Extracting prog: 1m22.388607289s
Minimizing prog: 19m55.709700756s
Simplifying prog options: 0s
Extracting C: 32.678937837s
Simplifying C: 5m48.051444224s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program crashed: kernel BUG in ext4_writepages
single: successfully extracted reproducer
found reproducer with 14 syscalls
minimizing guilty program
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQbKN2YGlsFDxUPIlgo6Nk2bLahZpMt2U1pQqAtIngRVDwIeunZH/Xm1R9H9b/wIC1V02LFg0Rms9tum93tpmZ3U/v5wGTfm5nNe999M2/e7Aw7ATy0xtI/mYh9EfFBEjFSnZ9ExEAl1R9xdGO9m2uruXRKYn39jd+Tyjo31lZzUfee1J5q5smI+P7diAOZzeWWllfmpguF/GI1P1GePzNRWl45eHp+ejY/m184PDk1dejI80cOb1+sf/68svfqh6/u/+ro3+88cfn9H5I4Gnury+rj2C5jMVb9TAbSj/AOr2x3YT2W9LoC3Jd01+zb2MtjX4xEXyXVxFA3awYAdMr5iFhv7nyLZQDAAytpdfwHAP6Hat8D3FhbzdWm3n4j0V3XXo6I3Rvx165vbizpr16z2125Djp8I7njykgSEaPbUP5YRHz2zVtfpFN06DokQCMXLkbEydGxzf1/sumeha16ttXC9cHKy9hds/V/0D3fpuOfFxqN/zK3xj/RYPwz2GDfvR/33v8zV7ahmKbS8d9Ldfe23ayLv2q0r5p7pDLmG0hOnS7k077t0YgYj4HBND9ZWbXxXVDj1/+53qz8+vHfHx+9/Xlafvp6e43Mlf7B+upEzEyXp7cj9tS1ixFP9TeKP7nV/kmT8e/xNst47cX3Pm22LI0/jbc2bY6/s9YvRTzTsP1vt2XS8v7EicrmMFHbKBr4+pdPhpuVX9/+6ZSWXzsX6Ia0/Ydbxz+a1N+vWdp6GT9dGvmu2bJ7x1/d/uuk2/+u5M1Keld13rnpcnlxMmJX8vrm+Yduv7eWr62fxj/+dOP9v9X2n54Tnmwz/v6rv315//F3Vhr/zJbaf+uJyzfn+pqV3177T1VS49U57fR/9bVIWlTwv3x2AAAAAAAAAAAAAAAAAAAAAAAAANCuTETsjSSTvZXOZLLZjWd4Px7DmUKxVD5wqri0MBOVZ2WPxkCm9lOXI3W/hzpZ/T38Wv7QXfnnIuKxiPh4cKiSz+aKhZleBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVXuaPP8/9etgr2sHAHTM7l5XAADoOsd/AHj4bO34P9SxegAA3eP8HwAePm0f/092th4AQPc4/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjh87lk7rf62t5tL8zNnlpbni2YMz+dJcdn4pl80VF89kZ4vF2UI+myvON/1HFzZeCsXimalYWDo3Uc6XyhOl5ZUT88WlhfKJ0/PTs/kT+YGuRQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Sstr8xNFwr5xQc68eP+iM4WMbRDIt0pif7YEdWQ6FiivpcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDD/RsAAP//FcUpCg==")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQbKN2YGlsFDxUPIlgo6Nk2bLahZpMt2U1pQqAtIngRVDwIeunZH/Xm1R9H9b/wIC1V02LFg0Rms9tum93tpmZ3U/v5wGTfm5nNe999M2/e7Aw7ATy0xtI/mYh9EfFBEjFSnZ9ExEAl1R9xdGO9m2uruXRKYn39jd+Tyjo31lZzUfee1J5q5smI+P7diAOZzeWWllfmpguF/GI1P1GePzNRWl45eHp+ejY/m184PDk1dejI80cOb1+sf/68svfqh6/u/+ro3+88cfn9H5I4Gnury+rj2C5jMVb9TAbSj/AOr2x3YT2W9LoC3Jd01+zb2MtjX4xEXyXVxFA3awYAdMr5iFhv7nyLZQDAAytpdfwHAP6Hat8D3FhbzdWm3n4j0V3XXo6I3Rvx165vbizpr16z2125Djp8I7njykgSEaPbUP5YRHz2zVtfpFN06DokQCMXLkbEydGxzf1/sumeha16ttXC9cHKy9hds/V/0D3fpuOfFxqN/zK3xj/RYPwz2GDfvR/33v8zV7ahmKbS8d9Ldfe23ayLv2q0r5p7pDLmG