2275a932122f47d8f90276ca82be3fac91e8d2a2ec8620d013cefed6e11b444e6dea54e9dc2323ec1302754ddaad43c72e2a26475fc91a1ad67b0303ef804871091dfd6c1fa298ed86c7563e404eb30655998d13194a4b17110619c74cf31a8740c9058d0dc7ef4b0195324c367cc0dd4bb1ca950907f1050aca0fcdb606e6b2548c59e7a198723826d59ec5667624f3ac2ce921292f242538852ec6f6061c052406d6db2a4aedc37dab77d69e467d96e430e45c0fb7cca96ae63b8fd04e98befc35aa3085ab5a9752274f7e3406b93f852115a3e73421fe992af00339c150c98d33f71d6e746611e61ec78ed063ddc21c3e28e298a1302226dd45eea612a32124b3877382fdbb409c93865ec1617de2f1516eef2124d515fffdaf84a3634051c9f68d39f679648da2f4d91b45a69a5324c13a157b9fd8634aa3bb58e45e0568eb4e39fdd1b7b06f27fd06100f8f4d4d73c5db90632e8ca6a87bf6e5ecdee0514a1c10ced1b862dfa99f283830567cc0be312056523810faa84e63a90d90dd251688490e30f3d78c0a99fb927fc2f7963c0d1fd03232c0f821ab866b6051cbbb68d3896e8d4268d7f4c875ae83823bd695eb1a6378cc1ae02881a1984668b6b425b1480cf94bbacfa8981c5cfa4718594065dd2fa91a1b8dac903aab82eb325f077fd1690cf6e088f0614c115364615f88cbde7809dab1919cfc82a751de4aa39dca92fa9edd8b89fcd5f13e40c6cb46285671d77257ba2c9f8588cbf9466d3e355d02849ed7c5b0670d7fce023d52a16170fe98fbc6b40bcc306d002ffdb02ec60904bfe1c88bfee11d6d55cf07dffac8d6cc719adc9076b293b180af6bbc6fc32cf7edcfbaf785b91f4689942c8b823a2ccefd45029876aea87619437494eabb031b0c89862433fd1d9c4e5651580b5f4ccf98d74b0ebdf70d9ddb22c843f0a429792f72cb1047bf77d9c6ba13682154e5e692a8c86979de0e8fc2a19e198c9fab78283b58072c755addd8051735f275e0464104fa50b589a865c263d1097cd5aa4d7ec82b4232634b559121a7dede7be090fa98311c291e2f2842176f6995566f9708b2e7ae3f4d04d320fddf752ee4722692a26b86f6602855c17cd985b77bc286f772ccef0c43df03ccc2a275e26f4af0e9c8c0c65eeb6710b99f52f6dfd5688e5d0d61e8aa1a83cf3d640dbfcc5cfefb9d6121faa2cc270c1378722904be504a5f7f561d2d0a48f282e22d4ebdc1320c1912a4d0f77368a3e9ece47e4578b766c566a9804b7b77c3bbbfedd7c9bbf518969c51e96ee7b866809c5bca4359894aa14087ba26bafd2dad5a7015c7b68fc9ec4e0f71c8c3b66db6a5aa64b24d65a4c85b1ba803190646c0192e6ec7bdc001da504c52af7ad903eb78e23c5c7abeee8744ec766b5f854ad5955b673579f57a7fb1891363ede9a6c5f2fd6337a2055f2e4cf10910e193ddabd453360f8060c31fc4ddc7d6c0ee9d1989a4839ae02c7f2fee5d2b2f9e8c8550089522c62d58f220018e5a9bac7e8a86a7f5017d5230b40dd0b959c6b03788641e00b28faba3d09837cf037596ad3b111baeb15d86ffe99a7afcabe778bd554cea33b8515b2027cca73972acb29304ebc95f5b841ac3b69af0e8554804f326a6174f85efb66740629c2ab54c8bd877e3b9600cadd2b0a50a5f2840ca8c451e25887c56831a260ad57de10e6cca7c8dcd0916dfd8e4be7d999745952ad80a4001e3212c9eef1c62f9daf38246bb8f1f8a44be1919dad8cc8b5074805fbd07275a3cc0ed8ba94a57c5d243aa7d68ed606d9de94c1b6ef314fd4ac1d0d2ebc7b060d95b1eb81d98a807e6b67ad72f71568f39edefc5baf8890e67cc0a4d219eb6a220cfa7098b367d841a4f12b4d7f44ee921120208606ad7ba5b53c0bdd7021fac3e76d37d6df33b5c3efcd267e5e879afc387a618ef32ac937fe5fe408a69ce28f080dda5cfad929bf601e31c1fde8ed2166ffb2423d227aa999645b67bb65fd78e3f31cadf1bbd7f6bc74740af25acc6091e1f5b4844c45dc474c4dfd04b15dbe1692c699cce5e063c59cb1cf1886886a7b17114d364758a2b8b0e08a5bcff7fea57c4a10af0d7903e684d18837bf42ce65166a55645d1c9935b4f0dce7f4adf681c77d51ee36f68ed49e368182397b3b5f7043714e3fba84d8c7a557a969acaddb3a1029b28df62fcbc8a9499498e560b4e1d6c2dc25103139ec983ed66316fada8b59d85bcc2e94aca6b7526257a2f946d1c21b879bdb27090aa623a12c9d44498478bfdeaea89337ec7bea77dc812a991be7572cd11885d481dc3fbb3944df2f9872689b242617147bccf2f278347dd742bbdc24edd80f921217198a52e97674936188d16022928e421f235064cf7cc8fbc93fb93299e38b58df7882789bad6cb9dbb0f28dd0c1cc7fa6b7d0b6c217aa2b6b3698668d902d83133da56c542ca5002cc450b212cb3ae37c0abaa98c8cf45dbef74c19bc87893a0420bba221b6c6c312d1ca6b87de458a7dae63652f43f74ba4a95b3fdce812e146fbd265910200c7a2e5d2fc969895be934c1f86393d1bd8c95b108c266a891e762aed94b617737dcfc7880bc2bf6a5e575130cf0761dc6c280765248236ddb2a288c4d8fa6f071f8b57c103f90061b0e135faa7067bd90a3b67f12d8255b1441a37657eea17dc859dc0e2ac5083ec82f4d354232ce3bd2cf322f12b0ba2d7b84de5dd5c9b417848da6f44fd2e7c00bd5f965d79e5fa96951a68354c05d8cf9a1f8f454a27b7e900d1a9736ef689b0b1d73eff1c75d327cd48cfdabcc5ce21b0884d54b345cb258488660fc225edae5f451125928eba2b58426ae6ca5bac30964b376fb7226f80100bafb2230f78", 0x1000}, {&(0x7f00000012c0)="f67a8803b298bc77961e1047cf2b9287825fc12446d6bee5718e3ca2a185c4b15f815bcf0c191115d82d2a9e4e497549ef1c1684deba65e978698a8f0dee5aa7aee930631b", 0x45}, {&(0x7f0000001340)="3425a5a5f8745b3a3e45ddc688295abd173d5cb256d4133324c13f1359e04b91da967b88d1c707078a9ea655e1b6e934eef4e75d4d1e5a8eafcf4bdf9ef8b24879e6f2de896f85c0ca366b1e076e17054fef1fc0b8498f0ab03d8056e1133b64610b20253786a6e101c3fbbd2e7f0e55f817dedf3cc44a84976cc775c1d2d158fd7b8bf3ca0b8cf1937744fca56c9a35e3f401d3d949eea27ac589301d0ee161ad53e7d1b700c579cf640f09034e8de013cb095de9ee4fba9b9c3e34eb6a4950c4e14c079bd1db76c86f16356f6c746c6a24ee", 0xd3}], 0x4, 0x7, 0xfffffff7, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001480)=ANY=[@ANYBLOB="01000000010000009918000000", @ANYRES32=r0, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00']) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000005}) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./mnt/../file0\x00', 0x0, 0x0, 0x0, 0x208000, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='pipefs\x00', 0x0, 0x0) [ 2869.872184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x7b550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:54:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = clone3(&(0x7f0000000140)={0x0, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x29}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f00000012c0)=""/231, &(0x7f00000000c0)=[0x0], 0x1}, 0x58) write(r1, &(0x7f0000000200)="9ea47521bed4ce0319", 0x9) clone3(&(0x7f00000015c0)={0x1084000, &(0x7f0000000240), &(0x7f00000013c0), &(0x7f0000001400), {0x17}, &(0x7f0000001440)=""/4, 0x4, &(0x7f0000001480)=""/231, &(0x7f0000001580)=[r2, r0], 0x2}, 0x58) flistxattr(r1, &(0x7f0000001640)=""/4096, 0x1000) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000002640)={@id, 0x10, 0x0, '\x00', @d}) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='aio\x00', 0x2850, 0x0) 11:54:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:54:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:54:33 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:54:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x14, 0x3}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000040)={[{@mblk_io_submit}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x7f, 0x6, &(0x7f0000000500)=[{&(0x7f0000000280)="eb14830abce175c894e81f0fbd2a0a23eade1671d99e2a9caa0c5112ff04b9328286a58e26decd8b1451e8b99b7813125159de9e2ad1b2f9c36b94b4943b737b69417f8c5f2f3cdcf577e4137158ef116727f7442031ac618eed9d184271a0776d776bc477f5de4b527f49a090d973598e1a6b6cb3eecc4dbe0986c0b852b442dad31cebfb764e8e4050df004169faf466899a2fbd4f7679346f3361fec2221e81bb31b2863b99d74cba1083cc00061d0a345e25fc5deab28fc230b01a669b1000b5b7129103081cc8dfdaf967452573373d11f54b7fad011f72e44a15", 0xdd, 0x20}, {&(0x7f0000000140)="eab2f1225e467e362e9d2aedbadad82462f34a6e32b5891c4570328259064611fb508f7c9f82a6428fcd818c29e5e11283ae5662a1260f09acea7221779deaf511253ca10f35b6a05200ba9a048fca5544eb30169e76ff248acfcc83b1816cf946", 0x61, 0x1000}, {&(0x7f0000000380)="7bf4e44df547ceb1733184175d0cd015be75b80de7d87d17f5f6b706c480d570f11e28a6e3514dad2ad4c593495756c931ef4418d2684c709f5900b32866262312759dde8c006f2a7c9bbd082c25eec60de685ec177bf9cc44d57f42e81e6a3eece13d7f20def0f9fa8f8e118745fd6880283d8bf44618b6c8f8a16dffd25333350ff38191879b8b481b23802d16b893866e322be1db29c68ba45680ddc53f688e959d7053470829dd1e6182fd3123", 0xaf, 0x9}, {&(0x7f00000001c0)="1ace675658102e01b90122cb8f8be663552ca1c7f54c92e15917b44b1f15893d553afd", 0x23, 0x6}, {&(0x7f0000000440)="7038a6f44d06c7c6d2099958181b815e572f75a8bc261980754566ea35d4fd38c2cc09680fb70bf2b51e1a43ce0e798dc3ffffa02f6b106299934041426730baf4d5e692ac127527244709b70b7db258f796ac4f85b1dd61ff128e610b5c69a722108d6ee9846210db330e94ef9be2", 0x6f, 0x10001}, {&(0x7f00000004c0), 0x0, 0x38}], 0x3020, &(0x7f0000000640)={[{@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}]}) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) r1 = syz_mount_image$msdos(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x100000001, 0x3, &(0x7f00000008c0)=[{&(0x7f00000006c0)="ed75483b7813223e918f5c9852b887bbbf", 0x11, 0x7f}, {&(0x7f0000000700)="4624388d29c468f1ca86ae1f938537310555214ad46b2a8f4fb3a9ecf95a60ebac2d1519f028a931e470984069910c1b6211a3aa3f12b041a45b62024baa82d182f2cd085b7d3b1de113ee0460ba9c316feab1ff926820570e5789c36a8ed2bab5eb1c1345257f460126bed8e3bc22ea885e5312292f49f3049b25153d943a89d68e10c791e2ed0ba08dbdd99ee2", 0x8e, 0x6}, {&(0x7f00000007c0)="221eb5914dc8617896aa7508ef78f96685e9864fa80b1aa648ea98283a5fb8f63bb653a586f85342afc56c808e681764be9a0b1bf9953f570fa894d7ead1a103529f046df0884286bfc32eab4a6463dac0a4475cd4967623a2739988f158df114a2c4d80f70c967d43a75922b2ccf98a8aa24724ed9e04988da4d3b8fd09c6bc4f4efdaeac6f25592cceb9c4fa42970599ceb9adad4fc77e9936440d3795cd64c0da9100e5f425f6f00607a02bc59d46ab6108ee8f9445d1c3a9a9c141c6e984ff2b0370b0229bf4798edebe49e212f98522e07f69b795d4c933", 0xda, 0x20}], 0x4000, &(0x7f0000000940)={[{@nodots}, {@dots}], [{@dont_measure}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@fsname}, {@audit}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) mkdirat(r1, &(0x7f00000009c0)='./file0\x00', 0xb) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x15, 0x1, {0x0, r2}}, 0x9) 11:54:33 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6948}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x290, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x25a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf7, 0x3, "cbdbe51b08acdd3cfb123ac1507c2681c815bf4b08641ec1aa8dab670c2e991c502c8cebd75f9a7a0f435e5aac4e28431fa65eddfbe8d7885f0bb9043a9614320dc39a74ffdd4118c772f5c39d007f777adf13cb0487d469f056dec7cc351456e419790d4286aea9ff34909f09a7984322640f491f290084bcb64c81019d9103ec8d7792e3cd1b549a97d8de7f6d33c1edc97a672ae42b14230cb12184d8a0ab04525a79695a4a61f30982dc3cfda11a046e9bac1039d76c627530268a0d1d50a6726b1cc7cb6cada3219c472183e4fbf90f004c6b3dd43b32f014ca6dcc45fd7be8bac549116bfd97e47ede55af9e1a9aca4d"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb70}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xae0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x33c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff22e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x843}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "37f34fe9428ce4cf052bd29e68cab5d2c2f899f6"}}, @TIPC_NLA_NODE_ID={0xd3, 0x3, "a6469f8de8b337577d753bec359ee98677136059be9a18aa47fe7c0b6b9d2f5525ff6fc3760e49fd0112a3fffd88116b8875ccb667a8f17e2aebac793a7ef623b6d5d77c2a68cd39ad4d742e7ebc21225d9ecd7fad33d92ace4f9471aa53559c081f42b894deceae1f5258ed8d5690edca0b0add9f55461d4de0e4105e177f0306ebf8215cafe03a5b34e58a31ef438b14c6ad0ac1e34d025c8407fce16c661b38dbdb7b77a17e6099ec5749c28b499beae9610bf70433267ca89859826be571832226dbf55a0486aa79f55690ba47"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "210fe8f409964d1e4648833814633324bc325f8dd602fae72f0930792ac26492265e"}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x91fd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b4a7053}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8c}, 0x5840) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x80400) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) futex(0x0, 0xb, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) fcntl$setstatus(r2, 0x4, 0x44000) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) fsync(r0) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x1b}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x16, 0xac, "b302a035fe33631c11862c57dbc3cd62875f"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x101}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 11:54:33 executing program 4: syslog(0x2, 0x0, 0x0) syslog(0x0, 0x0, 0x0) [ 2880.696703] loop2: detected capacity change from 0 to 140 11:54:33 executing program 4: syslog(0x2, 0x0, 0x0) syslog(0x0, 0x0, 0x0) [ 2880.728576] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:54:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000280)=0x40) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f00000000c0)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x2000007e0}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000140)={[], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@subj_role={'subj_role', 0x3d, 'trusted.overlay.origin\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2880.744232] loop6: detected capacity change from 0 to 140 [ 2880.745417] loop7: detected capacity change from 0 to 264192 [ 2880.767752] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2880.772259] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2880.791991] loop5: detected capacity change from 0 to 140 [ 2880.796123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2880.800716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2880.821654] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2880.834752] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended 11:54:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:54:33 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 2880.875104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:54:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) [ 2880.925674] loop2: detected capacity change from 0 to 140 11:54:33 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00f190478bae7e2235d7a91d415ce566be5c8bac3041975d42c56d335be78aaba54adc6df667f57bb433ca580000000000000001596bdd63055df1fa81f0c42a3d"]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) r1 = clone3(&(0x7f0000000600)={0x800, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x27}, &(0x7f0000000540)=""/77, 0x4d, &(0x7f00000014c0)=""/4096, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000780)=0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, 0x0, r4) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = syz_open_dev$rtc(&(0x7f0000000a40), 0x85, 0x400001) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a80), 0x2, 0x0) r9 = fork() move_pages(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil], 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ac0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000bc0)=0xe8) fstat(r0, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002e40)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000002f40)=0xe8) getresgid(&(0x7f00000054c0)=0x0, &(0x7f0000005500), &(0x7f0000005540)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000005580)=0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006dc0)=[{{&(0x7f00000055c0)=@abs, 0x6e, &(0x7f0000006840)=[{&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/173, 0xad}, {&(0x7f0000006700)=""/77, 0x4d}, {&(0x7f0000006780)=""/20, 0x14}, {&(0x7f00000067c0)=""/79, 0x4f}], 0x5}}, {{&(0x7f00000068c0), 0x6e, &(0x7f0000006a00)=[{&(0x7f0000006940)=""/55, 0x37}, {&(0x7f0000006980)=""/113, 0x71}], 0x2, &(0x7f0000006a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006bc0)=""/51, 0x33}, {&(0x7f0000006c00)=""/173, 0xad}, {&(0x7f0000006cc0)=""/116, 0x74}], 0x3, &(0x7f0000006d80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x3, 0x40010040, &(0x7f0000006e80)={0x0, 0x989680}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007080)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000300)="7c83a32e002f4e0dbe67fa27addb0186e84aadc6167fd6c88e049b86a5323e6c138d0952ed909efa69a735db4a434241041bb42914e1f03ac653215df665cd58b17735a7f0a5f251d6713cf8164d537c125241ec619c30d15e331d482800339d966e44815070fc39a1379c0f0c568a73c5c18782827443d2228bdada82a27d66aba93c765353f0788839142dab531f3f1c5289bccb558e978bb9dc7c2148167503c54dc862bc0fb622ca6386e96900807faa97e6e9e1c6b733a5b15771a86b84ba82c7e41d406fb36b70255c6f69766154889923ebf6c207c5cd006ab84f74f7c8a83e0b1855741858c068f14ee1068be8acfda5ac4bc10aeaf38daa2607c7", 0xff}, {&(0x7f0000000400)="cbd6249825fb8fd5229bd81bfd73b400e5e88596f20edf23995253436ec15e381078bb544223090eacb4a89689d24ca8351c3e39585d3c731e80adc145b9bd0d9df3e8a2ea3d3b", 0x47}], 0x2, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r4}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x70, 0x80}}, {{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000900)="d33d68082819b06bcdf0b22c0f6601e6a8ece318a6a02191a291994ee458a5cf500b91bd02f1c6eded589f8f763e50c6796f370d78793c70d8299f3c8a644f24239d764e6f8814c6e989182810428ceb71b68c5a09eedb89729952e720725c314e8f0e58845d31249c74a3c076e4134e2ede8da648bbdab3ccb06ca9fa74e3", 0x7f}, {&(0x7f0000000980)="89cf651b20fa8f181deaba754f0ab9572fc06235031dbdf590e64d387b539dab1aa334af8461fb7727efc24f0298d3c109d07057fce2eb8bd401d5e4e4d56d0ccc909d1b1e59b6cdb6fa9c7d7f91f7a7588062d471991adc69fbca6ff1a62b0fa49d595efc46656a52361aca6efc2b1f371cc092239fdd", 0x77}], 0x2, &(0x7f0000006ec0)=[@rights={{0x28, 0x1, 0x1, [r0, r6, r0, r0, 0xffffffffffffffff, r7]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, r15}}}], 0xa0, 0x8000}}, {{&(0x7f0000006f80)=@file={0x0, './mnt\x00'}, 0x6e, &(0x7f0000007040)=[{&(0x7f0000007000)="f6b9adb509", 0x5}], 0x1, 0x0, 0x0, 0x91}}], 0x3, 0x20044040) [ 2880.939273] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:54:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x7c550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:54:33 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2880.971774] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2880.983467] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 3: invalid block bitmap [ 2881.017603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2881.020360] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2881.082407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2881.147262] loop6: detected capacity change from 0 to 140 [ 2881.147614] loop7: detected capacity change from 0 to 264192 [ 2881.155343] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2881.156547] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2881.160638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2881.164985] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2881.166413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2881.209308] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2881.219387] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:54:43 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:54:43 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x7d550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:54:43 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:54:43 executing program 5: syslog(0x2, &(0x7f0000000000)=""/78, 0x4e) syslog(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1002, 0x8a) 11:54:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f00000001c0)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4d08}}, './mnt\x00'}) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './mnt\x00'}) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) getdents64(r3, &(0x7f0000000040)=""/114, 0x72) 11:54:43 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./mnt\x00', 0x1) lsetxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6673001074f04afb6b6cbe3cc4f1080afbe7883437fb2e2ee5e9078fcaf08471e86b213154d999fd87a023bec62894c3c474fdb862223382465685686f1ca3b131e65cffd8a7b69d47ab68c1d65fd1378e923b4b496f484d853bae5859e64394529ed7a10865ca014e758731574e92ebd7898740e7d34c92812457d064db"], &(0x7f0000000080)='selinuxfs\x00', 0xa, 0x2) 11:54:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) [ 2890.512934] loop2: detected capacity change from 0 to 140 [ 2890.513680] loop7: detected capacity change from 0 to 264192 [ 2890.538887] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2890.539478] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2890.541290] loop6: detected capacity change from 0 to 140 [ 2890.558505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2890.568164] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2890.586636] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2890.589364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:54:43 executing program 0: msgget(0x1, 0xf3) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) flock(r0, 0x1) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) getdents64(0xffffffffffffff9c, &(0x7f0000000080)=""/39, 0x27) openat(r1, &(0x7f0000000040)='./mnt\x00', 0x10800, 0x102) msgget(0x1, 0x620) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x100000, 0x0) 11:54:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) r0 = getuid() mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=virtio,', {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@context={'context', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.origin\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@euid_gt={'euid>', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@hash}, {@uid_gt={'uid>', r0}}]}}) 11:54:43 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:54:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:54:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 11:54:43 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x7e550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:54:43 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x9ca1fe11226fb8b3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) openat2(r2, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)={0x0, 0x21, 0x1}, 0x18) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2890.766346] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:43 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2890.789334] loop2: detected capacity change from 0 to 140 [ 2890.811397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2890.815106] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:54:43 executing program 0: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@loopback}) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0xcc, 0x5, 0x1ff, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x710, 0x40, 0x6, 0x9}}) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) fcntl$setstatus(r2, 0x4, 0x44000) fcntl$lock(r0, 0x24, &(0x7f0000000380)={0x0, 0x3, 0x100, 0x9c, 0xffffffffffffffff}) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r4 = fcntl$dupfd(r1, 0x406, r2) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f2, 0x4, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="98e582151cb9dce8342e2c54e67adae27a510a150e77b41b89d42fed8de50dafc1d1a7751adfb60e9e37108534618473a29cdb4cdf8eb92770c0b131c3c8a9759448fa7a6be924798353607d5b6f54b0a7c687e37c7d05fe78477d95acfe7debe54d587b9ccf9f540679a903a85241da8925458331427126c102a2d9dcae7c1be98b69217425adcb39981c1d6298f18920f01aebcf31", 0x96, 0x40000, 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000180)) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) [ 2890.901725] loop5: detected capacity change from 0 to 140 [ 2890.936593] loop7: detected capacity change from 0 to 264192 [ 2890.950097] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended 11:54:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), 0x18) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) [ 2890.981538] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2890.988020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2890.988743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2890.993391] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2891.009351] loop6: detected capacity change from 0 to 140 [ 2891.019838] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2891.059834] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2891.060327] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2891.080086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2891.121097] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2891.175540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:54:53 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:54:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 11:54:53 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:54:53 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x9ca1fe11226fb8b3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) openat2(r2, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)={0x0, 0x21, 0x1}, 0x18) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:54:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000000040), 0x0, 0xfffffffffffffda4, 0x2) 11:54:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000", 0x1d, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:54:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) lsetxattr$security_capability(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f00000000c0)=@v3={0x3000000, [{0x7, 0x7}, {0x81, 0x5}], r0}, 0x18, 0x3) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:54:53 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x7f550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2901.154089] loop7: detected capacity change from 0 to 264192 [ 2901.170843] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2901.190671] loop6: detected capacity change from 0 to 140 11:54:53 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:54:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0x7) [ 2901.195677] loop2: detected capacity change from 0 to 140 [ 2901.203679] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2901.221805] loop5: detected capacity change from 0 to 140 [ 2901.225539] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2901.235922] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2901.238643] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2901.238674] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2901.250263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2901.294240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:54:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) [ 2901.337044] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap 11:54:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), &(0x7f0000000140)={0x0, 0xfb, 0x55, 0x3, 0x7, "8e8756b7b21930747391627803723134", "58bd28826d561f8bfab1e76fc9b1dc73842772e5d3d82793423583ca32624289dd589b688243808106447fa308e287b632e54d671b2180b93c42da4e53b19793"}, 0x55, 0x3) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2901.444641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2901.464927] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2901.516091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:03 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x9ca1fe11226fb8b3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) openat2(r2, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)={0x0, 0x21, 0x1}, 0x18) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:55:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000", 0x2c, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:55:03 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x80550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:55:03 executing program 0: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000001400b808000000000000005dac632f5ad10d2e2f6d6e7400"]) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./mnt\x00', 0x2, 0x1, &(0x7f00000000c0)=[{&(0x7f00000002c0)="90b0cd5930c173f4b0a3a0dc688053d3fcccc406bbe1f1159dd7bcb16875e12edc10fe01acdd4f837eddf56e532fc2fc9d4f2a9a9e4ddda2f5e67c9fd86a29bbd8bed16071261024851f2e68a8cdd05f3de27a1c366b25a271d19cde702eb1f4a48a7f06c372c27f046ef4147dbb55b2d45427509ce3176e91e11596601ec8f0d06c5e0942d8a10775976e7166b55f2825855525d47815d3950c5dd423cf581351ca30530eb6b18e8209b907833a39fdb6a0e0a204b938ad1b8f4b944900df7d1aa6a2971635fd2ddd71af90365d3d13779aec49464f84c043", 0xd9, 0xffffffff}], 0x8, &(0x7f0000000140)={[{'.'