Extracting prog: 1m22.872200036s Minimizing prog: 22m33.982496525s Simplifying prog options: 0s Extracting C: 22.379383086s Simplifying C: 5m31.193207961s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program crashed: kernel BUG in ext4_writepages single: successfully extracted reproducer found reproducer with 14 syscalls minimizing guilty program testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$eJzs3ctrXNcZAPDvjkYv261UKLTuSlBoDcajylXtFgpV6aIUajC0qy5qi9FYuBppjGZkLCFam1LoptCE7JKN13luQrZ5LLJJNvkrgo2TyCIOWQSFOw9pJM3Io8eM5Pj3g6s55z7mnO+ec8+90r2aCeC5NZb+yEScjYj/JxEj9flJRPRXU9mIqdp6T9ZW8+mUxMbGXz5Pquusr63mo2mb1Ol65scR8f5/Is5ndpdbXl6Zmy4WC4v1/Hhl/tZ4eXnlws356dnCbGHh0sTk5MXLv7p86ehi/fLjlTMPX/jjz9+Y+vrfP3rzfx8kMRVn6sua4zgqYzFW3yf96S7c5g9HXdixefufHazU1AOy3awM+5Q2TF+9Vc7GSPTt1T7DvawZANAt/4qIjXb62i4BAJ5pSe38/7vjrgcA0CuNvwOsZyNibTXfjftgJ9mj30fEUO3+X+P+Zm1Jtn7Pbqh6H/TUerLtzkgSEaNHUP5YRLzyzt9fS6fo0n1IgFbu3ouI66Nj6/Wxf2v8SXY9s7Bfv2g9e7Y5M7ZjofEPeufd9Prn17Xjbvvxn9m8/okW1z+DLY7dg3j68Z95cATFtJVe//226dm2J03x14321XPfq17z9Sc3bhYL6dj2/Yg4F/2DaX5ijzLOPf7mcbtlzdd/X7z4j1fT8tPXrTUyD7KD27eZma5MHybmZo/uRfwk2yr+dPwfrLZ/Uu8EO69/r3ZYxp9+89+X2y1L40/jbUy74++ujfsRP2vZ/snmOsmezyeOV7vDeKNTtPDWVJxqV/5Ydqv90yktv/G7QC88ujdQT7WNfzRpfl6z3PFbbz4t9tH9kffardTc/1vH37r/DyR/raYbtb8zXaksTkQMJH/ePf/i1raNfGP9tP+f+2nr478x/iW7x7+/pe9/vcMdkX342esHj7+70vhn9u7/O9p/34kYejLX1678ztp/cts2nYx/nVbwoPsNAAAAAAAAAAAAAAAAAAAAAAAAAPYjExFnIsnkNtOZTC5X+w7vH8apTLFUrpy/UVpamInqd2WPRn+m8VGXI02fhzpR/zz8Rv7ijvwvI+IHEfHS4HA1n8uXijPHHTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1J1u8/3/qU8Hd6zcdxw1BAC6YsiJHQCeN0k2e8AtM0dcEwCgZ4Zazz7/ScvZw92tDADQE23O/wDAd5jzPwA8f55y/t/5bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwX1evXEmnja/WVvNpfub28tJc6faFmUJ5Lje/lM/lS4u3crOl0myxkMuX5tu+0d3aS7FUujUZC0t3xiuFcmW8vLxybb60tFC5dnN+erZwrdDfs8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHPl5ZW56WKxsNjFxED3i3hmE3Mf1trhpNTncIn+OBHV2EciOeSej7u19qvOydYPqhMQ1+ETMbA1Sgz3fmACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEZ8GwAA//9b9xlW") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$eJzs3ctrXNcZAPDvjkYv261UKLTuSlBoDcajylXtFgpV6aIUajC0qy5qi9FYuBppjGZkLCFam1LoptCE7JKN13luQrZ5LLJJNvkrgo2TyCIOWQSFOw9pJM3Io8eM5Pj3g6s55z7mnO+ec8+90r2aCeC5NZb+yEScjYj/JxEj9flJRPRXU9mIqdp6T9ZW8+mUxMbGXz5Pquusr63mo2mb1Ol65scR8f5/Is5ndpdbXl6Zmy4WC4v1/Hhl/tZ4eXnlws356dnCbGHh0sTk5MXLv7p86ehi/fLjlTMPX/jjz9+Y+vrfP3rzfx8kMRVn6sua4zgqYzFW3yf96S7c5g9HXdixefufHazU1AOy3awM+5Q2TF+9Vc7GSPTt1T7DvawZANAt/4qIjXb62i4BAJ5pSe38/7vjrgcA0CuNvwOsZyNibTXfjftgJ9mj30fEUO3+X+P+Zm1Jtn7Pbqh6H/TUerLtzkgSEaNHUP5YRLzyzt9fS6fo0n1IgFbu3ouI66Nj6/Wxf2v8SXY9s7Bfv2g9e7Y5M7ZjofEPeufd9Prn17Xjbvvxn9m8/okW1z+DLY7dg3j68Z95cATFtJVe//226dm2J03x14321XPfq17z9Sc3bhYL6dj2/Yg