b386dee78f827eae0582b7a88ba37ef3a4aa2a634d063d1ea8298d01732254ce28aa276aaf97e674b2fd93aa4393fac20743fa46e9451b4d84a00e56ce388b8349c7531db2c8431105441630fd45bf42766076eeec5829c3a2677d9ae3d7bf9b6885378798444024a8e9f7e54f25ccd6732e947a92f84c8eda27f9d66b8c101724ab59f484dbf1dcebf0a0b0965be5a06514505e576fdbda79c799ef93ba02ebe41493740681c5640d54b17c6366bec671175f1391c363074ba058097cb4d7f5153355872633d52141cbd666ca685af158cbc26f8db83", 0x1000}, {&(0x7f0000006cc0)="9a514ed645f476e6d337f47766a298a54c59f35886fc2079d6424e4325786bc5b6acba8b48c24335849ba4d2186aca5c2cc92f1a8544f94c40069aeee273ea879625c5b0935f8424626f7f37ab4bee69ad3cb04078466ef957fd6900a64474edff0e366bc5953341e5064eba3ac4eb4c9351e77c712e5803f8c65977b9c65207166ce9b4a99221108923f3f8e91cbaec1ae51eac940258588c1f55006710632e11aa4ec3346f46bb44147129072d095da32b3448e7d3dea82a0f88320438a2c8568847", 0xc3}, {&(0x7f0000006dc0)="6777302a7a5e9eb502df3230a24e18674880fd6f0df01ad91e49faca79ee103edfcd416779b0be71ec1b7183ea05b77016beee115020896c4c816b024ea0d58b36cc40474b117800fe90a8afa111d21cdd857520de82ba", 0x57}, {&(0x7f0000006e40)="7110abff9f58e974efe9e4dca3a64f15bedfc717de56fc88976cb346ca9c2d1416c57ca36f493399995997b5ade970c59223fbfcdeb7f019e6cdb730d46eddec8756fc920102c7b5aadf2ba6146c23688378a1d98b3516014e8fdf23be5c4335ac3b7e6df91c67c6f171bf8062991e7e819f2720a3e4dcc3b6bef457cad49e52bd311743f9768dfacf3718d368b33f3d69b6", 0x92}, {&(0x7f0000006f00)="55e3855fb3a9c2dddf770943100fbc001c7054d9053b0d64158ce32c665da2755fbe6fe51feffdfbd8db7ab8e06e1e47cef09cf877f452f36568bec84fbdd5bc7771c815ea97fd78ac136cb8d73cab0729bbcb5e375e103e572b568d75670cfadbdc7bd125be49ce1f9c772fa2eb4140", 0x70}], 0x5, &(0x7f0000007000)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0xe, 0x3ff, 0xddc}}, @init={0x18, 0x84, 0x0, {0x9, 0x81, 0x6, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0x7fff}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x1, 0x206, 0x9, 0x6, 0x467af4ab, 0xffd, 0x1}}], 0x80, 0x4080010}, {&(0x7f0000007080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000007140)=[{&(0x7f00000070c0)="70e5f83938bf18dca03e4c9f22a923a497c98bad6ee387c92c0b5b2a8d80eb591f681a337df4d3b61ca350151a063597704792d918d919b5c5f65fd78d0320a0267dbb4e775b62579479681612f2450232b5dd86139e2b8209b797ec1f237fe6d1e5dae6696348e0", 0x68}], 0x1, &(0x7f0000007180)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x0, 0x4, 0x2}}, @init={0x18, 0x84, 0x0, {0x1ff, 0x1, 0xb990, 0x1}}, @init={0x18, 0x84, 0x0, {0x4, 0x6, 0x5, 0x1ff}}, @init={0x18, 0x84, 0x0, {0x3, 0x1, 0x7f, 0x2}}], 0x88, 0x14}], 0x7, 0x4000) (async) syz_read_part_table(0x0, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000000), 0x0, 0xbd9a}, {0x0, 0x0, 0x7}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="c9f2af", 0x3}, {&(0x7f00000003c0), 0x0, 0x10001}]) [ 1788.049667][T18927] loop5: detected capacity change from 0 to 256 [ 1788.049894][ T1437] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1788.065134][ T1437] Buffer I/O error on dev loop5, logical block 0, async page read [ 1788.101882][T18950] loop4: detected capacity change from 0 to 512 [ 1788.105901][T18953] loop0: detected capacity change from 0 to 512 [ 1788.116862][T18956] loop3: detected capacity change from 0 to 512 [ 1788.123524][T18953] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1788.135323][T18952] FAT-fs (loop2): bogus number of reserved sectors [ 1788.135935][T18959] loop5: detected capacity change from 0 to 256 16:42:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0012000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x74, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000700010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1788.141912][T18952] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1788.157198][T18950] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1788.167297][T18950] EXT4-fs (loop4): group descriptors corrupted! [ 1788.173725][T18956] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0011000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000e00)=0x3, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) setsockopt(r3, 0x101, 0x9, &(0x7f00000000c0)="195b22382531e7df3be7db6d3a4fdd6bf35e992221765500ca769cd2b5c2", 0x1e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x0) r4 = dup(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000002e0004002dbd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x50) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0xffffff70, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008e48c0201b8f21a00", @ANYRES32=r1, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000007"], 0x40}, 0x0) [ 1788.202456][T18961] loop4: detected capacity change from 0 to 512 [ 1788.219646][T18965] loop0: detected capacity change from 0 to 512 [ 1788.232749][T18966] FAT-fs (loop2): bogus number of reserved sectors [ 1788.239327][T18966] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1788.252591][T18965] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1788.257154][T18961] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1788.272994][T18961] EXT4-fs (loop4): group descriptors corrupted! [ 1788.279615][T18969] loop3: detected capacity change from 0 to 512 [ 1788.287011][T18971] loop1: detected capacity change from 0 to 512 [ 1788.293830][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000800010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1788.308787][T18969] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1788.313137][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1788.319931][T18971] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1788.338468][T18971] EXT4-fs (loop1): group descriptors corrupted! [ 1788.350454][T18973] loop0: detected capacity change from 0 to 512 [ 1788.351389][ T1437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1788.365915][ T1437] Buffer I/O error on dev loop0, logical block 0, async page read [ 1788.379692][T18973] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:26 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce1400000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7a, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0014000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0012000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000900010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000e00)=0x3, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) setsockopt(r3, 0x101, 0x9, &(0x7f00000000c0)="195b22382531e7df3be7db6d3a4fdd6bf35e992221765500ca769cd2b5c2", 0x1e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x0) r4 = dup(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000002e0004002dbd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x50) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0xffffff70, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008e48c0201b8f21a00", @ANYRES32=r1, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000007"], 0x40}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) (async) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000e00)=0x3, 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) setsockopt(r3, 0x101, 0x9, &(0x7f00000000c0)="195b22382531e7df3be7db6d3a4fdd6bf35e992221765500ca769cd2b5c2", 0x1e) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x0) (async) dup(r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000002e0004002dbd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="0c000500000000000000040908000b000500000008000b002000000008000b00800000002b8cd2c9dbb646df223e7601d15def5078b544f0b39b9a07cf58b44abe67152b8d70b6efd221963855d5749d3e7b89db963736d30c27778aa9daf5385e7ed4fc968e1160e3cbed6addaa8b4694977515ab408890d9f212d468529fba6519dabdf76de2101777f2caf424938aabd7384db98df30da615623b0c72f67ab661a6c2a66b788e8780d7329434c6d153ba62a376e99b7241637ef816d9fd0e4a73ff7ace51b71c00b1a5684e016c6c82d1fd8ffb1424e79ee7e26e1cf50fa3a76b21a88af1d9dcdb1073651de86a1c533ca03f1e34933bfa713088c17703100de4b2b7c4fd321ccfb1fd99d1daf8da90f02bfdb3"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x50) (async) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0xffffff70, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008e48c0201b8f21a00", @ANYRES32=r1, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000007"], 0x40}, 0x0) (async) [ 1788.965681][T18978] loop4: detected capacity change from 0 to 512 [ 1788.974037][T18983] loop0: detected capacity change from 0 to 512 [ 1788.974772][T18984] loop3: detected capacity change from 0 to 512 [ 1788.986949][T18982] FAT-fs (loop2): bogus number of reserved sectors [ 1788.993509][T18982] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1789.001006][T18981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1789.010748][T18983] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1789.013272][T18984] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1789.031328][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1789.040687][T18978] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1789.050773][T18978] EXT4-fs (loop4): group descriptors corrupted! 16:42:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000a00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0022000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:27 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000e00)=0x3, 0x4) (async, rerun: 64) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) setsockopt(r3, 0x101, 0x9, &(0x7f00000000c0)="195b22382531e7df3be7db6d3a4fdd6bf35e992221765500ca769cd2b5c2", 0x1e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x0) r4 = dup(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000002e0004002dbd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x50) (async) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0xffffff70, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008e48c0201b8f21a00", @ANYRES32=r1, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000007"], 0x40}, 0x0) 16:42:27 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x89, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0014000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1789.105043][T19008] loop0: detected capacity change from 0 to 512 [ 1789.129490][T19008] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1789.149844][T19015] FAT-fs (loop2): bogus number of reserved sectors [ 1789.156425][T19015] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1789.167284][T19017] loop4: detected capacity change from 0 to 512 [ 1789.169031][T19014] loop3: detected capacity change from 0 to 512 [ 1789.173568][T19010] loop1: detected capacity change from 0 to 512 [ 1789.188841][T19017] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1789.198945][T19017] EXT4-fs (loop4): group descriptors corrupted! 16:42:27 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x7, 0x3e782) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000240)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) r5 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x9) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x4ea00) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 1789.205728][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1789.206911][T19014] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1789.230805][T19010] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1789.240864][T19010] EXT4-fs (loop1): group descriptors corrupted! 16:42:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000b00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:27 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xd8, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0025000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0022000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:27 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce2200000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:27 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x7, 0x3e782) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000240)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) (async) r5 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x9) (async) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x4ea00) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 1789.868204][T19029] loop4: detected capacity change from 0 to 512 [ 1789.871290][T19031] loop3: detected capacity change from 0 to 512 [ 1789.881643][T19027] loop0: detected capacity change from 0 to 512 [ 1789.891519][T19030] FAT-fs (loop2): bogus number of reserved sectors [ 1789.898093][T19030] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1789.905494][T19027] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:27 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x7, 0x3e782) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000240)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$RTC_AIE_ON(r3, 0x7001) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) (async) r5 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x9) (async) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x4ea00) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 1789.905838][T19029] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1789.916972][T19031] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1789.925670][T19029] EXT4-fs (loop4): group descriptors corrupted! 16:42:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0025000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000c00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0026000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:28 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xd9, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1790.011575][T19046] loop0: detected capacity change from 0 to 512 [ 1790.018300][T19044] loop3: detected capacity change from 0 to 512 [ 1790.030794][T19049] loop4: detected capacity change from 0 to 512 [ 1790.039024][T19044] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1790.049689][T19050] FAT-fs (loop2): bogus number of reserved sectors 16:42:28 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710034000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r3}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r5}, 0x80) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="0216800000000000851000c7608c527c0a323000faffffff850000006a0000009500000000000000950000008ee9060018630000060000000000000078e5ff0018000000cd572375"], &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r5, r6, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000}, 0x10, r5}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x0, 0x2, 0x7, 0x7, 0x1, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x1, 0x4, 0x4, 0x9, 0x6}, @alu={0x4, 0x0, 0xa, 0xb, 0xd, 0xfffffffffffffff4, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x50, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='syzkaller\x00', 0x1000, 0xf1, &(0x7f00000000c0)=""/241, 0x40f00, 0xe, '\x00', r3, 0x26, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x7}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x6, 0x9}, 0x10, r5, r7}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb22}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}]}, &(0x7f0000000140)='syzkaller\x00', 0xff, 0x83, &(0x7f0000000180)=""/131, 0x41100, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0xffffffff, 0x1}, 0x10, r5, r0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) [ 1790.056204][T19050] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1790.066723][T19051] loop1: detected capacity change from 0 to 512 [ 1790.073189][T19049] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1790.078507][T19046] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1790.083265][T19049] EXT4-fs (loop4): group descriptors corrupted! 16:42:28 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710034000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r3}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r5}, 0x80) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="0216800000000000851000c7608c527c0a323000faffffff850000006a0000009500000000000000950000008ee9060018630000060000000000000078e5ff0018000000cd572375"], &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r5, r6, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000}, 0x10, r5}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x0, 0x2, 0x7, 0x7, 0x1, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x1, 0x4, 0x4, 0x9, 0x6}, @alu={0x4, 0x0, 0xa, 0xb, 0xd, 0xfffffffffffffff4, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x50, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='syzkaller\x00', 0x1000, 0xf1, &(0x7f00000000c0)=""/241, 0x40f00, 0xe, '\x00', r3, 0x26, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x7}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x6, 0x9}, 0x10, r5, r7}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb22}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}]}, &(0x7f0000000140)='syzkaller\x00', 0xff, 0x83, &(0x7f0000000180)=""/131, 0x41100, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0xffffffff, 0x1}, 0x10, r5, r0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710034000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) (async) socket$inet6(0xa, 0x3, 0x3) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r3}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r5}, 0x80) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="0216800000000000851000c7608c527c0a323000faffffff850000006a0000009500000000000000950000008ee9060018630000060000000000000078e5ff0018000000cd572375"], &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r5, r6, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000}, 0x10, r5}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00', r7}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x0, 0x2, 0x7, 0x7, 0x1, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x1, 0x4, 0x4, 0x9, 0x6}, @alu={0x4, 0x0, 0xa, 0xb, 0xd, 0xfffffffffffffff4, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x50, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='syzkaller\x00', 0x1000, 0xf1, &(0x7f00000000c0)=""/241, 0x40f00, 0xe, '\x00', r3, 0x26, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x7}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x6, 0x9}, 0x10, r5, r7}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb22}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}]}, &(0x7f0000000140)='syzkaller\x00', 0xff, 0x83, &(0x7f0000000180)=""/131, 0x41100, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0xffffffff, 0x1}, 0x10, r5, r0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) (async) 16:42:28 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xda, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0026000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1790.138822][T19051] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1790.148882][T19051] EXT4-fs (loop1): group descriptors corrupted! 16:42:28 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710034000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r3}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r5}, 0x80) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="0216800000000000851000c7608c527c0a323000faffffff850000006a0000009500000000000000950000008ee9060018630000060000000000000078e5ff0018000000cd572375"], &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r5, r6, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000}, 0x10, r5}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x0, 0x2, 0x7, 0x7, 0x1, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x1, 0x4, 0x4, 0x9, 0x6}, @alu={0x4, 0x0, 0xa, 0xb, 0xd, 0xfffffffffffffff4, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x50, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='syzkaller\x00', 0x1000, 0xf1, &(0x7f00000000c0)=""/241, 0x40f00, 0xe, '\x00', r3, 0x26, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x7}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x6, 0x9}, 0x10, r5, r7}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb22}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}]}, &(0x7f0000000140)='syzkaller\x00', 0xff, 0x83, &(0x7f0000000180)=""/131, 0x41100, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0xffffffff, 0x1}, 0x10, r5, r0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710034000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) (async) socket$inet6(0xa, 0x3, 0x3) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@private1={0xfc, 0x15}, 0x7e, r3}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x1f, 0xb6, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r5}, 0x80) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="0216800000000000851000c7608c527c0a323000faffffff850000006a0000009500000000000000950000008ee9060018630000060000000000000078e5ff0018000000cd572375"], &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f0000002180)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0xfffffffd, 0x5, 0x9, 0x4}, 0x10, r5, r6, 0x0, &(0x7f0000000840)=[0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000}, 0x10, r5}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='9p_client_req\x00', r7}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x0, 0x2, 0x7, 0x7, 0x1, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x1, 0x4, 0x4, 0x9, 0x6}, @alu={0x4, 0x0, 0xa, 0xb, 0xd, 0xfffffffffffffff4, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x50, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='syzkaller\x00', 0x1000, 0xf1, &(0x7f00000000c0)=""/241, 0x40f00, 0xe, '\x00', r3, 0x26, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x7}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x6, 0x9}, 0x10, r5, r7}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb22}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}]}, &(0x7f0000000140)='syzkaller\x00', 0xff, 0x83, &(0x7f0000000180)=""/131, 0x41100, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0xffffffff, 0x1}, 0x10, r5, r0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x80) (async) [ 1790.185769][T19071] loop3: detected capacity change from 0 to 512 [ 1790.212006][T19073] FAT-fs (loop2): bogus number of reserved sectors [ 1790.218615][T19073] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1790.232362][T19071] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:28 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce2500000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000d00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0046000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18e4372feda2a0f0c145a6c58ac5564a6b0000005200010000000000000000000200000004000780"], 0x18}}, 0x0) 16:42:28 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xfe, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0046000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1790.762516][T19095] loop0: detected capacity change from 0 to 512 [ 1790.772363][T19098] loop3: detected capacity change from 0 to 512 [ 1790.783952][T19100] loop4: detected capacity change from 0 to 512 [ 1790.791864][T19097] FAT-fs (loop2): bogus number of reserved sectors [ 1790.798398][T19097] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18e4372feda2a0f0c145a6c58ac5564a6b0000005200010000000000000000000200000004000780"], 0x18}}, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18e4372feda2a0f0c145a6c58ac5564a6b0000005200010000000000000000000200000004000780"], 0x18}}, 0x0) (async) 16:42:28 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18e4372feda2a0f0c145a6c58ac5564a6b0000005200010000000000000000000200000004000780"], 0x18}}, 0x0) 16:42:28 executing program 5: set_mempolicy(0x5, &(0x7f0000000080)=0x4000080801, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x5, 0x247) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400e7a910000104000000000000000000000000d9f9c2eeaa34e5002cd1d7cbeb4fd09035817e5deae2e04a590a31a1debe9294e84ab411a1ac289fc0f11c000000000000000093b257efa82f6dd31639813b", @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b000100626174616476000004000280"], 0x34}}, 0x0) [ 1790.811749][T19095] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1790.832082][T19098] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1790.842401][T19100] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1790.852523][T19100] EXT4-fs (loop4): group descriptors corrupted! 16:42:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000e00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:28 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x204, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0048000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1790.913731][T19116] loop1: detected capacity change from 0 to 512 [ 1790.922129][T19115] loop0: detected capacity change from 0 to 512 [ 1790.923303][T19117] loop3: detected capacity change from 0 to 512 [ 1790.934065][ T1437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1790.943885][ T1437] Buffer I/O error on dev loop3, logical block 0, async page read [ 1790.953675][T19114] FAT-fs (loop2): bogus number of reserved sectors [ 1790.960199][T19114] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1790.966818][T19116] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1790.976879][T19116] EXT4-fs (loop1): group descriptors corrupted! [ 1790.984106][T19117] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1790.994445][T19115] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:29 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce2600000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:29 executing program 5: set_mempolicy(0x5, &(0x7f0000000080)=0x4000080801, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x5, 0x247) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400e7a910000104000000000000000000000000d9f9c2eeaa34e5002cd1d7cbeb4fd09035817e5deae2e04a590a31a1debe9294e84ab411a1ac289fc0f11c000000000000000093b257efa82f6dd31639813b", @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b000100626174616476000004000280"], 0x34}}, 0x0) set_mempolicy(0x5, &(0x7f0000000080)=0x4000080801, 0x5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) set_mempolicy(0x2, &(0x7f0000000040)=0x5, 0x247) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400e7a910000104000000000000000000000000d9f9c2eeaa34e5002cd1d7cbeb4fd09035817e5deae2e04a590a31a1debe9294e84ab411a1ac289fc0f11c000000000000000093b257efa82f6dd31639813b", @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b000100626174616476000004000280"], 0x34}}, 0x0) (async) 16:42:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0048000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:29 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x219, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce004c000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000f00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:29 executing program 5: set_mempolicy(0x5, &(0x7f0000000080)=0x4000080801, 0x5) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x5, 0x247) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400e7a910000104000000000000000000000000d9f9c2eeaa34e5002cd1d7cbeb4fd09035817e5deae2e04a590a31a1debe9294e84ab411a1ac289fc0f11c000000000000000093b257efa82f6dd31639813b", @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b000100626174616476000004000280"], 0x34}}, 0x0) [ 1791.664134][T19125] loop3: detected capacity change from 0 to 512 [ 1791.667461][T19122] loop4: detected capacity change from 0 to 512 [ 1791.670680][T19126] loop0: detected capacity change from 0 to 512 [ 1791.690484][T19124] FAT-fs (loop2): bogus number of reserved sectors [ 1791.697013][T19124] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1791.704360][T19125] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:29 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 16:42:29 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x300, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1791.715684][T19126] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1791.729683][T19122] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1791.739887][T19122] EXT4-fs (loop4): group descriptors corrupted! 16:42:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f001000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0060000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1791.766050][T19137] device batadv0 entered promiscuous mode [ 1791.792212][T19139] FAT-fs (loop2): bogus number of reserved sectors [ 1791.798772][T19139] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1791.809798][T19143] loop0: detected capacity change from 0 to 512 16:42:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce004c000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1791.817244][T19143] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1791.827576][T19145] loop3: detected capacity change from 0 to 512 [ 1791.836717][T19145] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1791.845129][T19146] loop1: detected capacity change from 0 to 512 [ 1791.867529][T19148] loop4: detected capacity change from 0 to 512 [ 1791.880051][T19146] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1791.890080][T19146] EXT4-fs (loop1): group descriptors corrupted! [ 1791.896472][T19148] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1791.906628][T19148] EXT4-fs (loop4): group descriptors corrupted! 16:42:30 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce4600000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f001100010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:30 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 16:42:30 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x402, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0068000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0055000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1792.593136][T19155] loop3: detected capacity change from 0 to 512 [ 1792.600615][T19158] loop0: detected capacity change from 0 to 512 [ 1792.601582][T19159] loop4: detected capacity change from 0 to 512 [ 1792.624160][T19155] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1792.634500][T19153] FAT-fs (loop2): bogus number of reserved sectors 16:42:30 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 16:42:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f001200010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1792.641071][T19153] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1792.648641][T19158] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1792.659439][T19159] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1792.669558][T19159] EXT4-fs (loop4): group descriptors corrupted! 16:42:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce006c000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:30 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x406, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0060000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1792.749136][T19174] loop0: detected capacity change from 0 to 512 [ 1792.751790][T19175] loop3: detected capacity change from 0 to 512 [ 1792.762652][T19176] loop4: detected capacity change from 0 to 512 [ 1792.765871][T19171] FAT-fs (loop2): bogus number of reserved sectors [ 1792.775453][T19171] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1792.776008][T19177] loop1: detected capacity change from 0 to 512 [ 1792.784117][T19175] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ftruncate(r2, 0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000140)='rtc_irq_set_freq\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000001c0)) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r2, r4, 0x0, 0x10000) [ 1792.800423][T19174] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1792.810644][T19176] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1792.820738][T19176] EXT4-fs (loop4): group descriptors corrupted! [ 1792.825482][T19177] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1792.837004][T19177] EXT4-fs (loop1): group descriptors corrupted! [ 1792.849181][T19179] loop5: detected capacity change from 0 to 264192 16:42:31 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce4800000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:31 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x500, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0074000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f001400010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0068000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1793.499359][T19185] loop3: detected capacity change from 0 to 512 [ 1793.501928][T19187] loop0: detected capacity change from 0 to 512 [ 1793.515477][T19185] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1793.515746][T19189] loop4: detected capacity change from 0 to 512 [ 1793.542697][T19188] FAT-fs (loop2): bogus number of reserved sectors [ 1793.549328][T19188] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1793.561063][T19187] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1793.585302][T19189] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:42:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce007a000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:31 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x59c, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1793.595468][T19189] EXT4-fs (loop4): group descriptors corrupted! 16:42:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f002200010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce006c000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1793.650884][T19197] loop3: detected capacity change from 0 to 512 [ 1793.658551][T19194] FAT-fs (loop2): bogus number of reserved sectors [ 1793.664124][T19198] loop1: detected capacity change from 0 to 512 [ 1793.665097][T19194] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1793.680592][T19197] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1793.682531][T19199] loop0: detected capacity change from 0 to 512 [ 1793.704075][T19201] loop4: detected capacity change from 0 to 512 [ 1793.719027][T19199] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1793.729379][T19201] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1793.739491][T19201] EXT4-fs (loop4): group descriptors corrupted! 16:42:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00be000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0074000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1793.751048][T19198] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1793.761093][T19198] EXT4-fs (loop1): group descriptors corrupted! [ 1793.791001][T19203] loop3: detected capacity change from 0 to 512 [ 1793.818095][T19205] loop4: detected capacity change from 0 to 512 [ 1793.832111][T19205] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1793.842245][T19205] EXT4-fs (loop4): group descriptors corrupted! [ 1793.852964][T19203] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ftruncate(r2, 0x800) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000140)='rtc_irq_set_freq\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) lseek(r2, 0x200, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000001c0)) (async) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r2, r4, 0x0, 0x10000) [ 1793.960446][T19207] loop5: detected capacity change from 0 to 264192 [ 1793.977758][T19207] FAT-fs (loop5): Unrecognized mount option "" or missing value 16:42:32 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce4c00000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f002500010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:32 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x5c2, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce007a000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00fe000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ftruncate(r2, 0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000140)='rtc_irq_set_freq\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) lseek(r2, 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000001c0)) r4 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) sendfile(r2, r4, 0x0, 0x10000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x0, &(0x7f0000000180)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) ftruncate(r2, 0x800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000140)='rtc_irq_set_freq\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) lseek(r2, 0x200, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000001c0)) (async) open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x20) (async) sendfile(r2, r4, 0x0, 0x10000) (async) [ 1794.515857][T19216] loop5: detected capacity change from 0 to 264192 [ 1794.518061][T19217] loop0: detected capacity change from 0 to 512 [ 1794.524277][T19218] loop4: detected capacity change from 0 to 512 [ 1794.536118][T19220] loop3: detected capacity change from 0 to 512 [ 1794.548735][T19220] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1794.559357][T19219] FAT-fs (loop2): bogus number of reserved sectors 16:42:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0004020f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1794.565881][T19219] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1794.573116][T19218] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1794.574320][T19217] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1794.583323][T19218] EXT4-fs (loop4): group descriptors corrupted! 