}], [{@obj_user={'obj_user', 0x3d, 'selinuxfs\x00'}}]}) 11:55:03 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:55:03 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 11:55:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) mount$9p_unix(&(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280), 0x2, &(0x7f0000000400)={'trans=unix,', {[{@cache_none}, {@noextend}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@noextend}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@version_9p2000}, {@fscache}, {@version_9p2000}, {@noextend}], [{@fowner_gt={'fowner>', 0xee00}}, {@euid_gt={'euid>', r1}}, {@subj_user={'subj_user', 0x3d, '/dev/nbd'}}, {@subj_type={'subj_type', 0x3d, '\'/'}}]}}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x3f7, 0x20, 0x70bd2c, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x48e0}, 0x8004) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ocfs2\x00', 0x2080006, &(0x7f0000000140)='-\x00') 11:55:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 2910.559384] loop6: detected capacity change from 0 to 140 [ 2910.571563] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2910.574542] loop2: detected capacity change from 0 to 140 11:55:03 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) [ 2910.582997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2910.583882] loop7: detected capacity change from 0 to 264192 11:55:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) fcntl$setstatus(r1, 0x4, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 2910.607750] loop0: detected capacity change from 0 to 264192 [ 2910.610518] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2910.618994] nfs: Unknown parameter '.' 11:55:03 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) [ 2910.644632] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2910.645060] loop0: detected capacity change from 0 to 264192 11:55:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000", 0x2c, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2910.649786] nfs: Unknown parameter '.' [ 2910.661325] loop5: detected capacity change from 0 to 140 11:55:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) openat(r0, &(0x7f0000000080)='./mnt\x00', 0x80001, 0x0) getxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f00000002c0)=""/227, 0xe3) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:55:03 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2910.670242] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2910.673713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2910.680784] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz-executor.5: bg 0: block 3: invalid block bitmap [ 2910.707403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:03 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x9ca1fe11226fb8b3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) openat2(r2, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)={0x0, 0x21, 0x1}, 0x18) [ 2910.724498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2910.725756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2910.756899] loop2: detected capacity change from 0 to 140 [ 2910.762600] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2910.783681] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:55:03 executing program 3: sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1e4, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, 'trusted.overlay.origin\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, 'trusted.overlay.origin\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^{%&)\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, 'trusted.overlay.origin\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, 'trusted.overlay.origin\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{),$\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd210}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '+/&]/[+*^#\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x53, 0x5, "f63e8a79be3b38e8c7c284bb5e2ba964668ea5d5f98315e04308099a320c0392812f9a5575599f989349b8e68df8f8eff9bc4d7395c0d4e2427b73fb5764ca2c49f3b01a187ef1fe75793d1c15cfe6"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}]}, 0x1e4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2910.793022] loop7: detected capacity change from 0 to 264192 11:55:03 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:55:03 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) [ 2910.829364] loop5: detected capacity change from 0 to 140 [ 2910.855286] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2910.862893] loop6: detected capacity change from 0 to 140 [ 2910.867541] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2910.900811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2910.906106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2910.909630] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2910.930113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2910.931935] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2910.987062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2911.005392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:13 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x9ca1fe11226fb8b3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) 11:55:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x81550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:55:13 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 11:55:13 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000d80)={{r1}, 0x8, 0x3, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:55:13 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:55:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) lstat(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)) 11:55:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000", 0x2c, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:55:13 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='./mnt\x00', 0x101000, 0x80) setxattr$incfs_size(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f00000002c0)=0xff, 0x8, 0x2) openat(r1, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0) sendto(r1, &(0x7f0000000040)="545caa1eca76aa0179024ed4a2852b1b64cccb2c2954fe35a221ddd597d51a578472479262a09151c6fa94ccfdd6625d07dec5b6f6ab5c6f53cc805a9517f30d29370294d97a79750b37c9a9add3e13fcd9ce7b537f344853b76b4080547a93adb8ac478a0b7cd014c59869c07819041f88b14d9858f353d4b66998db29f1b535234528ad72a596c6126a68ee35d39badeb89a473f55b71749f2047c34df97feb659413449c189dc8b66af57", 0xac, 0x40, &(0x7f0000000140)=@nfc_llcp={0x27, 0x1, 0x0, 0x1, 0x9, 0x9, "8cb447363a260b49768fcb34b559d74ebec7357ea18360d015bda0ed035177efb2a2c722527c5da38f26a23d723242b6b4393bdf8ce3c6846f9bf839b58180", 0x3f}, 0x80) [ 2921.027379] loop6: detected capacity change from 0 to 140 [ 2921.061619] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2921.067661] loop2: detected capacity change from 0 to 140 [ 2921.071801] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2921.084856] loop7: detected capacity change from 0 to 264192 [ 2921.099129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:55:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c7", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2921.117492] loop5: detected capacity change from 0 to 140 [ 2921.148876] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended 11:55:13 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) [ 2921.181983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2921.186061] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2921.216894] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:55:13 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 2921.247070] loop2: detected capacity change from 0 to 140 [ 2921.253366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:55:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2921.299136] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2921.300807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0xa, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000140)={[{@data_writeback}, {@sysvgroups}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xfffffffffffffffb}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@acl}, {@sb={'sb', 0x3d, 0x57}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@prjquota}]}) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) openat(r1, &(0x7f0000000040)='./mnt\x00', 0x80000, 0x109) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x1000) 11:55:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c7", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:55:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) mkdirat(r0, &(0x7f0000000000)='./mnt\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080)=0x6, 0x1) 11:55:14 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x82550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2921.383059] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) 11:55:14 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x9ca1fe11226fb8b3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) [ 2921.442792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2921.455699] loop7: detected capacity change from 0 to 264192 [ 2921.475609] loop2: detected capacity change from 0 to 140 [ 2921.484723] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2921.490950] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2921.516321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2921.524317] loop6: detected capacity change from 0 to 140 [ 2921.553295] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2921.598062] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2921.614808] loop5: detected capacity change from 0 to 140 [ 2921.627617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2921.640633] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2921.662680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2921.675397] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2921.720763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2921.721263] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:22 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x9ca1fe11226fb8b3) creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 2929.664067] loop5: detected capacity change from 0 to 140 11:55:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:55:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) lsetxattr(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='-&\x00', 0x3, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:55:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c7", 0x33, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:55:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) 11:55:22 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0xa, 0x0, 0x0, 0x10408, 0x0) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000280)='nilfs2\x00', 0x880, 0x0) r1 = openat(r0, &(0x7f0000000000)='./mnt\x00', 0x50000, 0x40) pivot_root(&(0x7f0000000180)='./mnt\x00', &(0x7f0000000140)='./mnt\x00') [ 2929.670637] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2929.675875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2929.693725] loop2: detected capacity change from 0 to 140 [ 2929.698019] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2929.704085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2929.709835] loop6: detected capacity change from 0 to 140 r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./mnt\x00', 0xffffffffffff0001, 0x9, &(0x7f00000027c0)=[{&(0x7f00000002c0)="d9b69e0affd9e6cfa6131efde7eb18ec4eefc9ca0d1b9757c9feee81abe552e99d9482261449f830203450d0f52b6280a6ced47f1942d61c741f3ea867d9a332f03ef1099ce40d29a42de94a03b4daabd54a25c4f6f16be1840668ead81311320cb3f3a918bed29fc1b2706e226dfb8b14caeff2c05c517fedb58097c4f5fee3ec1067d2b17abfd59e0cf5dcfe4098a4d9cf4afe2388f07a69", 0x99, 0x80000001}, {&(0x7f0000000380)="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", 0x1000, 0x7f}, {&(0x7f0000001380)="3eb73143723a9e28b6197728271a53838968bf8cab0132063465a978b9f515379a52d0096c0e8e66344ffa8542991670153fa1889aed66c240fd4e3011668c229f3dfacc9f437302fd4656f14620e460ce66486d1c4d83f755e16628324d5689d69a569ab2dc83b2d024e25fe74fea57b24699ad8751bed194462f886ec5fe8ce10df838873ed4d0e4289b12bc1e257a99925ca470bef1613bb155b25906c452f0b8211cb84cf4d6d793657a36fd481a0355ed4271ab05016337e0eda090476c968fca2bbcfc6c0d63ac5c9c17a87d2b0fd7d05092b0f6b74ada775375fd0aed4fc6b807ec7087a3d9b63b8fa3eab9ec", 0xf0, 0x84}, {&(0x7f0000000200)="d356647d865640073be1066d0e907124b53fcf762bbde51f8960e879da32421bc7f52609335959dc3e64edcb5d4381393c49eb1583c7099e149ef9e803d4a776e3e9750998e478bc540ebb1aa0df5ebd4a6dfc5f", 0x54, 0x2}, {&(0x7f0000001480)="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", 0x1000, 0x2}, {&(0x7f0000002480)="b0c67102ad30e96d2d74aa610ad5f6eb1aa42008439556e0d070b33c20003dfdd69539d8ed0822308b41fdb005d10288f4f75e8d97ede4a8c66f51b7f270aca801b1cafe0d10cf3688be5222dcf57add22ad2a0c41ea527ca0ecd38a5121d3c8d7dc8f8789900f9696538cc5a1cbec39f12d411a", 0x74, 0x1}, {&(0x7f0000002500)="81cf58e87bb595538c7ec96835f6307ffb4c2c9d7b7996df8b58f152c81a52b7e257049b8f534918e5686cadc646ecc63b757e9d92dde9c3981041a5816cf22298eb6495373321024530390bed019c88c54ed22e01117e3c42c6d3ec62c0321e0d86b8b739b2a9d58691e9133f6110e6def595938770c5b1ac2d2d5f909af7a8bd9ca0656fce052fc9c43d8b0fac91aa895d23489a400aab83892d045ea0cf1583045ace898164f4718b837fd490bed1d2071ff1ca1b1ced9bdc4295430849472e9203668db0e5fcfb664518cf9987", 0xcf, 0xfff}, {&(0x7f0000002600)="f5bde22c35a665f5e9fd9e10bdbfe2fbcb91eec2da72cbd204770e3595f838f983c0bcf45cac5fdf32d6a1245c6710b215b021b3bc0072fb065dc575b5343c158ad8cefc830e37963a50d21e59ddcceaec545e0af80267c69dce5ddbd7b4dc98893000bdddcbf6dbb79182588c737f839bb1595a37b9079e328fc64cd2e78e6a756198b1812a737ad7d4d12730f628e4ca179ed060c579db000910c092ae7c342536c9f8459cf11d4c14249f0561f4fc1997112a068b37210427be733761da0f", 0xc0, 0x101}, {&(0x7f00000026c0)="928bfd11e6c50b20b9322041e352335f5fac9b9367a62f4ecb3ff8ad8e46cdf652187dafc9712c93c9e373aafe49f8afe78e11cc7f6ea4f9176bed570be9bca176eac2233068d56e26a64f59a951c600bef38a2a62e0ea3f60e8cf924b2607f304b50b0b2b3210e68ce3ed809da910e403d8291953c69d490294c9792b522aed770a6d7667ff3a239ba70485416059732fcaaf410708d82cd6a6dbabe5d6f217bfa225b3b44363211a3f97533157bc7c827ebc49b9b5999a144751702c88896e8a774101683a1be83fc9cea8b1a96fc603", 0xd1, 0x401}], 0x21040, &(0x7f00000028c0)={[{@jqfmt_vfsv1}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}]}) openat(r2, &(0x7f0000002900)='./mnt\x00', 0x44000, 0x81) openat(r1, &(0x7f0000000080)='./mnt\x00', 0x501000, 0x8) 11:55:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x83550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2929.714115] loop7: detected capacity change from 0 to 264192 11:55:22 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:55:22 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x9ca1fe11226fb8b3) [ 2929.716743] loop0: detected capacity change from 0 to 264192 [ 2929.734154] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2929.742963] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 2929.746243] loop0: detected capacity change from 0 to 264192 [ 2929.747162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2929.754927] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:55:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ff", 0x37, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2929.759234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2929.778066] loop2: detected capacity change from 0 to 140 [ 2929.780017] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:55:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ff", 0x37, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:55:22 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:55:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, 0x0, 0x0) [ 2929.859233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)=""/180, 0xb4}], 0x1}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/91, 0x5b}, {&(0x7f0000000740)=""/214, 0xd6}], 0x6, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/129, 0x81}, {&(0x7f0000000b00)=""/29, 0x1d}, {&(0x7f0000000b40)=""/79, 0x4f}, {&(0x7f0000000bc0)=""/84, 0x54}, {&(0x7f0000000c40)=""/72, 0x48}], 0x6, &(0x7f0000000d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000f00)=""/57, 0x39}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f0000001000)=""/11, 0xb}, {&(0x7f0000001040)=""/150, 0x96}, {&(0x7f0000001100)=""/254, 0xfe}, {&(0x7f0000001200)=""/184, 0xb8}], 0x6, &(0x7f00000014c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000001340), 0x6e, &(0x7f00000013c0)}}], 0x5, 0x10002, &(0x7f0000001400)={0x77359400}) mount$9p_unix(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x10, &(0x7f0000001740)={'trans=unix,', {[{@mmap}, {@dfltgid={'dfltgid', 0x3d, r0}}], [{@dont_hash}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r1}}, {@fowner_gt={'fowner>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_gt}, {@subj_user={'subj_user', 0x3d, '!'}}]}}) 11:55:22 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 2929.903001] loop5: detected capacity change from 0 to 140 [ 2929.917733] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2929.918884] loop2: detected capacity change from 0 to 140 [ 2929.920910] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:55:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x84550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2929.936342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2929.962469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:55:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ff", 0x37, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:55:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000000)='mqueue\x00', 0x20000, 0x0) [ 2930.046981] loop7: detected capacity change from 0 to 264192 [ 2930.051121] loop6: detected capacity change from 0 to 140 [ 2930.056904] loop2: detected capacity change from 0 to 140 [ 2930.069038] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2930.082234] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended 11:55:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) 11:55:22 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x9ca1fe11226fb8b3) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) [ 2930.101235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2930.134564] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2930.142905] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2930.214300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x3) 11:55:30 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:55:30 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:55:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x84c00000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:55:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53", 0x39, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:55:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000), 0x10) 11:55:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:55:30 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 2938.033243] loop7: detected capacity change from 0 to 264192 [ 2938.035868] loop6: detected capacity change from 0 to 140 [ 2938.052612] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2938.054247] loop5: detected capacity change from 0 to 140 [ 2938.063955] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2938.067821] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2938.073582] loop2: detected capacity change from 0 to 140 [ 2938.083267] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2938.087136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:55:30 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:55:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2938.111522] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:55:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000), 0x10) 11:55:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x85550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2938.167933] loop6: detected capacity change from 0 to 140 11:55:30 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:55:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 2938.171171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2938.179692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./mnt/file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) [ 2938.239307] loop7: detected capacity change from 0 to 264192 [ 2938.246207] loop5: detected capacity change from 0 to 140 [ 2938.254979] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2938.260175] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2938.266845] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2938.269397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2938.278179] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2938.322983] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2938.326852] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:40 