4F/2DaX5ijzLOPf7mcbtlzdd/X7z4j1fT8tPXrTUyD7KD27eZma5MHybmZo/uRfwk2yr+dPwfrLZ/Uu8EO69/r3ZYxp9+89+X2y1L40/jbUy74++ujfsRP2vZ/snmOsmezyeOV7vDeKNTtPDWVJxqV/5Ydqv90yktv/G7QC88ujdQT7WNfzRpfl6z3PFbbz4t9tH9kffardTc/1vH37r/DyR/raYbtb8zXaksTkQMJH/ePf/i1raNfGP9tP+f+2nr478x/iW7x7+/pe9/vcMdkX342esHj7+70vhn9u7/O9p/34kYejLX1678ztp/cts2nYx/nVbwoPsNAAAAAAAAAAAAAAAAAAAAAAAAAPYjExFnIsnkNtOZTC5X+w7vH8apTLFUrpy/UVpamInqd2WPRn+m8VGXI02fhzpR/zz8Rv7ijvwvI+IHEfHS4HA1n8uXijPHHTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1J1u8/3/qU8Hd6zcdxw1BAC6YsiJHQCeN0k2e8AtM0dcEwCgZ4Zazz7/ScvZw92tDADQE23O/wDAd5jzPwA8f55y/t/5bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwX1evXEmnja/WVvNpfub28tJc6faFmUJ5Lje/lM/lS4u3crOl0myxkMuX5tu+0d3aS7FUujUZC0t3xiuFcmW8vLxybb60tFC5dnN+erZwrdDfs8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHPl5ZW56WKxsNjFxED3i3hmE3Mf1trhpNTncIn+OBHV2EciOeSej7u19qvOydYPqhMQ1+ETMbA1Sgz3fmACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEZ8GwAA//9b9xlW") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$eJzs3ctrXNcZAPDvjkYv261UKLTuSlBoDcajylXtFgpV6aIUajC0qy5qi9FYuBppjGZkLCFam1LoptCE7JKN13luQrZ5LLJJNvkrgo2TyCIOWQSFOw9pJM3Io8eM5Pj3g6s55z7mnO+ec8+90r2aCeC5NZb+yEScjYj/JxEj9flJRPRXU9mIqdp6T9ZW8+mUxMbGXz5Pquusr63mo2mb1Ol65scR8f5/Is5ndpdbXl6Zmy4WC4v1/Hhl/tZ4eXnlws356dnCbGHh0sTk5MXLv7p86ehi/fLjlTMPX/jjz9+Y+vrfP3rzfx8kMRVn6sua4zgqYzFW3yf96S7c5g9HXdixefufHazU1AOy3awM+5Q2TF+9Vc7GSPTt1T7DvawZANAt/4qIjXb62i4BAJ5pSe38/7vjrgcA0CuNvwOsZyNibTXfjftgJ9mj30fEUO3+X+P+Zm1Jtn7Pbqh6H/TUerLtzkgSEaNHUP5YRLzyzt9fS6fo0n1IgFbu3ouI66Nj6/Wxf2v8SXY9s7Bfv2g9e7Y5M7ZjofEPeufd9Prn17Xjbvvxn9m8/okW1z+DLY7dg3j68Z95cATFtJVe//226dm2J03x14321XPfq17z9Sc3bhYL6dj2/Yg4F/2DaX5ijzLOPf7mcbtlzdd/X7z4j1fT8tPXrTUyD7KD27eZma5MHybmZo/uRfwk2yr+dPwfrLZ/Uu8EO69/r3ZYxp9+89+X2y1L40/jbUy74++ujfsRP2vZ/snmOsmezyeOV7vDeKNTtPDWVJxqV/5Ydqv90yktv/G7QC88ujdQT7WNfzRpfl6z3PFbbz4t9tH9kffardTc/1vH37r/DyR/raYbtb8zXaksTkQMJH/ePf/i1raNfGP9tP+f+2nr478x/iW7x7+/pe9/vcMdkX342esHj7+70vhn9u7/O9p/34kYejLX1678ztp/cts2nYx/nVbwoPsNAAAAAAAAAAAAAAAAAAAAAAAAAPYjExFnIsnkNtOZTC5X+w7vH8apTLFUrpy/UVpamInqd2WPRn+m8VGXI02fhzpR/zz8Rv7ijvwvI+IHEfHS4HA1n8uXijPHHTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1J1u8/3/qU8Hd6zcdxw1BAC6YsiJHQCeN0k2e8AtM0dcEwCgZ4Zazz7/ScvZw92tDADQE23O/wDAd5jzPwA8f55y/t/5bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwX1evXEmnja/WVvNpfub28tJc6faFmUJ5Lje/lM/lS4u3crOl0myxkMuX5tu+0d3aS7FUujUZC0t3xiuFcmW8vLxybb60tFC5dnN+erZwrdDfs8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHPl5ZW56WKxsNjFxED3i3hmE3Mf1trhpNTncIn+OBHV2EciOeSej7u19qvOydYPqhMQ1+ETMbA1Sgz3fmACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEZ8GwAA//9b9xlW") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000003380)) r0 