0hOnS7k077t0YgYj4HBND9ZWbXxXVDj1/+53qz8+vHfHx+9/Xlafvp6e43Mlf7B+upEzEyXp7cj9tS1ixFP9TeKP7nV/kmT8e/xNst47cX3Pm22LI0/jbc2bY6/s9YvRTzTsP1vt2XS8v7EicrmMFHbKBr4+pdPhpuVX9/+6ZSWXzsX6Ia0/Ydbxz+a1N+vWdp6GT9dGvmu2bJ7x1/d/uuk2/+u5M1Keld13rnpcnlxMmJX8vrm+Yduv7eWr62fxj/+dOP9v9X2n54Tnmwz/v6rv315//F3Vhr/zJbaf+uJyzfn+pqV3177T1VS49U57fR/9bVIWlTwv3x2AAAAAAAAAAAAAAAAAAAAAAAAANCuTETsjSSTvZXOZLLZjWd4Px7DmUKxVD5wqri0MBOVZ2WPxkCm9lOXI3W/hzpZ/T38Wv7QXfnnIuKxiPh4cKiSz+aKhZleBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVXuaPP8/9etgr2sHAHTM7l5XAADoOsd/AHj4bO34P9SxegAA3eP8HwAePm0f/092th4AQPc4/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjh87lk7rf62t5tL8zNnlpbni2YMz+dJcdn4pl80VF89kZ4vF2UI+myvON/1HFzZeCsXimalYWDo3Uc6XyhOl5ZUT88WlhfKJ0/PTs/kT+YGuRQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Sstr8xNFwr5xQc68eP+iM4WMbRDIt0pif7YEdWQ6FiivpcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDD/RsAAP//FcUpCg==")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000003380))
r0 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r0})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000140)=0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQbKN2YGlsFDxUPIlgo6Nk2bLahZpMt2U1pQqAtIngRVDwIeunZH/Xm1R9H9b/wIC1V02LFg0Rms9tum93tpmZ3U/v5wGTfm5nNe999M2/e7Aw7ATy0xtI/mYh9EfFBEjFSnZ9ExEAl1R9xdGO9m2uruXRKYn39jd+Tyjo31lZzUfee1J5q5smI+P7diAOZzeWWllfmpguF/GI1P1GePzNRWl45eHp+ejY/m184PDk1dejI80cOb1+sf/68svfqh6/u/+ro3+88cfn9H5I4Gnury+rj2C5jMVb9TAbSj/AOr2x3YT2W9LoC3Jd01+zb2MtjX4xEXyXVxFA3awYAdMr5iFhv7nyLZQDAAytpdfwHAP6Hat8D3FhbzdWm3n4j0V3XXo6I3Rvx165vbizpr16z2125Djp8I7njykgSEaPbUP5YRHz2zVtfpFN06DokQCMXLkbEydGxzf1/sumeha16ttXC9cHKy9hds/V/0D3fpuOfFxqN/zK3xj/RYPwz2GDfvR/33v8zV7ahmKbS8d9Ldfe23ayLv2q0r5p7pDLmG0hOnS7k077t0YgYj4HBND9ZWbXxXVDj1/+53qz8+vHfHx+9/Xlafvp6e43Mlf7B+upEzEyXp7cj9tS1ixFP9TeKP7nV/kmT8e/xNst47cX3Pm22LI0/jbc2bY6/s9YvRTzTsP1vt2XS8v7EicrmMFHbKBr4+pdPhpuVX9/+6ZSWXzsX6Ia0/Ydbxz+a1N+vWdp6GT9dGvmu2bJ7x1/d/uuk2/+u5M1Keld13rnpcnlxMmJX8vrm+Yduv7eWr62fxj/+dOP9v9X2n54Tnmwz/v6rv315//F3Vhr/zJbaf+uJyzfn+pqV3177T1VS49U57fR/9bVIWlTwv3x2AAAAAAAAAAAAAAAAAAAAAAAAANCuTETsjSSTvZXOZLLZjWd4Px7DmUKxVD5wqri0MBOVZ2WPxkCm9lOXI3W/hzpZ/T38Wv7QXfnnIuKxiPh4cKiSz+aKhZleBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVXuaPP8/9etgr2sHAHTM7l5XAADoOsd/AHj4bO34P9SxegAA3eP8HwAePm0f/092th4AQPc4/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjh87lk7rf62t5tL8zNnlpbni2YMz+dJcdn4pl80VF89kZ4vF2UI+myvON/1HFzZeCsXimalYWDo3Uc6XyhOl5ZUT88WlhfKJ0/PTs/kT+YGuRQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