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x86550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:55:40 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:55:40 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:55:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000000), 0x10) 11:55:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:55:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53", 0x39, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:55:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:55:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 2947.546381] loop7: detected capacity change from 0 to 264192 [ 2947.559095] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2947.568869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2947.578633] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2947.590927] loop6: detected capacity change from 0 to 140 [ 2947.606569] loop2: detected capacity change from 0 to 140 [ 2947.610676] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:55:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:55:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:55:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x60800, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x195) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'security.', 'selinuxfs\x00'}) lsetxattr$security_capability(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f00000003c0)=@v2={0x2000000, [{0x2, 0x1}, {0x2, 0x80}]}, 0x14, 0x2) unlink(&(0x7f0000000400)='./mnt\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004", 0x4d, 0x8c60}], 0x0, &(0x7f0000010f60)) getxattr(&(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=@known='trusted.overlay.opaque\x00', &(0x7f00000002c0)=""/230, 0xe6) listxattr(&(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)=""/91, 0x5b) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) [ 2947.617464] loop5: detected capacity change from 0 to 140 11:55:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)=""/33, 0x21) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x8000, 0x20, 0x2, 0x7}, {0x6, 0x81, 0x20, 0x80000001}]}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 2947.673675] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2947.692169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2947.721321] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2947.726996] loop4: detected capacity change from 0 to 140 11:55:40 executing program 3: quotactl(0x41b, 0xfffffffffffffffc, 0xee01, 0x0) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r5 = getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x3, r0}, {0x2, 0x6, r1}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6, r2}, {0x2, 0x4, 0xee01}], {0x4, 0x5}, [{0x8, 0x4, r4}, {0x8, 0x3, r5}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x3}, {0x20, 0x1}}, 0x7c, 0x1) r6 = accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80c00) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000003c0)={{r6}, "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"}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) [ 2947.744317] loop6: detected capacity change from 0 to 140 [ 2947.746980] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 2947.759620] EXT4-fs (loop4): get root inode failed [ 2947.760030] EXT4-fs (loop4): mount failed [ 2947.806328] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60084001}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:55:49 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./mnt\x00', 0x2, 0x0, 0x0, 0x52235c4c5a8003b, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:55:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53", 0x39, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:55:49 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:55:49 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x87550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:55:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:55:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030500000000000005000000010000000000000000000000342000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="00000000000000000000000000496924c9497568570000000000007ee7b1e495e13689e413000000230000002b", 0x2d, 0xf9aa}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="007930585b955749789e00a772100f2cbda050e1b401ade9bc3dc82e8650e190baf92e7e1fc9643ecbc18e74e682e73542fda9e3d1b42e5ed796c4fab0a22313c10030df143eea39fa840578624dfd796dd2639305e83f2f479886ad2ff288668d932fd3f2ee8dfbb8ee12c1a09aecf0b84eaf7a42cbbf7bc542668a83aa0338d34e13be6bd971c72245fb2b4edce37c0b4141dedc14de978b47685d839645d4e2492ca6c11cd4170701ffc188ab286e602495e281e23e00ec3f566b2a35970ed8e7a7cb762200"/210]) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:55:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2956.622286] loop2: detected capacity change from 0 to 140 [ 2956.630264] loop7: detected capacity change from 0 to 264192 [ 2956.635554] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2956.639077] loop5: detected capacity change from 0 to 140 [ 2956.645009] loop4: detected capacity change from 0 to 140 [ 2956.653260] loop6: detected capacity change from 0 to 140 [ 2956.656878] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2956.661631] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 2956.661831] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2956.672863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2956.680812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2956.684483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:55:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x79, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x20040814) 11:55:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2956.706584] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2956.717813] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 2956.766865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2956.784108] loop2: detected capacity change from 0 to 140 [ 2956.788206] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:55:49 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) r1 = open_tree(r0, &(0x7f0000000040)='./mnt\x00', 0x800) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80041, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0xd, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000005900)={0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000004340)="c41e05d68c56e8aeb345f70f735d47616ff6fbe1e6ba47e7ee941dd50aeb761abcb54b2bdccf2f3df81e71c91debe9ea66be3808e84fb83e5125716c9fb815ee638faeab3259ba08c84db10392f9b022aa8e9f8c90", 0x55}, {&(0x7f0000000340)="21fb72ae1898ffde47c2043e98e4b4dd13942b1e8124202691437a7eb584f0fb985a1725c4ab6582be85fe3e06c459f257296e54df6acd0ee9ad46", 0x3b}, {&(0x7f00000043c0)="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", 0x1000}, {&(0x7f00000053c0)="2f553a1cff4e8ad0de10292b72e31f8a46390b35fba6aa0a85ff647b1e26ba92705d390e7298442dd209a6b78d357b507f935a788e54578c7a1c8f84a5561f538700be6cb36511771e3867c80cdd6b6737007e0d016d70f60d97335273fae11fb2d4aa1092f2349ee0dd5b8918f4cc9b5ef457fc4e93afad75245210577bf723ac0fa633ac2492ba68d32a8be68a64852a586dd7e06dc68794fd5952479a894f0d57cc312b682dc6f8b876758a7d12cbe95d336179402e629797dbbff87eb7", 0xbf}, {&(0x7f0000005480)="748b3f3fee3aec0a34d9af0b50c01cb6815c7f9b6e3c1701be1730d7f917ee25eb17a0f49f960cd1507239a805032564e79e0aacaa2d3fe433d83c1bb9df9e462a7700ad2b766b11f8f7e4971089734f6f758654ac874a5d9c342c75e03b8322274c3881692b", 0x66}, {&(0x7f0000005500)="ce9ca5b509d731778b605e5df5fab1efae399050f99b4feb6183c60761a979c258d6c35147ba7e4613a56cf4d807964e1ff34520a404f8feaf351e7f5bbbca6b61cc0da5cb69a33fb248cf0e4fb695d3a36ef2c5294131546ff3f568e96a5fcdacd47a50214f7dcdb1448082c0e17a463ddacec238fc11d286d7341c9dff4de5b4b5e6d443a5294604660a8cd6e19cb8ad27b9dba269759c568269da0924dd111473292e31cf0b", 0xa7}, {&(0x7f00000055c0)="b7e2f05ada0d98c6b85251daca948f47f492304cdf15a30a051716b979fda712f4152093c4ef8f02e0ab21c87dc8834ab0d1a64d53956dd8ea73be7e18e5a6117c0d5353cfd8b5d162a7a3ffe35788729c140d2b5d959089cffe3e23617f08b940f8cde2a0e43a1512b431811b1f13df2bf638b2cf0b60b71d86f649d2d7111b9ad317c2af5f80575283809cf49a4662303dd3e930c1c10212cf67dd102ef955df29045a20468a8786a01528a2b1b24b8cfce1595d4c61d8e94345bc9ba9e2c44a81e205f9e47303f4cdd8210de9811756f8a0f94843521a46", 0xd9}, {&(0x7f00000056c0)="7b1ed4f4472a293533a058ae970687174f39d8f69aa86cb33c26d1a2f3553997c172eae932164f2e77ed698f6b4dda41763e0f746c724ac385", 0x39}], 0x8, &(0x7f0000005780)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x8e, 0x1, 0x4, [{@loopback, 0x23a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010102, 0x3}, {@empty, 0x5}, {@empty, 0x1000}, {@loopback, 0x400}, {@remote, 0x94}]}, @generic={0x94, 0x9, "59d6049e33131e"}, @noop, @cipso={0x86, 0x36, 0x3, [{0x6, 0x7, "a8477c71fd"}, {0x0, 0xb, "113e28baa7431868dc"}, {0x6, 0xc, "b788308565ee36e24d52"}, {0x2, 0x12, "336f02eee32f3c907747a02e1210a982"}]}, @generic={0x89, 0xc, "de94a7fd2da9cbab2b5b"}, @timestamp_addr={0x44, 0xc, 0x63, 0x1, 0x9, [{@remote, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1600}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x11, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x35}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @local]}, @cipso={0x86, 0x1c, 0xfffffffffffffffd, [{0x1, 0x10, "0b1a5261ab9e8238464f3d86b61a"}, {0x2, 0x6, "c8ef11d5"}]}, @noop, @ssrr={0x89, 0x7, 0x64, [@private=0xa010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x180}, 0x1) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)=0x0) recvmmsg$unix(r1, &(0x7f0000004040)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000340)}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/14, 0xe}, {&(0x7f00000005c0)=""/124, 0x7c}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000000780)=""/116, 0x74}, {&(0x7f0000000800)=""/221, 0xdd}], 0x9, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b00)=""/120, 0x78}, {&(0x7f0000000b80)=""/119, 0x77}, {&(0x7f0000000c00)=""/186, 0xba}], 0x3, &(0x7f0000000d00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000e40)=""/241, 0xf1}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/144, 0x90}, {&(0x7f0000001000)=""/194, 0xc2}, {&(0x7f0000001100)=""/169, 0xa9}, {&(0x7f00000011c0)=""/69, 0x45}, {&(0x7f0000001240)=""/71, 0x47}, {&(0x7f00000012c0)=""/228, 0xe4}], 0x8, &(0x7f00000034c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000003580), 0x6e, &(0x7f0000003700)=[{&(0x7f0000003600)=""/198, 0xc6}], 0x1}}, {{&(0x7f0000003740)=@abs, 0x6e, &(0x7f0000003f80)=[{&(0x7f00000037c0)=""/22, 0x16}, {&(0x7f0000003800)=""/108, 0x6c}, {&(0x7f0000003880)=""/226, 0xe2}, {&(0x7f0000003980)=""/219, 0xdb}, {&(0x7f0000003a80)=""/219, 0xdb}, {&(0x7f0000003b80)=""/251, 0xfb}, {&(0x7f0000003c80)=""/252, 0xfc}, {&(0x7f0000003d80)=""/185, 0xb9}, {&(0x7f0000003e40)=""/125, 0x7d}, {&(0x7f0000003ec0)=""/152, 0x98}], 0xa}}], 0x6, 0x40010062, &(0x7f00000041c0)={0x0, 0x989680}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x40, &(0x7f0000004200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@dfltuid}, {@cache_none}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@access_client}, {@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@noextend}], [{@euid_gt={'euid>', r6}}, {@dont_hash}, {@appraise_type}, {@seclabel}]}}) [ 2956.801502] EXT4-fs (loop2): VFS: Can't find ext4 filesystem setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:55:49 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:55:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60084001}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:55:49 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x88550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2956.819996] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:55:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2956.888311] loop5: detected capacity change from 0 to 140 [ 2956.895073] loop4: detected capacity change from 0 to 140 [ 2956.902220] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2956.907404] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 2956.910688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2956.910727] No source specified [ 2956.916922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2956.920765] loop7: detected capacity change from 0 to 264192 [ 2956.923869] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 2956.938209] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2956.946374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2956.977238] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2956.984998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2956.994852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2957.025681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:56:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x89550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:56:00 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc) keyctl$link(0x1e, r0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2004) r1 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)=@chain) keyctl$link(0x8, 0x0, r1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x2f2c787fb947d964, 0x0) 11:56:00 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:56:00 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a0001007770616e31000000429717e5d3b60be06373d8f1fdce075e5ceceda0baa8be5098bbff3fda8138578aded2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x40004) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x44000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000240)={0x20, 0x1f, 0x9}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x5, 0x404, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 11:56:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:56:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:56:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:56:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60084001}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2967.837878] loop7: detected capacity change from 0 to 264192 [ 2967.861008] loop2: detected capacity change from 0 to 140 [ 2967.866210] No source specified [ 2967.871131] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2967.874343] loop5: detected capacity change from 0 to 140 [ 2967.888143] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2967.894802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2967.903827] loop4: detected capacity change from 0 to 140 [ 2967.912188] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2967.920060] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2967.934946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2967.936887] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 2967.954905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:56:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:56:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:56:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2968.016146] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz-executor.4: bg 0: block 3: invalid block bitmap 11:56:00 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a0001007770616e31000000429717e5d3b60be06373d8f1fdce075e5ceceda0baa8be5098bbff3fda8138578aded2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x40004) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x44000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000240)={0x20, 0x1f, 0x9}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x5, 0x404, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 11:56:00 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:56:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./mnt\x00', 0x800, 0xfffffffffffffe51, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) [ 2968.146627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:56:00 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8a550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2968.176478] No source specified [ 2968.195995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:56:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60084001}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 2968.253241] loop2: detected capacity change from 0 to 140 [ 2968.266746] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2968.286784] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2968.293935] loop7: detected capacity change from 0 to 264192 [ 2968.311260] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2968.321545] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2968.327960] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2968.353967] loop4: detected capacity change from 0 to 140 [ 2968.362318] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 2968.369369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2968.380681] loop5: detected capacity change from 0 to 140 [ 2968.430551] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2968.439351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2968.476397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2968.482608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2968.555376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:56:10 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:56:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:56:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8b550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:56:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, 0x0) 11:56:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:56:10 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000940)=0xe8) r3 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x6, 0x2, &(0x7f0000000140)=[{&(0x7f00000002c0)="2868ea90ea7ce5bfa46327a210a4fc7a56c865780c6362558e9da220cb6cf739f0b2dcb9b2115905a4a5c8eb02c1858ae54dfd9420362721dfc2458b125e6f1ae6b1c3dc475683dbb51fa6020cd31e6a5ff8c773d25aee5c1d945c9494677ec28b3ed349b8ddf9e9563fcb986c9fe8d47264e4d621013ae84805ae52de3ea5431f087fb6915a562cffeb20e5cc9dd9ee7449f258ae46", 0x96, 0x2}, {&(0x7f0000000380)="35480c54494025fc499ba79fd90eeed81d42cc9987f2cab9f1f1d821a01384551dd9edbac71649776b804c32cb7e37e8e9bddddcc78aa055cedbe86da5ca0920edfce8a4dc4261d056a4fe4af9a61a92812aa28639bbcdee51d2276bd75862d47cc4cd682f406825c91ab98ce110e173c50050c44592836f905b2468e8aa9adc8225d85aa766e5aa0c5b2b4e5323a93b0211c2e03745d020ed41da5f1ed56a6f7f2a1a136ff00c2ad6b6d36257d8643e604e00", 0xb3, 0x3}], 0x164000, &(0x7f0000000980)={[{@nocompress}, {@map_off}, {@check_strict}, {@uid={'uid', 0x3d, 0xee00}}, {@dmode={'dmode', 0x3d, 0x9}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@euid_gt={'euid>', r1}}, {@fowner_lt={'fowner<', r2}}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x48}}, {@euid_gt={'euid>', 0xee01}}, {@dont_appraise}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, @out_args}, './mnt\x00'}) rename(&(0x7f0000001e40)='./mnt\x00', &(0x7f0000006d00)='./mnt\x00') clock_gettime(0x0, &(0x7f0000008040)={0x0, 0x0}) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x44000) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f00000080c0)={{0x1, 0x1, 0x18, r0, {0x3f, 0x1f}}, './mnt\x00'}) recvmmsg(r4, &(0x7f0000007dc0)=[{{&(0x7f0000000440)=@generic, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000240)=""/40, 0x28}, {&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000680)=""/171, 0xab}, {&(0x7f0000000740)=""/45, 0x2d}, {&(0x7f0000000780)=""/33, 0x21}, {&(0x7f00000007c0)=""/90, 0x5a}], 0x7, &(0x7f0000000b40)=""/242, 0xf2}, 0x40000000}, {{&(0x7f0000000c40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000cc0)=""/81, 0x51}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/244, 0xf4}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x5, &(0x7f0000002f00)=""/97, 0x61}, 0x45854e1b}, {{&(0x7f0000002f80), 0x80, &(0x7f0000003300)=[{&(0x7f0000003000)=""/93, 0x5d}, {&(0x7f0000003080)=""/111, 0x6f}, {&(0x7f0000003100)=""/198, 0xc6}, {&(0x7f0000003200)=""/245, 0xf5}], 0x4, &(0x7f0000003340)=""/14, 0xe}, 0x4}, {{&(0x7f0000003380)=@nl=@proc, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/189, 0xbd}], 0x1, &(0x7f0000003500)=""/208, 0xd0}, 0x6}, {{&(0x7f0000003600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003680)=""/88, 0x58}, {&(0x7f0000003700)=""/131, 0x83}, {&(0x7f00000037c0)=""/97, 0x61}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000003880)=""/181, 0xb5}, {&(0x7f0000003940)=""/236, 0xec}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/222, 0xde}, {&(0x7f0000004b40)=""/185, 0xb9}, {&(0x7f0000004c00)=""/36, 0x24}, {&(0x7f0000004c40)=""/131, 0x83}, {&(0x7f0000004d00)=""/171, 0xab}, {&(0x7f0000004dc0)=""/90, 0x5a}, {&(0x7f0000004e40)=""/240, 0xf0}], 0xa, &(0x7f0000005000)=""/106, 0x6a}, 0x2ce}, {{&(0x7f0000005080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005100)=""/99, 0x63}, {&(0x7f0000005180)=""/97, 0x61}, {&(0x7f0000005200)=""/183, 0xb7}], 0x3, &(0x7f0000005300)=""/150, 0x96}, 0xc38}, {{&(0x7f00000053c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000005500)=[{&(0x7f0000005440)=""/184, 0xb8}], 0x1, &(0x7f0000005540)=""/83, 0x53}, 0x1ff}, {{&(0x7f00000055c0), 0x80, &(0x7f0000006940)=[{&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/233, 0xe9}, {&(0x7f0000006740)=""/141, 0x8d}, {&(0x7f0000006800)=""/6, 0x6}, {&(0x7f0000006840)=""/241, 0xf1}], 0x5, &(0x7f00000069c0)=""/120, 0x78}, 0x73}, {{&(0x7f0000006a40)=@ethernet, 0x80, &(0x7f0000006d40)=[{&(0x7f0000006ac0)=""/61, 0x3d}, {&(0x7f0000006b00)=""/70, 0x46}, {&(0x7f0000006b80)=""/147, 0x93}, {&(0x7f0000006c40)=""/112, 0x70}, {&(0x7f0000006cc0)=""/11, 0xb}, {&(0x7f0000006d00)}], 0x6, &(0x7f0000006dc0)=""/4096, 0x1000}, 0xec3}], 0xa, 0x40002000, &(0x7f0000008080)={r5, r6+10000000}) openat(r0, &(0x7f0000000000)='./mnt\x00', 0x0, 0x186) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r8, 0x1, 0xd, &(0x7f0000000000), 0x4) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000040)={0x9, 0x8, 0x8001, 0x1f47, 0x5}) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:56:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60084001}, 0x11) 11:56:10 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a0001007770616e31000000429717e5d3b60be06373d8f1fdce075e5ceceda0baa8be5098bbff3fda8138578aded2"], 0x20}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x40004) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x44000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000240)={0x20, 0x1f, 0x9}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x5, 0x404, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) [ 2977.902010] loop6: detected capacity change from 0 to 7 [ 2977.909803] loop2: detected capacity change from 0 to 140 [ 2977.916618] loop7: detected capacity change from 0 to 264192 [ 2977.921856] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks) [ 2977.948775] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2977.953180] loop5: detected capacity change from 0 to 140 11:56:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:56:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) [ 2978.009276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:56:10 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 2978.048305] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended 11:56:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, 0x0) [ 2978.086898] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:56:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2978.113483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2978.214357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2978.265321] loop6: detected capacity change from 0 to 7 [ 2978.269628] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks) [ 2978.293073] loop2: detected capacity change from 0 to 140 [ 2978.317053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:56:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./mnt\x00', 0x40) 11:56:21 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8c550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:56:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:56:21 