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$eJzs3ctrXNcZAPDvjkYv261UKLTuSlBoDcajylXtFgpV6aIUajC0qy5qi9FYuBppjGZkLCFam1LoptCE7JKN13luQrZ5LLJJNvkrgo2TyCIOWQSFOw9pJM3Io8eM5Pj3g6s55z7mnO+ec8+90r2aCeC5NZb+yEScjYj/JxEj9flJRPRXU9mIqdp6T9ZW8+mUxMbGXz5Pquusr63mo2mb1Ol65scR8f5/Is5ndpdbXl6Zmy4WC4v1/Hhl/tZ4eXnlws356dnCbGHh0sTk5MXLv7p86ehi/fLjlTMPX/jjz9+Y+vrfP3rzfx8kMRVn6sua4zgqYzFW3yf96S7c5g9HXdixefufHazU1AOy3awM+5Q2TF+9Vc7GSPTt1T7DvawZANAt/4qIjXb62i4BAJ5pSe38/7vjrgcA0CuNvwOsZyNibTXfjftgJ9mj30fEUO3+X+P+Zm1Jtn7Pbqh6H/TUerLtzkgSEaNHUP5YRLzyzt9fS6fo0n1IgFbu3ouI66Nj6/Wxf2v8SXY9s7Bfv2g9e7Y5M7ZjofEPeufd9Prn17Xjbvvxn9m8/okW1z+DLY7dg3j68Z95cATFtJVe//226dm2J03x14321XPfq17z9Sc3bhYL6dj2/Yg4F/2DaX5ijzLOPf7mcbtlzdd/X7z4j1fT8tPXrTUyD7KD27eZma5MHybmZo/uRfwk2yr+dPwfrLZ/Uu8EO69/r3ZYxp9+89+X2y1L40/jbUy74++ujfsRP2vZ/snmOsmezyeOV7vDeKNTtPDWVJxqV/5Ydqv90yktv/G7QC88ujdQT7WNfzRpfl6z3PFbbz4t9tH9kffardTc/1vH37r/DyR/raYbtb8zXaksTkQMJH/ePf/i1raNfGP9tP+f+2nr478x/iW7x7+/pe9/vcMdkX342esHj7+70vhn9u7/O9p/34kYejLX1678ztp/cts2nYx/nVbwoPsNAAAAAAAAAAAAAAAAAAAAAAAAAPYjExFnIsnkNtOZTC5X+w7vH8apTLFUrpy/UVpamInqd2WPRn+m8VGXI02fhzpR/zz8Rv7ijvwvI+IHEfHS4HA1n8uXijPHHTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1J1u8/3/qU8Hd6zcdxw1BAC6YsiJHQCeN0k2e8AtM0dcEwCgZ4Zazz7/ScvZw92tDADQE23O/wDAd5jzPwA8f55y/t/5bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwX1evXEmnja/WVvNpfub28tJc6faFmUJ5Lje/lM/lS4u3crOl0myxkMuX5tu+0d3aS7FUujUZC0t3xiuFcmW8vLxybb60tFC5dnN+erZwrdDfs8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHPl5ZW56WKxsNjFxED3i3hmE3Mf1trhpNTncIn+OBHV2EciOeSej7u19qvOydYPqhMQ1+ETMbA1Sgz3fmACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEZ8GwAA//9b9xlW") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) program did not crash testing program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown detailed listing: executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0xffffffff, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000001940)={[{@dioread_lock}, {@auto_da_alloc}, {@nojournal_checksum}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@data_err_abort}, {@inlinecrypt}, {@grpjquota}, {@nouid32}, {@grpid}]}, 0x45, 0x7dd, &(0x7f0000006300)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) lchown(0x0, 0x0, 0xee01) program did not crash extracting C reproducer testing compiled C program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown program crashed: kernel BUG in ext4_writepages simplifying C reproducer testing compiled C program (duration=39.860976285s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown program did not crash testing compiled C program (duration=39.860976285s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown program did not crash