Sstr8xNFwr5xQc68eP+iM4WMbRDIt0pif7YEdWQ6FiivpcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDD/RsAAP//FcUpCg==")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQbKN2YGlsFDxUPIlgo6Nk2bLahZpMt2U1pQqAtIngRVDwIeunZH/Xm1R9H9b/wIC1V02LFg0Rms9tum93tpmZ3U/v5wGTfm5nNe999M2/e7Aw7ATy0xtI/mYh9EfFBEjFSnZ9ExEAl1R9xdGO9m2uruXRKYn39jd+Tyjo31lZzUfee1J5q5smI+P7diAOZzeWWllfmpguF/GI1P1GePzNRWl45eHp+ejY/m184PDk1dejI80cOb1+sf/68svfqh6/u/+ro3+88cfn9H5I4Gnury+rj2C5jMVb9TAbSj/AOr2x3YT2W9LoC3Jd01+zb2MtjX4xEXyXVxFA3awYAdMr5iFhv7nyLZQDAAytpdfwHAP6Hat8D3FhbzdWm3n4j0V3XXo6I3Rvx165vbizpr16z2125Djp8I7njykgSEaPbUP5YRHz2zVtfpFN06DokQCMXLkbEydGxzf1/sumeha16ttXC9cHKy9hds/V/0D3fpuOfFxqN/zK3xj/RYPwz2GDfvR/33v8zV7ahmKbS8d9Ldfe23ayLv2q0r5p7pDLmG0hOnS7k077t0YgYj4HBND9ZWbXxXVDj1/+53qz8+vHfHx+9/Xlafvp6e43Mlf7B+upEzEyXp7cj9tS1ixFP9TeKP7nV/kmT8e/xNst47cX3Pm22LI0/jbc2bY6/s9YvRTzTsP1vt2XS8v7EicrmMFHbKBr4+pdPhpuVX9/+6ZSWXzsX6Ia0/Ydbxz+a1N+vWdp6GT9dGvmu2bJ7x1/d/uuk2/+u5M1Keld13rnpcnlxMmJX8vrm+Yduv7eWr62fxj/+dOP9v9X2n54Tnmwz/v6rv315//F3Vhr/zJbaf+uJyzfn+pqV3177T1VS49U57fR/9bVIWlTwv3x2AAAAAAAAAAAAAAAAAAAAAAAAANCuTETsjSSTvZXOZLLZjWd4Px7DmUKxVD5wqri0MBOVZ2WPxkCm9lOXI3W/hzpZ/T38Wv7QXfnnIuKxiPh4cKiSz+aKhZleBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVXuaPP8/9etgr2sHAHTM7l5XAADoOsd/AHj4bO34P9SxegAA3eP8HwAePm0f/092th4AQPc4/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjh87lk7rf62t5tL8zNnlpbni2YMz+dJcdn4pl80VF89kZ4vF2UI+myvON/1HFzZeCsXimalYWDo3Uc6XyhOl5ZUT88WlhfKJ0/PTs/kT+YGuRQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Sstr8xNFwr5xQc68eP+iM4WMbRDIt0pif7YEdWQ6FiivpcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDD/RsAAP//FcUpCg==")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQbKN2YGlsFDxUPIlgo6Nk2bLahZpMt2U1pQqAtIngRVDwIeunZH/Xm1R9H9b/wIC1V02LFg0Rms9tum93tpmZ3U/v5wGTfm5nNe999M2/e7Aw7ATy0xtI/mYh9EfFBEjFSnZ9ExEAl1R9xdGO9m2uruXRKYn39jd+Tyjo31lZzUfee1J5q5smI+P7diAOZzeWWllfmpguF/GI1P1GePzNRWl45eHp+ejY/m184PDk1dejI80cOb1+sf/68svfqh6/u/+ro3+88cfn9H5I4Gnury+rj2C5jMVb9TAbSj/AOr2x3YT2W9LoC3Jd01+zb2MtjX4xEXyXVxFA3awYAdMr5iFhv7nyLZQDAAytpdfwHAP6Hat8D3FhbzdWm3n4j0V3XXo6I3Rvx165vbizpr16z2125Djp8I7njykgSEaPbUP5YRHz2zVtfpFN06DokQCMXLkbEydGxzf1/sumeha16ttXC9cHKy9hds/V/0D3fpuOfFxqN/zK3xj/RYPwz2GDfvR/33v8zV7ahmKbS8d9Ldfe23ayLv2q0r5p7pDLmG0hOnS7k077t0YgYj4HBND9ZWbXxXVDj1/+53qz8+vHfHx+9/Xlafvp6e43Mlf7B+upEzEyXp7cj9tS1ixFP9TeKP7nV/kmT8e/xNst47cX3Pm22LI0/jbc2bY6/s9YvRTzTsP1vt2XS8v7EicrmMFHbKBr4+pdPhpuVX9/+6ZSWXzsX6Ia0/Ydbxz+a1N+vWdp6GT9dGvmu2bJ7x1/d/uuk2