16:42:32 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x600, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f002600010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1794.634908][T19226] loop3: detected capacity change from 0 to 512 [ 1794.649221][T19226] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1794.666360][T19231] loop1: detected capacity change from 0 to 512 [ 1794.675894][T19232] loop0: detected capacity change from 0 to 512 [ 1794.688033][T19232] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1794.709108][T19228] FAT-fs (loop2): bogus number of reserved sectors [ 1794.715629][T19228] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1794.723725][T19231] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 16:42:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f004600010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0090000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000030f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1794.733811][T19231] EXT4-fs (loop1): group descriptors corrupted! [ 1794.781544][T19237] loop4: detected capacity change from 0 to 512 [ 1794.787339][T19236] loop3: detected capacity change from 0 to 512 [ 1794.795997][T19254] loop0: detected capacity change from 0 to 512 [ 1794.811959][T19254] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1794.823833][T19237] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1794.833980][T19237] EXT4-fs (loop4): group descriptors corrupted! [ 1794.842057][T19236] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f004800010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:33 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x604, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00fe000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0002040f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:33 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce5500000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001a80)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000480)="bb952dfb45dbdf076508f558f3f5dd6ec6d112eeb98c25c67aaa21b358f98be76fa277ec861c1cad48e4b7bc09ed8776dd87762f4b0e1188d4ee6392323caa348d263944d0e2675828f77b78e21f460710ad3e1c248489b4c7895a5d12", 0x5d}, {&(0x7f0000000640)="404cf9303d070209ad408f4f126823ff6f0a78ba538379eba62dd27591f9967f33f8547126901a235c0fd0255481726b8b192da0d562d03cde2333ca143c1601fb4e69237b7541df9ed3d9ae862337ad4bf8ec356966d535b72ef9cf416afe9b5d95f87101e2039d43a875677f9de2c8dfee2dd17cf9d28207bca8f70161c816909f304549632047b4b96c28c62845783a2e7ee697db6d32bbe511710ced7f096625846496d22d7e4ebbd17923bb11067072bc8369ee0dbda85fb848fcd1ec1ed0c4a7ea967626267195c79b830aac931b3daa71a2b1fdeb75f2b63ed3451cabc3b3d58d2625c95f04ac499683ffc3bee42b8132438ded651cde0cb2c3bcfc", 0xff}, {&(0x7f0000000740)="c61e194bb37742c88a6440cb305460f184c331e72909bb8b92ef75803592fcdf6469cc41b67c53802fa6ae467082373ca77510320384954e6e4374715a21238ab2d32a71a605bf73f902d9e8341d8022bc2848ee6a705cf86ce40b4126354326619cdefd05975363a5e61f785b7faa1846e5f84d68747456513fc9b521d6858e91ff1a4f99cb35c7b7170ad473c5a921aafab65f3ba63d2a51c9aa7d13641976a15ee92301bbff0438a18a91d1856be872d95b079dd1656956fb64f97b0b1d7e9c6c50195acb57801205a7e450dcf3d34600de2e9997137207bc51f5b757dfcd7c3a622fa0f1bd6af56f125f6224", 0xee}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="2f58007c45932b168987d1217b28b40e2b91747ec1920564f2a2585e5b674c3fb0ce5bd16330921c3551466006b5aa268c0a9f521cf610d213c04bb71d6e8dda220098251c5b5ce0afc5ae2cca7acddefbdf116f2306d3dfa6914c52e240cd9df0d61154252f03ff5ab8ae8d1fd3c3e6818c3516db44b68742361c434afa7a1806213bcd5e6d459ecbc965a9f4e6cbedf7bef319125d1f744b806fd66961eda3476ca268b3f52776e30172ba062e3341c4473db625760268181167a162e5d19b77ae5c106c3b3aea3bf18bdeb397e5a3d748b440c7651c3da5c2f4c062ee1644d2416edff591dffaadf418d4d96ed72b0d8fef5822015fb2a1d39304", 0xfc}], 0x5, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r2]}}], 0x78, 0x40000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x40800, 0x4deddb579a445899) ftruncate(r3, 0x40) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4103fe) sendfile(r3, r4, 0x0, 0x9435) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/164, 0x3a, 0xfffffffffffffcff}, 0x20) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) [ 1795.501178][T19260] loop4: detected capacity change from 0 to 512 [ 1795.508138][T19263] loop3: detected capacity change from 0 to 512 [ 1795.515954][T19265] loop0: detected capacity change from 0 to 512 [ 1795.525669][T19260] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1795.535791][T19260] EXT4-fs (loop4): group descriptors corrupted! [ 1795.547712][T19262] FAT-fs (loop2): bogus number of reserved sectors [ 1795.554281][T19262] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1795.561511][T19263] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1795.582242][T19265] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:33 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x700, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00f8010f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0006040f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f004c00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1795.657422][T19270] loop1: detected capacity change from 0 to 512 [ 1795.665859][T19276] loop3: detected capacity change from 0 to 512 [ 1795.669141][T19277] loop0: detected capacity change from 0 to 512 [ 1795.673639][T19278] loop4: detected capacity change from 0 to 512 [ 1795.686701][T19278] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1795.694275][T19275] FAT-fs (loop2): bogus number of reserved sectors 16:42:33 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x900, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1795.696858][T19278] EXT4-fs (loop4): group descriptors corrupted! [ 1795.703351][T19275] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1795.717668][T19276] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1795.728590][T19270] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1795.738602][T19270] EXT4-fs (loop1): group descriptors corrupted! [ 1795.745510][T19277] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0010040f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f005500010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0004020f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1795.812394][T19282] loop3: detected capacity change from 0 to 512 [ 1795.833861][T19282] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1795.833984][T19285] loop0: detected capacity change from 0 to 512 [ 1795.846408][ T1437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1795.855855][T19286] loop4: detected capacity change from 0 to 512 [ 1795.859406][ T1437] Buffer I/O error on dev loop0, logical block 0, async page read [ 1795.864361][ T1437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1795.882660][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read [ 1795.890779][T19280] FAT-fs (loop2): bogus number of reserved sectors [ 1795.897343][T19280] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000050f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1795.904296][T19286] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1795.914404][T19286] EXT4-fs (loop4): group descriptors corrupted! [ 1795.923246][T19285] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:33 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xa00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1795.955593][T19288] loop3: detected capacity change from 0 to 512 [ 1795.980838][T19288] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1796.032683][T19290] FAT-fs (loop2): bogus number of reserved sectors [ 1796.039272][T19290] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:34 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce6000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f006000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000030f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce009c050f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:34 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xb00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000001a80)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000480)="bb952dfb45dbdf076508f558f3f5dd6ec6d112eeb98c25c67aaa21b358f98be76fa277ec861c1cad48e4b7bc09ed8776dd87762f4b0e1188d4ee6392323caa348d263944d0e2675828f77b78e21f460710ad3e1c248489b4c7895a5d12", 0x5d}, {&(0x7f0000000640)="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", 0xff}, {&(0x7f0000000740)="c61e194bb37742c88a6440cb305460f184c331e72909bb8b92ef75803592fcdf6469cc41b67c53802fa6ae467082373ca77510320384954e6e4374715a21238ab2d32a71a605bf73f902d9e8341d8022bc2848ee6a705cf86ce40b4126354326619cdefd05975363a5e61f785b7faa1846e5f84d68747456513fc9b521d6858e91ff1a4f99cb35c7b7170ad473c5a921aafab65f3ba63d2a51c9aa7d13641976a15ee92301bbff0438a18a91d1856be872d95b079dd1656956fb64f97b0b1d7e9c6c50195acb57801205a7e450dcf3d34600de2e9997137207bc51f5b757dfcd7c3a622fa0f1bd6af56f125f6224", 0xee}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="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", 0xfc}], 0x5, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r2]}}], 0x78, 0x40000}}], 0x1, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x200, 0x0) (async) open(&(0x7f0000000280)='./file0\x00', 0x40800, 0x4deddb579a445899) ftruncate(r3, 0x40) (async) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4103fe) sendfile(r3, r4, 0x0, 0x9435) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/164, 0x3a, 0xfffffffffffffcff}, 0x20) (async, rerun: 64) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) [ 1796.450376][T19294] loop0: detected capacity change from 0 to 512 [ 1796.457843][T19298] loop3: detected capacity change from 0 to 512 [ 1796.464581][T19299] loop4: detected capacity change from 0 to 512 [ 1796.464755][T19294] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1796.485445][T19298] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001a80)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000480)="bb952dfb45dbdf076508f558f3f5dd6ec6d112eeb98c25c67aaa21b358f98be76fa277ec861c1cad48e4b7bc09ed8776dd87762f4b0e1188d4ee6392323caa348d263944d0e2675828f77b78e21f460710ad3e1c248489b4c7895a5d12", 0x5d}, {&(0x7f0000000640)="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", 0xff}, {&(0x7f0000000740)="c61e194bb37742c88a6440cb305460f184c331e72909bb8b92ef75803592fcdf6469cc41b67c53802fa6ae467082373ca77510320384954e6e4374715a21238ab2d32a71a605bf73f902d9e8341d8022bc2848ee6a705cf86ce40b4126354326619cdefd05975363a5e61f785b7faa1846e5f84d68747456513fc9b521d6858e91ff1a4f99cb35c7b7170ad473c5a921aafab65f3ba63d2a51c9aa7d13641976a15ee92301bbff0438a18a91d1856be872d95b079dd1656956fb64f97b0b1d7e9c6c50195acb57801205a7e450dcf3d34600de2e9997137207bc51f5b757dfcd7c3a622fa0f1bd6af56f125f6224", 0xee}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="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", 0xfc}], 0x5, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r2]}}], 0x78, 0x40000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (rerun: 32) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) lseek(0xffffffffffffffff, 0x200, 0x0) (async) open(&(0x7f0000000280)='./file0\x00', 0x40800, 0x4deddb579a445899) (async, rerun: 32) ftruncate(r3, 0x40) (rerun: 32) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4103fe) sendfile(r3, r4, 0x0, 0x9435) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="8debab00180000d8f091030000000000000018000000180000000a0000001000000001000084050000000f0000000200000003000000002f705f556ea931de7acdaf53a4def64062fdd6d7a7bd9900aa1a1d7acfb1b20834cd07f9b62be0cec7a9d286173c2e244dd64d16f6d9ba4e7bd75b33f0cd8614af9d5bf9ffbc0bfdc3b614374bd9dd865ddd18e0fd262eed8d01000ae2b802cf60b038ca01a92107a2de515f256ecc6ffd6f59f111ee3203d338b576ecb809af219f0b726972f25e724e1dd8afb8ff98a5899b44348394d6ce0fd4f8067f266ebf2573f42e7d810ebbb1ed864b855a990b5dba02fd96db69afa8939fc21dab77d212fd93900ac97015d785f676985c82b6ea1ea13b72df028c254dcc49528f1884e30661824c54f771cba4e71a9a2aebd6bffa160d2ab0ccaf6cbe9ad8b24d5ee77ef0d502"], &(0x7f0000000340)=""/164, 0x3a, 0xfffffffffffffcff}, 0x20) (async) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) 16:42:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2, 0x6}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000580)) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17}], 0x0, &(0x7f0000000180)) r3 = signalfd(r2, &(0x7f0000000100)={[0x7]}, 0x8) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x100) creat(&(0x7f0000000000)='./file0\x00', 0xa) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0xc0185502, 0x0) open(&(0x7f0000004b00)='./file0\x00', 0x800, 0x155) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000280), 0x0, 0xb6, 0x0) prlimit64(0x0, 0xa, &(0x7f00000002c0)={0x3, 0xa89}, &(0x7f0000000440)) 16:42:34 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xc00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00c2050f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0039030f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1796.496512][T19297] FAT-fs (loop2): bogus number of reserved sectors [ 1796.503139][T19297] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1796.511764][T19299] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1796.521874][T19299] EXT4-fs (loop4): group descriptors corrupted! 16:42:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f006800010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1796.586618][T19315] loop3: detected capacity change from 0 to 512 [ 1796.595039][T19320] loop4: detected capacity change from 0 to 512 [ 1796.602801][T19321] loop0: detected capacity change from 0 to 512 [ 1796.607512][T19322] loop1: detected capacity change from 0 to 512 [ 1796.615618][T19323] loop5: detected capacity change from 0 to 264192 [ 1796.623423][T19321] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1796.635803][T19315] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1796.646290][T19320] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1796.647263][T19322] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1796.656483][T19320] EXT4-fs (loop4): group descriptors corrupted! [ 1796.666481][T19322] EXT4-fs (loop1): group descriptors corrupted! [ 1796.682109][T19318] FAT-fs (loop2): bogus number of reserved sectors [ 1796.688760][T19318] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:35 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce6800000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000060f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f006c00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:35 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xd00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce003a030f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2, 0x6}, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000580)) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17}], 0x0, &(0x7f0000000180)) r3 = signalfd(r2, &(0x7f0000000100)={[0x7]}, 0x8) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x100) (async) creat(&(0x7f0000000000)='./file0\x00', 0xa) (async) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0xc0185502, 0x0) (async) open(&(0x7f0000004b00)='./file0\x00', 0x800, 0x155) (async) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000280), 0x0, 0xb6, 0x0) (async) prlimit64(0x0, 0xa, &(0x7f00000002c0)={0x3, 0xa89}, &(0x7f0000000440)) [ 1797.349161][T19328] loop0: detected capacity change from 0 to 512 [ 1797.353310][T19331] loop3: detected capacity change from 0 to 512 [ 1797.358378][T19332] loop4: detected capacity change from 0 to 512 [ 1797.378258][T19328] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f007400010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce003b030f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1797.395990][T19332] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1797.406093][T19332] EXT4-fs (loop4): group descriptors corrupted! [ 1797.421973][T19330] FAT-fs (loop2): bogus number of reserved sectors [ 1797.428544][T19330] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1797.435667][T19331] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:35 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xe00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0004060f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1797.477018][T19343] loop0: detected capacity change from 0 to 512 [ 1797.483736][T19341] loop4: detected capacity change from 0 to 512 [ 1797.487315][T19337] loop5: detected capacity change from 0 to 264192 [ 1797.498020][T19343] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1797.517632][T19344] loop1: detected capacity change from 0 to 512 [ 1797.529824][T19341] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1797.539970][T19341] EXT4-fs (loop4): group descriptors corrupted! [ 1797.544780][T19348] loop3: detected capacity change from 0 to 512 [ 1797.549348][ T1437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1797.561680][ T1437] Buffer I/O error on dev loop3, logical block 0, async page read [ 1797.561820][T19344] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 16:42:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2, 0x6}, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000580)) (async) connect$unix(r1, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d996673fdd261740002800100024011eb04f801", 0x17}], 0x0, &(0x7f0000000180)) r3 = signalfd(r2, &(0x7f0000000100)={[0x7]}, 0x8) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x100) (async) creat(&(0x7f0000000000)='./file0\x00', 0xa) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0xc0185502, 0x0) open(&(0x7f0000004b00)='./file0\x00', 0x800, 0x155) (async) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000280), 0x0, 0xb6, 0x0) (async, rerun: 64) prlimit64(0x0, 0xa, &(0x7f00000002c0)={0x3, 0xa89}, &(0x7f0000000440)) (rerun: 64) 16:42:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00126a0b00010067656e65766500000c0002800800010002000001"], 0x3c}}, 0x0) [ 1797.579534][T19344] EXT4-fs (loop1): group descriptors corrupted! [ 1797.597758][T19348] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1797.612913][T19346] FAT-fs (loop2): bogus number of reserved sectors [ 1797.619499][T19346] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:36 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce6c00000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f007a00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0002040f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00126a0b00010067656e65766500000c0002800800010002000001"], 0x3c}}, 0x0) 16:42:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000070f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:36 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xf00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00126a0b00010067656e65766500000c0002800800010002000001"], 0x3c}}, 0x0) [ 1798.254159][T19366] loop0: detected capacity change from 0 to 512 [ 1798.254317][T19365] loop4: detected capacity change from 0 to 512 [ 1798.267683][T19364] loop3: detected capacity change from 0 to 512 [ 1798.285001][T19366] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x7, &(0x7f0000000280)=0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0xfffffffffffffe0c) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) 16:42:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f009000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1798.295322][T19364] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1798.305630][T19365] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1798.315765][T19365] EXT4-fs (loop4): group descriptors corrupted! [ 1798.318928][T19367] FAT-fs (loop2): bogus number of reserved sectors [ 1798.328527][T19367] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000090f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1798.360421][T19375] loop0: detected capacity change from 0 to 512 [ 1798.361320][ T1437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1798.375876][ T1437] Buffer I/O error on dev loop0, logical block 0, async page read [ 1798.388438][T19377] loop1: detected capacity change from 0 to 512 [ 1798.399737][T19375] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0006040f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:36 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x1020, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1798.411664][T19379] loop3: detected capacity change from 0 to 512 [ 1798.413984][T19377] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1798.427977][T19377] EXT4-fs (loop1): group descriptors corrupted! [ 1798.434783][T19379] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1798.473511][T19383] loop4: detected capacity change from 0 to 512 [ 1798.502825][T19383] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1798.513027][T19383] EXT4-fs (loop4): group descriptors corrupted! [ 1798.522322][T19381] FAT-fs (loop2): bogus number of reserved sectors [ 1798.528884][T19381] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00fe00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x7, &(0x7f0000000280)=0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0xfffffffffffffe0c) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) close(r0) (async) socket(0x200000100000011, 0x3, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) (async) io_setup(0x7, &(0x7f0000000280)) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0xfffffffffffffe0c) (async) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) (async) 16:42:37 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce7400000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000a0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0010040f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:37 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x1100, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1799.132528][T19389] loop0: detected capacity change from 0 to 512 [ 1799.133201][T19390] loop3: detected capacity change from 0 to 512 [ 1799.141843][T19392] loop4: detected capacity change from 0 to 512 [ 1799.159778][T19390] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x7, &(0x7f0000000280)=0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0xfffffffffffffe0c) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) close(r0) (async) socket(0x200000100000011, 0x3, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) (async) io_setup(0x7, &(0x7f0000000280)) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0xfffffffffffffe0c) (async) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) (async) 16:42:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000b0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00d601010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1799.173330][T19389] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1799.184044][T19392] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1799.194191][T19392] EXT4-fs (loop4): group descriptors corrupted! [ 1799.206751][T19391] FAT-fs (loop2): bogus number of reserved sectors [ 1799.213303][T19391] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:37 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x11c6, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000050f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1799.256168][T19409] loop0: detected capacity change from 0 to 512 [ 1799.270827][T19420] loop4: detected capacity change from 0 to 512 [ 1799.270879][T19419] loop3: detected capacity change from 0 to 512 [ 1799.278219][ T1437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1799.292573][ T1437] Buffer I/O error on dev loop3, logical block 0, async page read [ 1799.300983][T19409] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1799.303143][T19422] loop1: detected capacity change from 0 to 512 [ 1799.319495][T19422] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1799.326171][T19420] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1799.336360][T19420] EXT4-fs (loop4): group descriptors corrupted! [ 1799.345134][T19423] FAT-fs (loop2): bogus number of reserved sectors 16:42:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00d701010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1799.345214][T19419] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1799.351661][T19423] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce009c050f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:37 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x1200, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1799.400470][T19425] loop0: detected capacity change from 0 to 512 [ 1799.416828][T19425] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1799.439364][T19429] loop4: detected capacity change from 0 to 512 [ 1799.455957][T19429] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1799.466078][T19429] EXT4-fs (loop4): group descriptors corrupted! [ 1799.496653][T19428] FAT-fs (loop2): bogus number of reserved sectors [ 1799.503196][T19428] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:38 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce7a00000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="12", 0x1}], 0x1}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={r5, 0xd4, "94179f3865cb5b0adeef0e15f9b2aa252c41157364f8c187e13d67c9a1ee126cb6a4edb2b9580f27564dbbc0a11722ad55478100a1b5263ab27d9e1a9fa4d9081c24e1e9888edebd7f7623f02950aede0d1578dd89753241a9593253dfe81d6cbb982d71927038dc7832cbf793f4c4c50e7702805208fe3089bd4f35eef2257e55003ee37d5cd97b1cd201644b29ba8710bb03cccc969d0330fb292a4abca233a06a7ac1ba679f316b0da43974eaa69172c9489bc26b59557aff99ef8d3609a027a33db45d7bbf68e48788e27276ca599843fb2f"}, &(0x7f0000000180)=0xdc) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) r7 = socket$kcm(0x29, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4000}, {0xffffffffffffffff, 0xc080}, {r1, 0x410b}, {0xffffffffffffffff, 0x30}, {r6, 0x5019}, {r7, 0x8000}], 0x6, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0x8000000000000001]}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000050000390000000000007a40feff0000000085000000aa0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:42:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00c2050f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00d801010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:38 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x1902, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1800.020090][T19435] loop3: detected capacity change from 0 to 512 [ 1800.035392][T19440] loop0: detected capacity change from 0 to 512 [ 1800.041915][T19434] loop4: detected capacity change from 0 to 512 [ 1800.056956][T19433] sctp: [Deprecated]: syz-executor.5 (pid 19433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1800.056956][T19433] Use struct sctp_sack_info instead [ 1800.078962][T19435] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1800.093070][T19440] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1800.108536][T19434] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:42:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="12", 0x1}], 0x1}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={r5, 0xd4, "94179f3865cb5b0adeef0e15f9b2aa252c41157364f8c187e13d67c9a1ee126cb6a4edb2b9580f27564dbbc0a11722ad55478100a1b5263ab27d9e1a9fa4d9081c24e1e9888edebd7f7623f02950aede0d1578dd89753241a9593253dfe81d6cbb982d71927038dc7832cbf793f4c4c50e7702805208fe3089bd4f35eef2257e55003ee37d5cd97b1cd201644b29ba8710bb03cccc969d0330fb292a4abca233a06a7ac1ba679f316b0da43974eaa69172c9489bc26b59557aff99ef8d3609a027a33db45d7bbf68e48788e27276ca599843fb2f"}, &(0x7f0000000180)=0xdc) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) r7 = socket$kcm(0x29, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4000}, {0xffffffffffffffff, 0xc080}, {r1, 0x410b}, {0xffffffffffffffff, 0x30}, {r6, 0x5019}, {r7, 0x8000}], 0x6, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0x8000000000000001]}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000050000390000000000007a40feff0000000085000000aa0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet_sctp(r3, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="12", 0x1}], 0x1}], 0x1, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r5}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={r5, 0xd4, "94179f3865cb5b0adeef0e15f9b2aa252c41157364f8c187e13d67c9a1ee126cb6a4edb2b9580f27564dbbc0a11722ad55478100a1b5263ab27d9e1a9fa4d9081c24e1e9888edebd7f7623f02950aede0d1578dd89753241a9593253dfe81d6cbb982d71927038dc7832cbf793f4c4c50e7702805208fe3089bd4f35eef2257e55003ee37d5cd97b1cd201644b29ba8710bb03cccc969d0330fb292a4abca233a06a7ac1ba679f316b0da43974eaa69172c9489bc26b59557aff99ef8d3609a027a33db45d7bbf68e48788e27276ca599843fb2f"}, &(0x7f0000000180)=0xdc) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) (async) ppoll(&(0x7f0000000040)=[{r0, 0x4000}, {0xffffffffffffffff, 0xc080}, {r1, 0x410b}, {0xffffffffffffffff, 0x30}, {r6, 0x5019}, {r7, 0x8000}], 0x6, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0x8000000000000001]}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000050000390000000000007a40feff0000000085000000aa0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) 16:42:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000d0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1800.118645][T19434] EXT4-fs (loop4): group descriptors corrupted! 16:42:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000060f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1800.163613][T19445] sctp: [Deprecated]: syz-executor.5 (pid 19445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1800.163613][T19445] Use struct sctp_sack_info instead [ 1800.180611][T19447] loop3: detected capacity change from 0 to 512 [ 1800.182793][T19448] loop1: detected capacity change from 0 to 512 [ 1800.197078][T19438] FAT-fs (loop2): bogus number of reserved sectors [ 1800.203602][T19438] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00d901010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:38 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="12", 0x1}], 0x1}], 0x1, 0x0) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r5}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={r5, 0xd4, "94179f3865cb5b0adeef0e15f9b2aa252c41157364f8c187e13d67c9a1ee126cb6a4edb2b9580f27564dbbc0a11722ad55478100a1b5263ab27d9e1a9fa4d9081c24e1e9888edebd7f7623f02950aede0d1578dd89753241a9593253dfe81d6cbb982d71927038dc7832cbf793f4c4c50e7702805208fe3089bd4f35eef2257e55003ee37d5cd97b1cd201644b29ba8710bb03cccc969d0330fb292a4abca233a06a7ac1ba679f316b0da43974eaa69172c9489bc26b59557aff99ef8d3609a027a33db45d7bbf68e48788e27276ca599843fb2f"}, &(0x7f0000000180)=0xdc) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) r7 = socket$kcm(0x29, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4000}, {0xffffffffffffffff, 0xc080}, {r1, 0x410b}, {0xffffffffffffffff, 0x30}, {r6, 0x5019}, {r7, 0x8000}], 0x6, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0x8000000000000001]}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000050000390000000000007a40feff0000000085000000aa0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1800.223117][T19450] loop4: detected capacity change from 0 to 512 [ 1800.230410][T19447] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1800.248958][T19452] loop0: detected capacity change from 0 to 512 [ 1800.255511][T19448] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1800.265549][T19448] EXT4-fs (loop1): group descriptors corrupted! 16:42:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000e0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1800.286412][T19452] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1800.301016][T19450] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1800.311145][T19450] EXT4-fs (loop4): group descriptors corrupted! [ 1800.318983][T19467] sctp: [Deprecated]: syz-executor.5 (pid 19467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1800.318983][T19467] Use struct sctp_sack_info instead [ 1800.319597][T19471] loop3: detected capacity change from 0 to 512 [ 1800.347755][T19471] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:38 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce9000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:38 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:38 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x126) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='objagg_obj_parent_unassign\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/net\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=0x94, 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020662a, &(0x7f0000000040)) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x40, 0xe3, 0x80, 0x0, 0xffff, 0x80f8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x7fffffff}, 0x0, 0x4, 0x77e, 0x8, 0x10, 0x20000d99, 0x64b, 0x0, 0x8, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000000000001, 0x132b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffdfff7fffffffff, 0xffffffffffffffff, 0x0) 16:42:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0004060f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00da01010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000f0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1800.891969][T19479] loop0: detected capacity change from 0 to 512 [ 1800.894232][T19481] loop4: detected capacity change from 0 to 512 [ 1800.898511][T19480] loop3: detected capacity change from 0 to 512 [ 1800.930075][T19481] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:42:38 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x126) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='objagg_obj_parent_unassign\x00'}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/net\x00') (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=0x94, 0x12) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020662a, &(0x7f0000000040)) (async) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x40, 0xe3, 0x80, 0x0, 0xffff, 0x80f8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x7fffffff}, 0x0, 0x4, 0x77e, 0x8, 0x10, 0x20000d99, 0x64b, 0x0, 0x8, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000000000001, 0x132b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffdfff7fffffffff, 0xffffffffffffffff, 0x0) 16:42:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000070f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1800.940228][T19481] EXT4-fs (loop4): group descriptors corrupted! [ 1800.950729][T19479] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1800.960939][T19480] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00db01010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0004100f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1801.029439][T19487] loop4: detected capacity change from 0 to 512 [ 1801.036649][T19482] FAT-fs (loop2): bogus number of reserved sectors [ 1801.043207][T19482] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1801.056180][T19492] loop0: detected capacity change from 0 to 512 [ 1801.063592][T19489] loop1: detected capacity change from 0 to 512 16:42:39 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2010, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:39 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1b}, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x126) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='objagg_obj_parent_unassign\x00'}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/net\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)=0xc9ab) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) write$cgroup_int(r1, &(0x7f0000000300)=0x94, 0x12) (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020662a, &(0x7f0000000040)) (async, rerun: 64) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x40, 0xe3, 0x80, 0x0, 0xffff, 0x80f8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x7fffffff}, 0x0, 0x4, 0x77e, 0x8, 0x10, 0x20000d99, 0x64b, 0x0, 0x8, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000000000001, 0x132b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffdfff7fffffffff, 0xffffffffffffffff, 0x0) [ 1801.064394][T19487] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1801.080019][T19487] EXT4-fs (loop4): group descriptors corrupted! [ 1801.083576][T19492] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1801.087795][T19491] loop3: detected capacity change from 0 to 512 [ 1801.130768][T19489] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1801.140840][T19489] EXT4-fs (loop1): group descriptors corrupted! [ 1801.155315][T19491] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1801.275668][T19501] FAT-fs (loop2): bogus number of reserved sectors [ 1801.282288][T19501] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:39 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000cefe00000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:39 executing program 5: syz_emit_ethernet(0x9a, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "3abd5f", 0x64, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[@hopopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x11, 0x0}}, @enc_lim]}]}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f00000033c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x8000000201a7f19, 0x0, 0xd, 0x0, 0x1, 0xc}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0, r1}, 0x80) syz_emit_ethernet(0x56, &(0x7f0000000040)={@remote, @remote, @void, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "b07234df4fb6f48ea8a8ff5753646569eb8cffd4585385ac432790588dfec4bbff47bfbd526081552d4564b7a42c94342f4a672ca53b2b36115c591cd95f7140"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0xc39, 0xe5f, 0x55b, 0x2]}) syz_emit_ethernet(0x10b, &(0x7f0000000300)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @dccp_packet={0xe, 0x6, "836b08", 0xd5, 0x21, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x87, 0x8, '\x00', [@generic={0x0, 0x38, "942124f82bf5f6a775d0ea0498026bc32d310da9543a5645e286bd82348750b5d7e73018a23e08517604ac536431757514406d1e5fdfb670"}, @jumbo={0xc2, 0x4, 0xfffffffc}, @enc_lim={0x4, 0x1, 0xff}]}, @routing={0x29, 0x6, 0x2, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3a}, @mcast1, @empty]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x6, "68d95e", 0xff, "1868d3"}, "699cc9829436950c2a69d48a7b7a35f24f3f85e2d0c0cdf9a51c0e151e4aac95c2fef6b7b9b0dcd49506a79ea3bc28b3ddfe4a4883f1723cd2e7dcfbad"}}}}}}, &(0x7f0000000100)={0x1, 0x3, [0xd50, 0xaf0, 0x1f5, 0x37b]}) 16:42:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000090f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00dc01010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0020100f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:39 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2200, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:39 executing program 5: syz_emit_ethernet(0x9a, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "3abd5f", 0x64, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[@hopopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x11, 0x0}}, @enc_lim]}]}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f00000033c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x8000000201a7f19, 0x0, 0xd, 0x0, 0x1, 0xc}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0, r1}, 0x80) (async) syz_emit_ethernet(0x56, &(0x7f0000000040)={@remote, @remote, @void, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "b07234df4fb6f48ea8a8ff5753646569eb8cffd4585385ac432790588dfec4bbff47bfbd526081552d4564b7a42c94342f4a672ca53b2b36115c591cd95f7140"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0xc39, 0xe5f, 0x55b, 0x2]}) (async) syz_emit_ethernet(0x10b, &(0x7f0000000300)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @dccp_packet={0xe, 0x6, "836b08", 0xd5, 0x21, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x87, 0x8, '\x00', [@generic={0x0, 0x38, "942124f82bf5f6a775d0ea0498026bc32d310da9543a5645e286bd82348750b5d7e73018a23e08517604ac536431757514406d1e5fdfb670"}, @jumbo={0xc2, 0x4, 0xfffffffc}, @enc_lim={0x4, 0x1, 0xff}]}, @routing={0x29, 0x6, 0x2, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3a}, @mcast1, @empty]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x6, "68d95e", 0xff, "1868d3"}, "699cc9829436950c2a69d48a7b7a35f24f3f85e2d0c0cdf9a51c0e151e4aac95c2fef6b7b9b0dcd49506a79ea3bc28b3ddfe4a4883f1723cd2e7dcfbad"}}}}}}, &(0x7f0000000100)={0x1, 0x3, [0xd50, 0xaf0, 0x1f5, 0x37b]}) [ 1801.781988][T19510] loop4: detected capacity change from 0 to 512 [ 1801.790407][T19512] loop0: detected capacity change from 0 to 512 [ 1801.798097][T19513] loop3: detected capacity change from 0 to 512 [ 1801.818487][T19510] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:42:39 executing program 5: syz_emit_ethernet(0x9a, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "3abd5f", 0x64, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[@hopopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x11, 0x0}}, @enc_lim]}]}}}}}, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x4, &(0x7f00000033c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x8000000201a7f19, 0x0, 0xd, 0x0, 0x1, 0xc}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0, r1}, 0x80) (async) syz_emit_ethernet(0x56, &(0x7f0000000040)={@remote, @remote, @void, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "b07234df4fb6f48ea8a8ff5753646569eb8cffd4585385ac432790588dfec4bbff47bfbd526081552d4564b7a42c94342f4a672ca53b2b36115c591cd95f7140"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0xc39, 0xe5f, 0x55b, 0x2]}) syz_emit_ethernet(0x10b, &(0x7f0000000300)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @dccp_packet={0xe, 0x6, "836b08", 0xd5, 0x21, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x87, 0x8, '\x00', [@generic={0x0, 0x38, "942124f82bf5f6a775d0ea0498026bc32d310da9543a5645e286bd82348750b5d7e73018a23e08517604ac536431757514406d1e5fdfb670"}, @jumbo={0xc2, 0x4, 0xfffffffc}, @enc_lim={0x4, 0x1, 0xff}]}, @routing={0x29, 0x6, 0x2, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3a}, @mcast1, @empty]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x6, "68d95e", 0xff, "1868d3"}, "699cc9829436950c2a69d48a7b7a35f24f3f85e2d0c0cdf9a51c0e151e4aac95c2fef6b7b9b0dcd49506a79ea3bc28b3ddfe4a4883f1723cd2e7dcfbad"}}}}}}, &(0x7f0000000100)={0x1, 0x3, [0xd50, 0xaf0, 0x1f5, 0x37b]}) 16:42:39 executing program 5: setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getuid() setresuid(0x0, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setfsuid(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x34, 0x24, 0x400, 0x70bd25, 0x25dfdbfd, 0x3, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048001}, 0x8840) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x101180, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000040)="6c8b470acf6558f987f59d58a03f8205e24bce8aa1f3ec0fd63a483cbc8616f71f839fc46a6700433fb051276e6065c102d5028d8edc1fe28e2ff52931a72220b4391f0c15eb8cb9dadb0869cb312a81f8e8853a2325326290a80de9779e31420625861046afa08f954d675cf51da9080a43afff281d06700232442852faa4084f9768de92caf135cba2fa1d444eff988670fb0e069138c1eb317c4f2a3cc587a194b6e9ddd002633d526b01407f7d6ed6e1ef0cb83037", &(0x7f0000000140)=@udp=r3, 0x1}, 0x20) fsetxattr$security_selinux(r1, &(0x7f0000000400), 0x0, 0x0, 0x0) [ 1801.828677][T19510] EXT4-fs (loop4): group descriptors corrupted! [ 1801.836075][T19512] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1801.848028][T19513] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00f801010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000a0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1801.883397][ T24] audit: type=1400 audit(1661704959.876:399): avc: denied { relabelfrom } for pid=19528 comm="syz-executor.5" name="UDPv6" dev="sockfs" ino=262910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1801.906884][ T24] audit: type=1401 audit(1661704959.876:400): op=setxattr invalid_context="" 16:42:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000110f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1801.934063][T19530] loop1: detected capacity change from 0 to 512 [ 1801.946216][T19532] loop0: detected capacity change from 0 to 512 [ 1801.950921][T19514] FAT-fs (loop2): bogus number of reserved sectors [ 1801.954672][T19535] loop4: detected capacity change from 0 to 512 [ 1801.958982][T19514] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1801.973026][T19535] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1801.973570][T19536] loop3: detected capacity change from 0 to 512 [ 1801.983201][T19535] EXT4-fs (loop4): group descriptors corrupted! [ 1802.003752][T19530] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1802.013825][T19530] EXT4-fs (loop1): group descriptors corrupted! [ 1802.022066][T19536] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1802.047425][T19532] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:40 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce6a01000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:40 executing program 5: setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) (async) r0 = getuid() setresuid(0x0, r0, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) setfsuid(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x34, 0x24, 0x400, 0x70bd25, 0x25dfdbfd, 0x3, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048001}, 0x8840) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x101180, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000040)="6c8b470acf6558f987f59d58a03f8205e24bce8aa1f3ec0fd63a483cbc8616f71f839fc46a6700433fb051276e6065c102d5028d8edc1fe28e2ff52931a72220b4391f0c15eb8cb9dadb0869cb312a81f8e8853a2325326290a80de9779e31420625861046afa08f954d675cf51da9080a43afff281d06700232442852faa4084f9768de92caf135cba2fa1d444eff988670fb0e069138c1eb317c4f2a3cc587a194b6e9ddd002633d526b01407f7d6ed6e1ef0cb83037", &(0x7f0000000140)=@udp=r3, 0x1}, 0x20) (async) fsetxattr$security_selinux(r1, &(0x7f0000000400), 0x0, 0x0, 0x0) 16:42:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000120f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:40 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2500, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000b0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000402010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:40 executing program 5: setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getuid() setresuid(0x0, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setfsuid(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x34, 0x24, 0x400, 0x70bd25, 0x25dfdbfd, 0x3, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048001}, 0x8840) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x101180, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000040)="6c8b470acf6558f987f59d58a03f8205e24bce8aa1f3ec0fd63a483cbc8616f71f839fc46a6700433fb051276e6065c102d5028d8edc1fe28e2ff52931a72220b4391f0c15eb8cb9dadb0869cb312a81f8e8853a2325326290a80de9779e31420625861046afa08f954d675cf51da9080a43afff281d06700232442852faa4084f9768de92caf135cba2fa1d444eff988670fb0e069138c1eb317c4f2a3cc587a194b6e9ddd002633d526b01407f7d6ed6e1ef0cb83037", &(0x7f0000000140)=@udp=r3, 0x1}, 0x20) fsetxattr$security_selinux(r1, &(0x7f0000000400), 0x0, 0x0, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) (async) getuid() (async) setresuid(0x0, r0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setfsuid(0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x34, 0x24, 0x400, 0x70bd25, 0x25dfdbfd, 0x3, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048001}, 0x8840) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x101180, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000040)="6c8b470acf6558f987f59d58a03f8205e24bce8aa1f3ec0fd63a483cbc8616f71f839fc46a6700433fb051276e6065c102d5028d8edc1fe28e2ff52931a72220b4391f0c15eb8cb9dadb0869cb312a81f8e8853a2325326290a80de9779e31420625861046afa08f954d675cf51da9080a43afff281d06700232442852faa4084f9768de92caf135cba2fa1d444eff988670fb0e069138c1eb317c4f2a3cc587a194b6e9ddd002633d526b01407f7d6ed6e1ef0cb83037", &(0x7f0000000140)=@udp=r3, 0x1}, 0x20) (async) fsetxattr$security_selinux(r1, &(0x7f0000000400), 0x0, 0x0, 0x0) (async) [ 1802.671285][T19539] loop0: detected capacity change from 0 to 512 [ 1802.679732][T19544] loop3: detected capacity change from 0 to 512 [ 1802.687844][T19544] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1802.698381][T19549] loop4: detected capacity change from 0 to 512 [ 1802.708931][T19539] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:40 executing program 5: socket$caif_stream(0x25, 0x1, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000100)) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240), 0x10, &(0x7f00000004c0)={&(0x7f0000000380)={0x2, 0x60, 0x7, {}, {0x0, 0xea60}, {0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "9093460e7dd04adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e0000698f2a7b23de00850000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r4}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_devices(r5, 0x0, 0x9) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200), 0x800, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'system.posix_acl_access\x00'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x9}}, {@fscache}, {@version_9p2000}], [{@fowner_lt}, {@pcr={'pcr', 0x3d, 0x10}}, {@obj_user={'obj_user', 0x3d, '.