testing compiled C program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown program crashed: kernel BUG in ext4_writepages testing compiled C program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown program crashed: kernel BUG in ext4_writepages testing compiled C program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown program did not crash testing compiled C program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown program crashed: kernel BUG in ext4_writepages testing compiled C program (duration=39.860976285s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-lchown program crashed: kernel BUG in ext4_writepages reproducing took 29m50.427312398s repro crashed as (corrupted=false): ------------[ cut here ]------------ kernel BUG at fs/ext4/inode.c:2844! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 285 Comm: kworker/u4:2 Not tainted 5.4.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: writeback wb_workfn (flush-7:0) RIP: 0010:ext4_writepages+0x3c96/0x3cc0 fs/ext4/inode.c:2843 Code: 82 9a ff 31 ff 89 de e8 48 82 9a ff 45 84 f6 75 2e e8 fe 7f 9a ff 49 bf 00 00 00 00 00 fc ff df e9 1d f9 ff ff e8 ea 7f 9a ff <0f> 0b e8 e3 7f 9a ff 0f 0b e8 dc 7f 9a ff e8 c7 39 35 ff eb 99 e8 RSP: 0018:ffff8881df2bf0c0 EFLAGS: 00010293 RAX: ffffffff81cb1ae6 RBX: 0000010000000000 RCX: ffff8881df1b9f80 RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 RBP: ffff8881df2bf4b0 R08: ffffffff81cae736 R09: ffffed103b94df22 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881dca6f9b8 R13: 0000000000000001 R14: 0000010410000000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffbfac7fd8 CR3: 00000001f35f9000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: do_writepages+0x12b/0x270 mm/page-writeback.c:2366 __writeback_single_inode+0xdb/0xc80 fs/fs-writeback.c:1467 writeback_sb_inodes+0x9e0/0x1800 fs/fs-writeback.c:1730 wb_writeback+0x403/0xd70 fs/fs-writeback.c:1905 wb_do_writeback fs/fs-writeback.c:2050 [inline] wb_workfn+0x3b6/0x1230 fs/fs-writeback.c:2091 process_one_work+0x781/0xd50 kernel/workqueue.c:2290 worker_thread+0xa27/0x1360 kernel/workqueue.c:2436 kthread+0x321/0x3a0 kernel/kthread.c:288 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:354 Modules linked in: ---[ end trace e327d17f8f03ad8f ]--- RIP: 0010:ext4_writepages+0x3c96/0x3cc0 fs/ext4/inode.c:2843 Code: 82 9a ff 31 ff 89 de e8 48 82 9a ff 45 84 f6 75 2e e8 fe 7f 9a ff 49 bf 00 00 00 00 00 fc ff df e9 1d f9 ff ff e8 ea 7f 9a ff <0f> 0b e8 e3 7f 9a ff 0f 0b e8 dc 7f 9a ff e8 c7 39 35 ff eb 99 e8 RSP: 0018:ffff8881df2bf0c0 EFLAGS: 00010293 RAX: ffffffff81cb1ae6 RBX: 0000010000000000 RCX: ffff8881df1b9f80 RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 