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:56:21 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:56:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:56:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, 0x0) 11:56:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2988.558261] loop7: detected capacity change from 0 to 264192 [ 2988.577199] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2988.587151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:56:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 2988.602875] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2988.629136] loop6: detected capacity change from 0 to 7 [ 2988.640391] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks) 11:56:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 2988.666244] loop5: detected capacity change from 0 to 140 [ 2988.667735] loop2: detected capacity change from 0 to 140 [ 2988.738066] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended 11:56:21 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./mnt\x00', 0x80082, 0x100) mkdirat(r0, &(0x7f0000000080)='./mnt\x00', 0x10) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='fusectl\x00', 0x1180168, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) mount_setattr(r1, &(0x7f0000000180)='./mnt\x00', 0x1800, &(0x7f0000000200)={0x100002, 0x100070, 0xc0000}, 0x20) umount2(&(0x7f0000000040)='./mnt\x00', 0x4) unlink(&(0x7f0000000140)='./mnt/file0\x00') umount2(&(0x7f00000000c0)='./mnt\x00', 0x0) 11:56:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:56:21 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8cffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 2988.792352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:56:21 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:56:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2988.861654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2988.973350] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2989.001788] loop6: detected capacity change from 0 to 140 [ 2989.031537] loop7: detected capacity change from 0 to 264192 [ 2989.036302] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 2989.042548] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2989.044289] EXT4-fs (loop6): get root inode failed [ 2989.045239] EXT4-fs (loop6): mount failed [ 2989.051193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2989.061933] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2989.121068] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:56:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:56:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:56:31 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8d550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:56:31 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x402}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="0004000000000000000000000000000000000000ec0c5142e6db9a2da60000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030026f2e6f900000800000000000af301000404", 0x57, 0x8c60}], 0x9010, &(0x7f0000000080)={[], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x1f}}]}) r1 = fcntl$dupfd(r0, 0x406, r0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r1, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r2, r3/1000+10000}}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:56:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:56:31 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:56:31 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./mnt\x00', 0x0) 11:56:31 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000280)='/&\x00', &(0x7f00000002c0)=']@\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000480)=[&(0x7f0000000440)='\x00']) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 2998.829022] loop6: detected capacity change from 0 to 140 [ 2998.845461] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 2998.849596] EXT4-fs (loop6): get root inode failed [ 2998.849981] EXT4-fs (loop6): mount failed 11:56:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 2998.862905] loop7: detected capacity change from 0 to 264192 [ 2998.872408] loop2: detected capacity change from 0 to 140 11:56:31 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x402}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="0004000000000000000000000000000000000000ec0c5142e6db9a2da60000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030026f2e6f900000800000000000af301000404", 0x57, 0x8c60}], 0x9010, &(0x7f0000000080)={[], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x1f}}]}) r1 = fcntl$dupfd(r0, 0x406, r0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r1, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r2, r3/1000+10000}}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 2998.881417] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2998.891317] loop5: detected capacity change from 0 to 140 [ 2998.894616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2998.919712] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2998.927590] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended 11:56:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {0x0, 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 2998.949724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:56:31 executing program 2: futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x1, 0x1) clock_nanosleep(0x1, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)) 11:56:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:56:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x8000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0xcda1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:56:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) [ 2999.045898] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:56:31 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8e550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:56:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x1558a, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:56:31 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002c6d41a2530273bc92d822a7839a5a068a4e1372071828c305863d42b1aa396efab8c9ff53f1d4717c12c76beef88c0023"]) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 2999.091808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2999.095225] loop6: detected capacity change from 0 to 140 [ 2999.131616] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 2999.144220] EXT4-fs (loop6): get root inode failed [ 2999.145004] EXT4-fs (loop6): mount failed [ 2999.167294] loop7: detected capacity change from 0 to 264192 [ 2999.173160] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 2999.178360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2999.182198] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 2999.215137] loop5: detected capacity change from 0 to 140 [ 2999.224357] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2999.230223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2999.233069] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2999.259850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:56:41 executing program 2: futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x1, 0x1) clock_nanosleep(0x1, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)) 11:56:41 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000500)="1a1abdc818b909272c12986ead77ea05aa0de0db659958becc22779397d4c69e9613e2283787b1fa65f9114a8506930fae21c4d427", 0x35) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:56:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:56:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pivot_root(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='./mnt\x00') pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) unlinkat(r0, &(0x7f0000000000)='./mnt\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r2, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f0000000180)=@v3={0x3000000, [{0xcc3, 0x13}, {0x6, 0x8001}], r2}, 0x18, 0x2) 11:56:41 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="419051b1e70fbdf29ff0062a6335a375b3ca1ab08359cc40a27237f43d6a5d9ac87b2245a7e364ab618c4338c2cd87c3f5c2d1daa0c8db47c1c25715d12c2d7f3ef1afa78dbed0ac4eff5924b359c25682d2c3fda1e0d3c1eb350fb595e5fe5cb7243b4969191aa9e962fa98"]) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/module/nmi_backtrace', 0x1, 0x0) readlinkat(r1, &(0x7f0000000580)='./mnt/file0\x00', &(0x7f00000005c0)=""/146, 0x92) syz_read_part_table(0xacd, 0x2, &(0x7f0000000280)=[{&(0x7f00000000c0)="e43527af7a72a6d4a7ca6b9659253b32fa951f334ceac7", 0x17, 0x6}, {&(0x7f0000000140)="a33f54b949e010fe7b86c31b416871391c3c6d13e1f8921826cf71fa20ef827c9dec7577e6c35a7626beb12f1d09dc92b227a8e5a978e14c7af184726242f86a5441497504871901441848f6dc2bf825b2758807e57dfc3b4e8881e608495ec1e49645811cb7721797fc45298c9aab4cd7dc90a36728e190d340de6fd16f3e05e32e235329936dc65c995bd425a9a16c6791a01e39607519cb24374133fffb70bdd773442d41a66e3992094577c379", 0xaf, 0xffff}]) r2 = geteuid() syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./mnt\x00', 0x23, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="4ff4b248c8e483ef2e59b93f6db3117f839a0845d6de4335269311173d052f6fd5ba9d4853dc1828843a4fa8d54dca6f7c9288bfd73e367f1bac475b438f4f6f88fa4ee96a75a0ad552e2709bd020496983dd056357479fcdcfa0cd7df5bf23b8385304e7cc40ee1e67c48fb11368b3b3f91ebe86f1dfefeba328040c9473e5a2481fc587d985753d7bfa7c012fc8836505346cbfd3104b6eb2f51c30a9c3273ba0c2311de665b5fb60a791e77b850bc72c20cd8646cd975b28007d12757e10063f316f180ea92eca605aee7d231673415d896e3a4ea0cc8722c0d8d016562b20b00d3e5", 0xe4, 0x1}], 0x100040, &(0x7f0000000480)={[{'\x18\x00.{-%\xb8\''}, {'trusted.overlay.origin\x00'}, {'ext4\x00'}, {'trusted.overlay.origin\x00'}, {'trusted.overlay.origin\x00'}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@euid_lt={'euid<', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, 'trusted.overlay.origin\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\''}}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xaa67}}, './mnt\x00'}) openat(r3, &(0x7f0000000080)='./mnt\x00', 0x20000, 0x184) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:56:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 11:56:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:56:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8f550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:56:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) [ 3008.638034] loop7: detected capacity change from 0 to 264192 [ 3008.638275] loop6: detected capacity change from 0 to 140 11:56:41 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './mnt', [{}, {0x20, '/&\x00'}, {0x20, '/&\x00'}, {0x20, 'trusted.overlay.origin\x00'}, {0x20, '/&\x00'}, {0x20, '&@'}], 0xa, "9d895fca493681ec5212fa5d2678e86a51f8882f4f1b557faee722e9d59056ac9fb0695cbeeceffe5f4c9826aa2aadfcbbc62e97f97c044eedbb6bf108b680166e69aa581976b597c43bd779d9e19ad5ad9fde58f6d9817d8f95d37e6af7864790b2dcd7112067dbb075cb68d68f1b74857911a3fc20513e5bec5c873e"}, 0xae) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 3008.656355] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3008.668500] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 3008.671124] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3008.674337] EXT4-fs (loop6): get root inode failed [ 3008.675289] EXT4-fs (loop6): mount failed [ 3008.689715] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:56:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:56:41 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="419051b1e70fbdf29ff0062a6335a375b3ca1ab08359cc40a27237f43d6a5d9ac87b2245a7e364ab618c4338c2cd87c3f5c2d1daa0c8db47c1c25715d12c2d7f3ef1afa78dbed0ac4eff5924b359c25682d2c3fda1e0d3c1eb350fb595e5fe5cb7243b4969191aa9e962fa98"]) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/module/nmi_backtrace', 0x1, 0x0) readlinkat(r1, &(0x7f0000000580)='./mnt/file0\x00', &(0x7f00000005c0)=""/146, 0x92) syz_read_part_table(0xacd, 0x2, &(0x7f0000000280)=[{&(0x7f00000000c0)="e43527af7a72a6d4a7ca6b9659253b32fa951f334ceac7", 0x17, 0x6}, {&(0x7f0000000140)="a33f54b949e010fe7b86c31b416871391c3c6d13e1f8921826cf71fa20ef827c9dec7577e6c35a7626beb12f1d09dc92b227a8e5a978e14c7af184726242f86a5441497504871901441848f6dc2bf825b2758807e57dfc3b4e8881e608495ec1e49645811cb7721797fc45298c9aab4cd7dc90a36728e190d340de6fd16f3e05e32e235329936dc65c995bd425a9a16c6791a01e39607519cb24374133fffb70bdd773442d41a66e3992094577c379", 0xaf, 0xffff}]) r2 = geteuid() syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./mnt\x00', 0x23, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="4ff4b248c8e483ef2e59b93f6db3117f839a0845d6de4335269311173d052f6fd5ba9d4853dc1828843a4fa8d54dca6f7c9288bfd73e367f1bac475b438f4f6f88fa4ee96a75a0ad552e2709bd020496983dd056357479fcdcfa0cd7df5bf23b8385304e7cc40ee1e67c48fb11368b3b3f91ebe86f1dfefeba328040c9473e5a2481fc587d985753d7bfa7c012fc8836505346cbfd3104b6eb2f51c30a9c3273ba0c2311de665b5fb60a791e77b850bc72c20cd8646cd975b28007d12757e10063f316f180ea92eca605aee7d231673415d896e3a4ea0cc8722c0d8d016562b20b00d3e5", 0xe4, 0x1}], 0x100040, &(0x7f0000000480)={[{'\x18\x00.{-%\xb8\''}, {'trusted.overlay.origin\x00'}, {'ext4\x00'}, {'trusted.overlay.origin\x00'}, {'trusted.overlay.origin\x00'}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@euid_lt={'euid<', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, 'trusted.overlay.origin\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\''}}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xaa67}}, './mnt\x00'}) openat(r3, &(0x7f0000000080)='./mnt\x00', 0x20000, 0x184) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) [ 3008.735667] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:56:41 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x90010000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:56:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:56:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 3008.819992] loop6: detected capacity change from 0 to 140 [ 3008.824696] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 3008.826675] EXT4-fs (loop6): get root inode failed [ 3008.827096] EXT4-fs (loop6): mount failed [ 3008.856180] loop7: detected capacity change from 0 to 264192 [ 3008.876275] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3008.893253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3008.901828] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3008.933543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:56:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, &(0x7f0000000000), 0x4) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./mnt/../file0\x00', &(0x7f0000000040), 0x4820, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@afid={'afid', 0x3d, 0x80000000}}], [{@fsname={'fsname', 0x3d, 'selinuxfs\x00'}}, {@audit}, {@dont_appraise}, {@euid_lt={'euid<', r1}}, {@subj_role}]}}) 11:56:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:56:51 executing program 2: futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x1, 0x1) clock_nanosleep(0x1, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)) 11:56:51 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x90550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:56:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0), 0x0, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:56:51 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="419051b1e70fbdf29ff0062a6335a375b3ca1ab08359cc40a27237f43d6a5d9ac87b2245a7e364ab618c4338c2cd87c3f5c2d1daa0c8db47c1c25715d12c2d7f3ef1afa78dbed0ac4eff5924b359c25682d2c3fda1e0d3c1eb350fb595e5fe5cb7243b4969191aa9e962fa98"]) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/module/nmi_backtrace', 0x1, 0x0) readlinkat(r1, &(0x7f0000000580)='./mnt/file0\x00', &(0x7f00000005c0)=""/146, 0x92) syz_read_part_table(0xacd, 0x2, &(0x7f0000000280)=[{&(0x7f00000000c0)="e43527af7a72a6d4a7ca6b9659253b32fa951f334ceac7", 0x17, 0x6}, {&(0x7f0000000140)="a33f54b949e010fe7b86c31b416871391c3c6d13e1f8921826cf71fa20ef827c9dec7577e6c35a7626beb12f1d09dc92b227a8e5a978e14c7af184726242f86a5441497504871901441848f6dc2bf825b2758807e57dfc3b4e8881e608495ec1e49645811cb7721797fc45298c9aab4cd7dc90a36728e190d340de6fd16f3e05e32e235329936dc65c995bd425a9a16c6791a01e39607519cb24374133fffb70bdd773442d41a66e3992094577c379", 0xaf, 0xffff}]) r2 = geteuid() syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./mnt\x00', 0x23, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="4ff4b248c8e483ef2e59b93f6db3117f839a0845d6de4335269311173d052f6fd5ba9d4853dc1828843a4fa8d54dca6f7c9288bfd73e367f1bac475b438f4f6f88fa4ee96a75a0ad552e2709bd020496983dd056357479fcdcfa0cd7df5bf23b8385304e7cc40ee1e67c48fb11368b3b3f91ebe86f1dfefeba328040c9473e5a2481fc587d985753d7bfa7c012fc8836505346cbfd3104b6eb2f51c30a9c3273ba0c2311de665b5fb60a791e77b850bc72c20cd8646cd975b28007d12757e10063f316f180ea92eca605aee7d231673415d896e3a4ea0cc8722c0d8d016562b20b00d3e5", 0xe4, 0x1}], 0x100040, &(0x7f0000000480)={[{'\x18\x00.{-%\xb8\''}, {'trusted.overlay.origin\x00'}, {'ext4\x00'}, {'trusted.overlay.origin\x00'}, {'trusted.overlay.origin\x00'}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@euid_lt={'euid<', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, 'trusted.overlay.origin\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\''}}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xaa67}}, './mnt\x00'}) openat(r3, &(0x7f0000000080)='./mnt\x00', 0x20000, 0x184) setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), 0x0, 0x0, 0x0) 11:56:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 11:56:51 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 3018.882908] loop7: detected capacity change from 0 to 264192 [ 3018.894897] loop6: detected capacity change from 0 to 140 [ 3018.908380] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3018.919192] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 3018.923683] EXT4-fs (loop6): get root inode failed [ 3018.924497] EXT4-fs (loop6): mount failed [ 3018.930001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3018.940030] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:56:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c7", 0x2f, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:56:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:56:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 11:56:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x3f, 0x1}]}, 0xc, 0x2) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:56:51 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:56:51 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') pread64(r1, &(0x7f00000000c0)=""/194, 0xc2, 0x1f3) quotactl(0x0, 0xfffffffffffffffc, r0, 0x0) 11:56:51 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x91550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3019.144002] loop6: detected capacity change from 0 to 140 [ 3019.148197] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3019.181202] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 3019.200715] EXT4-fs (loop6): get root inode failed [ 3019.201521] EXT4-fs (loop6): mount failed 11:56:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:56:51 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:56:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 3019.286303] loop7: detected capacity change from 0 to 264192 [ 3019.296839] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3019.333056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3019.365990] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3019.403028] Zero length message leads to an empty skb [ 3019.480888] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:57:02 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') pread64(r1, &(0x7f00000000c0)=""/194, 0xc2, 0x1f3) quotactl(0x0, 0xfffffffffffffffc, r0, 0x0) 11:57:02 executing program 0: ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'bond_slave_0\x00', {}, 0x2}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:57:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c7", 0x2f, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:57:02 executing program 2: futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0)=0x1, 0x1) 11:57:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:57:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:57:02 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0xc0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:57:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x92550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3029.815186] loop6: detected capacity change from 0 to 140 [ 3029.833360] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated [ 3029.838218] EXT4-fs (loop6): get root inode failed [ 3029.838905] EXT4-fs (loop6): mount failed 11:57:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 3029.870639] loop7: detected capacity change from 0 to 264192 [ 3029.891579] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3029.913525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:57:02 executing program 5: r0 = creat(0x0, 0xc0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:57:02 executing program 2: futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x1) futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x1) 11:57:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c7", 0x2f, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:57:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 3029.941052] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:57:02 executing program 0: mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000000)='bpf\x00', 0x20080, 0x0) creat(&(0x7f0000000080)='./mnt\x00', 0x80) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0x1) 11:57:02 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') pread64(r1, &(0x7f00000000c0)=""/194, 0xc2, 0x1f3) quotactl(0x0, 0xfffffffffffffffc, r0, 0x0) [ 3030.039492] loop6: detected capacity change from 0 to 140 [ 3030.064678] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz-executor.6: iget: special inode unallocated 11:57:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 3030.070483] EXT4-fs (loop6): get root inode failed [ 3030.070940] EXT4-fs (loop6): mount failed 11:57:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x93550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3030.120293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:57:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008000000", 0x46, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:57:02 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) [ 3030.183864] loop7: detected capacity change from 0 to 264192 [ 3030.185961] loop6: detected capacity change from 0 to 140 [ 3030.198232] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 3030.203399] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3030.209256] EXT4-fs (loop6): get root inode failed [ 3030.209753] EXT4-fs (loop6): mount failed [ 3030.212019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3030.220141] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3030.320906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:57:14 executing program 5: r0 = creat(0x0, 0xc0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:57:14 executing program 2: futex(&(0x7f0000000000), 0x4, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x1) 11:57:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) (fail_nth: 1) 11:57:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:57:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008000000", 0x46, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:57:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:57:14 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x94550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:57:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./mnt\x00') mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="860002dd9cbbd0f8deb3cd2e511f884e8e9e9c0abc45345884c7bbd8c68eb142c42832bf961eb6acb9eab9a5a12183276a332aabc9ae29ca212820890bf53b328fbe452db572cb941ae7feae6fd17e2bade9b26f50da6d52343d43431f1c06646d07609b8b6ade56a88a5f0abec7c93b78b2fc935bcc534af475a7aafcfb71128282167742f9", 0x86}], 0x1, 0x55, 0x53, 