/+u5M1Keld13rnpcnlxMmJX8vrm+Yduv7eWr62fxj/+dOP9v9X2n54Tnmwz/v6rv315//F3Vhr/zJbaf+uJyzfn+pqV3177T1VS49U57fR/9bVIWlTwv3x2AAAAAAAAAAAAAAAAAAAAAAAAANCuTETsjSSTvZXOZLLZjWd4Px7DmUKxVD5wqri0MBOVZ2WPxkCm9lOXI3W/hzpZ/T38Wv7QXfnnIuKxiPh4cKiSz+aKhZleBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVXuaPP8/9etgr2sHAHTM7l5XAADoOsd/AHj4bO34P9SxegAA3eP8HwAePm0f/092th4AQPc4/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjh87lk7rf62t5tL8zNnlpbni2YMz+dJcdn4pl80VF89kZ4vF2UI+myvON/1HFzZeCsXimalYWDo3Uc6XyhOl5ZUT88WlhfKJ0/PTs/kT+YGuRQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Sstr8xNFwr5xQc68eP+iM4WMbRDIt0pif7YEdWQ6FiivpcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDD/RsAAP//FcUpCg==")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQbKN2YGlsFDxUPIlgo6Nk2bLahZpMt2U1pQqAtIngRVDwIeunZH/Xm1R9H9b/wIC1V02LFg0Rms9tum93tpmZ3U/v5wGTfm5nNe999M2/e7Aw7ATy0xtI/mYh9EfFBEjFSnZ9ExEAl1R9xdGO9m2uruXRKYn39jd+Tyjo31lZzUfee1J5q5smI+P7diAOZzeWWllfmpguF/GI1P1GePzNRWl45eHp+ejY/m184PDk1dejI80cOb1+sf/68svfqh6/u/+ro3+88cfn9H5I4Gnury+rj2C5jMVb9TAbSj/AOr2x3YT2W9LoC3Jd01+zb2MtjX4xEXyXVxFA3awYAdMr5iFhv7nyLZQDAAytpdfwHAP6Hat8D3FhbzdWm3n4j0V3XXo6I3Rvx165vbizpr16z2125Djp8I7njykgSEaPbUP5YRHz2zVtfpFN06DokQCMXLkbEydGxzf1/sumeha16ttXC9cHKy9hds/V/0D3fpuOfFxqN/zK3xj/RYPwz2GDfvR/33v8zV7ahmKbS8d9Ldfe23ayLv2q0r5p7pDLmG0hOnS7k077t0YgYj4HBND9ZWbXxXVDj1/+53qz8+vHfHx+9/Xlafvp6e43Mlf7B+upEzEyXp7cj9tS1ixFP9TeKP7nV/kmT8e/xNst47cX3Pm22LI0/jbc2bY6/s9YvRTzTsP1vt2XS8v7EicrmMFHbKBr4+pdPhpuVX9/+6ZSWXzsX6Ia0/Ydbxz+a1N+vWdp6GT9dGvmu2bJ7x1/d/uuk2/+u5M1Keld13rnpcnlxMmJX8vrm+Yduv7eWr62fxj/+dOP9v9X2n54Tnmwz/v6rv315//F3Vhr/zJbaf+uJyzfn+pqV3177T1VS49U57fR/9bVIWlTwv3x2AAAAAAAAAAAAAAAAAAAAAAAAANCuTETsjSSTvZXOZLLZjWd4Px7DmUKxVD5wqri0MBOVZ2WPxkCm9lOXI3W/hzpZ/T38Wv7QXfnnIuKxiPh4cKiSz+aKhZleBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVXuaPP8/9etgr2sHAHTM7l5XAADoOsd/AHj4bO34P9SxegAA3eP8HwAePm0f/092th4AQPc4/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjh87lk7rf62t5tL8zNnlpbni2YMz+dJcdn4pl80VF89kZ4vF2UI+myvON/1HFzZeCsXimalYWDo3Uc6XyhOl5ZUT88WlhfKJ0/PTs/kT+YGuRQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Sstr8xNFwr5xQc68eP+iM4WMbRDIt0pif7YEdWQ6FiivpcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDD/RsAAP//FcUpCg==")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQbKN2YGlsFDxUPIlgo6Nk2bLahZpMt2U1pQqAtIngRVDwIeunZH/Xm1R9H9b/wIC1V02LFg0Rms9tum93tpmZ3U/v5wGTfm5nNe999M2/e7Aw7ATy0xtI/mYh9EfFBEjFSnZ9ExEAl1R9xdGO9m2uruXRKYn39jd+Tyjo31lZzUfee1J5q5smI+P7diAOZzeWWllfmpguF/GI1P1GePzNRWl45eHp+ejY/m184PDk1dejI80cOb1+sf/68svfqh6/u/+ro3+88cfn9H5I4Gnury+rj2C5jMVb9TAbSj/AOr2x3YT2W9LoC3Jd01+zb2MtjX4xEXyXVxFA3awYAdMr5iFhv7nyLZQDAAytpdfwHAP6Hat8D3FhbzdWm3n4j0V3XXo6I3Rvx165vbizpr16z2125Djp8I7njykgSEaPbUP5YRHz2zVtfpFN06DokQCMXLkbEydGxzf1/sumeha16ttXC9cHKy9hds/V/0D3fpuOfFxqN/zK3xj/RYPwz2GDfvR/33v8zV7ahmKbS8d9Ldfe23ayLv2q0r5p7pDLmG0hOnS7k077t0YgYj4HBND9ZWbXxXVDj1/+53qz8+vHfHx+9/Xlafvp6e43Mlf7B+upEzEyXp7cj9tS1ixFP9TeKP7nV/kmT8e/xNst47cX3Pm22LI0/jbc2bY6/s9YvRTzTsP1vt2XS8v7EicrmMFHbKBr4+pdPhpuVX9/+6ZSWXzsX6Ia0/Ydbxz+a1N+vWdp6GT9dGvmu2bJ7x1/d/uuk2/+u5M1Keld13rnpcnlxMmJX8vrm+Yduv7eWr62fxj/+dOP9v9X2n54Tnmwz/v6rv315//F3Vhr/zJbaf+uJyzfn+pqV3177T1VS49U57fR/9bVIWlTwv3x2AAAAAAAAAAAAAAAAAAAAAAAAANCuTETsjSSTvZXOZLLZjWd4Px7DmUKxVD5wqri0MBOVZ2WPxkCm9lOXI3W/hzpZ/T38Wv7QXfnnIuKxiPh4cKiSz+aKhZleBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVXuaPP8/9etgr2sHAHTM7l5XAADoOsd/AHj4bO34P9SxegAA3eP8HwAePm0f/092th4AQPc4/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjh87lk7rf62t5tL8zNnlpbni2YMz+dJcdn4pl80VF89kZ4vF2UI+myvON/1HFzZeCsXimalYWDo3Uc6XyhOl5ZUT88WlhfKJ0/PTs/kT+YGuRQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Sstr8xNFwr5xQc68eP+iM4WMbRDIt0pif7YEdWQ6FiivpcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDD/RsAAP//FcUpCg==")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program did not crash
testing program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQbKN2YGlsFDxUPIlgo6Nk2bLahZpMt2U1pQqAtIngRVDwIeunZH/Xm1R9H9b/wIC1V02LFg0Rms9tum93tpmZ3U/v5wGTfm5nNe999M2/e7Aw7ATy0xtI/mYh9EfFBEjFSnZ9ExEAl1R9xdGO9m2uruXRKYn39jd+Tyjo31lZzUfee1J5q5smI+P7diAOZzeWWllfmpguF/GI1P1GePzNRWl45eHp+ejY/m184PDk1dejI80cOb1+sf/68svfqh6/u/+ro3+88cfn9H5I4Gnury+rj2C5jMVb9TAbSj/AOr2x3YT2W9LoC3Jd01+zb2MtjX4xEXyXVxFA3awYAdMr5iFhv7nyLZQDAAytpdfwHAP6Hat8D3FhbzdWm3n4j0V3XXo6I3Rvx165vbizpr16z2125Djp8I7njykgSEaPbUP5YRHz2zVtfpFN06DokQCMXLkbEydGxzf1/sumeha16ttXC9cHKy9hds/V/0D3fpuOfFxqN/zK3xj/RYPwz2GDfvR/33v8zV7ahmKbS8d9Ldfe23ayLv2q0r5p7pDLmG0hOnS7k077t0YgYj4HBND9ZWbXxXVDj1/+53qz8+vHfHx+9/Xlafvp6e43Mlf7B+upEzEyXp7cj9tS1ixFP9TeKP7nV/kmT8e/xNst47cX3Pm22LI0/jbc2bY6/s9YvRTzTsP1vt2XS8v7EicrmMFHbKBr4+pdPhpuVX9/+6ZSWXzsX6Ia0/Ydbxz+a1N+vWdp6GT9dGvmu2bJ7x1/d/uuk2/+u5M1Keld13rnpcnlxMmJX8vrm+Yduv7eWr62fxj/+dOP9v9X2n54Tnmwz/v6rv315//F3Vhr/zJbaf+uJyzfn+pqV3177T1VS49U57fR/9bVIWlTwv3x2AAAAAAAAAAAAAAAAAAAAAAAAANCuTETsjSSTvZXOZLLZjWd4Px7DmUKxVD5wqri0MBOVZ2WPxkCm9lOXI3W/hzpZ/T38Wv7QXfnnIuKxiPh4cKiSz+aKhZleBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVXuaPP8/9etgr2sHAHTM