\''}}, {@fsname={'fsname', 0x3d, 'sys_enter\x00'}}]}}) removexattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') syz_clone(0x40000000, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0), 0x0) [ 1802.724266][ T24] audit: type=1401 audit(1661704960.716:401): op=setxattr invalid_context="" [ 1802.741483][T19549] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1802.751600][T19549] EXT4-fs (loop4): group descriptors corrupted! 16:42:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000140f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000003010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1802.787676][T19564] 9pnet_fd: Insufficient options for proto=fd [ 1802.817041][T19543] FAT-fs (loop2): bogus number of reserved sectors [ 1802.823662][T19543] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1802.842199][T19570] loop0: detected capacity change from 0 to 512 [ 1802.843145][T19566] loop1: detected capacity change from 0 to 512 [ 1802.855143][T19568] loop3: detected capacity change from 0 to 512 [ 1802.864331][T19570] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:40 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x3f00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1802.884168][T19568] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1802.934755][T19566] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1802.944853][T19566] EXT4-fs (loop1): group descriptors corrupted! [ 1802.953021][T19574] loop4: detected capacity change from 0 to 512 [ 1802.965236][T19574] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1802.975392][T19574] EXT4-fs (loop4): group descriptors corrupted! [ 1803.003355][T19564] lo speed is unknown, defaulting to 1000 [ 1803.275441][T19573] FAT-fs (loop2): bogus number of reserved sectors [ 1803.282002][T19573] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:41 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce6b01000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000204010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00001f0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000d0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:41 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x4000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:41 executing program 5: socket$caif_stream(0x25, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000100)) (async) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) (async) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240), 0x10, &(0x7f00000004c0)={&(0x7f0000000380)={0x2, 0x60, 0x7, {}, {0x0, 0xea60}, {0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "9093460e7dd04adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x0) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e0000698f2a7b23de00850000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r4}, 0x10) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_devices(r5, 0x0, 0x9) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200), 0x800, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'system.posix_acl_access\x00'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x9}}, {@fscache}, {@version_9p2000}], [{@fowner_lt}, {@pcr={'pcr', 0x3d, 0x10}}, {@obj_user={'obj_user', 0x3d, '.\''}}, {@fsname={'fsname', 0x3d, 'sys_enter\x00'}}]}}) removexattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') (async) syz_clone(0x40000000, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0), 0x0) 16:42:41 executing program 5: socket$caif_stream(0x25, 0x1, 0x0) (async, rerun: 32) r0 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000100)) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) (async, rerun: 64) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240), 0x10, &(0x7f00000004c0)={&(0x7f0000000380)={0x2, 0x60, 0x7, {}, {0x0, 0xea60}, {0x0, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "9093460e7dd04adc"}}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e0000698f2a7b23de00850000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r4}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_devices(r5, 0x0, 0x9) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200), 0x800, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'system.posix_acl_access\x00'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x9}}, {@fscache}, {@version_9p2000}], [{@fowner_lt}, {@pcr={'pcr', 0x3d, 0x10}}, {@obj_user={'obj_user', 0x3d, '.\''}}, {@fsname={'fsname', 0x3d, 'sys_enter\x00'}}]}}) removexattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') syz_clone(0x40000000, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0), 0x0) [ 1803.839353][T19584] loop0: detected capacity change from 0 to 512 [ 1803.846069][T19579] loop3: detected capacity change from 0 to 512 [ 1803.857307][T19581] loop4: detected capacity change from 0 to 512 [ 1803.880211][T19584] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1803.896416][T19581] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1803.906621][T19581] EXT4-fs (loop4): group descriptors corrupted! [ 1803.914733][T19579] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000604010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000e0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000200f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1803.939793][T19596] 9pnet_fd: Insufficient options for proto=fd [ 1803.976442][T19603] loop3: detected capacity change from 0 to 512 [ 1803.982514][T19607] loop4: detected capacity change from 0 to 512 [ 1803.982995][ T1437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1803.995909][T19605] loop0: detected capacity change from 0 to 512 [ 1803.998052][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read [ 1804.015860][T19608] loop1: detected capacity change from 0 to 512 [ 1804.023492][T19603] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1804.037364][T19607] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1804.047512][T19607] EXT4-fs (loop4): group descriptors corrupted! [ 1804.055892][T19608] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1804.065972][T19608] EXT4-fs (loop1): group descriptors corrupted! [ 1804.074716][T19605] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000f0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0010200f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1804.097541][T19600] lo speed is unknown, defaulting to 1000 [ 1804.114061][T19610] loop4: detected capacity change from 0 to 512 [ 1804.144948][T19610] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1804.155157][T19610] EXT4-fs (loop4): group descriptors corrupted! [ 1804.163048][T19612] loop3: detected capacity change from 0 to 512 [ 1804.176701][T19612] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1804.281175][T19583] FAT-fs (loop2): bogus number of reserved sectors [ 1804.287882][T19583] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:42 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000cedf01000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f001004010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0004100f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000220f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:42 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x4800, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x38}}, 0x0) [ 1804.735322][T19617] loop4: detected capacity change from 0 to 512 [ 1804.742870][T19620] loop3: detected capacity change from 0 to 512 [ 1804.749988][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1804.752179][T19623] loop0: detected capacity change from 0 to 512 16:42:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x38}}, 0x0) 16:42:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000250f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x38}}, 0x0) [ 1804.776599][T19620] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1804.790619][T19617] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1804.800844][T19617] EXT4-fs (loop4): group descriptors corrupted! [ 1804.801170][T19623] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1804.819822][T19627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000005010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0020100f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:42 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1804.853823][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1804.863309][T19631] loop3: detected capacity change from 0 to 512 [ 1804.904138][T19636] loop4: detected capacity change from 0 to 512 [ 1804.908543][T19631] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1804.911788][T19637] loop0: detected capacity change from 0 to 512 [ 1804.930024][T19638] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1804.938076][T19638] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7c00 [ 1804.949326][T19636] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1804.959438][T19636] EXT4-fs (loop4): group descriptors corrupted! [ 1804.966008][T19639] loop1: detected capacity change from 0 to 512 [ 1804.976473][T19637] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1804.999011][T19638] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1805.007082][T19638] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7c00 [ 1805.019988][T19621] FAT-fs (loop2): bogus number of reserved sectors [ 1805.026528][T19621] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1805.027316][T19639] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1805.043193][T19639] EXT4-fs (loop1): group descriptors corrupted! 16:42:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f009c05010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000110f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000260f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:43 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000cef801000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:43 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) (async) 16:42:43 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x4c00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1805.708731][T19644] loop0: detected capacity change from 0 to 512 [ 1805.718064][T19649] loop3: detected capacity change from 0 to 512 [ 1805.718295][T19650] loop4: detected capacity change from 0 to 512 [ 1805.731140][T19648] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1805.739172][T19648] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881062cfc00 16:42:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00c205010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:43 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) (async) [ 1805.750664][T19644] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1805.763045][T19650] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1805.763306][T19648] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1805.773222][T19650] EXT4-fs (loop4): group descriptors corrupted! [ 1805.781168][T19648] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881062cfc00 [ 1805.798703][T19649] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00003f0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000120f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1805.838449][T19667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1805.846464][T19667] ref_ctr decrement failed for inode: 0x493 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888100395800 [ 1805.857749][T19668] loop0: detected capacity change from 0 to 512 [ 1805.864715][T19669] loop1: detected capacity change from 0 to 512 [ 1805.891602][T19668] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1805.906133][T19669] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1805.910529][T19672] loop3: detected capacity change from 0 to 512 [ 1805.916189][T19669] EXT4-fs (loop1): group descriptors corrupted! [ 1805.922771][T19667] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:42:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000006010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:44 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1805.936613][T19667] ref_ctr decrement failed for inode: 0x493 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888100395800 [ 1805.947903][T19674] loop4: detected capacity change from 0 to 512 [ 1805.959889][T19674] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1805.969989][T19674] EXT4-fs (loop4): group descriptors corrupted! [ 1805.978669][T19672] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000140f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000400f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1806.025756][T19682] loop0: detected capacity change from 0 to 512 [ 1806.043233][T19681] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1806.051275][T19681] ref_ctr decrement failed for inode: 0x495 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139fc6800 [ 1806.053665][T19682] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1806.090547][T19647] FAT-fs (loop2): bogus number of reserved sectors [ 1806.097222][T19647] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1806.111766][T19681] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1806.113228][T19686] loop4: detected capacity change from 0 to 512 [ 1806.119818][T19681] ref_ctr decrement failed for inode: 0x495 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139fc6800 16:42:44 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000406010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1806.121793][T19687] loop3: detected capacity change from 0 to 512 [ 1806.165583][T19686] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1806.175716][T19686] EXT4-fs (loop4): group descriptors corrupted! [ 1806.182370][T19689] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1806.190404][T19689] ref_ctr decrement failed for inode: 0x4a2 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888103459400 [ 1806.202171][T19687] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1806.244918][T19689] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1806.245215][T19692] loop0: detected capacity change from 0 to 512 [ 1806.252927][T19689] ref_ctr decrement failed for inode: 0x4a2 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888103459400 [ 1806.298982][T19692] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:44 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0402000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:44 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x6000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000200f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000460f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:44 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000007010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1806.698673][T19696] loop4: detected capacity change from 0 to 512 [ 1806.708486][T19702] loop3: detected capacity change from 0 to 512 [ 1806.710464][T19699] loop0: detected capacity change from 0 to 512 [ 1806.728587][T19701] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1806.736655][T19701] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888100395800 [ 1806.749758][T19702] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1806.768772][T19696] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1806.778870][T19696] EXT4-fs (loop4): group descriptors corrupted! [ 1806.789147][T19699] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000480f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000009010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0010200f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1806.797572][T19701] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1806.807261][T19701] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888100395800 [ 1806.855727][T19707] loop1: detected capacity change from 0 to 512 [ 1806.862250][T19709] loop3: detected capacity change from 0 to 512 [ 1806.863373][T19711] loop4: detected capacity change from 0 to 512 [ 1806.875904][T19713] loop0: detected capacity change from 0 to 512 [ 1806.889617][T19711] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1806.899781][T19711] EXT4-fs (loop4): group descriptors corrupted! 16:42:44 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) [ 1806.924657][T19713] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1806.928329][T19709] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1806.947081][T19707] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1806.957156][T19707] EXT4-fs (loop1): group descriptors corrupted! [ 1806.965837][T19715] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:42:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000220f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1806.973885][T19715] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7c00 16:42:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000a010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1807.020238][T19715] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1807.020381][T19717] loop4: detected capacity change from 0 to 512 [ 1807.028356][T19715] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7c00 [ 1807.069521][T19717] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1807.079704][T19717] EXT4-fs (loop4): group descriptors corrupted! [ 1807.087484][T19700] FAT-fs (loop2): bogus number of reserved sectors [ 1807.094044][T19700] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1807.118689][T19719] loop0: detected capacity change from 0 to 512 [ 1807.152059][T19719] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:45 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0003000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00004c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000250f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:45 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) 16:42:45 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x6800, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000b010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1807.598653][T19725] loop3: detected capacity change from 0 to 512 [ 1807.600983][T19726] loop0: detected capacity change from 0 to 512 [ 1807.612120][T19728] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1807.613444][T19729] loop4: detected capacity change from 0 to 512 [ 1807.620159][T19728] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881062cfc00 [ 1807.638121][T19729] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1807.648338][T19729] EXT4-fs (loop4): group descriptors corrupted! [ 1807.656963][T19725] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1807.669661][T19726] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1807.678652][T19728] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1807.687752][T19728] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881062cfc00 16:42:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000600f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000c010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000260f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:45 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) [ 1807.757351][T19734] loop0: detected capacity change from 0 to 512 [ 1807.757613][T19736] loop3: detected capacity change from 0 to 512 [ 1807.772274][T19738] loop4: detected capacity change from 0 to 512 [ 1807.790691][T19740] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1807.790911][T19734] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1807.798716][T19740] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7c00 [ 1807.816394][T19741] loop1: detected capacity change from 0 to 512 [ 1807.829024][T19738] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1807.839147][T19738] EXT4-fs (loop4): group descriptors corrupted! [ 1807.846494][T19736] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0003390f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000680f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1807.862166][T19740] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1807.870261][T19740] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7c00 [ 1807.887313][T19741] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1807.897469][T19741] EXT4-fs (loop1): group descriptors corrupted! [ 1807.924826][T19743] loop4: detected capacity change from 0 to 512 [ 1807.943842][T19745] loop3: detected capacity change from 0 to 512 [ 1807.962127][T19745] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1807.976914][T19727] FAT-fs (loop2): bogus number of reserved sectors [ 1807.983471][T19727] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1807.992730][T19743] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1808.002876][T19743] EXT4-fs (loop4): group descriptors corrupted! 16:42:46 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0204000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:46 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000d010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00006c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:46 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x6c00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00033a0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:46 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1808.534920][T19749] loop0: detected capacity change from 0 to 512 [ 1808.542139][T19752] loop4: detected capacity change from 0 to 512 [ 1808.543060][T19754] loop3: detected capacity change from 0 to 512 [ 1808.569369][T19754] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:46 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000740f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:46 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1808.581773][T19749] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1808.597080][T19752] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1808.607448][T19752] EXT4-fs (loop4): group descriptors corrupted! 16:42:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00033b0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000e010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1808.660184][T19764] loop3: detected capacity change from 0 to 512 [ 1808.692963][T19767] loop1: detected capacity change from 0 to 512 [ 1808.703039][T19769] loop0: detected capacity change from 0 to 512 [ 1808.709908][T19771] loop4: detected capacity change from 0 to 512 [ 1808.722836][T19764] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1808.740740][T19769] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1808.752071][T19771] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1808.762183][T19771] EXT4-fs (loop4): group descriptors corrupted! [ 1808.778259][T19767] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1808.788340][T19767] EXT4-fs (loop1): group descriptors corrupted! [ 1808.958514][T19755] FAT-fs (loop2): bogus number of reserved sectors [ 1808.965126][T19755] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:47 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0604000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:47 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00007a0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000f010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00003f0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:47 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7400, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:47 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1809.473961][T19778] loop3: detected capacity change from 0 to 512 [ 1809.474444][T19779] loop4: detected capacity change from 0 to 512 [ 1809.481905][T19776] loop0: detected capacity change from 0 to 512 16:42:47 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:47 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1809.511456][T19778] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1809.526362][T19779] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1809.536584][T19779] EXT4-fs (loop4): group descriptors corrupted! [ 1809.536915][T19776] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000400f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00059c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000410010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1809.628322][T19791] loop3: detected capacity change from 0 to 512 [ 1809.642830][T19796] loop0: detected capacity change from 0 to 512 [ 1809.642933][T19795] loop4: detected capacity change from 0 to 512 [ 1809.655142][T19792] loop1: detected capacity change from 0 to 512 [ 1809.665625][T19791] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1809.679317][T19796] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1809.689701][T19795] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1809.699850][T19795] EXT4-fs (loop4): group descriptors corrupted! [ 1809.711184][T19792] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1809.721234][T19792] EXT4-fs (loop1): group descriptors corrupted! [ 1809.863072][T19780] FAT-fs (loop2): bogus number of reserved sectors [ 1809.869638][T19780] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f002010010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:48 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000be0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:48 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce1004000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000460f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:48 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7a00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:48 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1810.391709][T19804] loop3: detected capacity change from 0 to 512 [ 1810.398588][T19806] loop0: detected capacity change from 0 to 512 [ 1810.400334][T19807] loop4: detected capacity change from 0 to 512 [ 1810.418272][T19804] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1810.432008][T19806] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:48 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0005c20f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1810.443971][T19807] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1810.454164][T19807] EXT4-fs (loop4): group descriptors corrupted! 16:42:48 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000480f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000011010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1810.485958][T19815] loop3: detected capacity change from 0 to 512 [ 1810.498303][T19815] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1810.537038][T19818] loop4: detected capacity change from 0 to 512 [ 1810.555163][T19819] loop1: detected capacity change from 0 to 512 [ 1810.558450][T19821] loop0: detected capacity change from 0 to 512 [ 1810.570693][T19818] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:42:48 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00fffe0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1810.581612][T19818] EXT4-fs (loop4): group descriptors corrupted! [ 1810.602712][T19821] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1810.613613][T19825] loop3: detected capacity change from 0 to 512 [ 1810.626625][T19819] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1810.636727][T19819] EXT4-fs (loop1): group descriptors corrupted! [ 1810.651597][T19825] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1810.771261][T19805] FAT-fs (loop2): bogus number of reserved sectors [ 1810.777881][T19805] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:49 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0005000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:49 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000012010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00004c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce000fff0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:49 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7faf, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1811.284171][T19831] loop3: detected capacity change from 0 to 512 [ 1811.292467][T19835] loop4: detected capacity change from 0 to 512 [ 1811.298539][T19836] loop0: detected capacity change from 0 to 512 [ 1811.311370][T19835] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1811.321498][T19835] EXT4-fs (loop4): group descriptors corrupted! 16:42:49 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:49 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000014010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:49 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1811.331440][T19836] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1811.341804][T19831] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00feff0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:49 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1811.410892][T19848] loop0: detected capacity change from 0 to 512 [ 1811.426657][T19850] loop3: detected capacity change from 0 to 512 [ 1811.454171][T19853] loop1: detected capacity change from 0 to 512 [ 1811.460806][T19848] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1811.487443][T19850] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1811.508148][T19853] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1811.518272][T19853] EXT4-fs (loop1): group descriptors corrupted! [ 1811.672147][T19834] FAT-fs (loop2): bogus number of reserved sectors [ 1811.678842][T19834] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:50 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce9c05000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000550f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:50 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00001f010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000003000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:50 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7fb7, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:50 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1812.180577][T19857] loop4: detected capacity change from 0 to 512 [ 1812.191344][T19863] loop0: detected capacity change from 0 to 512 [ 1812.197891][T19864] loop3: detected capacity change from 0 to 512 [ 1812.208850][T19864] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1812.219625][T19857] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:42:50 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000005000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1812.229750][T19857] EXT4-fs (loop4): group descriptors corrupted! [ 1812.237534][T19863] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000600f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000020010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1812.295565][T19870] loop3: detected capacity change from 0 to 512 [ 1812.301820][ T1437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1812.311061][ T1437] Buffer I/O error on dev loop3, logical block 0, async page read [ 1812.325653][T19874] loop4: detected capacity change from 0 to 512 [ 1812.327855][T19872] loop1: detected capacity change from 0 to 512 16:42:50 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1812.350369][T19870] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1812.367014][T19874] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1812.377227][T19874] EXT4-fs (loop4): group descriptors corrupted! [ 1812.383549][T19877] loop0: detected capacity change from 0 to 512 [ 1812.399194][T19877] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1812.449218][T19872] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1812.459328][T19872] EXT4-fs (loop1): group descriptors corrupted! [ 1812.591054][T19861] FAT-fs (loop2): bogus number of reserved sectors [ 1812.597608][T19861] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000006000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:51 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000cec205000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00f0630f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f001020010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7fb8, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1813.046226][T19886] loop4: detected capacity change from 0 to 512 [ 1813.054526][T19888] loop0: detected capacity change from 0 to 512 [ 1813.058645][T19889] loop3: detected capacity change from 0 to 512 [ 1813.068842][T19886] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1813.079011][T19886] EXT4-fs (loop4): group descriptors corrupted! 16:42:51 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:51 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1813.087823][T19888] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1813.109090][T19889] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00f1630f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000022010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000007000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:51 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1813.166989][T19897] loop4: detected capacity change from 0 to 512 [ 1813.185634][T19900] loop0: detected capacity change from 0 to 512 [ 1813.187666][T19902] loop3: detected capacity change from 0 to 512 [ 1813.193287][T19903] loop1: detected capacity change from 0 to 512 [ 1813.230291][T19897] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1813.240448][T19897] EXT4-fs (loop4): group descriptors corrupted! [ 1813.241943][T19900] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1813.267819][T19902] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:51 executing program 5: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1813.278693][T19903] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1813.288756][T19903] EXT4-fs (loop1): group descriptors corrupted! [ 1813.421270][T19887] FAT-fs (loop2): bogus number of reserved sectors [ 1813.427917][T19887] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:51 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0006000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 5: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000009000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000680f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000025010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:51 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7fbc, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:52 executing program 5: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1813.980488][T19915] loop0: detected capacity change from 0 to 512 [ 1813.991322][T19920] loop3: detected capacity change from 0 to 512 [ 1813.999402][T19917] loop4: detected capacity change from 0 to 512 [ 1814.015462][T19920] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:52 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:52 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000a000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000026010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1814.027194][T19915] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1814.042734][T19917] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1814.052928][T19917] EXT4-fs (loop4): group descriptors corrupted! 16:42:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00006c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1814.101247][T19928] loop3: detected capacity change from 0 to 512 [ 1814.112992][T19929] loop1: detected capacity change from 0 to 512 [ 1814.127024][T19931] loop0: detected capacity change from 0 to 512 [ 1814.142292][T19935] loop4: detected capacity change from 0 to 512 [ 1814.143454][T19928] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1814.161105][T19931] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1814.171733][T19935] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1814.181845][T19935] EXT4-fs (loop4): group descriptors corrupted! [ 1814.189641][T19929] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1814.199713][T19929] EXT4-fs (loop1): group descriptors corrupted! [ 1814.330949][T19918] FAT-fs (loop2): bogus number of reserved sectors [ 1814.337530][T19918] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:52 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0406000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:52 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00003f010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000b000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000740f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:52 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7fbd, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1814.869351][T19941] loop4: detected capacity change from 0 to 512 [ 1814.870527][T19943] loop0: detected capacity change from 0 to 512 [ 1814.888118][T19945] loop3: detected capacity change from 0 to 512 [ 1814.888622][T19941] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1814.904512][T19941] EXT4-fs (loop4): group descriptors corrupted! 