0x1) symlinkat(&(0x7f0000000080)='./mnt\x00', r0, &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000040)='./mnt\x00', 0xa) 11:57:14 executing program 2: futex(0x0, 0x4, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x1) [ 3041.681568] loop7: detected capacity change from 0 to 264192 11:57:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 3041.705100] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3041.712467] loop6: detected capacity change from 0 to 140 [ 3041.721961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:57:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 3041.746202] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3041.762391] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) 11:57:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3041.797590] EXT4-fs (loop6): get root inode failed [ 3041.798375] EXT4-fs (loop6): mount failed 11:57:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:57:14 executing program 5: r0 = creat(0x0, 0xc0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:57:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./mnt\x00', 0x3) 11:57:14 executing program 2: futex(0x0, 0x4, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x1) [ 3041.959623] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:57:24 executing program 2: futex(0x0, 0x4, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x1) 11:57:24 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x95550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:57:24 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './mnt\x00'}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./mnt\x00', 0xb84, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="d8039fdbe672835a2242633458d100ae9d25e4610135ce0f0864f935e82afdd4deb75c422f61b3ad08d024140713f2744a5020e751ef3b9f9192b5ff1f97c424bd32b61872760c", 0x47, 0x5}, {&(0x7f00000002c0)="002e974c29696b8ae9690b76f98f6d6570d396018f8bfd72a4aaca4883e5ecd08e9c99a90b6cce7c6cc14f1d83e50359654881f4aceda47ced2a2ab0c2d84372c5c63ef337701d3063d07734b9bcb72b469830b75855bcb7698b0819b9f598d3c4fe834247f58b95947364a590cbd1d092e99e74006ec4885ad5feb2903580e43b8c53cc399102224c0214ffeb76668efdec", 0x92, 0x200}, {&(0x7f0000000380)="080e110183bd9b6fb0315f95c0ec406b3eab2b2c0ec7074ef6fdfe462ecd2b1d403d1969703f7f4d66ee195fd84347494f21680fdcce6d95d136359f2adecee6986af0ac20b8ee87388ffb68c9c928cc479af5577bb58a10d9a9bc82eb37ddf62d00d2ddba8356ce710a71ede026eb14cdd4e0a7964ea5ad782103b0fa3c2733a832ca874c183d01e72117d98c1140b5878db83d709849755f38bdae92a59f81e63b3a92bd441fee23152f140faf18d6f45eeba2649ae64f49e973a3adefa9fd2ca68451d11344469f88d6806aa11bfb59f42748cd110741a25e4e59f99cf40fef0f6f22795af2f35c3bcaaa3d3a", 0xee, 0x100000001}, {&(0x7f00000000c0), 0x0, 0x1}], 0x1008800, &(0x7f00000004c0)={[{@dots}, {@fat=@showexec}, {@nodots}, {@fat=@sys_immutable}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r1}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@dont_measure}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:57:24 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f000000000000030002000000000008000000", 0x46, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:57:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:57:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:57:24 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:57:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 3051.557604] loop7: detected capacity change from 0 to 264192 [ 3051.567677] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3051.572940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3051.579339] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:57:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3051.622837] loop6: detected capacity change from 0 to 140 [ 3051.662333] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 3051.665687] EXT4-fs (loop6): get root inode failed [ 3051.666247] EXT4-fs (loop6): mount failed [ 3051.790887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:57:33 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:57:33 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:57:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:57:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:57:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000", 0x52, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:57:33 executing program 2: futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x1) 11:57:33 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r1 = open_tree(r0, &(0x7f0000000000)='./mnt\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './mnt', [{0x20, ':\'-@&!'}, {0x20, 'selinuxfs\x00'}, {0x20, '(\xf0'}, {0x20, '*\\.]'}], 0xa, "458b2ddd1af48521f6f4"}, 0x2d) 11:57:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x96550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:57:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:57:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) [ 3061.242381] loop6: detected capacity change from 0 to 140 [ 3061.250064] loop7: detected capacity change from 0 to 264192 [ 3061.273469] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 3061.294075] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3061.298088] EXT4-fs (loop6): get root inode failed [ 3061.299191] EXT4-fs (loop6): mount failed 11:57:33 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 3061.368361] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3061.381088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:57:34 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:57:34 executing program 2: futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x1) [ 3061.413335] loop7: detected capacity change from 0 to 264192 [ 3061.435165] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3061.440775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3061.451077] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:57:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:57:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:57:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000", 0x52, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3061.554126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:57:34 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x97550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:57:34 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 3061.604358] loop6: detected capacity change from 0 to 140 11:57:34 executing program 2: futex(&(0x7f0000000000), 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x1) 11:57:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3061.672536] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) 11:57:34 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100fc000000000018000000734f07c69dc59df2868c88cec49eca710f1d4c33973d78f89b969d79d17aa87b35657813331c839a569f4f7f916a20363cd3d92ada0e", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000022e2f6d6e7400"]) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) fsetxattr(r1, &(0x7f0000000ac0)=@known='trusted.syz\x00', &(0x7f0000001f40)='selinuxfs\x00', 0xa, 0x2) r3 = fork() move_pages(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil], 0x0, 0x0, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(r3) r6 = fork() move_pages(r6, 0x1, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil], 0x0, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r8, 0x1, 0xd, &(0x7f0000000000), 0x4) kcmp(r5, r6, 0x0, r7, r8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000380)=""/88, 0x58}], 0x2, &(0x7f0000002240)=ANY=[@ANYBLOB="28000000000000000100000001000000d4e5e679ad4a2f909b22b60a4639b00b1ab09b3525a0b26bb7c5", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000540)=""/13, 0xd}, {&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f0000000800)=""/243, 0xf3}], 0x5, &(0x7f0000002600)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000800100000001000000028000009e4f2adfe3c03ebf6498f8fda94301000000010000009fcbf8f2cf632e799eafc162fc14b3dab8f12b9dd029bc509a8d0100ffff903e", @ANYRES64=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x170}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/65, 0x41}, {&(0x7f0000000c00)=""/137, 0x89}, {&(0x7f0000000cc0)=""/156, 0x9c}, {&(0x7f0000000d80)=""/151, 0x97}], 0x4}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f00)=""/126, 0x7e}, {&(0x7f0000000f80)=""/171, 0xab}, {&(0x7f0000001040)=""/232, 0xe8}], 0x3}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001180)=""/90, 0x5a}, {&(0x7f0000001200)=""/242, 0xf2}, {&(0x7f0000001300)=""/153, 0x99}], 0x3, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001480)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/171, 0xab}, {&(0x7f00000015c0)=""/199, 0xc7}, {&(0x7f00000016c0)=""/120, 0x78}, {&(0x7f0000001740)=""/75, 0x4b}, {&(0x7f00000017c0)=""/246, 0xf6}, {&(0x7f00000018c0)=""/112, 0x70}, {&(0x7f0000001940)=""/68, 0x44}, {&(0x7f00000019c0)=""/129, 0x81}], 0x8, &(0x7f0000001b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001b80), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001c00)=""/197, 0xc5}, {&(0x7f0000001d00)=""/65, 0x41}, {&(0x7f0000001d80)=""/251, 0xfb}, {&(0x7f0000001e80)=""/104, 0x68}], 0x4, &(0x7f00000023c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x7, 0x40012120, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)='Q', 0x1}], 0x1, &(0x7f0000002180)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r9}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}}], 0x80, 0x80}, 0x4008000) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) utimensat(r10, &(0x7f0000000980)='./mnt\x00', &(0x7f0000000a80)={{0x0, 0x2710}, {r11, r12/1000+10000}}, 0x0) [ 3061.692648] EXT4-fs (loop6): get root inode failed [ 3061.693395] EXT4-fs (loop6): mount failed 11:57:34 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 3061.752207] loop7: detected capacity change from 0 to 264192 [ 3061.809010] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3061.828796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3061.837747] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3061.976976] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:57:44 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x1) 11:57:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:57:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) name_to_handle_at(r0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="140900678494815bdbf4b833bc530000000000010000867500002c000000d8e86042ff3f94db0cba0b655e31f3aa7d02fe33d0cbe59d525cbe3e07701c3d"], &(0x7f0000000140), 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) mknodat$null(r1, &(0x7f0000000180)='./mnt\x00', 0x8000, 0x103) 11:57:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000", 0x52, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:57:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, 0x0, 0x0) 11:57:44 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:57:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:57:44 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x98550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3072.157340] loop6: detected capacity change from 0 to 140 [ 3072.186204] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 3072.194099] EXT4-fs (loop6): get root inode failed [ 3072.194982] EXT4-fs (loop6): mount failed 11:57:44 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 3072.242033] loop7: detected capacity change from 0 to 264192 11:57:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x18, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:57:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400"/88, 0x58, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3072.334919] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended 11:57:45 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x1) 11:57:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, 0x0, 0x0) 11:57:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 11:57:45 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x1) [ 3072.405827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3072.432548] loop6: detected capacity change from 0 to 140 [ 3072.440249] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3072.496545] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 3072.514284] loop7: detected capacity change from 0 to 264192 [ 3072.529523] EXT4-fs (loop6): get root inode failed [ 3072.530290] EXT4-fs (loop6): mount failed [ 3072.550135] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3072.600346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3072.620495] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3072.704044] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:57:56 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:57:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x1c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:57:56 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400"/88, 0x58, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:57:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, 0x0, 0x0) 11:57:56 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x1) 11:57:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 11:57:56 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x99550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:57:56 executing program 0: mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='selinuxfs\x00', 0x0, 0x0) [ 3083.456334] loop6: detected capacity change from 0 to 140 [ 3083.470839] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 3083.477746] EXT4-fs (loop6): get root inode failed [ 3083.478330] EXT4-fs (loop6): mount failed [ 3083.489117] loop7: detected capacity change from 0 to 264192 11:57:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x66, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:57:56 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x1) 11:57:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 11:57:56 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x0, {0x4, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 3083.542826] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended 11:57:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='ecryptfs\x00', 0x0, 0x0) 11:57:56 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400"/88, 0x58, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:57:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 3083.563037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3083.584639] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3083.594999] loop6: detected capacity change from 0 to 140 [ 3083.621779] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 3083.636652] EXT4-fs (loop6): get root inode failed [ 3083.637218] EXT4-fs (loop6): mount failed 11:57:56 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x9a550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:57:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 3083.701185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3083.787312] loop7: detected capacity change from 0 to 264192 [ 3083.794985] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3083.801332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3083.808212] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3083.851518] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:58:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x9b550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:58:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) 11:58:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000", 0x5b, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:58:05 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:58:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:58:05 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x0, {0x0, 0x0, 0x5}}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:58:05 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x8000, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={[{}, {@name={'name', 0x3d, ',{]('}}, {}], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x38, 0x61, 0x61, 0x37, 0x34, 0x39, 0x39], 0x2d, [0x37, 0x35, 0x61, 0x61], 0x2d, [0x61, 0x36, 0x62, 0x31], 0x2d, [0x62, 0x61, 0x30, 0x64], 0x2d, [0x36, 0x31, 0x34, 0x64, 0x36, 0x38, 0x62, 0x38]}}}, {@dont_measure}]}) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./mnt\x00', 0x2) 11:58:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3093.222968] loop6: detected capacity change from 0 to 140 [ 3093.241561] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 3093.246553] EXT4-fs (loop6): get root inode failed [ 3093.247043] EXT4-fs (loop6): mount failed [ 3093.256415] cgroup: Bad value for 'name' [ 3093.279131] cgroup: Bad value for 'name' 11:58:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) [ 3093.294358] loop7: detected capacity change from 0 to 264192 11:58:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000", 0x5b, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3093.353051] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3093.363859] loop6: detected capacity change from 0 to 140 [ 3093.376369] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) 11:58:06 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x0) 11:58:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 3093.391317] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3093.391843] EXT4-fs (loop6): get root inode failed [ 3093.393517] EXT4-fs (loop6): mount failed [ 3093.411151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3093.447110] loop7: detected capacity change from 0 to 264192 [ 3093.483071] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3093.499027] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3093.507770] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3093.559687] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:58:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) 11:58:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x9c550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:58:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:58:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:58:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:58:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000", 0x5b, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:58:16 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x0) 11:58:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt/file0\x00', &(0x7f0000000080), 0x4000, 0x0) syz_read_part_table(0x1, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="e4cf525498daa4bd23a240", 0xb, 0x5}, {&(0x7f0000000140)="b90d88df5560e1c3826627f3800a1df946bc4e15c722ead893694fa770ffe0634e37a575823c3dc980fc423666c9fada38cc767061936940", 0x38, 0x23}]) [ 3103.874386] loop7: detected capacity change from 0 to 264192 [ 3103.901751] loop6: detected capacity change from 0 to 140 [ 3103.902835] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3103.916409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3103.936716] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3103.943155] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) 11:58:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:58:16 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x0) [ 3103.962801] EXT4-fs (loop6): get root inode failed [ 3103.963263] EXT4-fs (loop6): mount failed 11:58:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x3fffffffffffffb, 0x0, 0x0, 0x1349039, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) listxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)=""/163, 0xa3) 11:58:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:58:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) name_to_handle_at(r0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="140900678494815bdbf4b833bc530000000000010000867500002c000000d8e86042ff3f94db0cba0b655e31f3aa7d02fe33d0cbe59d525cbe3e07701c3d"], &(0x7f0000000140), 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) mknodat$null(r1, &(0x7f0000000180)='./mnt\x00', 0x8000, 0x103) 11:58:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfe, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3104.058219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:58:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x9d550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:58:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000", 0x5c, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3104.119919] loop6: detected capacity change from 0 to 140 [ 3104.132062] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 3104.137555] EXT4-fs (loop6): get root inode failed [ 3104.137968] EXT4-fs (loop6): mount failed 11:58:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x9e550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:58:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000", 0x5c, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:58:16 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) (fail_nth: 1) 11:58:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) name_to_handle_at(r0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="140900678494815bdbf4b833bc530000000000010000867500002c000000d8e86042ff3f94db0cba0b655e31f3aa7d02fe33d0cbe59d525cbe3e07701c3d"], &(0x7f0000000140), 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) mknodat$null(r1, &(0x7f0000000180)='./mnt\x00', 0x8000, 0x103) [ 3104.229365] loop6: detected capacity change from 0 to 140 11:58:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x9f550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:58:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 3104.254129] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 3104.263862] EXT4-fs (loop6): get root inode failed [ 3104.264272] EXT4-fs (loop6): mount failed [ 3104.285206] FAULT_INJECTION: forcing a failure. [ 3104.285206] name fail_futex, interval 1, probability 0, space 0, times 1 [ 3104.287050] CPU: 0 UID: 0 PID: 21329 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3104.287081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3104.287095] Call Trace: [ 3104.287104] [ 3104.287113] dump_stack_lvl+0xfa/0x120 [ 3104.287156] should_fail_ex+0x4d7/0x5e0 [ 3104.287193] get_futex_key+0x1c5/0x1480 [ 3104.287234] ? __pfx_get_futex_key+0x10/0x10 [ 3104.287267] ? __pfx__kstrtoull+0x10/0x10 [ 3104.287302] ? __might_fault+0xe0/0x190 [ 3104.287326] ? find_held_lock+0x2b/0x80 [ 3104.287361] futex_requeue+0x251/0x2060 [ 3104.287405] ? lock_acquire+0x15e/0x2f0 [ 3104.287437] ? __pfx_futex_requeue+0x10/0x10 [ 3104.287462] ? get_pid_task+0xfd/0x250 [ 3104.287494] ? lock_release+0xc8/0x290 [ 3104.287521] ? get_pid_task+0x107/0x250 [ 3104.287553] ? proc_fail_nth_write+0x98/0x250 [ 3104.287587] ? ksys_write+0x121/0x240 [ 3104.287623] ? find_held_lock+0x2b/0x80 [ 3104.287652] ? ksys_write+0x187/0x240 [ 3104.287683] ? lock_release+0xc8/0x290 [ 3104.287708] do_futex+0x29b/0x370 [ 3104.287733] ? __pfx_do_futex+0x10/0x10 [ 3104.287764] __x64_sys_futex+0x1c9/0x4d0 [ 3104.287788] ? fput+0x92/0xd0 [ 3104.287809] ? __pfx___x64_sys_futex+0x10/0x10 [ 3104.287831] ? ksys_write+0x1a3/0x240 [ 3104.287862] ? __pfx_ksys_write+0x10/0x10 [ 3104.287897] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3104.287935] do_syscall_64+0xbf/0x360 [ 3104.287959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3104.287982] RIP: 0033:0x7f8083deeb19 [ 3104.287999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3104.288021] RSP: 002b:00007f8081364188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3104.288043] RAX: ffffffffffffffda RBX: 00007f8083f01f60 RCX: 00007f8083deeb19 [ 3104.288059] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000000 [ 3104.288072] RBP: 00007f80813641d0 R08: 00000000200000c0 R09: 0000000000000001 [ 3104.288087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3104.288100] R13: 00007ffe4a265e9f R14: 00007f8081364300 R15: 0000000000022000 [ 3104.288129] [ 3104.324997] loop7: detected capacity change from 0 to 264192 [ 3104.347614] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3104.360132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3104.369627] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3104.408369] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:58:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./mnt\x00', 0x2, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="699813a2b3d084eb4c11ddada7ba2c522b0231fa4980a727ffb78b26d4c40dc8f34a4ff50ccf6334aa38c924c56666875c17d704ab1b7f08719fedd6c6391b8c0d513d218c3f1592bfbcc5dc6bc8439e888cb4086d9d272325a31790332d3ba81fe7fa6d025862593f04929509e8ee357250b9587197ac782beff5e393076fa709c0428c1d8de95124af78f6108c1f1b569139cc732c7ffc9060f8d0b3697f2fc0d301cfa656d05725837afee58b3889e10855b677b8d802b7bcb60d17406661af08f420563567bc331fbe1716bcacf8cbdc089452b4717c9c012b", 0xdb, 0xfffffffffffff801}], 0x100800, &(0x7f0000000240)={[{@numtail}, {@shortname_mixed}, {@uni_xlateno}, {@nonumtail}, {@shortname_lower}], [{@fsname={'fsname', 0x3d, '.)'