RBP: ffff8881df2bf4b0 R08: ffffffff81cae736 R09: ffffed103b94df22 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881dca6f9b8 R13: 0000000000000001 R14: 0000010410000000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffbfac7fd8 CR3: 000000000600e000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 final repro crashed as (corrupted=false): ------------[ cut here ]------------ kernel BUG at fs/ext4/inode.c:2844! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 285 Comm: kworker/u4:2 Not tainted 5.4.290-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 Workqueue: writeback wb_workfn (flush-7:0) RIP: 0010:ext4_writepages+0x3c96/0x3cc0 fs/ext4/inode.c:2843 Code: 82 9a ff 31 ff 89 de e8 48 82 9a ff 45 84 f6 75 2e e8 fe 7f 9a ff 49 bf 00 00 00 00 00 fc ff df e9 1d f9 ff ff e8 ea 7f 9a ff <0f> 0b e8 e3 7f 9a ff 0f 0b e8 dc 7f 9a ff e8 c7 39 35 ff eb 99 e8 RSP: 0018:ffff8881df2bf0c0 EFLAGS: 00010293 RAX: ffffffff81cb1ae6 RBX: 0000010000000000 RCX: ffff8881df1b9f80 RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 RBP: ffff8881df2bf4b0 R08: ffffffff81cae736 R09: ffffed103b94df22 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881dca6f9b8 R13: 0000000000000001 R14: 0000010410000000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffbfac7fd8 CR3: 00000001f35f9000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: do_writepages+0x12b/0x270 mm/page-writeback.c:2366 __writeback_single_inode+0xdb/0xc80 fs/fs-writeback.c:1467 writeback_sb_inodes+0x9e0/0x1800 fs/fs-writeback.c:1730 wb_writeback+0x403/0xd70 fs/fs-writeback.c:1905 wb_do_writeback fs/fs-writeback.c:2050 [inline] wb_workfn+0x3b6/0x1230 fs/fs-writeback.c:2091 process_one_work+0x781/0xd50 kernel/workqueue.c:2290 worker_thread+0xa27/0x1360 kernel/workqueue.c:2436 kthread+0x321/0x3a0 kernel/kthread.c:288 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:354 Modules linked in: ---[ end trace e327d17f8f03ad8f ]--- RIP: 0010:ext4_writepages+0x3c96/0x3cc0 fs/ext4/inode.c:2843 Code: 82 9a ff 31 ff 89 de e8 48 82 9a ff 45 84 f6 75 2e e8 fe 7f 9a ff 49 bf 00 00 00 00 00 fc ff df e9 1d f9 ff ff e8 ea 7f 9a ff <0f> 0b e8 e3 7f 9a ff 0f 0b e8 dc 7f 9a ff e8 c7 39 35 ff eb 99 e8 RSP: 0018:ffff8881df2bf0c0 EFLAGS: 00010293 RAX: ffffffff81cb1ae6 RBX: 0000010000000000 RCX: ffff8881df1b9f80 RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 RBP: ffff8881df2bf4b0 R08: ffffffff81cae736 R09: ffffed103b94df22 R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881dca6f9b8 R13: 0000000000000001 R14: 0000010410000000 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffbfac7fd8 CR3: 000000000600e000 CR4: 00000000003406a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400