16:42:52 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:52 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:52 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1814.911566][T19945] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1814.922991][T19943] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000c000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000040010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00007a0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1815.011915][T19956] loop4: detected capacity change from 0 to 512 [ 1815.020132][T19958] loop3: detected capacity change from 0 to 512 [ 1815.026267][T19960] loop0: detected capacity change from 0 to 512 [ 1815.027330][T19961] loop1: detected capacity change from 0 to 512 [ 1815.044362][T19960] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1815.059184][T19956] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1815.069354][T19956] EXT4-fs (loop4): group descriptors corrupted! [ 1815.075631][T19958] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1815.095445][T19961] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1815.105458][T19961] EXT4-fs (loop1): group descriptors corrupted! [ 1815.229248][T19944] FAT-fs (loop2): bogus number of reserved sectors [ 1815.235789][T19944] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:53 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0007000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:53 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000046010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000900f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000d000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:53 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7fbe, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1815.770986][T19969] loop4: detected capacity change from 0 to 512 [ 1815.771947][T19970] loop3: detected capacity change from 0 to 512 [ 1815.786096][T19967] loop0: detected capacity change from 0 to 512 [ 1815.806783][T19970] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:53 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000e000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:53 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1815.820520][T19967] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1815.839416][T19969] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1815.849609][T19969] EXT4-fs (loop4): group descriptors corrupted! 16:42:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000048010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1815.886157][T19978] loop3: detected capacity change from 0 to 512 [ 1815.914728][T19982] loop1: detected capacity change from 0 to 512 [ 1815.921699][T19978] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:53 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:53 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1815.932098][T19983] loop0: detected capacity change from 0 to 512 [ 1815.950729][T19982] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1815.960771][T19982] EXT4-fs (loop1): group descriptors corrupted! [ 1815.980863][T19983] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1816.167786][T19971] FAT-fs (loop2): bogus number of reserved sectors [ 1816.174327][T19971] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:54 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0009000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00059c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000020f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:54 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00004c010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:54 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7fbf, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:54 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1816.663516][T19993] loop0: detected capacity change from 0 to 512 [ 1816.671326][T19994] loop3: detected capacity change from 0 to 512 [ 1816.672811][T19996] loop4: detected capacity change from 0 to 512 [ 1816.691776][T19996] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1816.701976][T19996] EXT4-fs (loop4): group descriptors corrupted! 16:42:54 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0005c20f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000030f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1816.711518][T19994] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1816.722258][T19993] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:54 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000055010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1816.767226][T20006] loop3: detected capacity change from 0 to 512 [ 1816.775411][T20008] loop4: detected capacity change from 0 to 512 [ 1816.791919][T20010] loop0: detected capacity change from 0 to 512 [ 1816.798665][T20011] loop1: detected capacity change from 0 to 512 [ 1816.809698][T20006] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1816.831068][T20011] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1816.841077][T20008] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1816.841096][T20008] EXT4-fs (loop4): group descriptors corrupted! [ 1816.857476][T20011] EXT4-fs (loop1): group descriptors corrupted! [ 1816.868525][T20010] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1817.083634][T19997] FAT-fs (loop2): bogus number of reserved sectors [ 1817.090273][T19997] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:55 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce000a000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:55 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0063f00f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000040f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000060010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:55 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x8100, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1817.543701][T20019] loop3: detected capacity change from 0 to 512 [ 1817.547181][T20021] loop0: detected capacity change from 0 to 512 [ 1817.558427][T20023] loop4: detected capacity change from 0 to 512 [ 1817.570440][T20021] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1817.577232][T20019] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:55 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:55 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1817.593102][T20023] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1817.603324][T20023] EXT4-fs (loop4): group descriptors corrupted! 16:42:55 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000050f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000068010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0063f10f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1817.679495][T20033] loop3: detected capacity change from 0 to 512 [ 1817.690305][T20037] loop0: detected capacity change from 0 to 512 [ 1817.692758][T20038] loop4: detected capacity change from 0 to 512 [ 1817.703479][T20039] loop1: detected capacity change from 0 to 512 [ 1817.713739][T20033] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1817.728075][T20037] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1817.747944][T20039] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1817.757986][T20039] EXT4-fs (loop1): group descriptors corrupted! [ 1817.765770][T20038] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1817.775953][T20038] EXT4-fs (loop4): group descriptors corrupted! [ 1817.976535][T20022] FAT-fs (loop2): bogus number of reserved sectors [ 1817.983121][T20022] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:56 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce000b000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:56 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000060f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00006c010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0001f80f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:56 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x8900, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:56 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1818.445809][T20045] loop0: detected capacity change from 0 to 512 [ 1818.448603][T20047] loop4: detected capacity change from 0 to 512 [ 1818.459882][T20049] loop3: detected capacity change from 0 to 512 [ 1818.479492][T20049] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:56 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000070f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:56 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1818.495655][T20045] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1818.511678][T20047] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1818.521825][T20047] EXT4-fs (loop4): group descriptors corrupted! 16:42:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000074010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:56 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1818.553267][T20058] loop3: detected capacity change from 0 to 512 [ 1818.573373][T20058] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1818.591840][T20062] loop0: detected capacity change from 0 to 512 [ 1818.613119][T20062] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1818.619074][T20063] loop1: detected capacity change from 0 to 512 [ 1818.695260][T20063] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1818.705318][T20063] EXT4-fs (loop1): group descriptors corrupted! [ 1818.811002][T20048] FAT-fs (loop2): bogus number of reserved sectors [ 1818.817698][T20048] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:57 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce000c000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00fffe0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:57 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000080f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00007a010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:57 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x9c05, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:57 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1819.343235][T20072] loop3: detected capacity change from 0 to 512 [ 1819.344266][T20073] loop4: detected capacity change from 0 to 512 [ 1819.356087][T20074] loop0: detected capacity change from 0 to 512 [ 1819.363507][T20072] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1819.375106][T20073] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1819.385296][T20073] EXT4-fs (loop4): group descriptors corrupted! 16:42:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000090f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:57 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1819.408876][T20074] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1819.446443][T20083] loop3: detected capacity change from 0 to 512 16:42:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce000fff0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:57 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1819.463475][T20085] loop1: detected capacity change from 0 to 512 [ 1819.476827][T20083] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000090010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1819.507291][T20087] loop4: detected capacity change from 0 to 512 [ 1819.544832][T20087] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1819.545727][T20085] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1819.554956][T20087] EXT4-fs (loop4): group descriptors corrupted! [ 1819.571236][T20085] EXT4-fs (loop1): group descriptors corrupted! [ 1819.582675][T20091] loop0: detected capacity change from 0 to 512 [ 1819.603344][T20091] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1819.800212][T20071] FAT-fs (loop2): bogus number of reserved sectors [ 1819.806890][T20071] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:58 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce000d000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000a0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00feff0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00059c010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:58 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xaf7f, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:42:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1820.209422][T20099] loop4: detected capacity change from 0 to 512 [ 1820.209535][T20100] loop3: detected capacity change from 0 to 512 [ 1820.215939][T20098] loop0: detected capacity change from 0 to 512 [ 1820.243213][T20100] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1820.255700][T20099] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1820.265859][T20099] EXT4-fs (loop4): group descriptors corrupted! [ 1820.267628][T20098] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000003000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(0x0, 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000b0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1820.342078][T20113] loop4: detected capacity change from 0 to 512 [ 1820.346597][T20112] loop1: detected capacity change from 0 to 512 [ 1820.377672][T20113] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1820.387811][T20113] EXT4-fs (loop4): group descriptors corrupted! [ 1820.394381][T20115] loop3: detected capacity change from 0 to 512 [ 1820.401537][T20112] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1820.411605][T20112] EXT4-fs (loop1): group descriptors corrupted! [ 1820.427940][T20115] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1820.651701][T20101] FAT-fs (loop2): bogus number of reserved sectors [ 1820.658287][T20101] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:59 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0005c2010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce000e000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000005000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xb77f, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1821.093167][T20126] loop0: detected capacity change from 0 to 512 [ 1821.093219][T20125] loop4: detected capacity change from 0 to 512 [ 1821.107511][T20125] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1821.117123][T20124] loop3: detected capacity change from 0 to 512 [ 1821.117641][T20125] EXT4-fs (loop4): group descriptors corrupted! [ 1821.132253][T20126] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:59 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:59 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1821.134475][T20124] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:42:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000006000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0001d6010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000d0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1821.217024][T20135] loop1: detected capacity change from 0 to 512 [ 1821.227713][T20137] loop4: detected capacity change from 0 to 512 [ 1821.248877][T20141] loop0: detected capacity change from 0 to 512 16:42:59 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1821.261023][T20137] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1821.271190][T20137] EXT4-fs (loop4): group descriptors corrupted! [ 1821.281563][T20145] loop3: detected capacity change from 0 to 512 [ 1821.282222][T20141] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1821.300853][T20145] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1821.325099][T20135] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1821.335112][T20135] EXT4-fs (loop1): group descriptors corrupted! [ 1821.513224][T20123] FAT-fs (loop2): bogus number of reserved sectors [ 1821.519801][T20123] FAT-fs (loop2): Can't find a valid FAT filesystem 16:42:59 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce000f000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:42:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000007000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000e0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0001d7010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:42:59 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xb87f, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1821.993379][T20154] loop3: detected capacity change from 0 to 512 [ 1821.998239][T20156] loop0: detected capacity change from 0 to 512 [ 1822.001031][T20157] loop4: detected capacity change from 0 to 512 [ 1822.020569][T20154] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:00 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:43:00 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:43:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000f0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000009000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1822.039563][T20157] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1822.049677][T20157] EXT4-fs (loop4): group descriptors corrupted! [ 1822.060047][T20156] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0001d8010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:00 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1822.115812][T20167] loop3: detected capacity change from 0 to 512 [ 1822.129254][T20168] loop4: detected capacity change from 0 to 512 [ 1822.132838][ T1437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1822.144694][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read [ 1822.154846][T20167] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1822.156476][T20170] loop0: detected capacity change from 0 to 512 [ 1822.183242][T20173] loop1: detected capacity change from 0 to 512 [ 1822.190924][T20168] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1822.201033][T20168] EXT4-fs (loop4): group descriptors corrupted! [ 1822.215142][T20173] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1822.225185][T20173] EXT4-fs (loop1): group descriptors corrupted! [ 1822.238707][T20170] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1822.480527][T20155] FAT-fs (loop2): bogus number of reserved sectors [ 1822.487068][T20155] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:00 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0410000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:00 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:43:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000100f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000a000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0001d9010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:00 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xbc7f, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1822.947466][T20180] loop3: detected capacity change from 0 to 512 [ 1822.956428][T20181] loop4: detected capacity change from 0 to 512 [ 1822.967206][T20184] loop0: detected capacity change from 0 to 512 [ 1822.975541][T20184] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:01 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:43:01 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1822.999749][T20180] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1823.011609][T20181] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1823.021845][T20181] EXT4-fs (loop4): group descriptors corrupted! 16:43:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000110f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0001da010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1823.063490][T20188] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1823.071516][T20188] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88815a8c8800 16:43:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000b000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1823.105678][T20191] loop1: detected capacity change from 0 to 512 [ 1823.128109][T20191] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1823.138305][T20191] EXT4-fs (loop1): group descriptors corrupted! [ 1823.169522][T20188] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1823.170685][T20195] loop3: detected capacity change from 0 to 512 [ 1823.177539][T20188] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88815a8c8800 [ 1823.196790][T20196] loop0: detected capacity change from 0 to 512 [ 1823.196815][T20197] loop4: detected capacity change from 0 to 512 [ 1823.209864][T20195] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000120f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1823.226740][T20196] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1823.238552][T20197] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1823.248745][T20197] EXT4-fs (loop4): group descriptors corrupted! [ 1823.282248][T20199] loop3: detected capacity change from 0 to 512 [ 1823.300796][T20199] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1823.484104][T20182] FAT-fs (loop2): bogus number of reserved sectors [ 1823.490666][T20182] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:01 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce2010000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:01 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:43:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0001db010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000c000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000140f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:01 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xbd7f, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1823.875263][T20203] loop0: detected capacity change from 0 to 512 [ 1823.883731][T20209] loop3: detected capacity change from 0 to 512 [ 1823.885495][T20210] loop4: detected capacity change from 0 to 512 [ 1823.900941][T20200] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1823.909049][T20200] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139fc6000 [ 1823.922565][T20209] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1823.938697][T20210] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1823.948790][T20210] EXT4-fs (loop4): group descriptors corrupted! [ 1823.956279][T20203] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1823.957128][T20200] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1823.974387][T20200] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139fc6000 [ 1823.986389][T20213] loop1: detected capacity change from 0 to 512 [ 1824.013619][T20213] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 16:43:02 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:43:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0001dc010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000d000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000220f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1824.023730][T20213] EXT4-fs (loop1): group descriptors corrupted! [ 1824.060811][T20217] loop4: detected capacity change from 0 to 512 [ 1824.070763][T20218] loop0: detected capacity change from 0 to 512 [ 1824.072159][T20219] loop3: detected capacity change from 0 to 512 [ 1824.086966][T20217] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1824.097107][T20217] EXT4-fs (loop4): group descriptors corrupted! [ 1824.106105][T20220] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1824.114176][T20220] ref_ctr decrement failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813c5d7400 [ 1824.125694][T20219] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1824.138354][T20218] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1824.150305][T20220] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000e000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000250f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1824.158353][T20220] ref_ctr decrement failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813c5d7400 [ 1824.202728][T20224] loop4: detected capacity change from 0 to 512 [ 1824.212943][T20225] loop3: detected capacity change from 0 to 512 [ 1824.223998][T20224] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1824.234154][T20224] EXT4-fs (loop4): group descriptors corrupted! [ 1824.246846][T20225] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1824.463119][T20212] FAT-fs (loop2): bogus number of reserved sectors [ 1824.469766][T20212] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:02 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0011000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:02 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:43:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0001f8010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000260f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000020f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:02 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xbe7f, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1824.813284][T20230] loop3: detected capacity change from 0 to 512 [ 1824.816667][T20233] loop0: detected capacity change from 0 to 512 [ 1824.821491][T20234] loop4: detected capacity change from 0 to 512 [ 1824.833198][T20235] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1824.841504][T20235] ref_ctr decrement failed for inode: 0x49d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813f794000 [ 1824.855859][T20233] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1824.874008][T20235] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1824.877402][T20234] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1824.882027][T20235] ref_ctr decrement failed for inode: 0x49d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813f794000 [ 1824.892074][T20234] EXT4-fs (loop4): group descriptors corrupted! 16:43:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00fffe010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1824.910031][T20230] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000460f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:02 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1824.962424][T20241] loop0: detected capacity change from 0 to 512 [ 1824.988101][T20244] loop3: detected capacity change from 0 to 512 [ 1824.991858][T20242] loop1: detected capacity change from 0 to 512 [ 1825.002173][T20241] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000030f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1825.019698][T20246] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1825.027732][T20246] ref_ctr decrement failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810628d000 [ 1825.053726][T20244] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000fff010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1825.088651][T20242] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1825.098684][T20242] EXT4-fs (loop1): group descriptors corrupted! [ 1825.120135][T20248] loop4: detected capacity change from 0 to 512 [ 1825.120205][T20246] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000480f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1825.134397][T20246] ref_ctr decrement failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810628d000 [ 1825.159720][T20248] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1825.169846][T20248] EXT4-fs (loop4): group descriptors corrupted! [ 1825.179845][T20251] loop0: detected capacity change from 0 to 512 [ 1825.194761][T20253] loop3: detected capacity change from 0 to 512 [ 1825.206946][T20251] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1825.233486][T20253] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1825.436928][T20232] FAT-fs (loop2): bogus number of reserved sectors [ 1825.443543][T20232] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:03 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0012000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:03 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x4000080) 16:43:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00feff010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000040f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00004c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:03 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xbf7f, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1825.753449][T20257] loop0: detected capacity change from 0 to 512 [ 1825.759200][T20260] loop4: detected capacity change from 0 to 512 [ 1825.761754][T20261] loop3: detected capacity change from 0 to 512 [ 1825.775309][T20262] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1825.783508][T20262] ref_ctr decrement failed for inode: 0x497 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 [ 1825.805422][T20257] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1825.806926][T20260] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1825.816062][T20261] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1825.825686][T20260] EXT4-fs (loop4): group descriptors corrupted! [ 1825.842320][T20262] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000050f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:03 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x4000080) 16:43:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000000100000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1825.850650][T20262] ref_ctr decrement failed for inode: 0x497 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 16:43:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000600f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1825.907837][T20268] loop4: detected capacity change from 0 to 512 [ 1825.928356][T20272] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1825.936351][T20272] ref_ctr decrement failed for inode: 0x496 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123400 [ 1825.949993][T20273] loop0: detected capacity change from 0 to 512 [ 1825.950099][T20268] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1825.966340][T20268] EXT4-fs (loop4): group descriptors corrupted! [ 1825.977291][T20274] loop1: detected capacity change from 0 to 512 [ 1825.990549][T20272] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1825.998637][T20272] ref_ctr decrement failed for inode: 0x496 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123400 [ 1826.009855][T20277] loop3: detected capacity change from 0 to 512 [ 1826.014069][T20273] EXT4-fs (loop0): bad geometry: first data block 256 is beyond end of filesystem (256) [ 1826.029660][T20277] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:04 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000680f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1826.053208][T20274] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1826.063283][T20274] EXT4-fs (loop1): group descriptors corrupted! [ 1826.113789][T20279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1826.116516][T20281] loop3: detected capacity change from 0 to 512 [ 1826.121846][T20279] ref_ctr decrement failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1826.142505][T20281] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1826.187438][T20279] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1826.195464][T20279] ref_ctr decrement failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1826.391490][T20263] FAT-fs (loop2): bogus number of reserved sectors [ 1826.398068][T20263] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:04 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0014000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000060f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000000200000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00006c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:04 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:43:04 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xc205, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1826.730122][T20286] loop4: detected capacity change from 0 to 512 [ 1826.738235][T20290] loop0: detected capacity change from 0 to 512 [ 1826.742191][T20289] loop3: detected capacity change from 0 to 512 [ 1826.757320][T20290] EXT4-fs (loop0): bad geometry: first data block 512 is beyond end of filesystem (256) [ 1826.759135][T20292] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000000300000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1826.775113][T20292] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d400 [ 1826.788775][T20286] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1826.798935][T20286] EXT4-fs (loop4): group descriptors corrupted! [ 1826.819493][T20289] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1826.847379][T20292] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1826.855374][T20292] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d400 [ 1826.879871][T20296] loop1: detected capacity change from 0 to 512 16:43:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000740f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000070f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1826.891865][T20299] loop0: detected capacity change from 0 to 512 [ 1826.913833][T20301] loop4: detected capacity change from 0 to 512 [ 1826.927580][T20303] loop3: detected capacity change from 0 to 512 16:43:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0001db010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1826.943286][T20296] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1826.953384][T20296] EXT4-fs (loop1): group descriptors corrupted! [ 1826.964722][T20303] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1826.977109][T20299] EXT4-fs (loop0): bad geometry: first data block 768 is beyond end of filesystem (256) [ 1826.987032][T20301] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:43:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000000400000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1826.997215][T20301] EXT4-fs (loop4): group descriptors corrupted! [ 1827.003948][T20305] loop5: detected capacity change from 0 to 512 [ 1827.019787][T20305] EXT4-fs warning (device loop5): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000080f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1827.067960][T20307] loop0: detected capacity change from 0 to 512 [ 1827.107994][T20309] loop4: detected capacity change from 0 to 512 [ 1827.115198][T20307] EXT4-fs (loop0): bad geometry: first data block 1024 is beyond end of filesystem (256) [ 1827.137547][T20309] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1827.147645][T20309] EXT4-fs (loop4): group descriptors corrupted! [ 1827.272528][T20291] FAT-fs (loop2): bogus number of reserved sectors [ 1827.279096][T20291] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:05 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce001f000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00007a0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:05 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 16:43:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000090f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000001000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:05 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xc611, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:05 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x1ff, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) [ 1827.654621][T20317] loop4: detected capacity change from 0 to 512 [ 1827.654632][T20316] loop0: detected capacity change from 0 to 512 [ 1827.669595][T20316] EXT4-fs (loop0): bad geometry: first data block 4096 is beyond end of filesystem (256) [ 1827.670199][T20319] loop3: detected capacity change from 0 to 512 16:43:05 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) [ 1827.697922][T20319] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1827.710231][T20317] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1827.720459][T20317] EXT4-fs (loop4): group descriptors corrupted! 16:43:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000001100000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000a0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000be0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1827.754763][T20325] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1827.762821][T20325] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123000 [ 1827.792709][T20327] loop1: detected capacity change from 0 to 512 [ 1827.816469][T20327] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1827.826543][T20327] EXT4-fs (loop1): group descriptors corrupted! [ 1827.835630][T20329] loop4: detected capacity change from 0 to 512 [ 1827.836113][T20325] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1827.842444][T20332] loop0: detected capacity change from 0 to 512 [ 1827.849896][T20325] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123000 [ 1827.869326][T20333] loop3: detected capacity change from 0 to 512 [ 1827.875945][T20332] EXT4-fs (loop0): bad geometry: first data block 4352 is beyond end of filesystem (256) [ 1827.887549][T20329] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1827.897664][T20329] EXT4-fs (loop4): group descriptors corrupted! [ 1827.909155][T20333] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000b0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1827.967435][T20335] loop4: detected capacity change from 0 to 512 [ 1827.986915][T20335] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1827.997114][T20335] EXT4-fs (loop4): group descriptors corrupted! [ 1828.138338][T20314] FAT-fs (loop2): bogus number of reserved sectors [ 1828.144858][T20314] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:06 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0020000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000001200000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:06 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) 16:43:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000fe0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:06 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xd800, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1828.534165][T20341] loop0: detected capacity change from 0 to 512 [ 1828.543651][T20343] loop4: detected capacity change from 0 to 512 [ 1828.551725][T20344] loop3: detected capacity change from 0 to 512 [ 1828.565597][T20345] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1828.573631][T20345] ref_ctr decrement failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038dbc00 [ 1828.586915][T20341] EXT4-fs (loop0): bad geometry: first data block 4608 is beyond end of filesystem (256) [ 1828.601456][T20343] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1828.611552][T20343] EXT4-fs (loop4): group descriptors corrupted! [ 1828.628086][T20344] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1828.651656][T20345] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1828.659685][T20345] ref_ctr decrement failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038dbc00 16:43:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000001300000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1828.681825][T20349] loop1: detected capacity change from 0 to 512 16:43:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000011000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1828.719672][T20351] loop0: detected capacity change from 0 to 512 [ 1828.758069][T20351] EXT4-fs (loop0): bad geometry: first data block 4864 is beyond end of filesystem (256) 16:43:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000d0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:06 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) [ 1828.768219][T20353] loop3: detected capacity change from 0 to 512 [ 1828.775197][T20355] loop4: detected capacity change from 0 to 512 [ 1828.783821][T20357] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1828.791857][T20357] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1828.805612][T20353] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000000b400000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1828.821138][T20355] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1828.831250][T20355] EXT4-fs (loop4): group descriptors corrupted! [ 1828.854376][T20349] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1828.864499][T20349] EXT4-fs (loop1): group descriptors corrupted! 