7l5XAADoOsd/AHj4bO34P9SxegAA3eP8HwAePm0f/092th4AQPc4/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjh87lk7rf62t5tL8zNnlpbni2YMz+dJcdn4pl80VF89kZ4vF2UI+myvON/1HFzZeCsXimalYWDo3Uc6XyhOl5ZUT88WlhfKJ0/PTs/kT+YGuRQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Sstr8xNFwr5xQc68eP+iM4WMbRDIt0pif7YEdWQ6FiivpcY6l0HBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDD/RsAAP//FcUpCg==")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40000)

program did not crash
extracting C reproducer
testing compiled C program (duration=34.914116557s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
program crashed: kernel BUG in ext4_writepages
simplifying C reproducer
testing compiled C program (duration=34.914116557s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
program crashed: kernel BUG in ext4_writepages
testing compiled C program (duration=34.914116557s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
program did not crash
testing compiled C program (duration=34.914116557s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
program crashed: kernel BUG in ext4_writepages
testing compiled C program (duration=34.914116557s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
program crashed: kernel BUG in ext4_writepages
testing compiled C program (duration=34.914116557s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
program did not crash
testing compiled C program (duration=34.914116557s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
program crashed: kernel BUG in ext4_writepages
testing compiled C program (duration=34.914116557s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
program crashed: kernel BUG in ext4_writepages
testing program (duration=34.914116557s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program crashed: kernel BUG in ext4_writepages
validation run: crashed=true
testing program (duration=34.914116557s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program crashed: kernel BUG in ext4_writepages
validation run: crashed=true
testing program (duration=34.914116557s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$vhost_vsock-ioctl$VHOST_SET_OWNER-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_MEM_TABLE-eventfd2-ioctl$VHOST_SET_VRING_ERR-ioctl$VHOST_SET_VRING_ADDR-ioctl$VHOST_SET_VRING_KICK-syz_mount_image$ext4-ioctl$VHOST_VSOCK_SET_RUNNING-openat$cgroup_ro-write$binfmt_script-mmap-sendmsg$TCPDIAG_GETSOCK
detailed listing:
executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380))