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) 11:58:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:58:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xa0550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:58:26 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) (fail_nth: 2) 11:58:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af3010004000000000000000000000001000000", 0x5c, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:58:26 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:58:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) name_to_handle_at(r0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="140900678494815bdbf4b833bc530000000000010000867500002c000000d8e86042ff3f94db0cba0b655e31f3aa7d02fe33d0cbe59d525cbe3e07701c3d"], &(0x7f0000000140), 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) mknodat$null(r1, &(0x7f0000000180)='./mnt\x00', 0x8000, 0x103) 11:58:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x213, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3113.826375] loop7: detected capacity change from 0 to 264192 [ 3113.840801] FAULT_INJECTION: forcing a failure. [ 3113.840801] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3113.841505] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3113.843029] CPU: 0 UID: 0 PID: 21355 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3113.843067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3113.843083] Call Trace: [ 3113.843092] [ 3113.843102] dump_stack_lvl+0xfa/0x120 [ 3113.843152] should_fail_ex+0x4d7/0x5e0 [ 3113.843196] get_futex_key+0x327/0x1480 [ 3113.843243] ? __pfx_get_futex_key+0x10/0x10 [ 3113.843283] ? __pfx__kstrtoull+0x10/0x10 [ 3113.843324] ? __might_fault+0xe0/0x190 [ 3113.843353] ? find_held_lock+0x2b/0x80 [ 3113.843394] futex_requeue+0x251/0x2060 [ 3113.843449] ? lock_acquire+0x15e/0x2f0 [ 3113.843479] ? __pfx_futex_requeue+0x10/0x10 [ 3113.843508] ? get_pid_task+0xfd/0x250 [ 3113.843548] ? lock_release+0xc8/0x290 [ 3113.843580] ? get_pid_task+0x107/0x250 [ 3113.843619] ? proc_fail_nth_write+0x98/0x250 [ 3113.843660] ? ksys_write+0x121/0x240 [ 3113.843702] ? find_held_lock+0x2b/0x80 [ 3113.843737] ? ksys_write+0x187/0x240 [ 3113.843775] ? lock_release+0xc8/0x290 [ 3113.843805] do_futex+0x29b/0x370 [ 3113.843835] ? __pfx_do_futex+0x10/0x10 [ 3113.843872] __x64_sys_futex+0x1c9/0x4d0 [ 3113.843900] ? fput+0x92/0xd0 [ 3113.843926] ? __pfx___x64_sys_futex+0x10/0x10 [ 3113.843952] ? ksys_write+0x1a3/0x240 [ 3113.843990] ? __pfx_ksys_write+0x10/0x10 [ 3113.844032] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3113.844078] do_syscall_64+0xbf/0x360 [ 3113.844106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3113.844133] RIP: 0033:0x7f8083deeb19 [ 3113.844155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3113.844180] RSP: 002b:00007f8081364188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3113.844206] RAX: ffffffffffffffda RBX: 00007f8083f01f60 RCX: 00007f8083deeb19 [ 3113.844224] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000000 [ 3113.844241] RBP: 00007f80813641d0 R08: 00000000200000c0 R09: 0000000000000001 [ 3113.844258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3113.844274] R13: 00007ffe4a265e9f R14: 00007f8081364300 R15: 0000000000022000 [ 3113.844309] [ 3113.862948] loop6: detected capacity change from 0 to 140 [ 3113.894464] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 3113.918489] EXT4-fs (loop6): get root inode failed [ 3113.918920] EXT4-fs (loop6): mount failed [ 3113.946193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3113.949075] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:58:36 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) (fail_nth: 3) 11:58:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:58:36 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./mnt\x00', 0x10) 11:58:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:58:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) name_to_handle_at(r0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="140900678494815bdbf4b833bc530000000000010000867500002c000000d8e86042ff3f94db0cba0b655e31f3aa7d02fe33d0cbe59d525cbe3e07701c3d"], &(0x7f0000000140), 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) 11:58:36 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:58:36 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xa1550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:58:36 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 3123.549874] loop7: detected capacity change from 0 to 264192 [ 3123.561149] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3123.569084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3123.577019] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:58:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) [ 3123.607117] loop6: detected capacity change from 0 to 7 [ 3123.642794] FAULT_INJECTION: forcing a failure. [ 3123.642794] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3123.644557] CPU: 0 UID: 0 PID: 21389 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3123.644607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3123.644628] Call Trace: [ 3123.644641] [ 3123.644654] dump_stack_lvl+0xfa/0x120 [ 3123.644721] should_fail_ex+0x4d7/0x5e0 [ 3123.644783] get_futex_key+0xe96/0x1480 [ 3123.644852] ? __pfx_get_futex_key+0x10/0x10 [ 3123.644908] ? __pfx__kstrtoull+0x10/0x10 [ 3123.644967] ? __might_fault+0xe0/0x190 [ 3123.645006] ? find_held_lock+0x2b/0x80 [ 3123.645065] futex_requeue+0x251/0x2060 [ 3123.645132] ? lock_acquire+0x15e/0x2f0 [ 3123.645174] ? __pfx_futex_requeue+0x10/0x10 [ 3123.645216] ? get_pid_task+0xfd/0x250 [ 3123.645264] ? lock_release+0xc8/0x290 [ 3123.645290] ? get_pid_task+0x107/0x250 [ 3123.645322] ? proc_fail_nth_write+0x98/0x250 [ 3123.645357] ? ksys_write+0x121/0x240 [ 3123.645393] ? find_held_lock+0x2b/0x80 [ 3123.645444] ? ksys_write+0x187/0x240 [ 3123.645492] ? lock_release+0xc8/0x290 [ 3123.645530] do_futex+0x29b/0x370 [ 3123.645556] ? __pfx_do_futex+0x10/0x10 [ 3123.645586] __x64_sys_futex+0x1c9/0x4d0 [ 3123.645610] ? fput+0x92/0xd0 [ 3123.645632] ? __pfx___x64_sys_futex+0x10/0x10 [ 3123.645654] ? ksys_write+0x1a3/0x240 [ 3123.645685] ? __pfx_ksys_write+0x10/0x10 [ 3123.645720] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3123.645759] do_syscall_64+0xbf/0x360 [ 3123.645782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3123.645805] RIP: 0033:0x7f8083deeb19 [ 3123.645822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3123.645844] RSP: 002b:00007f8081364188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3123.645866] RAX: ffffffffffffffda RBX: 00007f8083f01f60 RCX: 00007f8083deeb19 [ 3123.645881] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000000 [ 3123.645895] RBP: 00007f80813641d0 R08: 00000000200000c0 R09: 0000000000000001 [ 3123.645909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3123.645922] R13: 00007ffe4a265e9f R14: 00007f8081364300 R15: 0000000000022000 [ 3123.645951] [ 3123.699036] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks) [ 3123.701947] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:58:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) name_to_handle_at(r0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="140900678494815bdbf4b833bc530000000000010000867500002c000000d8e86042ff3f94db0cba0b655e31f3aa7d02fe33d0cbe59d525cbe3e07701c3d"], &(0x7f0000000140), 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) 11:58:36 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xc0ed0000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3123.760782] loop7: detected capacity change from 0 to 264192 [ 3123.777247] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3123.785370] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:58:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x480, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:58:36 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) [ 3123.802325] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:58:36 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:58:36 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) (fail_nth: 4) 11:58:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:58:36 executing program 0: mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x20000, &(0x7f0000000180)=',[$,$*{@+,*\x00') renameat2(r0, &(0x7f0000000000)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000040)='./mnt\x00', 0x1) 11:58:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) name_to_handle_at(r0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="140900678494815bdbf4b833bc530000000000010000867500002c000000d8e86042ff3f94db0cba0b655e31f3aa7d02fe33d0cbe59d525cbe3e07701c3d"], &(0x7f0000000140), 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) [ 3123.879310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:58:36 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xe2ffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3123.896068] FAULT_INJECTION: forcing a failure. [ 3123.896068] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3123.897151] CPU: 1 UID: 0 PID: 21410 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3123.897168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3123.897176] Call Trace: [ 3123.897181] [ 3123.897186] dump_stack_lvl+0xfa/0x120 [ 3123.897212] should_fail_ex+0x4d7/0x5e0 [ 3123.897234] get_futex_key+0x1c5/0x1480 [ 3123.897257] ? __pfx_get_futex_key+0x10/0x10 [ 3123.897275] ? __pfx__kstrtoull+0x10/0x10 [ 3123.897296] ? __might_fault+0xe0/0x190 [ 3123.897310] ? find_held_lock+0x2b/0x80 [ 3123.897331] futex_requeue+0x29b/0x2060 [ 3123.897351] ? lock_acquire+0x15e/0x2f0 [ 3123.897366] ? __pfx_futex_requeue+0x10/0x10 [ 3123.897379] ? get_pid_task+0xfd/0x250 [ 3123.897397] ? lock_release+0xc8/0x290 [ 3123.897412] ? get_pid_task+0x107/0x250 [ 3123.897434] ? proc_fail_nth_write+0x98/0x250 [ 3123.897454] ? ksys_write+0x121/0x240 [ 3123.897475] ? find_held_lock+0x2b/0x80 [ 3123.897491] ? ksys_write+0x187/0x240 [ 3123.897507] ? lock_release+0xc8/0x290 [ 3123.897521] do_futex+0x29b/0x370 [ 3123.897535] ? __pfx_do_futex+0x10/0x10 [ 3123.897551] __x64_sys_futex+0x1c9/0x4d0 [ 3123.897565] ? fput+0x92/0xd0 [ 3123.897577] ? __pfx___x64_sys_futex+0x10/0x10 [ 3123.897589] ? ksys_write+0x1a3/0x240 [ 3123.897606] ? __pfx_ksys_write+0x10/0x10 [ 3123.897625] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3123.897648] do_syscall_64+0xbf/0x360 [ 3123.897661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3123.897674] RIP: 0033:0x7f8083deeb19 [ 3123.897684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3123.897696] RSP: 002b:00007f8081364188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3123.897708] RAX: ffffffffffffffda RBX: 00007f8083f01f60 RCX: 00007f8083deeb19 [ 3123.897717] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000000 [ 3123.897725] RBP: 00007f80813641d0 R08: 00000000200000c0 R09: 0000000000000001 [ 3123.897732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3123.897740] R13: 00007ffe4a265e9f R14: 00007f8081364300 R15: 0000000000022000 [ 3123.897756] [ 3123.930761] loop6: detected capacity change from 0 to 7 11:58:36 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:58:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:58:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 3123.956468] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks) [ 3124.008999] loop7: detected capacity change from 0 to 264192 [ 3124.038649] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3124.061609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3124.083345] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3124.116868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:58:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x20, 0x20}, {0x4, 0xfffffff9}]}, 0x14, 0x2) 11:58:44 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xe4ffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:58:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x0, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:58:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:58:44 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:58:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) name_to_handle_at(r0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="140900678494815bdbf4b833bc530000000000010000867500002c000000d8e86042ff3f94db0cba0b655e31f3aa7d02fe33d0cbe59d525cbe3e07701c3d"], &(0x7f0000000140), 0x0) 11:58:44 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) (fail_nth: 5) 11:58:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b", 0x2d, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:58:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r2, 0xf7feb2c2e74e15a8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xab}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x8000c2, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:58:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3132.237090] FAULT_INJECTION: forcing a failure. [ 3132.237090] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3132.238108] CPU: 0 UID: 0 PID: 21448 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3132.238125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3132.238133] Call Trace: [ 3132.238137] [ 3132.238142] dump_stack_lvl+0xfa/0x120 [ 3132.238168] should_fail_ex+0x4d7/0x5e0 [ 3132.238189] get_futex_key+0x327/0x1480 [ 3132.238211] ? __pfx_get_futex_key+0x10/0x10 [ 3132.238228] ? __pfx__kstrtoull+0x10/0x10 [ 3132.238248] ? __might_fault+0xe0/0x190 [ 3132.238261] ? find_held_lock+0x2b/0x80 [ 3132.238281] futex_requeue+0x29b/0x2060 [ 3132.238302] ? lock_acquire+0x15e/0x2f0 [ 3132.238315] ? __pfx_futex_requeue+0x10/0x10 [ 3132.238328] ? get_pid_task+0xfd/0x250 [ 3132.238346] ? lock_release+0xc8/0x290 [ 3132.238360] ? get_pid_task+0x107/0x250 [ 3132.238378] ? proc_fail_nth_write+0x98/0x250 [ 3132.238407] ? ksys_write+0x121/0x240 [ 3132.238430] ? find_held_lock+0x2b/0x80 [ 3132.238446] ? ksys_write+0x187/0x240 [ 3132.238462] ? lock_release+0xc8/0x290 [ 3132.238476] do_futex+0x29b/0x370 [ 3132.238489] ? __pfx_do_futex+0x10/0x10 [ 3132.238506] __x64_sys_futex+0x1c9/0x4d0 [ 3132.238519] ? fput+0x92/0xd0 [ 3132.238530] ? __pfx___x64_sys_futex+0x10/0x10 [ 3132.238542] ? ksys_write+0x1a3/0x240 [ 3132.238559] ? __pfx_ksys_write+0x10/0x10 [ 3132.238577] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3132.238599] do_syscall_64+0xbf/0x360 [ 3132.238612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3132.238625] RIP: 0033:0x7f8083deeb19 [ 3132.238634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3132.238646] RSP: 002b:00007f8081364188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3132.238658] RAX: ffffffffffffffda RBX: 00007f8083f01f60 RCX: 00007f8083deeb19 [ 3132.238667] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000000 [ 3132.238674] RBP: 00007f80813641d0 R08: 00000000200000c0 R09: 0000000000000001 [ 3132.238682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3132.238689] R13: 00007ffe4a265e9f R14: 00007f8081364300 R15: 0000000000022000 [ 3132.238705] [ 3132.244578] loop7: detected capacity change from 0 to 264192 [ 3132.265978] loop6: detected capacity change from 0 to 7 [ 3132.286700] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (3 blocks) 11:58:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x0, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:58:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x1302, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:58:44 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) (fail_nth: 6) 11:58:44 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:58:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) 11:58:45 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) mount$9p_unix(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000280)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x4}}, {@version_9p2000}, {@noextend}, {@access_uid={'access', 0x3d, r1}}, {@noextend}], [{@dont_hash}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fowner_lt={'fowner<', 0xee00}}, {@dont_hash}]}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x4042, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[], [{@appraise_type}, {@uid_gt={'uid>', 0xee01}}]}}) r2 = dup3(r0, r0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/53, 0x35) [ 3132.361113] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3132.412740] FAULT_INJECTION: forcing a failure. [ 3132.412740] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3132.413692] CPU: 0 UID: 0 PID: 21465 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3132.413709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3132.413716] Call Trace: [ 3132.413721] [ 3132.413726] dump_stack_lvl+0xfa/0x120 [ 3132.413752] should_fail_ex+0x4d7/0x5e0 [ 3132.413775] get_futex_key+0xe96/0x1480 [ 3132.413798] ? __pfx_get_futex_key+0x10/0x10 [ 3132.413815] ? __pfx__kstrtoull+0x10/0x10 [ 3132.413834] ? __might_fault+0xe0/0x190 [ 3132.413848] ? find_held_lock+0x2b/0x80 [ 3132.413867] futex_requeue+0x29b/0x2060 [ 3132.413889] ? lock_acquire+0x15e/0x2f0 [ 3132.413902] ? __pfx_futex_requeue+0x10/0x10 [ 3132.413915] ? get_pid_task+0xfd/0x250 [ 3132.413933] ? lock_release+0xc8/0x290 [ 3132.413947] ? get_pid_task+0x107/0x250 [ 3132.413964] ? proc_fail_nth_write+0x98/0x250 [ 3132.413984] ? ksys_write+0x121/0x240 [ 3132.414003] ? find_held_lock+0x2b/0x80 [ 3132.414019] ? ksys_write+0x187/0x240 [ 3132.414036] ? lock_release+0xc8/0x290 [ 3132.414050] do_futex+0x29b/0x370 [ 3132.414063] ? __pfx_do_futex+0x10/0x10 [ 3132.414080] __x64_sys_futex+0x1c9/0x4d0 [ 3132.414092] ? fput+0x92/0xd0 [ 3132.414104] ? __pfx___x64_sys_futex+0x10/0x10 [ 3132.414116] ? ksys_write+0x1a3/0x240 [ 3132.414133] ? __pfx_ksys_write+0x10/0x10 [ 3132.414151] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3132.414173] do_syscall_64+0xbf/0x360 [ 3132.414186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3132.414199] RIP: 0033:0x7f8083deeb19 [ 3132.414209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3132.414221] RSP: 002b:00007f8081364188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3132.414233] RAX: ffffffffffffffda RBX: 00007f8083f01f60 RCX: 00007f8083deeb19 [ 3132.414241] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000000 [ 3132.414248] RBP: 00007f80813641d0 R08: 00000000200000c0 R09: 0000000000000001 [ 3132.414256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3132.414263] R13: 00007ffe4a265e9f R14: 00007f8081364300 R15: 0000000000022000 [ 3132.414279] [ 3132.415873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3132.472659] 9pnet_fd: p9_fd_create_unix (21464): problem connecting socket: ./mnt: -111 [ 3132.512168] 9pnet: Could not find request transport: rdma [ 3132.518134] 9pnet_fd: p9_fd_create_unix (21472): problem connecting socket: ./mnt: -111 [ 3132.519167] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3132.531861] loop7: detected capacity change from 0 to 264192 [ 3132.540010] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3132.546174] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3132.551369] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3132.580593] 9pnet: Could not find request transport: rdma [ 3132.668401] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:58:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x3818c04, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) 11:58:54 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf0340000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:58:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:58:54 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) (fail_nth: 7) 11:58:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x0, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:58:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x1800, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:58:54 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x800000, 0xa) 11:58:54 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) [ 3142.228148] loop7: detected capacity change from 0 to 264192 [ 3142.253654] loop6: detected capacity change from 0 to 140 [ 3142.259609] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3142.259852] FAULT_INJECTION: forcing a failure. [ 3142.259852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3142.262688] CPU: 0 UID: 0 PID: 21498 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3142.262720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3142.262733] Call Trace: [ 3142.262740] [ 3142.262749] dump_stack_lvl+0xfa/0x120 [ 3142.262793] should_fail_ex+0x4d7/0x5e0 [ 3142.262830] _copy_to_user+0x32/0xd0 [ 3142.262858] simple_read_from_buffer+0xe0/0x180 [ 3142.262891] proc_fail_nth_read+0x189/0x270 [ 3142.262924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3142.262957] ? security_file_permission+0x22/0x90 [ 3142.262983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3142.263015] vfs_read+0x1eb/0xbe0 [ 3142.263053] ? __pfx_vfs_read+0x10/0x10 [ 3142.263086] ? lock_release+0xc8/0x290 [ 3142.263115] ? __fget_files+0x20d/0x3b0 [ 3142.263156] ksys_read+0x121/0x240 [ 3142.263188] ? __pfx_ksys_read+0x10/0x10 [ 3142.263222] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3142.263261] do_syscall_64+0xbf/0x360 [ 3142.263285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3142.263308] RIP: 0033:0x7f8083da169c [ 3142.263326] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3142.263348] RSP: 002b:00007f8081364170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3142.263370] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f8083da169c [ 3142.263385] RDX: 000000000000000f RSI: 00007f80813641e0 RDI: 0000000000000003 [ 3142.263399] RBP: 00007f80813641d0 R08: 0000000000000000 R09: 0000000000000001 [ 3142.263412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3142.263433] R13: 00007ffe4a265e9f R14: 00007f8081364300 R15: 0000000000022000 [ 3142.263464] 11:58:54 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, 0x0, 0x0, 0x0, 0x800000, 0xa) [ 3142.303042] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3142.304557] EXT4-fs (loop6): group descriptors corrupted! [ 3142.306720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3142.332563] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3142.446401] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:59:04 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, 0x0, 0x0, 0x0, 0x800000, 0xa) 11:59:04 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf0ffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) 11:59:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 11:59:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x1c00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:59:04 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:59:04 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0x5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffd8}}, './mnt\x00'}) mkdirat(r1, &(0x7f0000000080)='./mnt/file0\x00', 0x0) 11:59:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:59:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') [ 3152.179694] loop6: detected capacity change from 0 to 140 11:59:04 executing program 2: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) [ 3152.200346] loop7: detected capacity change from 0 to 264192 [ 3152.211558] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3152.212268] EXT4-fs (loop6): group descriptors corrupted! [ 3152.228721] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3152.236411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3152.243026] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:59:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:59:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 11:59:04 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf1340000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:04 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, 0x0, 0x0, 0x0, 0x800000, 0xa) 11:59:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xe4ffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 11:59:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3152.324751] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:59:05 executing program 2: futex(&(0x7f0000000000)=0x5, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:59:05 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf6ffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3152.422245] loop6: detected capacity change from 0 to 140 [ 3152.437397] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3152.438131] EXT4-fs (loop6): group descriptors corrupted! 