16:43:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000012000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1828.887441][T20357] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1828.895533][T20357] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1828.906730][T20359] loop0: detected capacity change from 0 to 512 [ 1828.957023][T20361] loop3: detected capacity change from 0 to 512 [ 1828.964680][T20359] EXT4-fs (loop0): bad geometry: first data block 46080 is beyond end of filesystem (256) [ 1828.981352][T20361] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:07 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) (fail_nth: 1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000e0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000020000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:07 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce1020000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:07 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xd900, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000002000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1829.589108][T20368] loop3: detected capacity change from 0 to 512 [ 1829.589149][T20371] loop0: detected capacity change from 0 to 512 [ 1829.591593][T20372] loop4: detected capacity change from 0 to 512 [ 1829.609019][T20366] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1829.611454][T20371] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 1829.617018][T20366] ref_ctr decrement failed for inode: 0x48c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038db800 [ 1829.638543][T20368] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1829.659129][T20372] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1829.669232][T20372] EXT4-fs (loop4): group descriptors corrupted! 16:43:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000026000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000f0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000003000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1829.687356][T20366] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1829.695368][T20366] ref_ctr decrement failed for inode: 0x48c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038db800 16:43:07 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) (fail_nth: 2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1829.759340][T20379] loop1: detected capacity change from 0 to 512 [ 1829.759353][T20380] loop3: detected capacity change from 0 to 512 [ 1829.768117][T20382] loop0: detected capacity change from 0 to 512 [ 1829.772172][T20381] loop4: detected capacity change from 0 to 512 [ 1829.796377][T20382] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 1829.812294][T20380] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1829.824364][T20381] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1829.824448][T20384] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1829.834574][T20381] EXT4-fs (loop4): group descriptors corrupted! [ 1829.848992][T20384] ref_ctr decrement failed for inode: 0x4a1 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123000 16:43:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000040000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000004000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000100f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1829.866903][T20379] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1829.877021][T20379] EXT4-fs (loop1): group descriptors corrupted! [ 1829.889969][T20384] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1829.898002][T20384] ref_ctr decrement failed for inode: 0x4a1 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123000 16:43:07 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) (fail_nth: 3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1829.942652][T20387] loop0: detected capacity change from 0 to 512 [ 1829.958868][T20388] loop4: detected capacity change from 0 to 512 [ 1829.967008][T20390] loop3: detected capacity change from 0 to 512 [ 1829.981914][T20387] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 1830.001464][T20392] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1830.009507][T20392] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cdb6c00 [ 1830.022706][T20388] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1830.022707][T20390] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1830.042893][T20388] EXT4-fs (loop4): group descriptors corrupted! 16:43:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000010000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1830.068468][T20392] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1830.076548][T20392] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cdb6c00 [ 1830.124705][T20395] loop0: detected capacity change from 0 to 512 [ 1830.143158][T20395] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 1830.290859][T20369] FAT-fs (loop2): bogus number of reserved sectors [ 1830.297480][T20369] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:08 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0022000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000110f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000046000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:08 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) (fail_nth: 4) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000011000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:08 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xda00, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1830.566261][T20403] loop0: detected capacity change from 0 to 512 [ 1830.566835][T20404] loop3: detected capacity change from 0 to 512 [ 1830.581564][T20405] loop4: detected capacity change from 0 to 512 [ 1830.589725][T20402] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1830.597802][T20402] ref_ctr decrement failed for inode: 0x498 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7000 16:43:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000120f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce000007cd000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1830.600058][T20404] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1830.620226][T20405] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1830.630431][T20405] EXT4-fs (loop4): group descriptors corrupted! [ 1830.636834][T20402] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1830.644913][T20402] ref_ctr decrement failed for inode: 0x498 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7000 [ 1830.645213][T20403] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size 16:43:08 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) (fail_nth: 5) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000012000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1830.715140][T20409] loop1: detected capacity change from 0 to 512 [ 1830.724961][T20414] loop4: detected capacity change from 0 to 512 [ 1830.724977][T20413] loop3: detected capacity change from 0 to 512 [ 1830.741847][T20414] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1830.752053][T20414] EXT4-fs (loop4): group descriptors corrupted! 16:43:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000140f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1830.774497][T20413] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1830.789343][T20409] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1830.797256][T20416] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1830.799374][T20409] EXT4-fs (loop1): group descriptors corrupted! [ 1830.807296][T20416] ref_ctr decrement failed for inode: 0x498 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7000 16:43:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000002000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1830.930440][T20420] loop0: detected capacity change from 0 to 512 [ 1830.931939][T20422] loop4: detected capacity change from 0 to 512 [ 1830.938919][T20416] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1830.944787][T20423] loop3: detected capacity change from 0 to 512 [ 1830.950963][T20416] ref_ctr decrement failed for inode: 0x498 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7000 [ 1830.969986][T20420] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 1830.994014][T20422] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1831.004160][T20422] EXT4-fs (loop4): group descriptors corrupted! [ 1831.013623][T20423] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1831.097665][T20416] FAULT_INJECTION: forcing a failure. [ 1831.097665][T20416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1831.110880][T20416] CPU: 0 PID: 20416 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-00283-g10d4879f9ef0-dirty #0 [ 1831.121832][T20416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1831.131881][T20416] Call Trace: [ 1831.135163][T20416] [ 1831.138099][T20416] dump_stack_lvl+0xd6/0x122 [ 1831.142703][T20416] dump_stack+0x11/0x12 [ 1831.146878][T20416] should_fail+0x242/0x250 [ 1831.151293][T20416] should_fail_usercopy+0x16/0x20 [ 1831.156341][T20416] _copy_to_user+0x1a/0x90 [ 1831.160762][T20416] simple_read_from_buffer+0xab/0x120 [ 1831.166134][T20416] proc_fail_nth_read+0x10d/0x150 [ 1831.171164][T20416] ? proc_fault_inject_write+0x230/0x230 [ 1831.176826][T20416] vfs_read+0x198/0x560 [ 1831.181057][T20416] ? __fget_files+0x1a7/0x1e0 [ 1831.185777][T20416] ksys_read+0xe8/0x1a0 [ 1831.189937][T20416] __x64_sys_read+0x3e/0x50 [ 1831.194507][T20416] do_syscall_64+0x2b/0x70 [ 1831.198939][T20416] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1831.204837][T20416] RIP: 0033:0x7fbf70cd2e2c [ 1831.209247][T20416] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1831.228867][T20416] RSP: 002b:00007fbf70496160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1831.237281][T20416] RAX: ffffffffffffffda RBX: 00007fbf70e32f80 RCX: 00007fbf70cd2e2c [ 1831.245252][T20416] RDX: 000000000000000f RSI: 00007fbf704961e0 RDI: 0000000000000008 [ 1831.253273][T20416] RBP: 00007fbf704961d0 R08: 0000000000000000 R09: 0000000000000000 [ 1831.261245][T20416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.269311][T20416] R13: 00007ffe5c34b76f R14: 00007fbf70496300 R15: 0000000000022000 [ 1831.277330][T20416] 16:43:09 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0025000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000013000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000003000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000220f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:09 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xedc0, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:09 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1831.570992][T20429] loop0: detected capacity change from 0 to 512 [ 1831.573200][T20426] loop3: detected capacity change from 0 to 512 [ 1831.584966][T20431] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1831.585971][T20434] loop4: detected capacity change from 0 to 512 [ 1831.592988][T20431] ref_ctr decrement failed for inode: 0x497 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 [ 1831.607109][T20431] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1831.618263][T20431] ref_ctr decrement failed for inode: 0x497 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 [ 1831.630119][T20429] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 1831.641027][T20426] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1831.656595][T20434] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:43:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000024000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000004000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1831.666706][T20434] EXT4-fs (loop4): group descriptors corrupted! 16:43:09 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, &(0x7f0000000200)="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"}, 0x20) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000250f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1831.712977][T20438] loop1: detected capacity change from 0 to 512 [ 1831.732477][T20440] loop3: detected capacity change from 0 to 512 [ 1831.745162][T20443] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1831.753224][T20443] ref_ctr decrement failed for inode: 0x48a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7000 [ 1831.759195][T20446] loop0: detected capacity change from 0 to 512 [ 1831.764405][T20445] loop4: detected capacity change from 0 to 512 [ 1831.779901][T20440] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1831.792432][T20438] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1831.802467][T20438] EXT4-fs (loop1): group descriptors corrupted! 16:43:09 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, &(0x7f0000000200)="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"}, 0x20) (async) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1831.810296][T20443] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1831.818304][T20443] ref_ctr decrement failed for inode: 0x48a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813ccf7000 [ 1831.831510][T20446] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 1831.842490][T20445] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1831.852645][T20445] EXT4-fs (loop4): group descriptors corrupted! 16:43:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000005000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1831.906734][T20454] loop3: detected capacity change from 0 to 512 [ 1831.923329][T20454] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1832.207011][T20433] FAT-fs (loop2): bogus number of reserved sectors [ 1832.213649][T20433] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:10 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0026000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0000b4000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:10 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, &(0x7f0000000200)="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"}, 0x20) (async) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000260f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000006000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:10 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xfeff, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:10 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x220000, 0x80) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000040)={0x7fff, 0x20, 0x7ff}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1832.504157][T20462] loop0: detected capacity change from 0 to 512 [ 1832.506142][T20463] loop4: detected capacity change from 0 to 512 [ 1832.512784][T20460] loop3: detected capacity change from 0 to 512 [ 1832.531841][T20463] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1832.541949][T20463] EXT4-fs (loop4): group descriptors corrupted! [ 1832.549673][T20462] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 1832.560700][T20460] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1832.572363][T20469] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1832.580388][T20469] ref_ctr decrement failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1832.592003][T20469] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000460f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000007000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:10 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x220000, 0x80) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000040)={0x7fff, 0x20, 0x7ff}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x220000, 0x80) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) (async) fcntl$dupfd(r0, 0x0, r1) (async) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000040)={0x7fff, 0x20, 0x7ff}) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1832.600101][T20469] ref_ctr decrement failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 16:43:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000002010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1832.655265][T20474] loop4: detected capacity change from 0 to 512 [ 1832.671026][T20477] loop1: detected capacity change from 0 to 512 [ 1832.671546][T20479] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1832.677626][T20476] loop3: detected capacity change from 0 to 512 [ 1832.685318][T20479] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cdb6800 [ 1832.702697][T20474] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1832.708167][T20479] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1832.712840][T20474] EXT4-fs (loop4): group descriptors corrupted! [ 1832.720797][T20479] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cdb6800 [ 1832.738306][T20481] loop0: detected capacity change from 0 to 512 [ 1832.744302][ T1437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 16:43:10 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x220000, 0x80) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000040)={0x7fff, 0x20, 0x7ff}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x220000, 0x80) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) (async) fcntl$dupfd(r0, 0x0, r1) (async) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000040)={0x7fff, 0x20, 0x7ff}) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1832.753662][ T1437] Buffer I/O error on dev loop0, logical block 0, async page read [ 1832.763433][T20476] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1832.775485][T20477] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1832.785590][T20477] EXT4-fs (loop1): group descriptors corrupted! [ 1832.798987][T20497] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1832.807014][T20497] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cdb6800 [ 1832.818630][T20481] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1832.833585][T20497] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1832.841618][T20497] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cdb6800 [ 1833.197070][T20461] FAT-fs (loop2): bogus number of reserved sectors [ 1833.203643][T20461] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:11 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ced537000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000008000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000480f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000003010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:11 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) pread64(0xffffffffffffffff, 0x0, 0x2d, 0x100010) r5 = fsmount(r3, 0x0, 0xd) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r6, 0x0, 0x2d, 0x100010) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r7, 0x0, 0x2d, 0x100010) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r8, 0x0, 0x2d, 0x100010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0xe}], &(0x7f0000000100)='GPL\x00', 0x0, 0xca, &(0x7f0000000200)=""/202, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x2, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r5, r1, r6, 0x1, r7, r3, r4, r4, 0x1, r8]}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:11 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xff0f, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1833.505368][T20518] loop4: detected capacity change from 0 to 512 [ 1833.505603][T20519] loop0: detected capacity change from 0 to 512 [ 1833.519952][T20521] loop3: detected capacity change from 0 to 512 [ 1833.531326][T20521] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1833.537164][T20517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000009000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1833.543607][T20519] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1833.549586][T20517] ref_ctr decrement failed for inode: 0x492 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038dbc00 [ 1833.570880][T20518] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1833.581065][T20518] EXT4-fs (loop4): group descriptors corrupted! 16:43:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000004010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00004c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1833.599803][T20517] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1833.607827][T20517] ref_ctr decrement failed for inode: 0x492 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038dbc00 [ 1833.619406][T20525] loop3: detected capacity change from 0 to 512 [ 1833.631681][T20525] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:11 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) pread64(0xffffffffffffffff, 0x0, 0x2d, 0x100010) (async) r5 = fsmount(r3, 0x0, 0xd) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r6, 0x0, 0x2d, 0x100010) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r7, 0x0, 0x2d, 0x100010) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r8, 0x0, 0x2d, 0x100010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0xe}], &(0x7f0000000100)='GPL\x00', 0x0, 0xca, &(0x7f0000000200)=""/202, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x2, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r5, r1, r6, 0x1, r7, r3, r4, r4, 0x1, r8]}, 0x80) (async) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000a000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1833.680521][T20530] loop4: detected capacity change from 0 to 512 [ 1833.692370][T20532] loop0: detected capacity change from 0 to 512 [ 1833.702776][T20531] loop1: detected capacity change from 0 to 512 [ 1833.710940][T20530] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1833.721162][T20530] EXT4-fs (loop4): group descriptors corrupted! 16:43:11 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) pread64(0xffffffffffffffff, 0x0, 0x2d, 0x100010) (async) r5 = fsmount(r3, 0x0, 0xd) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r6, 0x0, 0x2d, 0x100010) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r7, 0x0, 0x2d, 0x100010) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r8, 0x0, 0x2d, 0x100010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0xe}], &(0x7f0000000100)='GPL\x00', 0x0, 0xca, &(0x7f0000000200)=""/202, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x2, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r5, r1, r6, 0x1, r7, r3, r4, r4, 0x1, r8]}, 0x80) (async) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1833.739652][T20535] loop3: detected capacity change from 0 to 512 [ 1833.746234][T20532] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1833.759656][T20531] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1833.769682][T20531] EXT4-fs (loop1): group descriptors corrupted! [ 1833.791431][T20535] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1834.128476][T20520] FAT-fs (loop2): bogus number of reserved sectors [ 1834.135023][T20520] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:12 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ced637000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000550f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:12 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3f, 0x7, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1010a, 0x0, 0xfffffffc, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000005010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000b000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:12 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xfffe, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:12 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3f, 0x7, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1010a, 0x0, 0xfffffffc, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1834.423914][T20554] loop3: detected capacity change from 0 to 512 [ 1834.427552][T20552] loop0: detected capacity change from 0 to 512 [ 1834.446376][T20556] loop4: detected capacity change from 0 to 512 [ 1834.453463][T20552] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000006010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:12 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3f, 0x7, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1010a, 0x0, 0xfffffffc, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3f, 0x7, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1010a, 0x0, 0xfffffffc, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1834.466743][T20554] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1834.478955][T20556] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1834.489082][T20556] EXT4-fs (loop4): group descriptors corrupted! 16:43:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000c000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000600f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:12 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) close(r0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r0, 0x3}) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1834.547312][T20569] loop0: detected capacity change from 0 to 512 [ 1834.553809][T20572] loop3: detected capacity change from 0 to 512 [ 1834.558815][T20575] loop4: detected capacity change from 0 to 512 [ 1834.566062][T20571] loop1: detected capacity change from 0 to 512 [ 1834.582866][T20569] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1834.599712][T20572] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1834.600713][T20575] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1834.619988][T20575] EXT4-fs (loop4): group descriptors corrupted! [ 1834.627239][T20585] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1834.635295][T20585] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 [ 1834.670858][T20571] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1834.680897][T20571] EXT4-fs (loop1): group descriptors corrupted! [ 1834.687108][T20585] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1834.695211][T20585] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 [ 1835.082598][T20557] FAT-fs (loop2): bogus number of reserved sectors [ 1835.089162][T20557] FAT-fs (loop2): Can't find a valid FAT filesystem 16:43:13 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce003f000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000007010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000680f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000d000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:13 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) close(r0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r0, 0x3}) (async) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:13 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x40000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1835.332514][T20591] loop0: detected capacity change from 0 to 512 [ 1835.338418][T20594] loop3: detected capacity change from 0 to 512 [ 1835.342926][T20596] loop4: detected capacity change from 0 to 512 [ 1835.353421][T20594] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1835.371099][T20596] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:43:13 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) close(r0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r0, 0x3}) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000e000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00006c0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000008010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1835.381438][T20596] EXT4-fs (loop4): group descriptors corrupted! [ 1835.392305][T20591] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1835.393206][T20603] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1835.410452][T20603] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888138d94000 [ 1835.468906][T20607] loop3: detected capacity change from 0 to 512 [ 1835.479205][T20611] loop0: detected capacity change from 0 to 512 [ 1835.479546][T20610] loop4: detected capacity change from 0 to 512 [ 1835.486241][T20603] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1835.499833][T20603] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888138d94000 [ 1835.505724][T20612] loop1: detected capacity change from 0 to 512 [ 1835.519439][T20607] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1835.530923][T20611] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:13 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000009010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1835.563986][T20610] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1835.574131][T20610] EXT4-fs (loop4): group descriptors corrupted! [ 1835.574295][T20612] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1835.590436][T20612] EXT4-fs (loop1): group descriptors corrupted! [ 1835.614490][T20615] loop0: detected capacity change from 0 to 512 [ 1835.619696][ T1437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1835.629981][ T1437] Buffer I/O error on dev loop0, logical block 0, async page read [ 1835.643683][T20616] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1835.651695][T20616] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810429e400 [ 1835.671918][T20615] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1835.674961][T20616] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1835.690224][T20616] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810429e400 16:43:14 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0040000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000010000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000740f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000a010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:14 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) 16:43:14 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x80000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1836.324647][T20623] loop0: detected capacity change from 0 to 512 [ 1836.328288][T20625] loop3: detected capacity change from 0 to 512 [ 1836.340294][T20627] loop4: detected capacity change from 0 to 512 [ 1836.349270][T20623] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1836.349367][T20629] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1836.349382][T20629] ref_ctr decrement failed for inode: 0x49e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813f794000 [ 1836.380725][T20625] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1836.391186][T20627] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1836.401308][T20627] EXT4-fs (loop4): group descriptors corrupted! [ 1836.409748][T20629] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:14 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1836.417845][T20629] ref_ctr decrement failed for inode: 0x49e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813f794000 16:43:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00007a0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000b010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:14 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fallocate(r2, 0x1, 0x4, 0x3) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000011000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1836.475759][T20644] loop1: detected capacity change from 0 to 512 [ 1836.486264][T20646] loop4: detected capacity change from 0 to 512 [ 1836.502466][T20649] loop0: detected capacity change from 0 to 512 [ 1836.505928][ T1437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1836.517886][ T1437] Buffer I/O error on dev loop0, logical block 0, async page read [ 1836.519864][T20652] loop3: detected capacity change from 0 to 512 [ 1836.528044][T20650] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1836.540037][T20650] ref_ctr decrement failed for inode: 0x491 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cb33c00 [ 1836.552889][T20646] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1836.553674][T20650] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1836.562995][T20646] EXT4-fs (loop4): group descriptors corrupted! [ 1836.570994][T20650] ref_ctr decrement failed for inode: 0x491 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cb33c00 [ 1836.590972][T20649] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1836.605842][T20644] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1836.615919][T20644] EXT4-fs (loop1): group descriptors corrupted! 16:43:14 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fallocate(r2, 0x1, 0x4, 0x3) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1836.623554][T20652] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:15 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0046000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000c010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:15 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fallocate(r2, 0x1, 0x4, 0x3) (async, rerun: 32) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000fe0f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000012000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:15 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x80040, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:15 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, r6}}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r2, {0xee01, 0x0}}, './file0\x00'}) sendmsg$unix(r1, &(0x7f0000002440)={&(0x7f0000000100)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000200)="f826c60517ab6b7f17a157c221f0ac4e93c17726a98c8461779f9072d6fe16bb7f8151a22b31fc2e31", 0x29}, {&(0x7f0000000240)="9872642e0fb56b09b5c213c0b5821953b6db6415acb1d8c59b2be8285338ad6ea82c86edcff24b0b912df3182d7d2daf25c064d32374b386c92c6f3cd7d5834b04036d9d5f26aae83f503bea63604044a5d6b461c1d31f917161b1eaf1edbf443fc1d0c198c286d89b3b", 0x6a}, {&(0x7f00000002c0)="b93042a47d791697885313507fb26ee932ab00b82cb158c7266ffc87c29d43b76bdecd111ac4dee56b79d3ab12062be8568871baf652f5e9d2cf089d8174a18d7d609fd08e02cc2a8564cc6bed900bc8d81c5f3c848fb7fef665cf28479345826078d7c2182a09fabbe1efde2a7269e89df66d79bf8ddb9b54c2b8c42383f2873c35b0a848bb5ccba15ba5d791624b24477316930126e3d0cb4c7f4b4ca8532b1e502a3b283cdcd9bc90af92ff9e83344fb4c7b02de07727c8a64dbbe35baaf5c8468962079712c3f6d6c20a95a5884666ad2ff4936aa79f3dad658a368bbc0f83d5df57432d31e9da4d0663be41d20a3f3ac27be3859afec7d8dfc0eb04bc3db238df58aa64399c066479122b8a3f922bcf16fea9b275d891978bbb8cfe6f8c42f7fb45d7bd1b1b00cb5d55bc01ae09a958a53e5676fa38ab9fda6df472e227ba976a90c9fc4d4e4a195576540ba0de18a006d093b80aa9f3d7fc7fa95f44373df4adbbaff535c0a041b1e9808487a8a20c312235f19f0660788b82dd35068542ffb7b7b1a0b44f03c07b5c18729cf485578c2c1d31b71031895586c26fbf13ee35cae516144ce237398966fedab9728c06e0f127fdd7f7c0a315637ca16d44376fc7f93d56d99deecebef82663734c4c8a677a0e552ad43b1c7f4f8ff71d28d6d9842e0b4fea29f0e0d9968665bd9f97ed6d51bb713ce655e302c8777ef6542493f09de0f9324bd78d740aa81458f4ea21e00bdf97342ce812f5a70543b8bdc0daf4d7627cd5e98b1860b82bc8d6450f8dfbfeb3741d41c5e90aad90a6640e4aeefd7bf3b738cd583c103b1ede64d0e7ffd72c608b9410d523b490e3bc7e5a0e5a448349a95093fc07277b32174876e23eacda6d08bc5c309cc97487c43bf3876f1d4be714d70a7f34239d89091d5d0eb3b9ad0aa68a871f0c5dfdd0b9ff1a5425281b2fe95c3c74fdf44317ce3798304e724f75cd1243480762d0f9445d1aeb63c9f81c30f892d8b08240d6e58a0b3ba5e8878618f22d60a692e17c19eab082fd33b0356a21cc30e0f410b1da1b649bed6c8554ef1fb5756f2b253eda90dbf0c129968e984af87604750166fab34609ec441d7e5720fbf2244957665309203b7483e8a2f25b2b02ab1c8b4d8e8a1f6af0cf88420a1c1397f1a39743e7d7591aefe43f2be45df78fcb4dc9ee62b1a4480c69e1018db600a637fdfc40da1c1608c65782919a289b744e35e01a224eaa292558ed35bf82e12a87c2b37aa1a48b6edd8383978923bd278df2857535cee44c2cad74c2e14d82aa5aa117106b31d8f4794383aa57f5d5a07482b208719717bb5af5bbd43a924f13717c9ea35c05748cdd0a2144ab8eb384f9f0e25481edff261c86fee9bb36590b63335f75dc6bcc0af25c99283a68f5eedc02ab53190e70080f2a50e1ec7a52558567b68071ee0a9a66d2839aa1d257effed62a00f84c1de2d0b35094668f0b9c8c68f2a3d43feab5d1e5817457f40ec9b11d70bbdaa056aba2ee913ecdc6964881faac826ab660f8ee1edad72d340cf370872afd01876f478841a0b168cab3db9194c447e5b7d53738aa49db34d98d8d1a42a61099ce0737e9d13719c5c610ad6af63b24d3df0e841efdbb6a0ba90efa8b3fee7c50e7b4186adc36f8b5cbe9a7323b822cda4319d34aa8a12cfaafa5bfbb96bff6743b18d7cca5a40e3f67caf95505656e87cba671ffde3f6524cd8f573bedaeb5ebd2e8b239b778290107bf504e6e77a79075746f44676e13c1c5b68d2f00bc6993397a80c4a06640b3c287024cd9d36452336295302a593a3e29ef4f4ac97e85b7091e590cb64751ade41a5e51cfcf6f5d123880acc9cf818df967bc1ecd3fd72ee07a909e586c9a678555b55c929989a58a2253de5224fb5f99f6773c92ac879ece524e657473caf6e3a97c1f95c5048edd7831701ecf39fb6141b85093fbbffb2cc0c27b5629a1fb2fccb2d672a9fa1ab9097cbbd1732975f0c8bbcaf543c9aff24afe54a640c5861e40ff9e2383d554aa01a3fdaa071a55ac5ab5f4fc2ae5de7e8b253c2ca92fe3fa56ddbdb8d69a138b44de2f4e363e36dadb192e362088bd31f5cccaed13ffe706f8161aef67505a7641c636bd4f014dbf2f4d42d3e3ac7675c1a01db92a4f604470112f4611279b6b2ef3c3474abe368862fc84fee244fc6aeebd8becff93cd8e3d60cce86cda8b2c96fc632efbf2e06069144f3424515c5d395407abb38ab8e604cbef7e431c43faeb6ded3881a7025d7331b707e6b2971692317e2f341176b1ef7cdef3121d75a969b820e80e149c4dd2a8524a96be51abc049e4c1b235c807fdce204337d0fee6e192a7fdcb80960af97dcf462d839a7065ac6b4c0f41f00c394ab57777ad800fea391d2e7d6df99311b086c820845dc3f18ae49e5b70e50987ec49b843109db4b6c4d08607dd087087702063c970681ac32db06668fb054788450f6a5bf368ccb513ca85581ea8f6018356086bb8370f8faca26cb504cc36666188c4ffbdf08f480c49bee524ff05032ca7ef3d8662b442fb98675589250082b801ea6c6910a3dbee9ccb5124615ce5784e7b9e57ad74ded0b3dc57fcf99fb0b782c7dcb4c7d0cc7dbc75be74506f7433ccabe7d656bd7baf0d547934698a5fbf0b8b6c39e6faabc35cd769733a650139455d78ca279402756e6839bbf8b6ac247822b9f3d0892b6c12b3423f2f30c31b9c5f1b65b0797680ea14973206ebbf551069d0d30dbcc443ff90486edae68375dd61fe157cd25d4fae90f97350a31030464cccae62d6f561a8b4d757d127c1d87f45773f3c5d76311af928020dd5235ee3c95de42972977eff2390ddecce02533a52330ae5b3cb09b90a4bde3de8f59fa7dadec06339b28d56aa870bb127ec5b5db3aade3c7bb58538f2edc91f56e3c0e47e895011a6927249cea58c640119b0ef2173299a0670a6dbafca392a5973ff67b6cbf8ceef3a158d02dda5bc28edf28a6674522a8871e936e6c51eb8c180a37addd2834184b03ef65812afbdcc86e3beedd069a3d5b837af5b6b360178c6cd21b13804f6be9066a36a5a191b62cafc589c74165009dd3317c53efb2633fbb29adf7c5e609be663b86cbb998f7a1d765cf61c68e9a0ee427234a1be20c9626268f07f74bee68a7e38bca495c1224c627bdc0a1e59221fd9225beaa05ecff5e11bb61576251df01e2fe67abe0c0652f2a5104df7548e1f02cb0e6480ea2518b8cab200b31acfede838377845724e987c67c75e3b8454c3972bb11a6d1438133513a1c34792f23f850c3fd0f63aa7c60424aeeef16bd5d443d9b1caabd3ec47281a4a15dbf6501a3a2b34ce722f2cddc907d26f03075e9cdd814307aadc238a75b78a2464e27294baa71c0bc424bced2892b8633537848049a54ce238af3f8488ce2a56e10c7fc454020180cc93e6f01448c009e678d58e4442fb6654b9cb194dc334513be61c879aa8d53a8f6a9a67c75d82b6d21cdb4bf4b831a02524ee3a2802c92f026395634b1adca7dc232103a8c0e1baa708c15bf9e672779d4b6d46c48534cfdba7858e318d659b19d022ea9141361bc5ef9b9edb32c61880a9cb5c625b75e45ab419d21e92137d3f666d9bf61ac8c77d86781f9b7831abc8e8827fdec83475c11179b56b4b0308ec94d511927a8be0ffa508245a7f3442decb5d05a9cd819218640253d366698fb779d640827b4e54fa8fc15ad34576120b5b25cb84a4e592d23cbaebf287094eb8d1c87ee829616960e097f8cdad95e62a1b077dd2a71b0875dccaf7c9184bd8463ac8f073aa4154f1e77d25a004cc3baa2606e657ca14b8d8d5b2ea1c461fa1237da6bda4b338877bc45806be806df3f250eb3ee2a43005f857cc19424ccae05df1aad2f815d232d3d81bcc12a78512a854eaef2459f8e5b1659927ff63408c9300166a9f60f94a20e485b8a5f7cb60c24ccbd48471be957c61d6ff5647ee60a8fbc642b95878ddcefba35b455334d19d09c9d003e79a3c866311f657581dc76ceb35e5fabbd352cfe33152d8c736a367bb8ab72d499002061d95265340f9f34ee51d50aaba1b79e7a783051ee2cbea79dd928e0a347b026fca7ca9930bbdbc855af4a1334c02211726ff5117a4a27663f1e5fe928aeca9fb53201d050c7e8b20d1e10ca180960d744ab00dd07be2f6ac3281f10bbebf1d4a4101b751d4d33f6bd703d0ee2a3917c03771906c5f4dca7d46081c742fd79c69ee5912aeda8c3217af3e13d19a08653c7cd716bf8e2e03909d7633a1236cb33e529c70ce142751a68f44fe37e463de5d86f4dd69faca95455e19632dd4b135313d6c20607b315aca5cb49332062790b157adcab888e713849635ee4582887a40635eee7521fa10f5bf0c7191e4a1414548be0adcc9d0bb12da32f96a2f8aaefa547263df3d634f7389a61cf9646555f1a2bb71591a597a9c1a4180ac209f762d0079a19831600b51e77888a9d3fcf888e7e91822c5b686a407dad36a68c1c43390dc6b9d1bad8f0b390278791d6beb4f03777a9d394e5c567dd78bda2213ae71769e84743a0a99708273046c5913b9ac0c9bd5fdc8e6de9a90a28874d3bd0b547b23641875ae069c45c4f045d698377d01e626c043c0b64d1f2c10bbeda27d410774a02e0b67753d598deadde2785d9bbc783c759b4fd277ad759cc94c9d3cb410701024899bee13ec1cbe16655b2df989432aa0ce6e24abb69b9637620c1fe77e71ef17826945052f692e0417b45b535c307195fb34a365dfae30cb8ac953a7df6fbd6e1d5563bb2844d259647aab93800d185aab9e259c3f5d2b8db7fae1b7c7a212b8487a0176635dfbd924fd6d71d15cbef5cc03fe141ab87b6f4310835c99dd4171408c2371d9edd58e3dba91a764e2b433d3be144a96f130c1091f7109e52acbbb972c9d4174cd8246f59bfa56f47cbd664024847702117d39e85c828429b52ee0bb846c398f32d6d477f5d43253cd3b09bbec12f78144567a3180938a9d1feb323ecee1882f2bcd9151fb16c8f215441b100213a8bf4a99a89cffc39f9d74c91048dbbaa97b7e63c703635e7326a0dd70725419341b0891eeed02c51b529cf1052d0086d3e9ca6d3040c7499cbe94317e4585f9e37b620a5271cbf3aef0cdfe86bd4cda33aadde6152f6927d99cbcd9b839b39bc2d58c72a60b99abe8ffa06d938c06698150d29031b548ab3965925a9aa05bfe98ac52a27d619e3ed0d0c0d1e0f0ddf8bd208c4960118555cb1ba4ba0b41fc9efea4d3570419ebb5e519c7c2f29623329ef0b2eb95275f1113c45683e51412c9b783f479a2e56bc9fad09614efc64b766bef8aba5036e1e4696e42d8f39741287413629c3e963c28640ebf6a56b74af84cfafabd74e61dd0970217bc25819a245f5fbb06f0a4006c8d6676897f26aa72951bc3b7f3bb56accf3a727191f727764b4c04f337840fb7d9968bb8521f78f05ff90c4d6886247fc702795c34c6e34ea6fffa855ad3be0950105fc23ce6bac35270653fedcace67af262c439ad58fc487a847a732b36b1d374aade0625427c687de94a2d8023892352b29413b02b0b11f1de70af23ed42f29aa54a9dc03e6612d01da57ba32bdf29b004156cc149343d76b5158d329642d343bd812d760a4b7c743762dbb7fc47e35f231226e91bbbf72fc1b40a38f0917d9b5d70fcb5f16882d157ecd9da052dc9b568f8be1f2c45f91246afafe60b93d7e46afb3187fbbb30261e8f0d9f927e38d47c3f23e15cc948e3d2abcc7945726b6c1cdd3", 