r1 = eventfd2(0x76, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/175, 0x0, 0x1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@nobh}, {@debug}]}, 0x1, 0x796, &(0x7f0000002480)="$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")
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000)

program crashed: kernel BUG in ext4_writepages
validation run: crashed=true
reproducing took 30m50.155514414s
repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/ext4/inode.c:2747!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
Workqueue: writeback wb_workfn (flush-7:2)
RIP: 0010:ext4_writepages+0x2f75/0x2f90 fs/ext4/inode.c:2746
Code: 00 00 00 e8 cd 7a 8f ff 84 db 75 2c e8 34 78 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 1b 78 8f ff <0f> 0b e8 14 78 8f ff e8 cb 2f 27 ff eb a2 e8 08 78 8f ff e8 bf 2f
RSP: 0018:ffffc900000a7100 EFLAGS: 00010293
RAX: ffffffff81d946f5 RBX: 000000c410000000 RCX: ffff888100274f00
RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
RBP: ffffc900000a7470 R08: dffffc0000000000 R09: ffffed1025c4098a
R10: ffffed1025c4098a R11: 1ffff11025c40989 R12: dffffc0000000000
R13: 0000000000000001 R14: 0000008000000000 R15: ffff88812e204ee0
FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000140 CR3: 0000000123271000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 do_writepages+0x48a/0x6c0 mm/page-writeback.c:2388
 __writeback_single_inode+0xd5/0x9c0 fs/fs-writeback.c:1647
 writeback_sb_inodes+0x9c0/0x1590 fs/fs-writeback.c:1930
 wb_writeback+0x3f1/0x980 fs/fs-writeback.c:2106
 wb_do_writeback fs/fs-writeback.c:2253 [inline]
 wb_workfn+0x38f/0xe20 fs/fs-writeback.c:2294
 process_one_work+0x6be/0xba0 kernel/workqueue.c:2325
 worker_thread+0xa59/0x1200 kernel/workqueue.c:2472
 kthread+0x411/0x500 kernel/kthread.c:337
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
Modules linked in:
---[ end trace e55b9d57d5c7e691 ]---
RIP: 0010:ext4_writepages+0x2f75/0x2f90 fs/ext4/inode.c:2746
Code: 00 00 00 e8 cd 7a 8f ff 84 db 75 2c e8 34 78 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 1b 78 8f ff <0f> 0b e8 14 78 8f ff e8 cb 2f 27 ff eb a2 e8 08 78 8f ff e8 bf 2f
RSP: 0018:ffffc900000a7100 EFLAGS: 00010293
RAX: ffffffff81d946f5 RBX: 000000c410000000 RCX: ffff888100274f00
RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
RBP: ffffc900000a7470 R08: dffffc0000000000 R09: ffffed1025c4098a
R10: ffffed1025c4098a R11: 1ffff11025c40989 R12: dffffc0000000000