11:59:13 executing program 2: futex(&(0x7f0000000000)=0x8, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:59:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xe2ffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:59:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 11:59:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x3f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:59:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100), 0x0, 0x0, 0x800000, 0xa) 11:59:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf9fdffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) [ 3161.107397] loop6: detected capacity change from 0 to 140 [ 3161.112750] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3161.113700] EXT4-fs (loop6): group descriptors corrupted! 11:59:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100), 0x0, 0x0, 0x800000, 0xa) 11:59:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3161.169372] loop6: detected capacity change from 0 to 140 [ 3161.180529] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3161.181255] EXT4-fs (loop6): group descriptors corrupted! [ 3161.196933] loop7: detected capacity change from 0 to 264192 11:59:13 executing program 2: futex(&(0x7f0000000000)=0xf4, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:59:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100), 0x0, 0x0, 0x800000, 0xa) [ 3161.227609] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3161.254282] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:59:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3161.292059] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:59:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x4000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3161.352286] loop6: detected capacity change from 0 to 140 [ 3161.356400] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3161.357131] EXT4-fs (loop6): group descriptors corrupted! 11:59:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xe2ffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 11:59:14 executing program 2: futex(&(0x7f0000000000)=0xf5, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) [ 3161.457706] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:59:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:59:22 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x800000, 0xa) 11:59:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xa0550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:22 executing program 2: futex(&(0x7f0000000000)=0x500, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:59:22 executing program 1: mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 11:59:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfbffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x6600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:59:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xe2ffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3170.123361] loop6: detected capacity change from 0 to 140 [ 3170.134006] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3170.134707] EXT4-fs (loop6): group descriptors corrupted! 11:59:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:59:22 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x800000, 0xa) [ 3170.186050] loop7: detected capacity change from 0 to 264192 [ 3170.198919] loop4: detected capacity change from 0 to 264192 [ 3170.210336] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3170.219884] loop6: detected capacity change from 0 to 140 [ 3170.220617] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 3170.222021] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3170.227396] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3170.228142] EXT4-fs (loop6): group descriptors corrupted! [ 3170.234489] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:59:22 executing program 1: mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') [ 3170.252148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:59:22 executing program 2: futex(&(0x7f0000000000)=0xf400, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:59:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) (fail_nth: 1) 11:59:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:59:22 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x800000, 0xa) 11:59:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100), 0x0, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3170.304532] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz-executor.4: bg 0: block 3: invalid block bitmap 11:59:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfdfdffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3170.336330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:59:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xa0550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3170.415898] loop6: detected capacity change from 0 to 140 [ 3170.418743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3170.443154] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3170.444086] EXT4-fs (loop6): group descriptors corrupted! [ 3170.456712] loop7: detected capacity change from 0 to 264192 [ 3170.491717] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3170.505420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3170.521225] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3170.530985] loop4: detected capacity change from 0 to 264192 [ 3170.566629] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 3170.584687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3170.590926] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3170.610953] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 3170.663024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:59:32 executing program 1: mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 11:59:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xa0550100, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:32 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfeffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:32 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x800000, 0xa) 11:59:32 executing program 2: futex(&(0x7f0000000000)=0xf500, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:59:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:59:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:59:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/23, 0x17, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3179.703133] loop7: detected capacity change from 0 to 264192 [ 3179.714269] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3179.722307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3179.734780] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:59:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:59:32 executing program 0: move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 3179.768810] loop4: detected capacity change from 0 to 264192 [ 3179.773534] loop6: detected capacity change from 0 to 140 [ 3179.778699] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3179.779731] EXT4-fs (loop6): group descriptors corrupted! [ 3179.812210] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 3179.850727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3179.885875] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 3179.891192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3179.920800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:59:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfbffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfeff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:59:43 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xff070000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="ef912a78ea43b30030ca3761a7fd56a19d84fd8c6168ae07474606bf13116401e517e745a311510ccdec555da1df1bf2d3a89e080047b250f624201868b1f50b547e67036e47f4f73b4ea02f01fa201a00000000000000000000000000000000000000000000dd00", @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e31000000"], 0x20}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r5, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20048820) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) 11:59:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/23, 0x17, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:59:43 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x800000, 0xa) 11:59:43 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 11:59:43 executing program 2: futex(&(0x7f0000000000)=0x50000, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) [ 3190.720944] loop4: detected capacity change from 0 to 264192 11:59:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xff01, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3190.750350] loop6: detected capacity change from 0 to 140 [ 3190.758857] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 3190.760582] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3190.761305] EXT4-fs (loop6): group descriptors corrupted! [ 3190.777009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3190.780084] loop7: detected capacity change from 0 to 264192 [ 3190.807867] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended 11:59:43 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') [ 3190.833607] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz-executor.4: bg 0: block 3: invalid block bitmap [ 3190.849523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:59:43 executing program 2: futex(&(0x7f0000000000)=0x80000, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:59:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)='\x00'/23, 0x17, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3190.937151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:59:43 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 11:59:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfffe, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:59:43 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x800000, 0xa) [ 3191.010683] loop7: detected capacity change from 0 to 264192 [ 3191.026702] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended 11:59:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (fail_nth: 1) 11:59:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') [ 3191.055974] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3191.059245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3191.076186] loop6: detected capacity change from 0 to 140 [ 3191.078860] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 11:59:43 executing program 2: futex(&(0x7f0000000000)=0x1000000, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) [ 3191.108475] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 3191.109941] EXT4-fs (loop6): group descriptors corrupted! [ 3191.183381] FAULT_INJECTION: forcing a failure. [ 3191.183381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3191.185686] CPU: 0 UID: 0 PID: 21732 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3191.185721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3191.185736] Call Trace: [ 3191.185745] [ 3191.185755] dump_stack_lvl+0xfa/0x120 [ 3191.185801] should_fail_ex+0x4d7/0x5e0 [ 3191.185841] _copy_from_user+0x30/0xd0 [ 3191.185871] copy_msghdr_from_user+0x88/0x150 [ 3191.185904] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3191.185947] ? lock_acquire+0x15e/0x2f0 [ 3191.185977] ___sys_sendmsg+0xdc/0x1b0 [ 3191.186010] ? __pfx____sys_sendmsg+0x10/0x10 [ 3191.186047] ? proc_fail_nth_write+0x98/0x250 [ 3191.186087] ? lock_acquire+0x15e/0x2f0 [ 3191.186111] ? __fget_files+0x34/0x3b0 [ 3191.186146] ? find_held_lock+0x2b/0x80 [ 3191.186179] ? __fget_files+0x203/0x3b0 [ 3191.186212] ? lock_release+0xc8/0x290 [ 3191.186241] ? __fget_files+0x20d/0x3b0 [ 3191.186286] __sys_sendmsg+0x150/0x200 [ 3191.186316] ? __pfx___sys_sendmsg+0x10/0x10 [ 3191.186352] ? fput+0x92/0xd0 [ 3191.186378] ? ksys_write+0x1a3/0x240 [ 3191.186420] ? __pfx_ksys_write+0x10/0x10 [ 3191.186466] do_syscall_64+0xbf/0x360 [ 3191.186492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3191.186518] RIP: 0033:0x7f6707913b19 [ 3191.186537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3191.186562] RSP: 002b:00007f6704e89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3191.186586] RAX: ffffffffffffffda RBX: 00007f6707a26f60 RCX: 00007f6707913b19 [ 3191.186603] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3191.186618] RBP: 00007f6704e891d0 R08: 0000000000000000 R09: 0000000000000000 [ 3191.186634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3191.186648] R13: 00007ffe7387309f R14: 00007f6704e89300 R15: 0000000000022000 11:59:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x10040, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 11:59:43 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xff0f0000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:43 executing program 2: futex(&(0x7f0000000000)=0xf4000000, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) [ 3191.186681] [ 3191.253000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:59:53 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xffc99a3b, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 11:59:53 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) 11:59:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000002200000008000200", @ANYRES32=r4, @ANYBLOB="bb4ade5e3e18645278eb0bc941668d00d1dd090b4bd0c7fc91040af4cc053d824cdb8ff0689db7dde7e9bc0f21a5f4c0b0c40a3cf3033dd5ad002016a4e63c6a1bc06cf2ac3a7cbd215abcf8cecf5d83a58e9b6ed3cde8c96ae0aa98df48d11182b17ef2fa49bccaea191d321914d0827f053bcbdb4c34162b23370975cfa0ffcd4e5bcd333204ceb9ff8ba99602a7c07cce2c869a4a73f37d7f2348d022fabcd9e0bc264e34134de6dc02a2943abf1e1eed514e7357e6b0629dc94fefea6e541c59"], 0x1c}}, 0x0) 11:59:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 11:59:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300", 0x22, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:59:53 executing program 2: futex(&(0x7f0000000000)=0xf5000000, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:59:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (fail_nth: 2) 11:59:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x118c0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3200.850854] loop7: detected capacity change from 0 to 264192 [ 3200.851408] loop6: detected capacity change from 0 to 140 [ 3200.859991] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 3200.860883] EXT4-fs (loop6): group descriptors corrupted! [ 3200.865706] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3200.874792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3200.880914] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3200.904062] loop6: detected capacity change from 0 to 140 [ 3200.906160] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 3200.906942] EXT4-fs (loop6): group descriptors corrupted! 11:59:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300", 0x22, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3200.932265] FAULT_INJECTION: forcing a failure. [ 3200.932265] name failslab, interval 1, probability 0, space 0, times 0 [ 3200.933263] CPU: 1 UID: 0 PID: 21763 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3200.933280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3200.933291] Call Trace: [ 3200.933296] [ 3200.933300] dump_stack_lvl+0xfa/0x120 [ 3200.933326] should_fail_ex+0x4d7/0x5e0 [ 3200.933347] should_failslab+0xc2/0x120 [ 3200.933360] kmem_cache_alloc_node_noprof+0x71/0x470 [ 3200.933378] ? __alloc_skb+0x2ab/0x370 [ 3200.933396] __alloc_skb+0x2ab/0x370 [ 3200.933411] ? __pfx___alloc_skb+0x10/0x10 [ 3200.933427] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 3200.933449] netlink_alloc_large_skb+0x69/0x150 [ 3200.933466] netlink_sendmsg+0x676/0xd80 [ 3200.933483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3200.933505] ____sys_sendmsg+0xa67/0xc20 [ 3200.933525] ? copy_msghdr_from_user+0xfb/0x150 [ 3200.933541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3200.933564] ? lock_acquire+0x15e/0x2f0 [ 3200.933580] ___sys_sendmsg+0x10f/0x1b0 [ 3200.933595] ? __pfx____sys_sendmsg+0x10/0x10 [ 3200.933613] ? proc_fail_nth_write+0x98/0x250 [ 3200.933633] ? lock_acquire+0x15e/0x2f0 [ 3200.933645] ? __fget_files+0x34/0x3b0 [ 3200.933663] ? find_held_lock+0x2b/0x80 [ 3200.933679] ? __fget_files+0x203/0x3b0 [ 3200.933695] ? lock_release+0xc8/0x290 [ 3200.933709] ? __fget_files+0x20d/0x3b0 [ 3200.933731] __sys_sendmsg+0x150/0x200 [ 3200.933746] ? __pfx___sys_sendmsg+0x10/0x10 [ 3200.933766] ? __pfx_ksys_write+0x10/0x10 [ 3200.933788] do_syscall_64+0xbf/0x360 [ 3200.933801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3200.933814] RIP: 0033:0x7f6707913b19 [ 3200.933824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3200.933836] RSP: 002b:00007f6704e89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3200.933848] RAX: ffffffffffffffda RBX: 00007f6707a26f60 RCX: 00007f6707913b19 [ 3200.933856] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3200.933864] RBP: 00007f6704e891d0 R08: 0000000000000000 R09: 0000000000000000 [ 3200.933871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3200.933879] R13: 00007ffe7387309f R14: 00007f6704e89300 R15: 0000000000022000 [ 3200.933894] 11:59:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300", 0x22, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 11:59:53 executing program 2: futex(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0), 0x1) 11:59:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (fail_nth: 3) 11:59:53 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0x0) 11:59:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3201.044750] loop6: detected capacity change from 0 to 140 11:59:53 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfffbffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3201.063022] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3201.065404] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 0)! [ 3201.066173] EXT4-fs (loop6): group descriptors corrupted! 11:59:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (fail_nth: 4) 11:59:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x6c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r5, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 11:59:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') [ 3201.153185] loop7: detected capacity change from 0 to 264192 [ 3201.166336] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3201.183389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3201.219347] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3201.291983] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:00:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="00d1db6cc83b83055cabfdc6000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e31000000"], 0x20}}, 0x0) 12:00:02 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xffff0300, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 12:00:02 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0x0) 12:00:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (fail_nth: 5) 12:00:02 executing program 2: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x1) 12:00:02 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 12:00:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x80000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 12:00:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000", 0x28, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3210.380240] loop7: detected capacity change from 0 to 264192 [ 3210.391974] loop6: detected capacity change from 0 to 140 [ 3210.409896] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 3210.411733] EXT4-fs (loop6): group descriptors corrupted! [ 3210.416659] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3210.437435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:00:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (fail_nth: 6) [ 3210.454005] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 12:00:03 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0x0) 12:00:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xffffffffffffffec, r1, 0x1, 0x0, 0x80, {0x22}}, 0x1c}, 0x1, 0x0, 0x0, 0x68001}, 0x0) 12:00:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 12:00:03 executing program 2: futex(&(0x7f0000000000), 0x6, 0x0, 0x0, &(0x7f00000000c0), 0x1) 12:00:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 12:00:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004804}, 0x4000044) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r5, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 3210.561357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3210.599001] FAULT_INJECTION: forcing a failure. [ 3210.599001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3210.600870] CPU: 1 UID: 0 PID: 21824 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3210.600913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3210.600935] Call Trace: [ 3210.600947] [ 3210.600962] dump_stack_lvl+0xfa/0x120 [ 3210.601029] should_fail_ex+0x4d7/0x5e0 [ 3210.601092] _copy_from_iter+0x1dc/0x15b0 [ 3210.601124] ? lock_acquire+0x15e/0x2f0 [ 3210.601148] ? __virt_addr_valid+0x1c6/0x5d0 [ 3210.601181] ? find_held_lock+0x2b/0x80 [ 3210.601212] ? __pfx__copy_from_iter+0x10/0x10 [ 3210.601235] ? lock_release+0xc8/0x290 [ 3210.601261] ? __virt_addr_valid+0x100/0x5d0 [ 3210.601293] ? __check_object_size+0x57b/0x880 [ 3210.601328] netlink_sendmsg+0x809/0xd80 [ 3210.601364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3210.601404] ____sys_sendmsg+0xa67/0xc20 [ 3210.601448] ? copy_msghdr_from_user+0xfb/0x150 [ 3210.601477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3210.601520] ? lock_acquire+0x15e/0x2f0 [ 3210.601546] ___sys_sendmsg+0x10f/0x1b0 [ 3210.601575] ? __pfx____sys_sendmsg+0x10/0x10 [ 3210.601608] ? proc_fail_nth_write+0x98/0x250 [ 3210.601644] ? lock_acquire+0x15e/0x2f0 [ 3210.601666] ? __fget_files+0x34/0x3b0 [ 3210.601697] ? find_held_lock+0x2b/0x80 [ 3210.601727] ? __fget_files+0x203/0x3b0 [ 3210.601757] ? lock_release+0xc8/0x290 [ 3210.601783] ? __fget_files+0x20d/0x3b0 [ 3210.601823] __sys_sendmsg+0x150/0x200 [ 3210.601851] ? __pfx___sys_sendmsg+0x10/0x10 [ 3210.601888] ? __pfx_ksys_write+0x10/0x10 [ 3210.601929] do_syscall_64+0xbf/0x360 [ 3210.601952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3210.601981] RIP: 0033:0x7f6707913b19 [ 3210.601998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3210.602020] RSP: 002b:00007f6704e89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3210.602041] RAX: ffffffffffffffda RBX: 00007f6707a26f60 RCX: 00007f6707913b19 [ 3210.602057] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3210.602070] RBP: 00007f6704e891d0 R08: 0000000000000000 R09: 0000000000000000 [ 3210.602084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3210.602100] R13: 00007ffe7387309f R14: 00007f6704e89300 R15: 0000000000022000 [ 3210.602131] 12:00:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0x0) 