0x1000}, {&(0x7f00000012c0)="dc992ce101fb8b9e57610a23ddc9a3aa2174a798fd9f4f3ddad68569532c", 0x1e}, {&(0x7f0000001300)="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", 0x1000}], 0x5, &(0x7f00000023c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r7}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x58, 0x40000}, 0x8800) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1837.252490][T20665] loop3: detected capacity change from 0 to 512 [ 1837.253204][T20666] loop0: detected capacity change from 0 to 512 [ 1837.259958][T20667] loop4: detected capacity change from 0 to 512 [ 1837.284311][T20665] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1837.297524][T20666] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1837.316124][T20667] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1837.316683][T20675] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1837.326284][T20667] EXT4-fs (loop4): group descriptors corrupted! [ 1837.334246][T20675] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123800 16:43:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000d010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000026000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1837.358594][T20675] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1837.366597][T20675] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123800 [ 1837.403290][T20677] loop1: detected capacity change from 0 to 512 [ 1837.424727][T20678] EXT4-fs: Invalid gid value -1 [ 1837.429902][T20680] loop0: detected capacity change from 0 to 512 [ 1837.442373][T20682] loop3: detected capacity change from 0 to 512 [ 1837.454737][T20677] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1837.464820][T20677] EXT4-fs (loop1): group descriptors corrupted! [ 1837.481875][T20680] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000011000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:15 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @mcast2, 0x6}, 0x1c) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async, rerun: 32) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, r6}}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r2, {0xee01, 0x0}}, './file0\x00'}) sendmsg$unix(r1, &(0x7f0000002440)={&(0x7f0000000100)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000200)="f826c60517ab6b7f17a157c221f0ac4e93c17726a98c8461779f9072d6fe16bb7f8151a22b31fc2e31", 0x29}, {&(0x7f0000000240)="9872642e0fb56b09b5c213c0b5821953b6db6415acb1d8c59b2be8285338ad6ea82c86edcff24b0b912df3182d7d2daf25c064d32374b386c92c6f3cd7d5834b04036d9d5f26aae83f503bea63604044a5d6b461c1d31f917161b1eaf1edbf443fc1d0c198c286d89b3b", 0x6a}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="dc992ce101fb8b9e57610a23ddc9a3aa2174a798fd9f4f3ddad68569532c", 0x1e}, {&(0x7f0000001300)="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", 0x1000}], 0x5, &(0x7f00000023c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r7}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x58, 0x40000}, 0x8800) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000e010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1837.497219][T20682] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1837.520830][T20684] loop4: detected capacity change from 0 to 512 [ 1837.533114][T20684] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1837.543280][T20684] EXT4-fs (loop4): group descriptors corrupted! [ 1837.582676][T20692] loop0: detected capacity change from 0 to 512 [ 1837.605637][T20692] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:16 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0048000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:16 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @mcast2, 0x6}, 0x1c) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, r6}}]}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r2, {0xee01, 0x0}}, './file0\x00'}) sendmsg$unix(r1, &(0x7f0000002440)={&(0x7f0000000100)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000000200)="f826c60517ab6b7f17a157c221f0ac4e93c17726a98c8461779f9072d6fe16bb7f8151a22b31fc2e31", 0x29}, {&(0x7f0000000240)="9872642e0fb56b09b5c213c0b5821953b6db6415acb1d8c59b2be8285338ad6ea82c86edcff24b0b912df3182d7d2daf25c064d32374b386c92c6f3cd7d5834b04036d9d5f26aae83f503bea63604044a5d6b461c1d31f917161b1eaf1edbf443fc1d0c198c286d89b3b", 0x6a}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="dc992ce101fb8b9e57610a23ddc9a3aa2174a798fd9f4f3ddad68569532c", 0x1e}, {&(0x7f0000001300)="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", 0x1000}], 0x5, &(0x7f00000023c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r7}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x58, 0x40000}, 0x8800) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000012000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000046000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000f010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:16 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xe0000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1838.191930][T20695] loop3: detected capacity change from 0 to 512 [ 1838.199337][T20699] loop4: detected capacity change from 0 to 512 [ 1838.205985][T20700] loop0: detected capacity change from 0 to 512 [ 1838.223004][T20699] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1838.223429][T20702] EXT4-fs: Invalid gid value -1 16:43:16 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x80) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) socket$qrtr(0x2a, 0x2, 0x0) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r4) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce000000cd070000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1838.233211][T20699] EXT4-fs (loop4): group descriptors corrupted! [ 1838.246499][T20695] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1838.264854][T20700] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000026000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000010010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1838.337247][T20712] loop3: detected capacity change from 0 to 512 [ 1838.356501][T20714] loop4: detected capacity change from 0 to 512 [ 1838.363442][T20707] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1838.364738][T20716] loop0: detected capacity change from 0 to 512 [ 1838.371454][T20707] ref_ctr decrement failed for inode: 0x489 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1838.378003][T20707] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1838.391098][T20717] loop1: detected capacity change from 0 to 512 [ 1838.396687][T20707] ref_ctr decrement failed for inode: 0x489 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1838.415119][T20712] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1838.426658][T20714] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:43:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000004000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000046000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1838.436836][T20714] EXT4-fs (loop4): group descriptors corrupted! [ 1838.454704][T20717] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1838.464791][T20717] EXT4-fs (loop1): group descriptors corrupted! [ 1838.466384][T20716] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1838.506289][T20719] loop3: detected capacity change from 0 to 512 [ 1838.518555][T20721] loop4: detected capacity change from 0 to 512 [ 1838.529175][T20719] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 1838.541533][T20721] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1838.551680][T20721] EXT4-fs (loop4): group descriptors corrupted! 16:43:17 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce004c000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:17 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x80) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) socket$qrtr(0x2a, 0x2, 0x0) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r4) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000011010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000230000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce000007cd000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:17 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x200000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:17 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x80) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async, rerun: 32) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (rerun: 32) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) socket$qrtr(0x2a, 0x2, 0x0) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r4) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1839.154950][T20730] loop0: detected capacity change from 0 to 512 [ 1839.166650][T20729] loop3: detected capacity change from 0 to 512 [ 1839.173189][T20730] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1839.176182][T20736] loop4: detected capacity change from 0 to 512 16:43:17 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xb83861d0f28c9af4) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c002dfdffffffffffffffff1178de9ef9b3ba54", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x3, 0x4, 0x800, 0xffffffffffffffff, 0x7, '\x00', r6, r2, 0x0, 0x2, 0x5, 0x7}, 0x48) 16:43:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000012010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1839.203438][T20729] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 1839.236313][T20736] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1839.246474][T20736] EXT4-fs (loop4): group descriptors corrupted! 16:43:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f020000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000002000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1839.275240][T20744] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1839.283758][T20744] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1839.303726][T20745] loop1: detected capacity change from 0 to 512 [ 1839.339528][T20745] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1839.349576][T20745] EXT4-fs (loop1): group descriptors corrupted! [ 1839.384601][T20746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1839.396423][T20748] loop3: detected capacity change from 0 to 512 [ 1839.399074][T20752] loop4: detected capacity change from 0 to 512 [ 1839.404557][T20751] loop0: detected capacity change from 0 to 512 [ 1839.409301][T20744] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1839.423219][T20744] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 16:43:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f030000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1839.442075][T20751] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1839.452976][T20748] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1839.464802][T20752] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1839.474976][T20752] EXT4-fs (loop4): group descriptors corrupted! [ 1839.529332][T20755] loop3: detected capacity change from 0 to 512 [ 1839.564471][T20755] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:18 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0055000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000014010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:18 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xb83861d0f28c9af4) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c002dfdffffffffffffffff1178de9ef9b3ba54", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x3, 0x4, 0x800, 0xffffffffffffffff, 0x7, '\x00', r6, r2, 0x0, 0x2, 0x5, 0x7}, 0x48) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xb83861d0f28c9af4) (async) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c002dfdffffffffffffffff1178de9ef9b3ba54", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x3, 0x4, 0x800, 0xffffffffffffffff, 0x7, '\x00', r6, r2, 0x0, 0x2, 0x5, 0x7}, 0x48) (async) 16:43:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000003000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f040000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:18 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x400000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1840.123728][T20762] loop4: detected capacity change from 0 to 512 [ 1840.123826][T20763] loop3: detected capacity change from 0 to 512 [ 1840.140207][T20765] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1840.148282][T20765] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cdb6c00 [ 1840.159580][T20766] loop0: detected capacity change from 0 to 512 [ 1840.160245][T20762] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1840.167540][T20765] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1840.175945][T20762] EXT4-fs (loop4): group descriptors corrupted! [ 1840.183915][T20765] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cdb6c00 [ 1840.202602][T20766] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1840.212827][T20763] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:18 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xb83861d0f28c9af4) (async) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c002dfdffffffffffffffff1178de9ef9b3ba54", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x3, 0x4, 0x800, 0xffffffffffffffff, 0x7, '\x00', r6, r2, 0x0, 0x2, 0x5, 0x7}, 0x48) [ 1840.223811][T20765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f050000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000022010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:18 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x0, 0x2, 0xe8, 0x0, 0x7, 0x1, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x4119, 0x7f, 0x6, 0x3, 0x4, 0x1, 0xfff, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r3, 0xa) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x8000000000000000, 0x8, 0x101, 0xffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) mmap(&(0x7f0000091000/0x1000)=nil, 0x1000, 0xa, 0x13, r5, 0x5a1c8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000004000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1840.264729][T20784] loop1: detected capacity change from 0 to 512 [ 1840.293656][T20786] loop3: detected capacity change from 0 to 512 [ 1840.318882][T20790] loop0: detected capacity change from 0 to 512 [ 1840.328825][T20786] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1840.342511][T20792] loop4: detected capacity change from 0 to 512 [ 1840.349456][T20788] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1840.349545][T20790] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1840.357473][T20788] ref_ctr decrement failed for inode: 0x488 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123c00 [ 1840.376676][T20788] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1840.380428][T20784] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1840.386460][T20788] ref_ctr decrement failed for inode: 0x488 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123c00 [ 1840.407528][T20784] EXT4-fs (loop1): group descriptors corrupted! 16:43:18 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x0, 0x2, 0xe8, 0x0, 0x7, 0x1, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x4119, 0x7f, 0x6, 0x3, 0x4, 0x1, 0xfff, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r3, 0xa) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x8000000000000000, 0x8, 0x101, 0xffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) mmap(&(0x7f0000091000/0x1000)=nil, 0x1000, 0xa, 0x13, r5, 0x5a1c8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x0, 0x2, 0xe8, 0x0, 0x7, 0x1, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x4119, 0x7f, 0x6, 0x3, 0x4, 0x1, 0xfff, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r3, 0xa) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x8000000000000000, 0x8, 0x101, 0xffff}) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) mmap(&(0x7f0000091000/0x1000)=nil, 0x1000, 0xa, 0x13, r5, 0x5a1c8000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1840.414616][T20792] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1840.424836][T20792] EXT4-fs (loop4): group descriptors corrupted! [ 1840.454522][T20795] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1840.462600][T20795] ref_ctr decrement failed for inode: 0x495 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881062cf000 [ 1840.507125][T20795] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1840.515144][T20795] ref_ctr decrement failed for inode: 0x495 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881062cf000 16:43:19 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0060000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000025010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f060000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000005000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:19 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x0, 0x2, 0xe8, 0x0, 0x7, 0x1, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x4119, 0x7f, 0x6, 0x3, 0x4, 0x1, 0xfff, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r3, 0xa) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x8000000000000000, 0x8, 0x101, 0xffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) mmap(&(0x7f0000091000/0x1000)=nil, 0x1000, 0xa, 0x13, r5, 0x5a1c8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x0, 0x2, 0xe8, 0x0, 0x7, 0x1, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x4119, 0x7f, 0x6, 0x3, 0x4, 0x1, 0xfff, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r3, 0xa) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x8000000000000000, 0x8, 0x101, 0xffff}) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) mmap(&(0x7f0000091000/0x1000)=nil, 0x1000, 0xa, 0x13, r5, 0x5a1c8000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) 16:43:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1841.014773][T20808] loop3: detected capacity change from 0 to 512 [ 1841.018282][T20806] loop0: detected capacity change from 0 to 512 [ 1841.023044][T20811] loop4: detected capacity change from 0 to 512 [ 1841.034614][T20812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1841.042642][T20812] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038dbc00 [ 1841.057755][T20806] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1841.071395][T20812] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1841.079466][T20812] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038dbc00 [ 1841.092802][T20811] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1841.102917][T20811] EXT4-fs (loop4): group descriptors corrupted! 16:43:19 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x3, r3, 0x81}, 0xc) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r4) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000026010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1841.110767][T20808] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1841.147844][T20822] loop0: detected capacity change from 0 to 512 [ 1841.152440][ T1437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 16:43:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f070000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000006000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1841.163249][ T1437] Buffer I/O error on dev loop0, logical block 0, async page read [ 1841.174648][T20822] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1841.185235][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1841.196226][T20824] loop1: detected capacity change from 0 to 512 [ 1841.221817][T20826] loop3: detected capacity change from 0 to 512 [ 1841.224580][ T1437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1841.237218][ T1437] Buffer I/O error on dev loop3, logical block 0, async page read [ 1841.245418][T20823] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1841.255143][T20828] loop4: detected capacity change from 0 to 512 16:43:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000046010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1841.265433][T20826] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1841.275856][T20824] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1841.285952][T20824] EXT4-fs (loop1): group descriptors corrupted! [ 1841.296803][T20828] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1841.307003][T20828] EXT4-fs (loop4): group descriptors corrupted! [ 1841.334631][T20831] loop0: detected capacity change from 0 to 512 [ 1841.348905][T20831] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:19 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x3, r3, 0x81}, 0xc) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r4) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) (async) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x3, r3, 0x81}, 0xc) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r6, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r4) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1841.400018][T20833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1841.448476][T20833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:19 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0068000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f080000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000048010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000007000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:19 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x3, r3, 0x81}, 0xc) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) (async) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r6, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r4) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:19 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1841.950045][T20842] loop3: detected capacity change from 0 to 512 [ 1841.957735][T20847] loop0: detected capacity change from 0 to 512 [ 1841.964985][T20846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1841.967229][T20848] loop4: detected capacity change from 0 to 512 [ 1841.981470][T20847] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1841.994082][T20842] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1841.994175][T20850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1842.038578][T20848] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:43:20 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) close(r4) 16:43:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00004c010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f090000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1842.048679][T20848] EXT4-fs (loop4): group descriptors corrupted! [ 1842.093757][T20859] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1842.096175][T20860] loop3: detected capacity change from 0 to 512 [ 1842.101770][T20859] ref_ctr decrement failed for inode: 0x48c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d400 [ 1842.120625][T20859] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1842.121804][T20862] loop0: detected capacity change from 0 to 512 16:43:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000008000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1842.128651][T20859] ref_ctr decrement failed for inode: 0x48c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d400 [ 1842.148325][T20862] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1842.158869][T20861] loop1: detected capacity change from 0 to 512 [ 1842.174456][T20860] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000055010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1842.186286][T20861] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1842.196336][T20861] EXT4-fs (loop1): group descriptors corrupted! [ 1842.232007][T20865] loop4: detected capacity change from 0 to 512 16:43:20 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) close(r4) [ 1842.253997][T20867] loop0: detected capacity change from 0 to 512 [ 1842.266764][T20865] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1842.276890][T20865] EXT4-fs (loop4): group descriptors corrupted! [ 1842.294657][T20867] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:20 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce016a000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0a0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:20 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) close(r4) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) close(r4) (async) 16:43:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000009000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000060010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:20 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2040000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1842.946217][T20880] loop3: detected capacity change from 0 to 512 [ 1842.954020][T20882] loop4: detected capacity change from 0 to 512 [ 1842.956455][T20883] loop0: detected capacity change from 0 to 512 [ 1842.967561][T20881] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1842.975610][T20881] ref_ctr decrement failed for inode: 0x497 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 [ 1842.978983][T20882] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1842.996645][T20882] EXT4-fs (loop4): group descriptors corrupted! [ 1843.008268][T20880] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1843.018556][T20883] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1843.029030][T20881] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1843.037017][T20881] ref_ctr decrement failed for inode: 0x497 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 16:43:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0b0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000068010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:21 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000200)={{0xffff83cf, 0x100}, 0x100, './bus\x00'}) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r5, 0x0, 0x2d, 0x100010) faccessat2(r5, &(0x7f0000000380)='./bus\x00', 0x94, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00') pread64(r6, 0x0, 0x2d, 0x100010) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000040)=0x4) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) fsetxattr$security_evm(r6, &(0x7f0000000100), &(0x7f0000000340)=@md5={0x1, "07a7f0c038a34b0e4fc9dd9b45e5caf7"}, 0x11, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6000}, 0x10}, 0x80) close(r3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1843.117472][T20899] loop1: detected capacity change from 0 to 512 [ 1843.124141][T20901] loop3: detected capacity change from 0 to 512 [ 1843.128850][T20903] loop0: detected capacity change from 0 to 512 [ 1843.157120][T20905] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000a000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1843.165205][T20905] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123400 [ 1843.180914][T20903] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1843.182195][T20901] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1843.202695][T20899] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1843.212738][T20899] EXT4-fs (loop1): group descriptors corrupted! 16:43:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00006c010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1843.240440][T20907] loop4: detected capacity change from 0 to 512 [ 1843.242042][T20905] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1843.254773][T20905] ref_ctr decrement failed for inode: 0x499 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123400 [ 1843.276875][T20907] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:43:21 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000200)={{0xffff83cf, 0x100}, 0x100, './bus\x00'}) (async) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r5, 0x0, 0x2d, 0x100010) (async) faccessat2(r5, &(0x7f0000000380)='./bus\x00', 0x94, 0x1000) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00') pread64(r6, 0x0, 0x2d, 0x100010) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000040)=0x4) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) fsetxattr$security_evm(r6, &(0x7f0000000100), &(0x7f0000000340)=@md5={0x1, "07a7f0c038a34b0e4fc9dd9b45e5caf7"}, 0x11, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6000}, 0x10}, 0x80) close(r3) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1843.287001][T20907] EXT4-fs (loop4): group descriptors corrupted! [ 1843.295347][T20910] loop0: detected capacity change from 0 to 512 [ 1843.345315][T20910] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:21 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce016b000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0c0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:21 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000200)={{0xffff83cf, 0x100}, 0x100, './bus\x00'}) (async) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r5, 0x0, 0x2d, 0x100010) (async, rerun: 64) faccessat2(r5, &(0x7f0000000380)='./bus\x00', 0x94, 0x1000) (rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00') pread64(r6, 0x0, 0x2d, 0x100010) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000040)=0x4) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) fsetxattr$security_evm(r6, &(0x7f0000000100), &(0x7f0000000340)=@md5={0x1, "07a7f0c038a34b0e4fc9dd9b45e5caf7"}, 0x11, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6000}, 0x10}, 0x80) close(r3) (async, rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) 16:43:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000b000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000074010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:21 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x2190000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:21 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="fcb77a660cd95b4e24e3344f585d7ddb0190dc960be436c3e1fd41d9f9f5cd1c7f811d19ba12b38357fc00183aa926fb2655a086c414a5c4f4c2669abda762e0fbfd11be840a56150de4245e61f554ba06eed26a7317c48b03bbaac56d52aa40e46bb4641cc2c01045d21e980037c7c0915605174d6dfea0f6fdb797987e9e7bd3013a815736", @ANYBLOB="de3c8718932e851f43044da1525fae204f9d9bb73192a0bb7ef79e9c71790701003028c6825b0e3a8325e4b52485d9f5df682c3367dd8343cba8ec0c512ba8343b50f70dc995866fe917722ef8d44242f7c69ba4dbd728b8e76217e2fd33f61a06f5cfdf2b5f1eb561a3ed76cba91a74d28e276f53b1f9b7e30f0ff88dc1aa911e8b5046c9f4a5ca0df463602565cdcd1c1145", @ANYRES32=r0], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1843.941152][T20922] loop0: detected capacity change from 0 to 512 [ 1843.946622][T20925] loop3: detected capacity change from 0 to 512 [ 1843.947727][T20923] loop4: detected capacity change from 0 to 512 [ 1843.969014][T20925] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1843.979645][T20922] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1843.999361][T20932] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1844.007402][T20932] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888138d94000 [ 1844.027137][T20923] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1844.037257][T20923] EXT4-fs (loop4): group descriptors corrupted! 16:43:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0d0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00007a010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1844.047295][T20932] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1844.055354][T20932] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888138d94000 16:43:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000c000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:22 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="fcb77a660cd95b4e24e3344f585d7ddb0190dc960be436c3e1fd41d9f9f5cd1c7f811d19ba12b38357fc00183aa926fb2655a086c414a5c4f4c2669abda762e0fbfd11be840a56150de4245e61f554ba06eed26a7317c48b03bbaac56d52aa40e46bb4641cc2c01045d21e980037c7c0915605174d6dfea0f6fdb797987e9e7bd3013a815736", @ANYBLOB="de3c8718932e851f43044da1525fae204f9d9bb73192a0bb7ef79e9c71790701003028c6825b0e3a8325e4b52485d9f5df682c3367dd8343cba8ec0c512ba8343b50f70dc995866fe917722ef8d44242f7c69ba4dbd728b8e76217e2fd33f61a06f5cfdf2b5f1eb561a3ed76cba91a74d28e276f53b1f9b7e30f0ff88dc1aa911e8b5046c9f4a5ca0df463602565cdcd1c1145", @ANYRES32=r0], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="fcb77a660cd95b4e24e3344f585d7ddb0190dc960be436c3e1fd41d9f9f5cd1c7f811d19ba12b38357fc00183aa926fb2655a086c414a5c4f4c2669abda762e0fbfd11be840a56150de4245e61f554ba06eed26a7317c48b03bbaac56d52aa40e46bb4641cc2c01045d21e980037c7c0915605174d6dfea0f6fdb797987e9e7bd3013a815736", @ANYBLOB="de3c8718932e851f43044da1525fae204f9d9bb73192a0bb7ef79e9c71790701003028c6825b0e3a8325e4b52485d9f5df682c3367dd8343cba8ec0c512ba8343b50f70dc995866fe917722ef8d44242f7c69ba4dbd728b8e76217e2fd33f61a06f5cfdf2b5f1eb561a3ed76cba91a74d28e276f53b1f9b7e30f0ff88dc1aa911e8b5046c9f4a5ca0df463602565cdcd1c1145", @ANYRES32=r0], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1844.102085][T20938] loop0: detected capacity change from 0 to 512 [ 1844.102817][T20939] loop3: detected capacity change from 0 to 512 [ 1844.111830][T20934] loop1: detected capacity change from 0 to 512 [ 1844.123595][T20941] loop4: detected capacity change from 0 to 512 [ 1844.128817][ T1437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1844.138972][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read [ 1844.149812][T20938] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1844.163090][T20941] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1844.167107][T20939] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1844.173235][T20941] EXT4-fs (loop4): group descriptors corrupted! [ 1844.190122][T20943] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0000fe010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1844.198149][T20943] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 [ 1844.209700][T20934] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1844.219717][T20934] EXT4-fs (loop1): group descriptors corrupted! [ 1844.227131][T20943] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1844.235232][T20943] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 [ 1844.315070][T20946] loop0: detected capacity change from 0 to 512 [ 1844.339125][T20946] EXT4-fs warning (device loop0): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:22 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce006c000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0e0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000d000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:22 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="fcb77a660cd95b4e24e3344f585d7ddb0190dc960be436c3e1fd41d9f9f5cd1c7f811d19ba12b38357fc00183aa926fb2655a086c414a5c4f4c2669abda762e0fbfd11be840a56150de4245e61f554ba06eed26a7317c48b03bbaac56d52aa40e46bb4641cc2c01045d21e980037c7c0915605174d6dfea0f6fdb797987e9e7bd3013a815736", @ANYBLOB="de3c8718932e851f43044da1525fae204f9d9bb73192a0bb7ef79e9c71790701003028c6825b0e3a8325e4b52485d9f5df682c3367dd8343cba8ec0c512ba8343b50f70dc995866fe917722ef8d44242f7c69ba4dbd728b8e76217e2fd33f61a06f5cfdf2b5f1eb561a3ed76cba91a74d28e276f53b1f9b7e30f0ff88dc1aa911e8b5046c9f4a5ca0df463602565cdcd1c1145", @ANYRES32=r0], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYBLOB="fcb77a660cd95b4e24e3344f585d7ddb0190dc960be436c3e1fd41d9f9f5cd1c7f811d19ba12b38357fc00183aa926fb2655a086c414a5c4f4c2669abda762e0fbfd11be840a56150de4245e61f554ba06eed26a7317c48b03bbaac56d52aa40e46bb4641cc2c01045d21e980037c7c0915605174d6dfea0f6fdb797987e9e7bd3013a815736", @ANYBLOB="de3c8718932e851f43044da1525fae204f9d9bb73192a0bb7ef79e9c71790701003028c6825b0e3a8325e4b52485d9f5df682c3367dd8343cba8ec0c512ba8343b50f70dc995866fe917722ef8d44242f7c69ba4dbd728b8e76217e2fd33f61a06f5cfdf2b5f1eb561a3ed76cba91a74d28e276f53b1f9b7e30f0ff88dc1aa911e8b5046c9f4a5ca0df463602565cdcd1c1145", @ANYRES32=r0], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) 16:43:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000030000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:22 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x3000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1844.930660][T20962] loop4: detected capacity change from 0 to 512 [ 1844.938348][T20959] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1844.939139][T20964] loop3: detected capacity change from 0 to 512 [ 1844.946415][T20959] ref_ctr decrement failed for inode: 0x48d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f10d800 [ 1844.963925][T20963] loop0: detected capacity change from 0 to 512 16:43:23 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnexthop={0x30, 0x6a, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x800) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000e000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0f0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1844.972663][T20962] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1844.982800][T20962] EXT4-fs (loop4): group descriptors corrupted! [ 1844.987366][T20963] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1844.999115][T20963] EXT4-fs (loop0): group descriptors corrupted! [ 1845.007395][T20964] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000050000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1845.060334][T20979] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1845.062485][T20981] loop4: detected capacity change from 0 to 512 [ 1845.068521][T20979] ref_ctr decrement failed for inode: 0x48d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88815a8c8800 [ 1845.094178][T20984] loop3: detected capacity change from 0 to 512 [ 1845.100837][T20986] loop0: detected capacity change from 0 to 512 [ 1845.105088][T20981] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1845.109880][T20979] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1845.117247][T20981] EXT4-fs (loop4): group descriptors corrupted! [ 1845.125202][T20979] ref_ctr decrement failed for inode: 0x48d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88815a8c8800 16:43:23 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnexthop={0x30, 0x6a, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x800) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000010000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1845.155369][T20986] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1845.165505][T20986] EXT4-fs (loop0): group descriptors corrupted! [ 1845.173094][T20984] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1845.190360][T20988] loop1: detected capacity change from 0 to 512 [ 1845.213435][T20988] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1845.223500][T20988] EXT4-fs (loop1): group descriptors corrupted! [ 1845.230358][T20994] loop4: detected capacity change from 0 to 512 [ 1845.269527][T20994] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1845.279716][T20994] EXT4-fs (loop4): group descriptors corrupted! 16:43:23 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0074000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f100000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:23 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async, rerun: 64) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnexthop={0x30, 0x6a, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x800) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000060000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000011000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:23 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x4000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1845.889965][T21000] loop4: detected capacity change from 0 to 512 [ 1845.896703][T21004] loop3: detected capacity change from 0 to 512 [ 1845.903985][T21007] loop0: detected capacity change from 0 to 512 [ 1845.918569][T21007] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1845.928721][T21007] EXT4-fs (loop0): group descriptors corrupted! 16:43:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f110000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000012000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1845.928859][T21004] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1845.945254][T21000] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1845.955410][T21000] EXT4-fs (loop4): group descriptors corrupted! 