R13: 0000000000000001 R14: 0000008000000000 R15: ffff88812e204ee0
FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000140 CR3: 00000001232c2000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

final repro crashed as (corrupted=false):
------------[ cut here ]------------
kernel BUG at fs/ext4/inode.c:2747!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
Workqueue: writeback wb_workfn (flush-7:2)
RIP: 0010:ext4_writepages+0x2f75/0x2f90 fs/ext4/inode.c:2746
Code: 00 00 00 e8 cd 7a 8f ff 84 db 75 2c e8 34 78 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 1b 78 8f ff <0f> 0b e8 14 78 8f ff e8 cb 2f 27 ff eb a2 e8 08 78 8f ff e8 bf 2f
RSP: 0018:ffffc900000a7100 EFLAGS: 00010293
RAX: ffffffff81d946f5 RBX: 000000c410000000 RCX: ffff888100274f00
RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
RBP: ffffc900000a7470 R08: dffffc0000000000 R09: ffffed1025c4098a
R10: ffffed1025c4098a R11: 1ffff11025c40989 R12: dffffc0000000000
R13: 0000000000000001 R14: 0000008000000000 R15: ffff88812e204ee0
FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000140 CR3: 0000000123271000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 do_writepages+0x48a/0x6c0 mm/page-writeback.c:2388
 __writeback_single_inode+0xd5/0x9c0 fs/fs-writeback.c:1647
 writeback_sb_inodes+0x9c0/0x1590 fs/fs-writeback.c:1930
 wb_writeback+0x3f1/0x980 fs/fs-writeback.c:2106
 wb_do_writeback fs/fs-writeback.c:2253 [inline]
 wb_workfn+0x38f/0xe20 fs/fs-writeback.c:2294
 process_one_work+0x6be/0xba0 kernel/workqueue.c:2325
 worker_thread+0xa59/0x1200 kernel/workqueue.c:2472
 kthread+0x411/0x500 kernel/kthread.c:337
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
Modules linked in:
---[ end trace e55b9d57d5c7e691 ]---
RIP: 0010:ext4_writepages+0x2f75/0x2f90 fs/ext4/inode.c:2746
Code: 00 00 00 e8 cd 7a 8f ff 84 db 75 2c e8 34 78 8f ff 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 e9 d6 f7 ff ff e8 1b 78 8f ff <0f> 0b e8 14 78 8f ff e8 cb 2f 27 ff eb a2 e8 08 78 8f ff e8 bf 2f
RSP: 0018:ffffc900000a7100 EFLAGS: 00010293
RAX: ffffffff81d946f5 RBX: 000000c410000000 RCX: ffff888100274f00
RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
RBP: ffffc900000a7470 R08: dffffc0000000000 R09: ffffed1025c4098a
R10: ffffed1025c4098a R11: 1ffff11025c40989 R12: dffffc0000000000
R13: 0000000000000001 R14: 0000008000000000 R15: ffff88812e204ee0
FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000140 CR3: 00000001232c2000 CR4: 00000000003506b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400