12:00:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfffff000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 12:00:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='./mnt\x00') 12:00:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xf0ffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 12:00:16 executing program 2: futex(&(0x7f0000000000), 0x7, 0x0, 0x0, &(0x7f00000000c0), 0x1) 12:00:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (fail_nth: 7) 12:00:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 12:00:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000", 0x28, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3223.881642] loop7: detected capacity change from 0 to 264192 [ 3223.886290] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3223.889811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3223.892660] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 12:00:16 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfffffbff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) [ 3223.950384] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3223.964833] FAULT_INJECTION: forcing a failure. [ 3223.964833] name failslab, interval 1, probability 0, space 0, times 0 [ 3223.965870] CPU: 1 UID: 0 PID: 21845 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3223.965887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3223.965894] Call Trace: [ 3223.965899] [ 3223.965904] dump_stack_lvl+0xfa/0x120 [ 3223.965931] should_fail_ex+0x4d7/0x5e0 [ 3223.965953] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 3223.965976] should_failslab+0xc2/0x120 [ 3223.965991] __kmalloc_noprof+0xb4/0x4b0 [ 3223.966012] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 3223.966035] genl_family_rcv_msg_doit+0xab/0x2f0 [ 3223.966053] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 3223.966074] ? cap_capable+0xdb/0x3b0 [ 3223.966097] ? security_capable+0x2f/0x90 [ 3223.966115] ? ns_capable+0xe2/0x120 [ 3223.966137] genl_rcv_msg+0x532/0x7e0 [ 3223.966156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3223.966173] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 3223.966192] ? __pfx_nl80211_set_interface+0x10/0x10 [ 3223.966204] ? __pfx_nl80211_post_doit+0x10/0x10 [ 3223.966221] ? __lock_acquire+0x694/0x1b70 [ 3223.966237] netlink_rcv_skb+0x147/0x430 [ 3223.966253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3223.966271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3223.966294] ? netlink_deliver_tap+0x1ae/0xce0 [ 3223.966308] ? is_vmalloc_addr+0x86/0xa0 [ 3223.966328] genl_rcv+0x28/0x40 [ 3223.966343] netlink_unicast+0x53d/0x7f0 [ 3223.966360] ? __pfx_netlink_unicast+0x10/0x10 [ 3223.966381] netlink_sendmsg+0x8ac/0xd80 [ 3223.966399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3223.966425] ____sys_sendmsg+0xa67/0xc20 [ 3223.966446] ? copy_msghdr_from_user+0xfb/0x150 [ 3223.966463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3223.966487] ? lock_acquire+0x15e/0x2f0 [ 3223.966501] ___sys_sendmsg+0x10f/0x1b0 [ 3223.966517] ? __pfx____sys_sendmsg+0x10/0x10 [ 3223.966535] ? proc_fail_nth_write+0x98/0x250 [ 3223.966557] ? lock_acquire+0x15e/0x2f0 [ 3223.966569] ? __fget_files+0x34/0x3b0 [ 3223.966588] ? find_held_lock+0x2b/0x80 [ 3223.966606] ? __fget_files+0x203/0x3b0 [ 3223.966622] ? lock_release+0xc8/0x290 [ 3223.966637] ? __fget_files+0x20d/0x3b0 [ 3223.966659] __sys_sendmsg+0x150/0x200 [ 3223.966674] ? __pfx___sys_sendmsg+0x10/0x10 [ 3223.966694] ? __pfx_ksys_write+0x10/0x10 [ 3223.966718] do_syscall_64+0xbf/0x360 [ 3223.966732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3223.966746] RIP: 0033:0x7f6707913b19 [ 3223.966755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3223.966767] RSP: 002b:00007f6704e89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3223.966779] RAX: ffffffffffffffda RBX: 00007f6707a26f60 RCX: 00007f6707913b19 [ 3223.966788] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3223.966795] RBP: 00007f6704e891d0 R08: 0000000000000000 R09: 0000000000000000 [ 3223.966803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3223.966810] R13: 00007ffe7387309f R14: 00007f6704e89300 R15: 0000000000022000 [ 3223.966827] [ 3223.989845] loop6: detected capacity change from 0 to 140 [ 3224.000130] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 3224.001033] EXT4-fs (loop6): group descriptors corrupted! 12:00:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x1000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 12:00:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000", 0x28, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 12:00:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (fail_nth: 8) 12:00:16 executing program 0: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 3224.089039] loop6: detected capacity change from 0 to 140 12:00:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) (fail_nth: 1) 12:00:16 executing program 2: futex(&(0x7f0000000000), 0x8, 0x0, 0x0, &(0x7f00000000c0), 0x1) [ 3224.099965] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 3224.100716] EXT4-fs (loop6): group descriptors corrupted! 12:00:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f0000000040)='./mnt\x00') 12:00:16 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000", 0x2b, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) [ 3224.148734] loop7: detected capacity change from 0 to 264192 [ 3224.166083] FAULT_INJECTION: forcing a failure. [ 3224.166083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3224.167055] CPU: 1 UID: 0 PID: 21868 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3224.167072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3224.167080] Call Trace: [ 3224.167085] [ 3224.167091] dump_stack_lvl+0xfa/0x120 [ 3224.167118] should_fail_ex+0x4d7/0x5e0 [ 3224.167140] _copy_to_user+0x32/0xd0 [ 3224.167158] simple_read_from_buffer+0xe0/0x180 [ 3224.167178] proc_fail_nth_read+0x189/0x270 [ 3224.167198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3224.167216] ? security_file_permission+0x22/0x90 [ 3224.167232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3224.167249] vfs_read+0x1eb/0xbe0 [ 3224.167271] ? __pfx_vfs_read+0x10/0x10 [ 3224.167289] ? lock_release+0xc8/0x290 [ 3224.167305] ? __fget_files+0x20d/0x3b0 [ 3224.167328] ksys_read+0x121/0x240 [ 3224.167345] ? __pfx_ksys_read+0x10/0x10 [ 3224.167379] do_syscall_64+0xbf/0x360 [ 3224.167393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3224.167407] RIP: 0033:0x7f248216169c [ 3224.167420] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3224.167432] RSP: 002b:00007f247f724170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3224.167444] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f248216169c [ 3224.167453] RDX: 000000000000000f RSI: 00007f247f7241e0 RDI: 0000000000000004 [ 3224.167460] RBP: 00007f247f7241d0 R08: 0000000000000000 R09: 000000000000000a [ 3224.167468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3224.167476] R13: 00007fff5f8290cf R14: 00007f247f724300 R15: 0000000000022000 [ 3224.167492] [ 3224.190597] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3224.202749] loop6: detected capacity change from 0 to 140 [ 3224.212256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:00:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) 12:00:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 12:00:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xa6bd7d20d675e70b) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4030}, 0x44) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x20, r2, 0x1, 0xfffffffe, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) [ 3224.262533] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3224.268248] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 3224.285917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:00:16 executing program 2: futex(&(0x7f0000000000), 0x9, 0x0, 0x0, &(0x7f00000000c0), 0x1) 12:00:16 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x14}], 0x1, 0x0, 0x0, 0xa) 12:00:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f0000000040)='./mnt\x00') [ 3224.444255] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3224.478107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:00:26 executing program 2: futex(&(0x7f0000000000), 0xa, 0x0, 0x0, &(0x7f00000000c0), 0x1) 12:00:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfffffdf9, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 12:00:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(0x0, &(0x7f0000000040)='./mnt\x00') 12:00:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (fail_nth: 9) 12:00:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000", 0x2b, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 12:00:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x3000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 12:00:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 12:00:26 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x14, 0x0, 0x0, 0xa) [ 3233.914043] loop7: detected capacity change from 0 to 264192 [ 3233.930716] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3233.940224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:00:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x4000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3233.951677] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap 12:00:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x5000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3234.015957] FAULT_INJECTION: forcing a failure. [ 3234.015957] name failslab, interval 1, probability 0, space 0, times 0 [ 3234.017758] CPU: 0 UID: 0 PID: 21925 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3234.017790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3234.017804] Call Trace: [ 3234.017813] [ 3234.017822] dump_stack_lvl+0xfa/0x120 [ 3234.017867] should_fail_ex+0x4d7/0x5e0 [ 3234.017907] should_failslab+0xc2/0x120 [ 3234.017931] kmem_cache_alloc_node_noprof+0x71/0x470 [ 3234.017966] ? __alloc_skb+0x2ab/0x370 [ 3234.018001] __alloc_skb+0x2ab/0x370 [ 3234.018029] ? __pfx___alloc_skb+0x10/0x10 [ 3234.018059] ? genl_rcv_msg+0x532/0x7e0 12:00:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x6000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3234.018102] netlink_ack+0x167/0xbf0 [ 3234.018143] netlink_rcv_skb+0x344/0x430 [ 3234.018175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3234.018210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3234.018255] ? netlink_deliver_tap+0x1ae/0xce0 [ 3234.018283] ? is_vmalloc_addr+0x86/0xa0 [ 3234.018319] genl_rcv+0x28/0x40 [ 3234.018350] netlink_unicast+0x53d/0x7f0 [ 3234.018385] ? __pfx_netlink_unicast+0x10/0x10 [ 3234.018432] netlink_sendmsg+0x8ac/0xd80 [ 3234.018469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3234.018513] ____sys_sendmsg+0xa67/0xc20 [ 3234.018552] ? copy_msghdr_from_user+0xfb/0x150 [ 3234.018583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3234.018630] ? lock_acquire+0x15e/0x2f0 [ 3234.018660] ___sys_sendmsg+0x10f/0x1b0 [ 3234.018691] ? __pfx____sys_sendmsg+0x10/0x10 [ 3234.018728] ? proc_fail_nth_write+0x98/0x250 [ 3234.018767] ? lock_acquire+0x15e/0x2f0 [ 3234.018790] ? __fget_files+0x34/0x3b0 [ 3234.018824] ? find_held_lock+0x2b/0x80 [ 3234.018856] ? __fget_files+0x203/0x3b0 [ 3234.018889] ? lock_release+0xc8/0x290 [ 3234.018918] ? __fget_files+0x20d/0x3b0 [ 3234.018961] __sys_sendmsg+0x150/0x200 [ 3234.018991] ? __pfx___sys_sendmsg+0x10/0x10 [ 3234.019031] ? __pfx_ksys_write+0x10/0x10 [ 3234.019076] do_syscall_64+0xbf/0x360 [ 3234.019102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3234.019126] RIP: 0033:0x7f6707913b19 [ 3234.019145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3234.019168] RSP: 002b:00007f6704e89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3234.019191] RAX: ffffffffffffffda RBX: 00007f6707a26f60 RCX: 00007f6707913b19 [ 3234.019208] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3234.019223] RBP: 00007f6704e891d0 R08: 0000000000000000 R09: 0000000000000000 [ 3234.019237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3234.019252] R13: 00007ffe7387309f R14: 00007f6704e89300 R15: 0000000000022000 [ 3234.019284] [ 3234.044522] loop6: detected capacity change from 0 to 140 [ 3234.044713] ================================================================== [ 3234.057729] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x24d/0x560 [ 3234.058787] Write of size 8 at addr ffff888019ac0980 by task syz-executor.4/21925 [ 3234.059936] [ 3234.060226] CPU: 0 UID: 0 PID: 21925 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 3234.060257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3234.060271] Call Trace: [ 3234.060280] [ 3234.060289] dump_stack_lvl+0xca/0x120 [ 3234.060329] print_report+0xcb/0x670 [ 3234.060356] ? __virt_addr_valid+0x100/0x5d0 [ 3234.060389] ? flush_tlb_func+0x24d/0x560 [ 3234.060424] ? flush_tlb_func+0x24d/0x560 [ 3234.060459] kasan_report+0xca/0x100 [ 3234.060486] ? flush_tlb_func+0x24d/0x560 [ 3234.060525] kasan_check_range+0x39/0x1b0 [ 3234.060556] flush_tlb_func+0x24d/0x560 [ 3234.060591] ? lock_acquire+0x15e/0x2f0 [ 3234.060618] ? __pfx_flush_tlb_func+0x10/0x10 [ 3234.060653] __flush_smp_call_function_queue+0x20d/0x740 [ 3234.060691] __sysvec_call_function_single+0x6d/0x360 [ 3234.060729] sysvec_call_function_single+0x5f/0xc0 [ 3234.060763] asm_sysvec_call_function_single+0x1a/0x20 [ 3234.060790] RIP: 0010:handle_softirqs+0x174/0x770 [ 3234.060825] Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 cf 84 47 06 00 00 e8 22 65 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d [ 3234.060849] RSP: 0018:ffff88806ce08f78 EFLAGS: 00000216 [ 3234.060870] RAX: 00000000000002f0 RBX: 00000000ffffffff RCX: 0000000000000008 [ 3234.060886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff813b5b6e [ 3234.060902] RBP: ffff88801e057538 R08: 0000000000000001 R09: 0000000000000001 [ 3234.060917] R10: ffffffff86438657 R11: 0000000000000001 R12: 0000000000000000 [ 3234.060932] R13: 0000000000000000 R14: 0000000000000080 R15: 0000000000000000 [ 3234.060952] ? handle_softirqs+0x16e/0x770 [ 3234.060985] ? handle_softirqs+0x16e/0x770 [ 3234.061020] __irq_exit_rcu+0xc4/0x100 [ 3234.061051] irq_exit_rcu+0x9/0x20 [ 3234.061082] sysvec_apic_timer_interrupt+0x70/0x80 [ 3234.061115] [ 3234.061123] [ 3234.061132] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3234.061157] RIP: 0010:dump_stack_lvl+0x115/0x120 [ 3234.061193] Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 e6 40 7b fc e8 e1 f7 a4 fc 48 89 ee 31 ff e8 d7 95 c4 fc e8 72 9a c4 fc e8 7d c4 cc fc fb 5b <5d> 41 5c e9 63 9a c4 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 3234.061217] RSP: 0018:ffff88801e0575e0 EFLAGS: 00000206 [ 3234.061235] RAX: 00000000000002ed RBX: ffffffff85d01e20 RCX: 0000000000000080 [ 3234.061250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84aefc13 [ 3234.061266] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 [ 3234.061281] R10: ffffffff86438657 R11: 0000000000093be8 R12: ffffffff8530f500 [ 3234.061297] R13: ffffffff85d01e30 R14: 0000000000000000 R15: 0000000000000000 [ 3234.061318] ? dump_stack_lvl+0x113/0x120 [ 3234.061356] should_fail_ex+0x4d7/0x5e0 [ 3234.061392] should_failslab+0xc2/0x120 [ 3234.061414] kmem_cache_alloc_node_noprof+0x71/0x470 [ 3234.061448] ? __alloc_skb+0x2ab/0x370 [ 3234.061479] __alloc_skb+0x2ab/0x370 [ 3234.061506] ? __pfx___alloc_skb+0x10/0x10 [ 3234.061535] ? genl_rcv_msg+0x532/0x7e0 [ 3234.061572] netlink_ack+0x167/0xbf0 [ 3234.061607] netlink_rcv_skb+0x344/0x430 [ 3234.061637] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3234.061670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3234.061707] ? netlink_deliver_tap+0x1ae/0xce0 [ 3234.061735] ? is_vmalloc_addr+0x86/0xa0 [ 3234.061768] genl_rcv+0x28/0x40 [ 3234.061799] netlink_unicast+0x53d/0x7f0 [ 3234.061830] ? __pfx_netlink_unicast+0x10/0x10 [ 3234.061864] netlink_sendmsg+0x8ac/0xd80 [ 3234.061897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3234.061933] ____sys_sendmsg+0xa67/0xc20 [ 3234.061971] ? copy_msghdr_from_user+0xfb/0x150 [ 3234.062001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3234.062042] ? lock_acquire+0x15e/0x2f0 [ 3234.062068] ___sys_sendmsg+0x10f/0x1b0 [ 3234.062098] ? __pfx____sys_sendmsg+0x10/0x10 [ 3234.062131] ? proc_fail_nth_write+0x98/0x250 [ 3234.062167] ? lock_acquire+0x15e/0x2f0 [ 3234.062190] ? __fget_files+0x34/0x3b0 [ 3234.062223] ? find_held_lock+0x2b/0x80 [ 3234.062254] ? __fget_files+0x203/0x3b0 [ 3234.062286] ? lock_release+0xc8/0x290 [ 3234.062314] ? __fget_files+0x20d/0x3b0 [ 3234.062352] __sys_sendmsg+0x150/0x200 [ 3234.062381] ? __pfx___sys_sendmsg+0x10/0x10 [ 3234.062416] ? __pfx_ksys_write+0x10/0x10 [ 3234.062454] do_syscall_64+0xbf/0x360 [ 3234.062478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3234.062501] RIP: 0033:0x7f6707913b19 [ 3234.062519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3234.062542] RSP: 002b:00007f6704e89188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3234.062564] RAX: ffffffffffffffda RBX: 00007f6707a26f60 RCX: 00007f6707913b19 [ 3234.062581] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3234.062596] RBP: 00007f6704e891d0 R08: 0000000000000000 R09: 0000000000000000 [ 3234.062611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3234.062626] R13: 00007ffe7387309f R14: 00007f6704e89300 R15: 0000000000022000 [ 3234.062650] [ 3234.062658] [ 3234.140518] Allocated by task 290: [ 3234.141083] kasan_save_stack+0x24/0x50 [ 3234.141715] kasan_save_track+0x14/0x30 [ 3234.142362] __kasan_slab_alloc+0x59/0x70 [ 3234.143022] kmem_cache_alloc_noprof+0x13c/0x470 [ 3234.143788] copy_process+0x6f3a/0x73e0 [ 3234.144424] kernel_clone+0xea/0x820 [ 3234.145034] __do_sys_clone+0xce/0x120 [ 3234.145651] do_syscall_64+0xbf/0x360 [ 3234.146257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3234.147060] [ 3234.147329] Freed by task 21904: [ 3234.147867] kasan_save_stack+0x24/0x50 [ 3234.148488] kasan_save_track+0x14/0x30 [ 3234.149108] kasan_save_free_info+0x3a/0x60 [ 3234.149790] __kasan_slab_free+0x38/0x50 [ 3234.150423] kmem_cache_free+0x2a1/0x460 [ 3234.151065] mmput+0x305/0x390 [ 3234.151591] do_exit+0x79d/0x2970 [ 3234.152138] do_group_exit+0xd3/0x2a0 [ 3234.152735] __x64_sys_exit_group+0x3e/0x50 [ 3234.153429] x64_sys_call+0xf76/0x18a0 [ 3234.154066] do_syscall_64+0xbf/0x360 [ 3234.154668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3234.155490] [ 3234.155771] The buggy address belongs to the object at ffff888019ac0000 [ 3234.155771] which belongs to the cache mm_struct of size 2456 [ 3234.157621] The buggy address is located 2432 bytes inside of [ 3234.157621] freed 2456-byte region [ffff888019ac0000, ffff888019ac0998) [ 3234.159500] [ 3234.159770] The buggy address belongs to the physical page: [ 3234.160633] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19ac0 [ 3234.161832] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3234.162997] memcg:ffff888012675e81 [ 3234.163558] anon flags: 0x100000000000040(head|node=0|zone=1) [ 3234.164454] page_type: f5(slab) [ 3234.164987] raw: 0100000000000040 ffff888008c4bc80 0000000000000000 dead000000000001 [ 3234.166199] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888012675e81 [ 3234.167389] head: 0100000000000040 ffff888008c4bc80 0000000000000000 dead000000000001 [ 3234.168597] head: 0000000000000000 00000000000c000c 00000000f5000000 ffff888012675e81 [ 3234.169801] head: 0100000000000003 ffffea000066b001 00000000ffffffff 00000000ffffffff [ 3234.171002] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 3234.172191] page dumped because: kasan: bad access detected [ 3234.173056] [ 3234.173327] Memory state around the buggy address: [ 3234.174077] ffff888019ac0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3234.175201] ffff888019ac0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3234.176317] >ffff888019ac0980: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3234.177431] ^ [ 3234.177961] ffff888019ac0a00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 3234.179085] ffff888019ac0a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3234.180188] ================================================================== [ 3234.181304] Disabling lock debugging due to kernel taint [ 3234.191602] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 3234.200213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3234.226666] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3234.254074] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:00:35 executing program 2: futex(&(0x7f0000000000), 0xb, 0x0, 0x0, &(0x7f00000000c0), 0x1) 12:00:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000", 0x2b, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f0000010f60)) mount$9p_xen(&(0x7f0000000400), &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x2c000, &(0x7f0000000c40)={'trans=xen,', {[{@mmap}, {@cache_loose}, {@privport}, {@uname={'uname', 0x3d, '\x01\x01\x01\x01\x01\x01'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x4}}, {@afid={'afid', 0x3d, 0x7ff}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wlan1\x00'}}, {@obj_user={'obj_user', 0x3d, 'wlan1\x00'}}]}}) 12:00:35 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0xfffffdfd, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400"/149, 0x95, 0x8c60}], 0x0, &(0x7f0000010f60)) rmdir(&(0x7f0000000040)='./mnt\x00') setxattr$trusted_overlay_origin(&(0x7f0000001440)='./mnt\x00', &(0x7f0000001480), &(0x7f00000014c0), 0x2, 0x1) 12:00:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x7000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) 12:00:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) (fail_nth: 10) 12:00:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 12:00:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000280)='selinuxfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./mnt\x00', 0x0) 12:00:35 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r0, 0x4, 0x44000) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="e7", 0x1}], 0x1, 0x0, 0x0, 0xa) [ 3242.998352] loop6: detected capacity change from 0 to 140 [ 3243.016839] loop7: detected capacity change from 0 to 264192 [ 3243.020779] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 3243.023148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:00:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x8000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000000380)="00000000000000000000e90000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f18c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6", 0x89, 0x8c60}], 0x0, &(0x7f0000010f60)) [ 3243.037746] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 3243.049055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:00:35 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x80800) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x4e29, 0x100]}, &(0x7f0000000040)=0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) [ 3243.065690] EXT4-fs error (device loop7): ext4_validate_block_bitmap:431: comm syz-executor.7: bg 0: block 3: invalid block bitmap [ 3243.128162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3243.133388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. VM DIAGNOSIS: 12:00:26 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b97f5 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff88806ce08838 R8 =0000000000000000 R9 =ffffed10016d5046 R10=0000000000000030 R11=6873756c66203f20 R12=0000000000000030 R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b97e0 RIP=ffffffff828b984d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6704e89700 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cc23000 CR3=0000000015a60000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3dda0 RCX=ffffffff81682e4a RDX=ffff88801df31b80 RSI=ffffffff81682e24 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888018dcf6f8 R8 =0000000000000001 R9 =ffffed100d9e7001 R10=0000000000000001 R11=1ffff1100d9e6bb9 R12=ffffed100d9c7bb5 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81682e26 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f00b09a6000 CR3=000000003cab4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000