16:43:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000070000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:24 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20018, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ac, 0xffffffffffffff81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x8, 0x1c, 0x2, 0x2, 0x6, 0xffffffff, 0x19b, 0x40, 0x26e, 0x7f, 0x8, 0x38, 0x1, 0x98, 0x9, 0x8}, [{0x70000000, 0xfffffffd, 0x4, 0x2, 0x5, 0x6, 0xffffffffffff809d, 0x8}], "5380e0011bd06841d79e3656b457ece4371d8150cb17", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98e) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x5, 0x80, 0x20, 0x0, 0x9, 0x203, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x1, 0x9}, 0x19048, 0x3, 0x7, 0x7, 0x16, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x800}, r3, 0xb, r5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1845.999680][T21010] loop3: detected capacity change from 0 to 512 [ 1846.016901][T21013] loop4: detected capacity change from 0 to 512 [ 1846.023961][T21015] loop1: detected capacity change from 0 to 512 [ 1846.031674][T21014] loop0: detected capacity change from 0 to 512 16:43:24 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20018, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ac, 0xffffffffffffff81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) write$binfmt_elf64(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x8, 0x1c, 0x2, 0x2, 0x6, 0xffffffff, 0x19b, 0x40, 0x26e, 0x7f, 0x8, 0x38, 0x1, 0x98, 0x9, 0x8}, [{0x70000000, 0xfffffffd, 0x4, 0x2, 0x5, 0x6, 0xffffffffffff809d, 0x8}], "5380e0011bd06841d79e3656b457ece4371d8150cb17", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98e) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x5, 0x80, 0x20, 0x0, 0x9, 0x203, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x1, 0x9}, 0x19048, 0x3, 0x7, 0x7, 0x16, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x800}, r3, 0xb, r5, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1846.049034][T21013] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1846.059136][T21013] EXT4-fs (loop4): group descriptors corrupted! [ 1846.062014][T21010] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1846.087013][T21015] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 16:43:24 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20018, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ac, 0xffffffffffffff81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x8, 0x1c, 0x2, 0x2, 0x6, 0xffffffff, 0x19b, 0x40, 0x26e, 0x7f, 0x8, 0x38, 0x1, 0x98, 0x9, 0x8}, [{0x70000000, 0xfffffffd, 0x4, 0x2, 0x5, 0x6, 0xffffffffffff809d, 0x8}], "5380e0011bd06841d79e3656b457ece4371d8150cb17", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98e) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x5, 0x80, 0x20, 0x0, 0x9, 0x203, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x1, 0x9}, 0x19048, 0x3, 0x7, 0x7, 0x16, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x800}, r3, 0xb, r5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20018, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ac, 0xffffffffffffff81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) write$binfmt_elf64(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x8, 0x1c, 0x2, 0x2, 0x6, 0xffffffff, 0x19b, 0x40, 0x26e, 0x7f, 0x8, 0x38, 0x1, 0x98, 0x9, 0x8}, [{0x70000000, 0xfffffffd, 0x4, 0x2, 0x5, 0x6, 0xffffffffffff809d, 0x8}], "5380e0011bd06841d79e3656b457ece4371d8150cb17", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x98e) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x5, 0x80, 0x20, 0x0, 0x9, 0x203, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x1, 0x9}, 0x19048, 0x3, 0x7, 0x7, 0x16, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x800}, r3, 0xb, r5, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1846.097081][T21015] EXT4-fs (loop1): group descriptors corrupted! [ 1846.103741][T21014] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1846.113868][T21014] EXT4-fs (loop0): group descriptors corrupted! 16:43:24 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce007a000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000026000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f120000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:24 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x44811}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) r4 = accept4$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) readahead(r6, 0x8, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r7, 0x0, 0x2d, 0x100010) r8 = dup3(r1, r3, 0x80000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000380)="09ed6c80f9d53154637c271c5dd2373edef628f6a485b2966510727287ec02c58f59f3ba5c4647440127f0e50aff4f07edfaac9ccab64bd806", &(0x7f00000003c0)=@tcp=r8, 0x2}, 0x20) 16:43:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0000000a0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:24 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x5000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:24 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x44811}, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async, rerun: 64) r4 = accept4$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e, 0x0) (rerun: 64) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000200)) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) readahead(r6, 0x8, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r7, 0x0, 0x2d, 0x100010) r8 = dup3(r1, r3, 0x80000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000380)="09ed6c80f9d53154637c271c5dd2373edef628f6a485b2966510727287ec02c58f59f3ba5c4647440127f0e50aff4f07edfaac9ccab64bd806", &(0x7f00000003c0)=@tcp=r8, 0x2}, 0x20) [ 1846.767402][T21032] loop3: detected capacity change from 0 to 512 [ 1846.774725][T21037] loop4: detected capacity change from 0 to 512 [ 1846.789375][T21037] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1846.789654][T21038] loop0: detected capacity change from 0 to 512 [ 1846.799539][T21037] EXT4-fs (loop4): group descriptors corrupted! 16:43:24 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x44811}, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (rerun: 32) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async, rerun: 32) r4 = accept4$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e, 0x0) (rerun: 32) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000200)) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async, rerun: 32) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) readahead(r6, 0x8, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r7, 0x0, 0x2d, 0x100010) (async, rerun: 32) r8 = dup3(r1, r3, 0x80000) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000380)="09ed6c80f9d53154637c271c5dd2373edef628f6a485b2966510727287ec02c58f59f3ba5c4647440127f0e50aff4f07edfaac9ccab64bd806", &(0x7f00000003c0)=@tcp=r8, 0x2}, 0x20) 16:43:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce00000046000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1846.814301][T21032] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1846.856005][T21038] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 16:43:24 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r4, 0x0, 0x2d, 0x100010) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1, 0xa4, 0x9, {r5, r6/1000+10000}, {0x77359400}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x8, 0x3, 0x0, 0x0, "83e709521a762707"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f140000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1846.866159][T21038] EXT4-fs (loop0): group descriptors corrupted! [ 1846.874683][T21050] loop4: detected capacity change from 0 to 512 [ 1846.906304][T21054] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1846.914343][T21054] ref_ctr decrement failed for inode: 0x490 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cb33c00 [ 1846.926915][T21055] loop3: detected capacity change from 0 to 512 [ 1846.931861][T21050] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1846.943267][T21050] EXT4-fs (loop4): group descriptors corrupted! [ 1846.952021][T21056] loop1: detected capacity change from 0 to 512 16:43:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0000000f0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1846.959186][T21055] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1846.980258][T21059] loop0: detected capacity change from 0 to 512 [ 1846.988652][T21054] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1846.996677][T21054] ref_ctr decrement failed for inode: 0x490 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cb33c00 [ 1847.010084][T21059] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1847.020217][T21059] EXT4-fs (loop0): group descriptors corrupted! [ 1847.034685][T21056] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1847.044702][T21056] EXT4-fs (loop1): group descriptors corrupted! 16:43:25 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0090000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f220000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:25 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r4, 0x0, 0x2d, 0x100010) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1, 0xa4, 0x9, {r5, r6/1000+10000}, {0x77359400}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x8, 0x3, 0x0, 0x0, "83e709521a762707"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000110000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce000000cd070000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:25 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x6000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1847.719530][T21067] loop4: detected capacity change from 0 to 512 [ 1847.720263][T21068] loop0: detected capacity change from 0 to 512 [ 1847.733238][T21069] loop3: detected capacity change from 0 to 512 [ 1847.748812][T21067] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1847.758939][T21067] EXT4-fs (loop4): group descriptors corrupted! 16:43:25 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r4, 0x0, 0x2d, 0x100010) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1, 0xa4, 0x9, {r5, r6/1000+10000}, {0x77359400}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x8, 0x3, 0x0, 0x0, "83e709521a762707"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') (async) pread64(r4, 0x0, 0x2d, 0x100010) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1, 0xa4, 0x9, {r5, r6/1000+10000}, {0x77359400}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x8, 0x3, 0x0, 0x0, "83e709521a762707"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1847.770589][T21069] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1847.785930][T21076] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1847.793990][T21076] ref_ctr decrement failed for inode: 0x48c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813f794000 [ 1847.808636][T21068] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 16:43:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f000004000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1847.818756][T21068] EXT4-fs (loop0): group descriptors corrupted! [ 1847.844998][T21080] loop4: detected capacity change from 0 to 512 [ 1847.853682][T21076] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1847.861709][T21076] ref_ctr decrement failed for inode: 0x48c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813f794000 [ 1847.874258][T21081] loop1: detected capacity change from 0 to 512 16:43:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000130000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f250000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1847.897446][T21080] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 1847.914013][T21081] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1847.924042][T21081] EXT4-fs (loop1): group descriptors corrupted! [ 1847.933710][T21097] loop3: detected capacity change from 0 to 512 [ 1847.941080][T21099] loop0: detected capacity change from 0 to 512 16:43:25 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) close(r3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f000010000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1847.956463][T21099] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1847.966620][T21099] EXT4-fs (loop0): group descriptors corrupted! [ 1847.975481][T21097] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1848.000686][T21103] loop4: detected capacity change from 0 to 512 [ 1848.009167][T21100] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1848.017194][T21100] ref_ctr decrement failed for inode: 0x48d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813f794000 [ 1848.030349][T21103] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 1848.052092][T21100] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1848.060172][T21100] ref_ctr decrement failed for inode: 0x48d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813f794000 16:43:26 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce059c000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000140000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f260000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f000244000000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:26 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) close(r3) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x6040000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:26 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) close(r3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1848.644972][T21107] loop3: detected capacity change from 0 to 512 [ 1848.651038][T21111] loop4: detected capacity change from 0 to 512 [ 1848.668602][T21116] loop0: detected capacity change from 0 to 512 [ 1848.679852][T21111] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size 16:43:26 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f000038e000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x560b4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f460000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f020000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1848.687451][T21107] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1848.712324][T21116] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1848.722498][T21116] EXT4-fs (loop0): group descriptors corrupted! [ 1848.749941][T21125] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1848.758074][T21125] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1848.771004][T21128] loop3: detected capacity change from 0 to 512 [ 1848.798099][T21128] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1848.798785][T21131] loop4: detected capacity change from 0 to 512 [ 1848.809489][T21125] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1848.820193][T21129] loop1: detected capacity change from 0 to 512 [ 1848.822511][T21125] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 16:43:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000200000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f480000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1848.842352][T21131] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1848.852469][T21131] EXT4-fs (loop4): group descriptors corrupted! [ 1848.888938][T21129] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1848.899000][T21129] EXT4-fs (loop1): group descriptors corrupted! [ 1848.915230][T21134] loop3: detected capacity change from 0 to 512 [ 1848.915391][T21135] loop0: detected capacity change from 0 to 512 [ 1848.934902][T21134] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1848.962055][T21135] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1848.972205][T21135] EXT4-fs (loop0): group descriptors corrupted! 16:43:27 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce05c2000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:27 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f000038e000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x560b4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f000038e000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x560b4000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) 16:43:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f030000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f4c0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000230000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:27 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x7000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1849.599777][T21143] loop0: detected capacity change from 0 to 512 [ 1849.600257][T21144] loop3: detected capacity change from 0 to 512 [ 1849.612681][T21141] loop4: detected capacity change from 0 to 512 [ 1849.621287][T21146] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1849.629524][T21146] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038db800 [ 1849.640405][T21143] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1849.646835][T21146] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1849.650628][T21143] EXT4-fs (loop0): group descriptors corrupted! [ 1849.658578][T21146] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038db800 [ 1849.678680][T21141] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1849.688811][T21141] EXT4-fs (loop4): group descriptors corrupted! [ 1849.695241][T21144] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000250000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f040000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f600000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:27 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f000038e000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x560b4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1849.779320][T21162] loop1: detected capacity change from 0 to 512 [ 1849.788635][T21163] loop3: detected capacity change from 0 to 512 [ 1849.800594][T21166] loop0: detected capacity change from 0 to 512 [ 1849.802870][T21167] loop4: detected capacity change from 0 to 512 [ 1849.815550][T21166] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 16:43:27 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x1407, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c0}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req={0x6, 0x10000, 0x2, 0x4}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) splice(r4, &(0x7f0000000040)=0xffff, r3, &(0x7f0000000100)=0x4a6b, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x5225, &(0x7f0000000200)={0x0, 0xe1aa, 0x0, 0x3, 0x2ad, 0x0, r3}, &(0x7f000029d000/0x4000)=nil, &(0x7f0000247000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) [ 1849.825803][T21166] EXT4-fs (loop0): group descriptors corrupted! [ 1849.834111][T21162] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1849.844172][T21162] EXT4-fs (loop1): group descriptors corrupted! [ 1849.860187][T21163] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1849.870792][T21167] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1849.881032][T21167] EXT4-fs (loop4): group descriptors corrupted! [ 1849.891930][T21175] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1849.899949][T21175] ref_ctr decrement failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038db800 16:43:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f680000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1849.938781][T21175] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1849.946784][T21175] ref_ctr decrement failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038db800 [ 1849.983064][T21178] loop3: detected capacity change from 0 to 512 [ 1850.002570][T21178] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:28 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce37d5000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f050000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000260000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:28 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x1407, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c0}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req={0x6, 0x10000, 0x2, 0x4}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) splice(r4, &(0x7f0000000040)=0xffff, r3, &(0x7f0000000100)=0x4a6b, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x5225, &(0x7f0000000200)={0x0, 0xe1aa, 0x0, 0x3, 0x2ad, 0x0, r3}, &(0x7f000029d000/0x4000)=nil, &(0x7f0000247000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x1407, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c0}, 0x40080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req={0x6, 0x10000, 0x2, 0x4}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) splice(r4, &(0x7f0000000040)=0xffff, r3, &(0x7f0000000100)=0x4a6b, 0xffffffffffffffff, 0x3) (async) syz_io_uring_setup(0x5225, &(0x7f0000000200)={0x0, 0xe1aa, 0x0, 0x3, 0x2ad, 0x0, r3}, &(0x7f000029d000/0x4000)=nil, &(0x7f0000247000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) (async) 16:43:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f6c0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:28 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x8000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1850.558956][T21184] loop0: detected capacity change from 0 to 512 [ 1850.563145][T21181] loop3: detected capacity change from 0 to 512 [ 1850.573357][T21184] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1850.574697][T21188] loop4: detected capacity change from 0 to 512 [ 1850.583478][T21184] EXT4-fs (loop0): group descriptors corrupted! [ 1850.591918][T21186] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1850.604065][T21186] ref_ctr decrement failed for inode: 0x494 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123400 [ 1850.618529][T21181] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1850.629895][T21186] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1850.631618][T21188] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1850.637931][T21186] ref_ctr decrement failed for inode: 0x494 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123400 16:43:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0000002d0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:28 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x1407, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c0}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req={0x6, 0x10000, 0x2, 0x4}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) splice(r4, &(0x7f0000000040)=0xffff, r3, &(0x7f0000000100)=0x4a6b, 0xffffffffffffffff, 0x3) (async) syz_io_uring_setup(0x5225, &(0x7f0000000200)={0x0, 0xe1aa, 0x0, 0x3, 0x2ad, 0x0, r3}, &(0x7f000029d000/0x4000)=nil, &(0x7f0000247000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) [ 1850.659025][T21188] EXT4-fs (loop4): group descriptors corrupted! 16:43:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f060000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f740000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1850.708153][T21209] loop0: detected capacity change from 0 to 512 [ 1850.744494][T21209] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 16:43:28 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x250501, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x80, 0x1, 0x1, 0x6, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x10000, 0x0, 0x35, 0x7, 0x3, 0xeff8, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x6, 0x8, 0x7, 0x0, 0x0, 0x120, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc91d, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x3150, 0xffffffffffffffff, 0x401, 0x2, 0x28, 0x80000000, 0x401, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r4, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x4a0200, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80040, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1850.749712][T21216] loop4: detected capacity change from 0 to 512 [ 1850.754614][T21209] EXT4-fs (loop0): group descriptors corrupted! [ 1850.773389][T21218] loop3: detected capacity change from 0 to 512 [ 1850.777218][T21214] loop1: detected capacity change from 0 to 512 16:43:28 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x250501, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x80, 0x1, 0x1, 0x6, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x10000, 0x0, 0x35, 0x7, 0x3, 0xeff8, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x6, 0x8, 0x7, 0x0, 0x0, 0x120, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc91d, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x3150, 0xffffffffffffffff, 0x401, 0x2, 0x28, 0x80000000, 0x401, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r4, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x4a0200, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80040, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x250501, 0x0) (async) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x80, 0x1, 0x1, 0x6, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x10000, 0x0, 0x35, 0x7, 0x3, 0xeff8, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x6, 0x8, 0x7, 0x0, 0x0, 0x120, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc91d, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x3150, 0xffffffffffffffff, 0x401, 0x2, 0x28, 0x80000000, 0x401, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r4, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x4a0200, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80040, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1850.800232][T21218] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1850.812662][T21216] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1850.815323][T21214] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1850.822790][T21216] EXT4-fs (loop4): group descriptors corrupted! [ 1850.832777][T21214] EXT4-fs (loop1): group descriptors corrupted! 16:43:29 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce37d6000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:29 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x250501, 0x0) (async) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x80, 0x1, 0x1, 0x6, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x10000, 0x0, 0x35, 0x7, 0x3, 0xeff8, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x6, 0x8, 0x7, 0x0, 0x0, 0x120, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc91d, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x3150, 0xffffffffffffffff, 0x401, 0x2, 0x28, 0x80000000, 0x401, 0x0, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r4, 0x8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x4a0200, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80040, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000001380000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f7a0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f070000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:29 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x9000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1851.534843][T21235] loop4: detected capacity change from 0 to 512 [ 1851.534939][T21236] loop0: detected capacity change from 0 to 512 [ 1851.542219][T21237] loop3: detected capacity change from 0 to 512 [ 1851.560744][T21237] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1851.571330][T21235] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:43:29 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1851.581467][T21235] EXT4-fs (loop4): group descriptors corrupted! [ 1851.581728][T21236] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1851.597898][T21236] EXT4-fs (loop0): group descriptors corrupted! 16:43:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f080000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1851.625321][T21246] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1851.633412][T21246] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cdb6c00 [ 1851.647179][T21246] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1851.655189][T21246] ref_ctr decrement failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cdb6c00 16:43:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000fbe0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1851.692018][T21249] loop4: detected capacity change from 0 to 512 [ 1851.715941][T21251] loop3: detected capacity change from 0 to 512 [ 1851.715982][T21249] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1851.730149][T21252] loop1: detected capacity change from 0 to 512 16:43:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0000003f0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:29 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:29 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1851.732356][T21249] EXT4-fs (loop4): group descriptors corrupted! [ 1851.749354][T21254] loop0: detected capacity change from 0 to 512 [ 1851.756658][T21251] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1851.789097][T21254] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1851.799263][T21254] EXT4-fs (loop0): group descriptors corrupted! [ 1851.830978][T21252] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1851.841027][T21252] EXT4-fs (loop1): group descriptors corrupted! 16:43:30 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce01df000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:30 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x80, 0x0, 0xfff, 0x3ff, {{0x10, 0x4, 0x3, 0x6, 0x40, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @remote, {[@ssrr={0x89, 0x7, 0xb2, [@rand_addr=0x64010102]}, @noop, @ssrr={0x89, 0x17, 0x60, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x33}]}, @timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x0, [{@empty, 0x3}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x5c, 0x66, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {0x1, 0xd}, {0x39b1b9396f9b0775, 0xffff}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xcc67}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0xfffffe01}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x3df}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040090}, 0x4008000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000ffe0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f090000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000400000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:30 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xa000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:30 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x80, 0x0, 0xfff, 0x3ff, {{0x10, 0x4, 0x3, 0x6, 0x40, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @remote, {[@ssrr={0x89, 0x7, 0xb2, [@rand_addr=0x64010102]}, @noop, @ssrr={0x89, 0x17, 0x60, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x33}]}, @timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x0, [{@empty, 0x3}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x5c, 0x66, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {0x1, 0xd}, {0x39b1b9396f9b0775, 0xffff}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xcc67}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0xfffffe01}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x3df}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040090}, 0x4008000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') (async) pread64(r3, 0x0, 0x2d, 0x100010) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x80, 0x0, 0xfff, 0x3ff, {{0x10, 0x4, 0x3, 0x6, 0x40, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @remote, {[@ssrr={0x89, 0x7, 0xb2, [@rand_addr=0x64010102]}, @noop, @ssrr={0x89, 0x17, 0x60, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x33}]}, @timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x0, [{@empty, 0x3}]}]}}}}}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x5c, 0x66, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {0x1, 0xd}, {0x39b1b9396f9b0775, 0xffff}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xcc67}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0xfffffe01}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x3df}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040090}, 0x4008000) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1852.479794][T21272] loop0: detected capacity change from 0 to 512 [ 1852.480374][T21274] loop3: detected capacity change from 0 to 512 [ 1852.489929][T21275] loop4: detected capacity change from 0 to 512 [ 1852.510733][T21274] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:30 executing program 5: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x80, 0x0, 0xfff, 0x3ff, {{0x10, 0x4, 0x3, 0x6, 0x40, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @remote, {[@ssrr={0x89, 0x7, 0xb2, [@rand_addr=0x64010102]}, @noop, @ssrr={0x89, 0x17, 0x60, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x33}]}, @timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x0, [{@empty, 0x3}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x5c, 0x66, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {0x1, 0xd}, {0x39b1b9396f9b0775, 0xffff}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xcc67}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0xfffffe01}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x3df}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040090}, 0x4008000) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f040200010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000460000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f0a0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:30 executing program 5: r0 = creat(&(0x7f0000000100)='./bus/file0\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000040)) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1852.521881][T21275] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1852.532014][T21275] EXT4-fs (loop4): group descriptors corrupted! [ 1852.540327][T21272] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1852.550445][T21272] EXT4-fs (loop0): group descriptors corrupted! [ 1852.610831][T21301] loop0: detected capacity change from 0 to 512 [ 1852.616324][T21304] loop1: detected capacity change from 0 to 512 [ 1852.617353][T21303] loop3: detected capacity change from 0 to 512 [ 1852.636885][T21304] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1852.647018][T21304] EXT4-fs (loop1): group descriptors corrupted! [ 1852.656252][T21307] loop4: detected capacity change from 0 to 512 [ 1852.669118][T21307] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1852.679231][T21307] EXT4-fs (loop4): group descriptors corrupted! [ 1852.699892][T21301] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1852.710038][T21301] EXT4-fs (loop0): group descriptors corrupted! [ 1852.727397][T21303] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f0b0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:31 executing program 5: r0 = creat(&(0x7f0000000100)='./bus/file0\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000040)) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000640000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000300010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:31 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce01f8000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:31 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xb000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1853.396004][T21315] loop3: detected capacity change from 0 to 512 [ 1853.400229][T21312] loop0: detected capacity change from 0 to 512 [ 1853.409989][T21321] loop4: detected capacity change from 0 to 512 [ 1853.419032][T21315] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1853.431481][T21321] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! 16:43:31 executing program 5: r0 = creat(&(0x7f0000000100)='./bus/file0\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000040)) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:31 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x3e9, 0x4, 0x70bd2d, 0x25dfdbff, {0x78, 0x0, 0x2, r4, 0x1, 0xff0, 0x81, 0x2, 0x0, 0x7fffffff, 0x7}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48001) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1853.441632][T21321] EXT4-fs (loop4): group descriptors corrupted! [ 1853.452993][T21312] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1853.463116][T21312] EXT4-fs (loop0): group descriptors corrupted! 16:43:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f020400010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1853.526799][T21329] loop3: detected capacity change from 0 to 512 [ 1853.534174][T21330] loop1: detected capacity change from 0 to 512 [ 1853.544928][T21327] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1853.552997][T21327] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1853.564485][T21330] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! 16:43:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000810000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f0c0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1853.574990][T21330] EXT4-fs (loop1): group descriptors corrupted! [ 1853.582440][T21329] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1853.612724][T21333] loop0: detected capacity change from 0 to 512 [ 1853.613690][T21334] loop4: detected capacity change from 0 to 512 [ 1853.620522][T21327] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1853.633432][T21327] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813d562400 [ 1853.646118][T21334] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1853.656246][T21334] EXT4-fs (loop4): group descriptors corrupted! [ 1853.663751][T21333] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 16:43:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f060400010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1853.673898][T21333] EXT4-fs (loop0): group descriptors corrupted! 16:43:31 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x3e9, 0x4, 0x70bd2d, 0x25dfdbff, {0x78, 0x0, 0x2, r4, 0x1, 0xff0, 0x81, 0x2, 0x0, 0x7fffffff, 0x7}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48001) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1853.701643][T21338] loop3: detected capacity change from 0 to 512 [ 1853.726947][T21341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1853.735018][T21341] ref_ctr decrement failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123400 16:43:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f0d0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000001d70000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1853.741612][T21338] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1853.794578][T21343] loop4: detected capacity change from 0 to 512 [ 1853.798238][T21341] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1853.801172][T21345] loop0: detected capacity change from 0 to 512 [ 1853.808861][T21341] ref_ctr decrement failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123400 [ 1853.845426][T21343] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1853.855563][T21343] EXT4-fs (loop4): group descriptors corrupted! [ 1853.878225][T21345] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1853.888343][T21345] EXT4-fs (loop0): group descriptors corrupted! 16:43:32 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000cefffe000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:32 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async, rerun: 32) close(r1) (async, rerun: 32) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x3e9, 0x4, 0x70bd2d, 0x25dfdbff, {0x78, 0x0, 0x2, r4, 0x1, 0xff0, 0x81, 0x2, 0x0, 0x7fffffff, 0x7}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48001) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f100400010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000001d80000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f0e0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:32 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xc000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1854.342335][T21349] loop3: detected capacity change from 0 to 512 [ 1854.350225][T21353] loop0: detected capacity change from 0 to 512 [ 1854.356771][T21354] loop4: detected capacity change from 0 to 512 [ 1854.368061][T21354] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1854.378191][T21354] EXT4-fs (loop4): group descriptors corrupted! 16:43:32 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x202101, 0x4) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="1209f5220bdc1890f70c9d163079f3ab5665bd01000000000000000000", 0x1d}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x3, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x401, 0x1000}, &(0x7f0000000280)=0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r8 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xd3, 0x80, 0x7, 0x3, 0x0, 0x2, 0x3080, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xb}, 0x11028, 0xfffffffffffffff8, 0x2, 0x4, 0x9, 0x80000001, 0x0, 0x0, 0x93d7, 0x0, 0xfff}, r8, 0x6, 0xffffffffffffffff, 0x3) [ 1854.386259][T21353] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1854.396421][T21353] EXT4-fs (loop0): group descriptors corrupted! [ 1854.407377][T21349] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f0f0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000001d90000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1854.461581][T21362] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1854.469619][T21362] ref_ctr decrement failed for inode: 0x49e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038dbc00 [ 1854.498313][T21362] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000500010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1854.506309][T21362] ref_ctr decrement failed for inode: 0x49e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881038dbc00 [ 1854.538748][T21364] loop1: detected capacity change from 0 to 512 [ 1854.579982][T21364] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1854.590021][T21364] EXT4-fs (loop1): group descriptors corrupted! [ 1854.604391][T21369] loop0: detected capacity change from 0 to 512 [ 1854.606755][T21371] loop4: detected capacity change from 0 to 512 [ 1854.610892][T21370] loop3: detected capacity change from 0 to 512 16:43:32 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (rerun: 32) openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x202101, 0x4) (async) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="1209f5220bdc1890f70c9d163079f3ab5665bd01000000000000000000", 0x1d}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x0) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x3, 0x8}, 0xc) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x401, 0x1000}, &(0x7f0000000280)=0xc) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) (async) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r7, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) r8 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xd3, 0x80, 0x7, 0x3, 0x0, 0x2, 0x3080, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xb}, 0x11028, 0xfffffffffffffff8, 0x2, 0x4, 0x9, 0x80000001, 0x0, 0x0, 0x93d7, 0x0, 0xfff}, r8, 0x6, 0xffffffffffffffff, 0x3) 16:43:32 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x202101, 0x4) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="1209f5220bdc1890f70c9d163079f3ab5665bd01000000000000000000", 0x1d}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x0) (async) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x3, 0x8}, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x401, 0x1000}, &(0x7f0000000280)=0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) (async) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r7, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) r8 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xd3, 0x80, 0x7, 0x3, 0x0, 0x2, 0x3080, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0xb}, 0x11028, 0xfffffffffffffff8, 0x2, 0x4, 0x9, 0x80000001, 0x0, 0x0, 0x93d7, 0x0, 0xfff}, r8, 0x6, 0xffffffffffffffff, 0x3) [ 1854.624387][T21371] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1854.634656][T21371] EXT4-fs (loop4): group descriptors corrupted! [ 1854.642011][T21369] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1854.652137][T21369] EXT4-fs (loop0): group descriptors corrupted! [ 1854.686743][T21370] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000001da0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:33 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) getpeername$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) mmap(&(0x7f00003bb000/0x1000)=nil, 0x1000, 0x1800003, 0x20010, r2, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000001300)={0x2, 0xc3d, "b64204", 0x2a, 0x22}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000001200)="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") mmap$perf(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x100010, r4, 0x7d1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) read(r4, &(0x7f0000000200)=""/4096, 0x1000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f100000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:33 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0fff000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:33 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xd000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f9c0500010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1855.330983][T21388] loop3: detected capacity change from 0 to 512 [ 1855.331076][T21387] loop4: detected capacity change from 0 to 512 [ 1855.338526][T21389] loop0: detected capacity change from 0 to 512 [ 1855.355624][T21387] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1855.365766][T21387] EXT4-fs (loop4): group descriptors corrupted! 16:43:33 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) (async) getpeername$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) (async) mmap(&(0x7f00003bb000/0x1000)=nil, 0x1000, 0x1800003, 0x20010, r2, 0x0) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000001300)={0x2, 0xc3d, "b64204", 0x2a, 0x22}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000001200)="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") mmap$perf(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x100010, r4, 0x7d1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) (async) read(r4, &(0x7f0000000200)=""/4096, 0x1000) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f110000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1855.377407][T21388] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1855.390615][T21389] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1855.400740][T21389] EXT4-fs (loop0): group descriptors corrupted! 16:43:33 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) getpeername$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) mmap(&(0x7f00003bb000/0x1000)=nil, 0x1000, 0x1800003, 0x20010, r2, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000001300)={0x2, 0xc3d, "b64204", 0x2a, 0x22}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000001200)="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") mmap$perf(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x100010, r4, 0x7d1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) read(r4, &(0x7f0000000200)=""/4096, 0x1000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') (async) pread64(r3, 0x0, 0x2d, 0x100010) (async) getpeername$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) (async) mmap(&(0x7f00003bb000/0x1000)=nil, 0x1000, 0x1800003, 0x20010, r2, 0x0) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000001300)={0x2, 0xc3d, "b64204", 0x2a, 0x22}) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000001200)="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") (async) mmap$perf(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x100010, r4, 0x7d1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) read(r4, &(0x7f0000000200)=""/4096, 0x1000) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) 16:43:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000fc20500010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1855.436012][T21400] loop4: detected capacity change from 0 to 512 [ 1855.463878][T21400] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1855.467283][T21403] loop3: detected capacity change from 0 to 512 [ 1855.473999][T21400] EXT4-fs (loop4): group descriptors corrupted! 16:43:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000001db0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:33 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000040)='./bus\x00', 0x40000, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) sendfile(r4, r2, &(0x7f0000000100)=0x9, 0x7fffffffffffffff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1855.497989][T21420] loop1: detected capacity change from 0 to 512 [ 1855.499645][T21403] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1855.531350][T21423] loop0: detected capacity change from 0 to 512 16:43:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000600010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1855.555721][T21423] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1855.565826][T21423] EXT4-fs (loop0): group descriptors corrupted! [ 1855.572570][T21420] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1855.582814][T21420] EXT4-fs (loop1): group descriptors corrupted! [ 1855.597156][T21425] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f120000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000001dc0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1855.605240][T21425] ref_ctr decrement failed for inode: 0x49d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cb33400 [ 1855.672429][T21429] loop3: detected capacity change from 0 to 512 [ 1855.675275][T21431] loop4: detected capacity change from 0 to 512 [ 1855.680750][T21432] loop0: detected capacity change from 0 to 512 [ 1855.691408][T21425] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1855.695325][T21431] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1855.699527][T21425] ref_ctr decrement failed for inode: 0x49d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813cb33400 [ 1855.709563][T21431] EXT4-fs (loop4): group descriptors corrupted! [ 1855.735659][T21429] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1855.756265][T21432] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1855.766387][T21432] EXT4-fs (loop0): group descriptors corrupted! 16:43:34 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000cefeff000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f140000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:34 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000040)='./bus\x00', 0x40000, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) sendfile(r4, r2, &(0x7f0000000100)=0x9, 0x7fffffffffffffff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) open$dir(&(0x7f0000000040)='./bus\x00', 0x40000, 0x100) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) sendfile(r4, r2, &(0x7f0000000100)=0x9, 0x7fffffffffffffff) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) (async) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) 16:43:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f040600010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000001dd0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:34 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xe000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1856.309728][T21439] loop0: detected capacity change from 0 to 512 [ 1856.311353][T21442] loop4: detected capacity change from 0 to 512 [ 1856.316290][T21441] loop3: detected capacity change from 0 to 512 [ 1856.329838][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1856.337930][T21438] ref_ctr decrement failed for inode: 0x490 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888100395000 [ 1856.358491][T21442] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1856.368624][T21442] EXT4-fs (loop4): group descriptors corrupted! [ 1856.368875][T21439] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1856.385042][T21439] EXT4-fs (loop0): group descriptors corrupted! [ 1856.397241][T21438] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f220000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1856.405225][T21438] ref_ctr decrement failed for inode: 0x490 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888100395000 [ 1856.418785][T21441] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1856.443136][T21447] loop1: detected capacity change from 0 to 512 16:43:34 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = open$dir(&(0x7f0000000040)='./bus\x00', 0x40000, 0x100) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async) sendfile(r4, r2, &(0x7f0000000100)=0x9, 0x7fffffffffffffff) (async) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) (async) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000ffa0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000700010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1856.465627][T21455] loop4: detected capacity change from 0 to 512 16:43:34 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000200)=""/239) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r5, 0x0, 0x2d, 0x100010) sendmsg$SEG6_CMD_DUMPHMAC(r5, 0xffffffffffffffff, 0x8840) [ 1856.508681][T21455] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1856.509434][T21462] loop3: detected capacity change from 0 to 512 [ 1856.518805][T21455] EXT4-fs (loop4): group descriptors corrupted! [ 1856.538779][T21465] loop0: detected capacity change from 0 to 512 [ 1856.542533][ T1437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1856.554212][ T1437] Buffer I/O error on dev loop0, logical block 0, async page read [ 1856.562655][T21447] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1856.572689][T21447] EXT4-fs (loop1): group descriptors corrupted! [ 1856.581616][T21462] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1856.594321][T21465] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 16:43:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f250000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1856.604540][T21465] EXT4-fs (loop0): group descriptors corrupted! [ 1856.615793][T21466] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1856.623844][T21466] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888134bdd400 [ 1856.670534][T21468] loop4: detected capacity change from 0 to 512 [ 1856.679318][T21466] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1856.687380][T21466] ref_ctr decrement failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888134bdd400 [ 1856.703046][T21468] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1856.713173][T21468] EXT4-fs (loop4): group descriptors corrupted! 16:43:35 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000010000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000900010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0000fffe0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:35 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000200)=""/239) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r5, 0x0, 0x2d, 0x100010) sendmsg$SEG6_CMD_DUMPHMAC(r5, 0xffffffffffffffff, 0x8840) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') (async) pread64(r3, 0x0, 0x2d, 0x100010) (async) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000200)=""/239) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') (async) pread64(r5, 0x0, 0x2d, 0x100010) (async) sendmsg$SEG6_CMD_DUMPHMAC(r5, 0xffffffffffffffff, 0x8840) (async) 16:43:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f260000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:35 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0xf000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1857.231075][T21477] loop4: detected capacity change from 0 to 512 [ 1857.234436][T21479] loop3: detected capacity change from 0 to 512 [ 1857.240164][T21476] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1857.251619][T21476] ref_ctr decrement failed for inode: 0x493 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813f794400 [ 1857.252570][T21480] loop0: detected capacity change from 0 to 512 [ 1857.271761][T21479] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1857.288691][T21477] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1857.298815][T21477] EXT4-fs (loop4): group descriptors corrupted! [ 1857.311355][T21480] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1857.321531][T21480] EXT4-fs (loop0): group descriptors corrupted! 16:43:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000a00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f460000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1857.329864][T21476] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1857.337890][T21476] ref_ctr decrement failed for inode: 0x493 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813f794400 16:43:35 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r3, 0x0, 0x2d, 0x100010) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000200)=""/239) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pread64(r5, 0x0, 0x2d, 0x100010) sendmsg$SEG6_CMD_DUMPHMAC(r5, 0xffffffffffffffff, 0x8840) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') (async) pread64(r3, 0x0, 0x2d, 0x100010) (async) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000200)=""/239) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') (async) pread64(r5, 0x0, 0x2d, 0x100010) (async) sendmsg$SEG6_CMD_DUMPHMAC(r5, 0xffffffffffffffff, 0x8840) (async) 16:43:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000003ff0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1857.387094][T21497] loop3: detected capacity change from 0 to 512 [ 1857.396757][T21499] loop4: detected capacity change from 0 to 512 [ 1857.415144][T21499] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1857.425272][T21499] EXT4-fs (loop4): group descriptors corrupted! [ 1857.438899][T21504] loop0: detected capacity change from 0 to 512 [ 1857.439217][T21503] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1857.453176][T21503] ref_ctr decrement failed for inode: 0x48f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123c00 [ 1857.464774][T21504] EXT4-fs (loop0): can't read group descriptor 0 [ 1857.471567][T21497] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1857.480792][T21505] loop1: detected capacity change from 0 to 512 16:43:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f480000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000020000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1857.483243][T21503] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1857.495974][T21503] ref_ctr decrement failed for inode: 0x48f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123c00 [ 1857.509477][T21505] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1857.519566][T21505] EXT4-fs (loop1): group descriptors corrupted! [ 1857.553390][T21523] loop0: detected capacity change from 0 to 512 [ 1857.566790][T21525] loop4: detected capacity change from 0 to 512 [ 1857.569693][ T1437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1857.582173][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read [ 1857.592158][T21523] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1857.602802][T21523] EXT4-fs (loop0): group descriptors corrupted! [ 1857.611932][T21525] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1857.622100][T21525] EXT4-fs (loop4): group descriptors corrupted! 16:43:36 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000011000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:36 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000040)='./bus\x00', 0x80400, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100)={0x84, @broadcast, 0x4e24, 0x3, 'lblc\x00', 0x2c, 0x2, 0x29}, 0x2c) r1 = open_tree(r0, &(0x7f0000000140)='./bus\x00', 0x100) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000200)={0x9, {{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x0, 0x4, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @broadcast}}]}, 0x290) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4e, 0x0, 0xfc, 0x0, 0x4, 0xf3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x903, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x22a101, 0x111) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) r5 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d50954a5cc43a639f09b0e1835d84804b62e616cc37c4a24c12a5a5a4d8a3837f32cb2d36f2257e980490375699ecdbb0f56207658fff4cf13b40c7c41d86b"}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x40006501, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x16, &(0x7f00000000c0)={0xfffffffe, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PROBE(r5, 0x2, 0x0, 0x20) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000b00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000030000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f4c0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:36 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x10000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1858.186049][T21532] loop0: detected capacity change from 0 to 512 [ 1858.194315][T21534] loop4: detected capacity change from 0 to 512 [ 1858.197361][T21530] loop3: detected capacity change from 0 to 512 [ 1858.208753][T21534] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1858.218884][T21534] EXT4-fs (loop4): group descriptors corrupted! [ 1858.227452][T21532] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1858.237606][T21532] EXT4-fs (loop0): group descriptors corrupted! [ 1858.247835][T21530] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f550000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000040000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000c00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1858.306593][T21542] loop4: detected capacity change from 0 to 512 [ 1858.311377][ T1437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1858.317876][T21543] loop1: detected capacity change from 0 to 512 [ 1858.322013][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read [ 1858.339133][T21544] loop0: detected capacity change from 0 to 512 [ 1858.348081][T21547] loop3: detected capacity change from 0 to 512 [ 1858.362012][T21544] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1858.372301][T21544] EXT4-fs (loop0): group descriptors corrupted! [ 1858.380445][T21542] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1858.390597][T21542] EXT4-fs (loop4): group descriptors corrupted! [ 1858.398930][T21547] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000d00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1858.419807][T21543] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1858.429908][T21543] EXT4-fs (loop1): group descriptors corrupted! [ 1858.456105][T21550] loop3: detected capacity change from 0 to 512 16:43:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000050000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f600000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1858.485222][T21550] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1858.515836][T21553] loop0: detected capacity change from 0 to 512 [ 1858.523883][T21554] loop4: detected capacity change from 0 to 512 [ 1858.529643][ T1437] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1858.539284][ T1437] Buffer I/O error on dev loop4, logical block 0, async page read [ 1858.569672][T21553] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1858.579802][T21553] EXT4-fs (loop0): group descriptors corrupted! [ 1858.597497][T21554] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1858.607656][T21554] EXT4-fs (loop4): group descriptors corrupted! 16:43:37 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000012000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:37 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000040)='./bus\x00', 0x80400, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100)={0x84, @broadcast, 0x4e24, 0x3, 'lblc\x00', 0x2c, 0x2, 0x29}, 0x2c) r1 = open_tree(r0, &(0x7f0000000140)='./bus\x00', 0x100) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000200)={0x9, {{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x0, 0x4, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @broadcast}}]}, 0x290) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4e, 0x0, 0xfc, 0x0, 0x4, 0xf3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x903, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x22a101, 0x111) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) r5 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d50954a5cc43a639f09b0e1835d84804b62e616cc37c4a24c12a5a5a4d8a3837f32cb2d36f2257e980490375699ecdbb0f56207658fff4cf13b40c7c41d86b"}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x40006501, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x16, &(0x7f00000000c0)={0xfffffffe, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PROBE(r5, 0x2, 0x0, 0x20) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000040)='./bus\x00', 0x80400, 0x0) (async) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100)={0x84, @broadcast, 0x4e24, 0x3, 'lblc\x00', 0x2c, 0x2, 0x29}, 0x2c) (async) open_tree(r0, &(0x7f0000000140)='./bus\x00', 0x100) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000200)={0x9, {{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x0, 0x4, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @broadcast}}]}, 0x290) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4e, 0x0, 0xfc, 0x0, 0x4, 0xf3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x903, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x22a101, 0x111) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async) syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d50954a5cc43a639f09b0e1835d84804b62e616cc37c4a24c12a5a5a4d8a3837f32cb2d36f2257e980490375699ecdbb0f56207658fff4cf13b40c7c41d86b"}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r5, 0x40006501, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x16, &(0x7f00000000c0)={0xfffffffe, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) (async) io_uring_register$IORING_REGISTER_PROBE(r5, 0x2, 0x0, 0x20) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) 16:43:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000e00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000060000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f680000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:37 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x11000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1859.158095][T21561] loop0: detected capacity change from 0 to 512 [ 1859.167072][T21563] loop4: detected capacity change from 0 to 512 [ 1859.173661][T21559] loop3: detected capacity change from 0 to 512 [ 1859.182071][T21561] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1859.192226][T21561] EXT4-fs (loop0): group descriptors corrupted! 16:43:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000070000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1859.200665][T21559] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1859.210987][T21563] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1859.221119][T21563] EXT4-fs (loop4): group descriptors corrupted! 16:43:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000f00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1859.269201][T21570] loop0: detected capacity change from 0 to 512 [ 1859.300258][T21570] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1859.301498][T21571] loop1: detected capacity change from 0 to 512 16:43:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f6c0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1859.310374][T21570] EXT4-fs (loop0): group descriptors corrupted! [ 1859.327206][T21574] loop3: detected capacity change from 0 to 512 [ 1859.345769][T21576] loop4: detected capacity change from 0 to 512 16:43:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000080000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1859.365253][T21574] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1859.392244][T21576] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1859.402429][T21576] EXT4-fs (loop4): group descriptors corrupted! [ 1859.416263][T21579] loop0: detected capacity change from 0 to 512 [ 1859.418655][ T1437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1859.431638][ T1437] Buffer I/O error on dev loop0, logical block 0, async page read 16:43:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f041000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f740000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1859.462224][T21579] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1859.472715][T21579] EXT4-fs (loop0): group descriptors corrupted! [ 1859.493535][T21571] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1859.503579][T21571] EXT4-fs (loop1): group descriptors corrupted! [ 1859.529340][T21581] loop4: detected capacity change from 0 to 512 [ 1859.542721][T21583] loop3: detected capacity change from 0 to 512 [ 1859.588713][T21581] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1859.599015][T21581] EXT4-fs (loop4): group descriptors corrupted! [ 1859.628507][T21583] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:38 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000026000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0000000a0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:38 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000040)='./bus\x00', 0x80400, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100)={0x84, @broadcast, 0x4e24, 0x3, 'lblc\x00', 0x2c, 0x2, 0x29}, 0x2c) r1 = open_tree(r0, &(0x7f0000000140)='./bus\x00', 0x100) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000200)={0x9, {{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x0, 0x4, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @broadcast}}]}, 0x290) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4e, 0x0, 0xfc, 0x0, 0x4, 0xf3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x903, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x22a101, 0x111) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r2) r5 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d50954a5cc43a639f09b0e1835d84804b62e616cc37c4a24c12a5a5a4d8a3837f32cb2d36f2257e980490375699ecdbb0f56207658fff4cf13b40c7c41d86b"}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x40006501, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x16, &(0x7f00000000c0)={0xfffffffe, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_PROBE(r5, 0x2, 0x0, 0x20) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000040)='./bus\x00', 0x80400, 0x0) (async) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100)={0x84, @broadcast, 0x4e24, 0x3, 'lblc\x00', 0x2c, 0x2, 0x29}, 0x2c) (async) open_tree(r0, &(0x7f0000000140)='./bus\x00', 0x100) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000200)={0x9, {{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x0, 0x4, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @broadcast}}]}, 0x290) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x4e, 0x0, 0xfc, 0x0, 0x4, 0xf3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x903, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x22a101, 0x111) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r2) (async) syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d50954a5cc43a639f09b0e1835d84804b62e616cc37c4a24c12a5a5a4d8a3837f32cb2d36f2257e980490375699ecdbb0f56207658fff4cf13b40c7c41d86b"}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r5, 0x40006501, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x16, &(0x7f00000000c0)={0xfffffffe, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x1) (async) io_uring_register$IORING_REGISTER_PROBE(r5, 0x2, 0x0, 0x20) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) 16:43:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f7a0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f201000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:38 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x12000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1860.151463][T21591] loop3: detected capacity change from 0 to 512 [ 1860.156453][T21593] loop0: detected capacity change from 0 to 512 [ 1860.167494][T21594] loop4: detected capacity change from 0 to 512 [ 1860.179214][T21593] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1860.179250][T21591] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1860.189494][T21593] EXT4-fs (loop0): group descriptors corrupted! [ 1860.211944][T21594] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1860.222218][T21594] EXT4-fs (loop4): group descriptors corrupted! 16:43:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f900000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f001100010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0000000f0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1860.277372][T21600] loop1: detected capacity change from 0 to 512 [ 1860.313851][T21603] loop4: detected capacity change from 0 to 512 [ 1860.320322][T21604] loop3: detected capacity change from 0 to 512 [ 1860.321020][ T1437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1860.335709][ T1437] Buffer I/O error on dev loop3, logical block 0, async page read [ 1860.337138][T21603] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1860.353640][T21603] EXT4-fs (loop4): group descriptors corrupted! [ 1860.360327][T21607] loop0: detected capacity change from 0 to 512 [ 1860.369177][T21600] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1860.379292][T21600] EXT4-fs (loop1): group descriptors corrupted! [ 1860.389321][T21607] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1860.399417][T21607] EXT4-fs (loop0): group descriptors corrupted! [ 1860.408437][T21604] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 16:43:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000ffe0000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f001200010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000100000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1860.497371][T21610] loop0: detected capacity change from 0 to 512 [ 1860.541097][T21612] loop3: detected capacity change from 0 to 512 [ 1860.547691][T21610] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1860.557860][T21610] EXT4-fs (loop0): group descriptors corrupted! [ 1860.567728][T21613] loop4: detected capacity change from 0 to 512 [ 1860.576465][T21612] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1860.595708][T21613] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1860.605841][T21613] EXT4-fs (loop4): group descriptors corrupted! 16:43:39 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000040000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:39 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f001400010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000110000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000ff80100010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:39 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x20000000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) [ 1861.090272][T21617] loop3: detected capacity change from 0 to 512 [ 1861.098482][T21622] loop4: detected capacity change from 0 to 512 [ 1861.099467][T21623] loop0: detected capacity change from 0 to 512 [ 1861.112313][T21621] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1861.120366][T21621] ref_ctr decrement failed for inode: 0x494 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810429e400 [ 1861.129591][T21617] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1861.144719][T21622] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1861.146869][T21623] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1861.154818][T21622] EXT4-fs (loop4): group descriptors corrupted! [ 1861.164888][T21623] EXT4-fs (loop0): group descriptors corrupted! [ 1861.182893][T21621] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 16:43:39 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) 16:43:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f001f00010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f040200010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1861.190951][T21621] ref_ctr decrement failed for inode: 0x494 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810429e400 16:43:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000130000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1861.245163][T21629] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1861.253205][T21629] ref_ctr decrement failed for inode: 0x488 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810429e400 [ 1861.253352][T21631] loop3: detected capacity change from 0 to 512 [ 1861.284818][T21632] loop1: detected capacity change from 0 to 512 16:43:39 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1861.304518][T21631] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1861.317787][T21648] loop4: detected capacity change from 0 to 512 [ 1861.324288][T21635] loop0: detected capacity change from 0 to 512 [ 1861.335383][T21632] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1861.345469][T21632] EXT4-fs (loop1): group descriptors corrupted! 16:43:39 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x7, 0x3f, 0x1, 0x0, 0xffffffffffff282b, 0x40b20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x101}, 0x8810, 0x7, 0x7fff, 0xd, 0x1, 0x0, 0x7fff, 0x0, 0xffffffff, 0x0, 0xabc7}, r4, 0x6, r0, 0x1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1861.345606][T21648] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1861.361971][T21648] EXT4-fs (loop4): group descriptors corrupted! [ 1861.376924][T21635] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1861.387139][T21635] EXT4-fs (loop0): group descriptors corrupted! [ 1861.389544][T21656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1861.401383][T21656] ref_ctr decrement failed for inode: 0x49e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810429e400 [ 1861.448548][T21656] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1861.456571][T21656] ref_ctr decrement failed for inode: 0x49e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810429e400 16:43:40 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce00000046000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000008000000008000000524700", 0x63, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000000340), 0x0, 0x640}, {&(0x7f0000010400)="03000000130000", 0x7, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 16:43:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f002000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000140000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f000300010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:40 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x7, 0x3f, 0x1, 0x0, 0xffffffffffff282b, 0x40b20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x101}, 0x8810, 0x7, 0x7fff, 0xd, 0x1, 0x0, 0x7fff, 0x0, 0xffffffff, 0x0, 0xabc7}, r4, 0x6, r0, 0x1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 16:43:40 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, 0x20100000, &(0x7f0000000240), 0x0, &(0x7f0000000080)=ANY=[]) 16:43:40 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) close(r1) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x7, 0x3f, 0x1, 0x0, 0xffffffffffff282b, 0x40b20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x101}, 0x8810, 0x7, 0x7fff, 0xd, 0x1, 0x0, 0x7fff, 0x0, 0xffffffff, 0x0, 0xabc7}, r4, 0x6, r0, 0x1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) close(r1) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x7, 0x3f, 0x1, 0x0, 0xffffffffffff282b, 0x40b20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x101}, 0x8810, 0x7, 0x7fff, 0xd, 0x1, 0x0, 0x7fff, 0x0, 0xffffffff, 0x0, 0xabc7}, r4, 0x6, r0, 0x1) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) (async) [ 1862.054726][T21665] loop4: detected capacity change from 0 to 512 [ 1862.061980][T21668] loop3: detected capacity change from 0 to 512 [ 1862.070652][T21670] loop0: detected capacity change from 0 to 512 [ 1862.086172][T21665] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1862.096338][T21665] EXT4-fs (loop4): group descriptors corrupted! [ 1862.107741][T21670] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1862.118005][T21670] EXT4-fs (loop0): group descriptors corrupted! [ 1862.124501][T21668] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1862.142247][T21673] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1862.150260][T21673] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810328e400 16:43:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000230000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f390300010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 16:43:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f102000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1862.193820][T21675] loop1: detected capacity change from 0 to 512 [ 1862.211215][T21673] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1862.214271][T21678] loop0: detected capacity change from 0 to 512 [ 1862.219262][T21673] ref_ctr decrement failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88810328e400 [ 1862.245654][T21675] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1862.255692][T21675] EXT4-fs (loop1): group descriptors corrupted! [ 1862.272497][T21688] loop4: detected capacity change from 0 to 512 [ 1862.279042][T21689] loop3: detected capacity change from 0 to 512 16:43:40 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000040)) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) pread64(0xffffffffffffffff, 0x0, 0x2d, 0x100010) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) close(r3) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x24, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x2b8, 0x3ff, 0x9, 0x3, 0x4}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) [ 1862.298893][T21678] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1862.309043][T21678] EXT4-fs (loop0): group descriptors corrupted! [ 1862.319361][T21689] EXT4-fs warning (device loop3): read_mmp_block:107: Error -117 while reading MMP block 17 [ 1862.339861][T21690] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1862.347926][T21690] ref_ctr decrement failed for inode: 0x4a1 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123c00 [ 1862.360923][T21688] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 35)! [ 1862.360990][T21690] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 1862.371047][T21688] EXT4-fs (loop4): group descriptors corrupted! [ 1862.385281][T21690] ref_ctr decrement failed for inode: 0x4a1 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88816f123c00 16:43:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000240000000c000000ce0000000f3a0300010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1862.407665][T21675] ==================================================================